Privacy Policy

ABOUT

Privacy Policy (GDPR)

We collect and process personal data in our business in accordance with the EU General Data

Protection Regulation (GDPR).

1. When do we collect personal data?

We process personal data when you:

  • submit children’s clothing for sale on commission

  • shop in our store

  • contact us via phone, text message, or email

2. What personal data do we process?

The personal data we may process includes:

  • name

  • personal identity number (only when necessary for identification and payment)

  • phone number

  • email address

  • bank account details for commission payments

3. Why do we process your personal data?

We process personal data in order to:

  • administer commission sales

  • fulfill our agreement with you as a customer

  • manage payments and accounting

  • contact you regarding submitted items, sales, or payments

  • comply with legal obligations, such as accounting laws

4. Legal basis for processing

Your personal data is processed based on:

  • contract – when you submit items for sale

  • legal obligation – such as bookkeeping requirements

  • legitimate interest – such as customer service and communication

5. How do we protect your data?

We handle personal data with great care. The data is stored in secure IT systems, and only

authorized staff have access to it. We take appropriate technical and organizational measures

to protect personal data against unauthorized access, loss, or misuse.

6. How long do we store personal data?

We retain personal data only as long as necessary for the purpose:

  • as long as our agreement with you is valid

  • as long as we are legally required to retain the data (e.g., seven years under

accounting law)

Customer accounts are deleted after 24 months of inactivity, in accordance with our general

terms and conditions, provided that no legal requirements remain. After that, the data is

securely deleted or anonymized.

7. Sharing of personal data

We do not share personal data with third parties for marketing purposes.

Data may be shared with, for example, an accounting firm, bank, or payment service

provider, but only to the extent necessary to fulfill our agreement with you or comply with

legal obligations.

8. Your rights

Under GDPR, you have the right to:

  • request an extract of the data we hold about you

  • have inaccurate data corrected

  • request deletion of your data (in certain cases)

  • object to or request restriction of processing

  • receive your data in a structured format (data portability)

To exercise your rights, please contact us.

9. Contact and complaints

If you have any questions about how we process personal data, you are welcome to contact us

using our regular contact details.