The cart (0)

The cart is empty.

Privacy policy

Privacy Policy

This Privacy Policy describes the ways in which CPDolls.at collects, uses, stores and protects the personal data of users who visit the site, make purchases, create an account, send requests for assistance, use the services available or interact with CPDolls.at.

This information is provided pursuant to EU Regulation 2016/679, known as GDPR, and the applicable Italian legislation on the protection of personal data.

1. Data controller

The data controller of personal data is:

CP Store in Caso Michela
Registered office: via Galileo Galilei 22
74121 Taranto, Italy
VAT number: IT03292910738
Email: info@cpdolls.at

The owner can be contacted at the email address indicated for any request relating to the processing of personal data and the exercise of the rights provided for by the applicable legislation.

2. Types of data processed

CPDolls.at may process different categories of personal data, based on the activities carried out by the user on the site.

The data processed may include:

  • personal data, such as name and surname;
  • contact data, such as email address, telephone number and shipping address;
  • billing data, where necessary;
  • data relating to orders placed, products purchased, payments and shipments;
  • data relating to requests for assistance, returns, refunds or information;
  • access data to the reserved area, such as credentials, order history and communications;
  • technical navigation data, such as IP address, browser type, device used, operating system, pages visited and information collected through cookies or similar tools;
  • data possibly sent by the customer via contact forms, emails, messages or spontaneous communications;
  • data contained in applications, CVs, portfolios or collaboration proposals sent via the "Work with us" section.

CPDolls.at invites users not to send unnecessary data, sensitive data or information irrelevant to the request made.

3. Purpose of the processing

Personal data may be processed for the following purposes:

  • allow navigation and correct functioning of the site;
  • allow account registration and access to the reserved area;
  • manage orders placed on the site;
  • process payments, order confirmations, invoicing and administrative documents;
  • organize the preparation, shipping and delivery of the purchased products;
  • send communications regarding order status, shipping and tracking;
  • provide customer support before and after purchase;
  • manage return, withdrawal, refund, replacement or warranty requests;
  • respond to requests sent via email, contact forms or other official channels;
  • fulfil fiscal, accounting, administrative and regulatory obligations;
  • prevent fraud, abuse, unauthorized access or illicit use of the site;
  • manage professional applications, collaboration proposals and requests from partner companies;
  • send promotional communications, newsletters or commercial updates, only where required and with the consent of the interested party;
  • carry out statistical analyses, site performance measurements and digital marketing activities, where applicable and according to the preferences expressed by the user through the available consent tools.

4. Legal basis of the processing

The processing of personal data takes place on the basis of one or more of the following legal bases:

  • execution of a contract or pre-contractual measures, to manage orders, payments, shipments, assistance and customer requests;
  • fulfillment of legal obligations, in particular fiscal, accounting, administrative and consumer protection obligations;
  • consent of the interested party, when required for specific activities, such as promotional communications, newsletters, non-strictly necessary SMS, profiling cookies or marketing tools;
  • legitimate interest of the owner, for purposes such as site security, fraud prevention, protection of rights, technical management of services, improvement of internal organization and defense in the event of disputes;
  • need to ascertain, exercise or defend a right in judicial or out-of-court proceedings.

5. Data necessary for purchase

The provision of the data necessary to place an order is mandatory to allow CPDolls.at to manage the purchase, payment, shipping and related administrative obligations.

In the absence of the data requested as mandatory, it may not be possible to complete the purchase, ship the goods, issue any tax documents or provide assistance with the order.

The provision of data for promotional, newsletter, marketing or profiling purposes is optional and occurs only in cases where the user has expressed specific consent, where requested.

6. Management of orders and shipments

To manage orders, CPDolls.at processes the data necessary for the preparation, shipping and delivery of the goods.

Customer data may be communicated to couriers, suppliers, warehouses, logistics partners and subjects involved in managing the order, exclusively for the purposes necessary for the correct execution of the purchase.

CPDolls.at uses a European logistics network and can use warehouses, suppliers and logistics partners located in various countries of the European Union. The data communicated to these subjects is limited to what is necessary to identify the order, prepare the goods, ship, manage tracking and resolve any delivery problems.

During the main phases of the order, the customer can receive updates via email and, where available, also via SMS, using the contact details provided during the order phase and in compliance with any consent given to the use of contact data.

Communications strictly necessary for order management, such as confirmations, shipping updates or service information, may be sent as they are linked to the execution of the purchase. Any promotional communications or communications not necessary for the management of the order will be sent only where permitted by applicable law and, when requested, with the consent of the interested party.

7. Payments

Payments made on CPDolls.at can be managed through external payment systems and suppliers, including PayPal, credit card circuits, Apple Pay, Satispay, MyBank, Trustly, bank transfer or other tools available during the checkout phase.

CPDolls.at does not directly store the complete data of the payment cards used by the customer. The payment data are processed by the respective payment service providers according to their privacy policies and security measures.

CPDolls.at may process data relating to the outcome of the payment, the transaction identifier, the amount paid, the method used and the information necessary to confirm, manage or refund the order.

8. Reserved area

The user can access the reserved area to manage their data, consult orders, follow up on any requests and use the features available on the site.

The data processed in the reserved area may include personal data, addresses, contact details, order history, requests for assistance, returns, refunds and communications linked to the user's activity on the site.

You are responsible for maintaining the confidentiality of your login credentials and must take appropriate measures to prevent unauthorized use of your account.

9. Contact forms and customer support

When the user sends a request via email, contact form or other official channels, CPDolls.at processes the data provided to respond to the request and manage any related activities.

Requests may concern products, availability, orders, payments, shipping, returns, refunds, warranty, collaboration or other information.

The data sent will be processed for the time necessary to manage the request and, where necessary, to fulfill legal obligations or protect the rights of the owner or interested party.

10. Applications and collaborations

Through the "Work with us" section, CPDolls.at can receive applications, CVs, portfolios, commercial proposals, catalogues, price lists or other information sent spontaneously by professionals, companies and potential partners.

The data received will be processed exclusively to evaluate the application, the collaboration proposal or the possible commercial relationship.

Sending applications or proposals must only contain data relevant to the purpose of the communication. CPDolls.at invites you not to send any particular or sensitive data that is not necessary for the evaluation of the application or proposal.

11. Promotional communications and marketing

CPDolls.at may send promotional communications, newsletters, offers, updates on products, commercial initiatives or information content only in cases permitted by applicable law.

When requested, such communications will be sent exclusively with the user's consent.

The user can revoke consent at any time, following the instructions in the communications received or by contacting CPDolls.at at info@cpdolls.at.

The revocation of consent does not affect the lawfulness of the processing carried out before the revocation.

12. Cookies and tracking tools

The site may use technical, functional, statistical, analytical, advertising cookies or similar tools, based on the functions actually active.

Technical cookies are necessary for the functioning of the site and do not require the user's consent.

Non-technical cookies, advanced analysis tools, profiling, remarketing, personalized advertising or similar technologies can only be used in compliance with applicable legislation and, when required, with the user's prior consent via the preference management system available on the site.

For more information on the cookies used, their purposes, their duration and how to manage preferences, the user is invited to consult the Cookie Policy published on the site.

13. Data recipients

Personal data may be communicated, within the limits necessary for the purposes indicated, to the following categories of subjects:

  • providers of IT services, hosting, technical maintenance and site security;
  • providers of e-commerce platforms, databases, management systems and communication tools;
  • couriers, warehouses, suppliers, logistics partners and operators involved in the shipment;
  • payment service providers and banking institutions;
  • tax, administrative, legal or accounting consultants;
  • subjects in charge of managing emails, SMS, notifications and service communications;
  • providers of analysis, marketing, advertising or cookie management tools, where active and according to the preferences expressed by the user;
  • public authorities, bodies, control bodies or subjects entitled to receive data in the cases provided for by law.

The subjects who process personal data on behalf of CPDolls.at are appointed, where necessary, data controllers pursuant to art. 28 of the GDPR.

14. Transfer of data abroad

CPDolls.at operates in European Union countries and uses a European logistics network.

Generally speaking, personal data is processed within the European Union or the European Economic Area.

If some technical suppliers, digital tools, payment platforms, communication services, analytics, advertising or other services used involve data transfers to non-EU countries, such transfers will take place in compliance with the conditions established by the GDPR, including any adequacy decisions, standard contractual clauses or other guarantees provided for by the applicable legislation.

15. Treatment methods and safety

Personal data are processed using electronic, IT and, where necessary, manual tools, according to principles of lawfulness, correctness, transparency, minimization, accuracy, integrity and confidentiality.

CPDolls.at adopts appropriate technical and organizational measures to protect personal data from unauthorized access, loss, destruction, disclosure, modification or improper use.

Access to personal data is limited to authorized parties and suppliers who must process them for specific and legitimate purposes.

16. Storage times

Personal data are kept for the time necessary to achieve the purposes for which they were collected and, subsequently, for the period required by legal obligations or necessary to protect the rights of the owner.

In particular:

  • data relating to orders, invoicing and accounting obligations may be kept for the period required by tax and civil legislation;
  • the data relating to the account are kept until the cancellation request, unless conservation is necessary for legal obligations or protection of rights;
  • data relating to requests for assistance, complaints, returns and refunds are kept for the time necessary to manage the request and protect the rights of the parties;
  • the data processed for marketing purposes are kept until the consent is revoked or for the different term indicated in the specific information or service settings;
  • the data collected through cookies and similar tools are stored as indicated in the Cookie Policy;
  • the data contained in applications or collaboration proposals are kept for the time necessary to evaluate the application or proposal, unless a subsequent relationship is established or further retention obligations.

17. Rights of the interested party

The interested party may exercise, in the cases provided for by the GDPR, the following rights:

  • right of access to personal data;
  • right to rectify inaccurate data or integrate incomplete data;
  • right to delete data, in the cases provided for by law;
  • right to limit processing;
  • right to object to processing;
  • right to data portability, when applicable;
  • right to revoke the consent given, without prejudice to the lawfulness of the processing carried out before the revocation;
  • right to lodge a complaint with the competent supervisory authority.

To exercise their rights, the interested party can contact CPDolls.at at the address:

info@cpdolls.at

The request will be handled within the terms established by the applicable legislation. CPDolls.at may request additional information where necessary to verify the identity of the applicant.

18. Complaint to the supervisory authority

The interested party who believes that the processing of their personal data is in violation of the applicable legislation has the right to lodge a complaint with the competent supervisory authority.

In Italy, the competent authority is the Guarantor for the protection of personal data.

The possibility of exercising any other right provided for by the applicable legislation remains unaffected.

19. Data of minors

CPDolls.at sells products that can also be intended for boys and girls, but the site and purchasing procedures are aimed at adult users or in any case at individuals authorized to make online purchases.

CPDolls.at does not intend to knowingly collect personal data from minors without the consent or authorization of those exercising parental responsibility, in cases where such consent is required by applicable law.

If a parent or guardian believes that a minor has communicated personal data to CPDolls.at without authorization, he or she can contact the owner at info@cpdolls.at to request the appropriate checks.

20. Automated decision making

CPDolls.at does not adopt decisions based solely on automated processing that produces legal effects on the interested party or similarly significantly affects his person.

Any analysis, marketing or profiling tools, where present, will be used in compliance with applicable legislation and the preferences expressed by the user.

21. Privacy Policy Updates

CPDolls.at may update this Privacy Policy to adapt it to regulatory, technical, organizational changes or changes relating to the services offered by the site.

The updated version will be published on this page. The user is invited to periodically consult the Privacy Policy to check for any changes.

Last update: 01/07/2026

This information is prepared in accordance with the information contents provided for by the articles. 13 and 14 and with the rights provided for by the articles. 15-22 of EU Regulation 2016/679 (GDPR). A separate Cookie Policy remains available for cookies, marketing and tracking.