Privacy policy
Kunstsokken B.V. sells socks, not data. This privacy policy explains which personal data we collect when you visit our website or place an order, why we do so, who we share it with and what rights you have.
1. Who is responsible for your data
The data controller is:
Kunstsokken B.V.
Van Nelleweg 1, unit 2.G58B
3044 BC Rotterdam, The Netherlands
Commercial register (KvK) 95992561 · VAT NL867418023B01
Email: contact@kunstsokken.nl
We are not required to appoint a data protection officer and have not done so. Privacy questions reach us directly at the email address above.
2. What data we collect
Data you give us yourself
- Order data: first and last name, email address, delivery address, billing address, phone number (if you provide one), the products you order and your order number.
- Payment data: the payment method you choose and confirmation of your payment. Your full card or bank details never reach us; they go straight to the payment provider.
- Account data: if you create an account, your email address and order history.
- Customer service: the content of your emails, contact forms and WhatsApp messages to us.
- Newsletter: your email address and, if you share it, your first name.
- Returns: your order number, the reason for your return and your bank details if a refund to the original payment method is not possible.
Data that is generated automatically
- Device and usage data: your IP address, browser type, operating system, language, the pages you view, how you found us and how long you stay.
- Cookies and similar technologies: see section 4.
We do not collect special categories of personal data (such as health, religion or political opinion), and we do not ask for them.
3. What we use your data for, and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Processing and shipping your order and handling the guarantee | Order, address and payment data | Performance of the contract (Art. 6(1)(b)) |
| Answering your questions and helping with a return or exchange | Customer service and order data | Performance of the contract (Art. 6(1)(b)) |
| Keeping invoices and accounting records | Order and invoice data | Legal obligation (Art. 6(1)(c)), tax retention duty |
| Preventing fraud and abuse | IP address, order and payment data | Legitimate interest (Art. 6(1)(f)): a safe shop |
| Sending our newsletter | Email address, first name | Consent (Art. 6(1)(a)); for existing customers, legitimate interest for similar products, with an unsubscribe link in every email |
| Inviting you to leave a review | Email address, order number | Legitimate interest (Art. 6(1)(f)): honest reviews from real buyers |
| Analytics, A/B testing and improving the website | Device and usage data | Consent via the cookie banner (Art. 6(1)(a)) |
| Showing ads on Meta, Google and elsewhere, and measuring their results | Device and usage data, hashed email address | Consent via the cookie banner (Art. 6(1)(a)) |
4. Cookies and similar technologies
Cookies are small files stored on your device. We use three kinds:
- Necessary cookies make the shop work: remembering your cart, logging in, language and currency, and security. No consent is required for these.
- Analytics cookies show us how visitors use our site so we can improve it.
- Marketing cookies make it possible to show you relevant ads and to measure whether they work.
We only place analytics and marketing cookies if you consent through our cookie banner. You can change or withdraw your choice at any time via the cookie settings at the bottom of every page. You can also delete cookies at any time in your browser settings.
5. Who we share your data with
We never sell your data. We do use service providers who help us run the shop. We have a data processing agreement with each of them, and they may only use your data for the task we give them.
| Recipient | Purpose | Location |
|---|---|---|
| Shopify International Ltd. / Shopify Inc. | Shop platform, hosting and checkout | Ireland, Canada |
| Payment providers (including Shopify Payments, Klarna and PayPal, depending on your choice: card, iDEAL, Bancontact, TWINT, Apple Pay, Google Pay) | Processing payments and preventing fraud | EU, USA |
| Carriers (PostNL, DHL and, in Switzerland, Swiss Post) | Delivering your parcel and track & trace | EU, Switzerland |
| Returnless | Returns portal and return labels | The Netherlands |
| Klaviyo, Inc. | Newsletter and emails about your order | USA |
| Trustpilot A/S | Collecting and displaying reviews | Denmark |
| Google Ireland Ltd. | Analytics, Tag Manager and advertising | Ireland, USA |
| Meta Platforms Ireland Ltd. | Advertising on Facebook and Instagram and measuring it | Ireland, USA |
| Visually.io | A/B testing and website personalisation | EU, Israel |
| Pandectes | Cookie banner and recording your consent | EU |
| Our bookkeeper and accountancy services | Administration and tax returns | The Netherlands |
We may also share data where we are legally required to, for example at the request of a regulator, the tax authorities, or the police and judicial authorities.
6. Transfers outside the European Economic Area
Some of our service providers are based in the United States or process data there. Those transfers take place under the EU-US Data Privacy Framework or, where a provider is not certified under it, under the standard contractual clauses adopted by the European Commission together with supplementary safeguards. You can request a copy of those safeguards from us.
7. How long we keep your data
| Data | Retention period |
|---|---|
| Order, invoice and payment data | 7 years after the end of the financial year (Dutch tax retention duty) |
| Account data | Until you delete your account or ask us to |
| Customer service emails | 2 years after the matter is closed |
| Guarantee claims | 2 years after the matter is closed |
| Newsletter data | Until you unsubscribe; after that we keep only the unsubscribe record so you stop receiving mail |
| Cookies and analytics data | 26 months at most, or shorter where set per cookie |
8. How we protect your data
Our website and checkout run entirely over an encrypted connection (TLS). Access to customer data is limited to the people who need it and secured with two-factor authentication. Payment details never reach our systems. If a data breach nevertheless occurs that poses a risk to you, we will report it to the Dutch Data Protection Authority and inform you directly as well.
9. Your rights
Under the GDPR you have the right to:
- request access to the data we hold about you (Art. 15);
- have inaccurate data corrected (Art. 16);
- have your data erased, in so far as we are not legally required to keep it (Art. 17);
- have processing restricted (Art. 18);
- receive your data in a common format or have it transferred to another party (Art. 20);
- object to processing based on legitimate interests, and to direct marketing at any time (Art. 21);
- withdraw consent you have given, without affecting the lawfulness of processing before the withdrawal (Art. 7(3)).
Send your request to contact@kunstsokken.nl. We respond within one month. To avoid handing data to the wrong person, we may ask for additional information to establish your identity.
10. Making a complaint
If you are unhappy with how we handle your data, please tell us first — we are glad to put it right. You also always have the right to complain to a supervisory authority:
- The Netherlands, where our company is established: Autoriteit Persoonsgegevens
- Germany: the data protection authority of your federal state
- France: CNIL
- Other EU countries: the supervisory authority where you live
11. Automated decision-making
We do not take decisions with legal effects for you based solely on automated processing or profiling. The fraud checks run by Shopify and our payment providers may flag an order for manual review; a person then decides what happens.
12. Children
Our shop is not aimed at children under 16. If you are under 16, please order only with the consent of your parent or guardian. If you believe we hold a child's data without that consent, email us and we will delete it.
13. Changes to this privacy policy
We update this privacy policy when our practices, our service providers or the law change. The date at the bottom shows when we last did so. We will tell you about significant changes on the website or by email.
14. Contact
Questions about this privacy policy or about your data? Email contact@kunstsokken.nl or write to Kunstsokken B.V., Van Nelleweg 1, unit 2.G58B, 3044 BC Rotterdam, The Netherlands. See also our legal notice and terms and conditions.
Last updated: 10 September 2026