Privacy policy

Kunstsokken B.V. sells socks, not data. This privacy policy explains which personal data we collect when you visit our website or place an order, why we do so, who we share it with and what rights you have.

1. Who is responsible for your data

The data controller is:

Kunstsokken B.V.
Van Nelleweg 1, unit 2.G58B
3044 BC Rotterdam, The Netherlands
Commercial register (KvK) 95992561 · VAT NL867418023B01
Email: contact@kunstsokken.nl

We are not required to appoint a data protection officer and have not done so. Privacy questions reach us directly at the email address above.

2. What data we collect

Data you give us yourself

• Order data: first and last name, email address, delivery address, billing address, phone number (if you provide one), the products you order and your order number.
• Payment data: the payment method you choose and confirmation of your payment. Your full card or bank details never reach us; they go straight to the payment provider.
• Account data: if you create an account, your email address and order history.
• Customer service: the content of your emails, contact forms and WhatsApp messages to us.
• Newsletter: your email address and, if you share it, your first name.
• Returns: your order number, the reason for your return and your bank details if a refund to the original payment method is not possible.

Data that is generated automatically

• Device and usage data: your IP address, browser type, operating system, language, the pages you view, how you found us and how long you stay.
• Cookies and similar technologies: see section 4.

We do not collect special categories of personal data (such as health, religion or political opinion), and we do not ask for them.

3. What we use your data for, and on what legal basis

Purpose	Data	Legal basis (GDPR)
Processing and shipping your order and handling the guarantee	Order, address and payment data	Performance of the contract (Art. 6(1)(b))
Answering your questions and helping with a return or exchange	Customer service and order data	Performance of the contract (Art. 6(1)(b))
Keeping invoices and accounting records	Order and invoice data	Legal obligation (Art. 6(1)(c)), tax retention duty
Preventing fraud and abuse	IP address, order and payment data	Legitimate interest (Art. 6(1)(f)): a safe shop
Sending our newsletter	Email address, first name	Consent (Art. 6(1)(a)); for existing customers, legitimate interest for similar products, with an unsubscribe link in every email
Inviting you to leave a review	Email address, order number	Legitimate interest (Art. 6(1)(f)): honest reviews from real buyers
Analytics, A/B testing and improving the website	Device and usage data	Consent via the cookie banner (Art. 6(1)(a))
Showing ads on Meta, Google and elsewhere, and measuring their results	Device and usage data, hashed email address	Consent via the cookie banner (Art. 6(1)(a))

4. Cookies and similar technologies

Cookies are small files stored on your device. We use three kinds:

• Necessary cookies make the shop work: remembering your cart, logging in, language and currency, and security. No consent is required for these.
• Analytics cookies show us how visitors use our site so we can improve it.
• Marketing cookies make it possible to show you relevant ads and to measure whether they work.

We only place analytics and marketing cookies if you consent through our cookie banner. You can change or withdraw your choice at any time via the cookie settings at the bottom of every page. You can also delete cookies at any time in your browser settings.

5. Who we share your data with

We never sell your data. We do use service providers who help us run the shop. We have a data processing agreement with each of them, and they may only use your data for the task we give them.

Recipient	Purpose	Location
Shopify International Ltd. / Shopify Inc.	Shop platform, hosting and checkout	Ireland, Canada
Payment providers (including Shopify Payments, Klarna and PayPal, depending on your choice: card, iDEAL, Bancontact, TWINT, Apple Pay, Google Pay)	Processing payments and preventing fraud	EU, USA
Carriers (PostNL, DHL and, in Switzerland, Swiss Post)	Delivering your parcel and track & trace	EU, Switzerland
Returnless	Returns portal and return labels	The Netherlands
Klaviyo, Inc.	Newsletter and emails about your order	USA
Trustpilot A/S	Collecting and displaying reviews	Denmark
Google Ireland Ltd.	Analytics, Tag Manager and advertising	Ireland, USA
Meta Platforms Ireland Ltd.	Advertising on Facebook and Instagram and measuring it	Ireland, USA
Visually.io	A/B testing and website personalisation	EU, Israel
Pandectes	Cookie banner and recording your consent	EU
Our bookkeeper and accountancy services	Administration and tax returns	The Netherlands

We may also share data where we are legally required to, for example at the request of a regulator, the tax authorities, or the police and judicial authorities.

6. Transfers outside the European Economic Area

Some of our service providers are based in the United States or process data there. Those transfers take place under the EU-US Data Privacy Framework or, where a provider is not certified under it, under the standard contractual clauses adopted by the European Commission together with supplementary safeguards. You can request a copy of those safeguards from us.

7. How long we keep your data

Data	Retention period
Order, invoice and payment data	7 years after the end of the financial year (Dutch tax retention duty)
Account data	Until you delete your account or ask us to
Customer service emails	2 years after the matter is closed
Guarantee claims	2 years after the matter is closed
Newsletter data	Until you unsubscribe; after that we keep only the unsubscribe record so you stop receiving mail
Cookies and analytics data	26 months at most, or shorter where set per cookie

8. How we protect your data

Our website and checkout run entirely over an encrypted connection (TLS). Access to customer data is limited to the people who need it and secured with two-factor authentication. Payment details never reach our systems. If a data breach nevertheless occurs that poses a risk to you, we will report it to the Dutch Data Protection Authority and inform you directly as well.

9. Your rights

Under the GDPR you have the right to:

• request access to the data we hold about you (Art. 15);
• have inaccurate data corrected (Art. 16);
• have your data erased, in so far as we are not legally required to keep it (Art. 17);
• have processing restricted (Art. 18);
• receive your data in a common format or have it transferred to another party (Art. 20);
• object to processing based on legitimate interests, and to direct marketing at any time (Art. 21);
• withdraw consent you have given, without affecting the lawfulness of processing before the withdrawal (Art. 7(3)).

Send your request to contact@kunstsokken.nl. We respond within one month. To avoid handing data to the wrong person, we may ask for additional information to establish your identity.

10. Making a complaint

If you are unhappy with how we handle your data, please tell us first — we are glad to put it right. You also always have the right to complain to a supervisory authority:

• The Netherlands, where our company is established: Autoriteit Persoonsgegevens
• Germany: the data protection authority of your federal state
• France: CNIL
• Other EU countries: the supervisory authority where you live

11. Automated decision-making

We do not take decisions with legal effects for you based solely on automated processing or profiling. The fraud checks run by Shopify and our payment providers may flag an order for manual review; a person then decides what happens.

12. Children

Our shop is not aimed at children under 16. If you are under 16, please order only with the consent of your parent or guardian. If you believe we hold a child's data without that consent, email us and we will delete it.

13. Changes to this privacy policy

We update this privacy policy when our practices, our service providers or the law change. The date at the bottom shows when we last did so. We will tell you about significant changes on the website or by email.

14. Contact

Questions about this privacy policy or about your data? Email contact@kunstsokken.nl or write to Kunstsokken B.V., Van Nelleweg 1, unit 2.G58B, 3044 BC Rotterdam, The Netherlands. See also our legal notice and terms and conditions.

Last updated: 10 September 2026