This Privacy Policy describes the ways in which CPDolls.at collects, uses, stores and protects the personal data of users who visit the site, make purchases, create an account, send requests for assistance, use the services available or interact with CPDolls.at.
This information is provided pursuant to EU Regulation 2016/679, known as GDPR, and the applicable Italian legislation on the protection of personal data.
The data controller of personal data is:
CP Store in Caso Michela
Registered office: via Galileo Galilei 22
74121 Taranto, Italy
VAT number: IT03292910738
Email: info@cpdolls.at
The owner can be contacted at the email address indicated for any request relating to the processing of personal data and the exercise of the rights provided for by the applicable legislation.
CPDolls.at may process different categories of personal data, based on the activities carried out by the user on the site.
The data processed may include:
CPDolls.at invites users not to send unnecessary data, sensitive data or information irrelevant to the request made.
Personal data may be processed for the following purposes:
The processing of personal data takes place on the basis of one or more of the following legal bases:
The provision of the data necessary to place an order is mandatory to allow CPDolls.at to manage the purchase, payment, shipping and related administrative obligations.
In the absence of the data requested as mandatory, it may not be possible to complete the purchase, ship the goods, issue any tax documents or provide assistance with the order.
The provision of data for promotional, newsletter, marketing or profiling purposes is optional and occurs only in cases where the user has expressed specific consent, where requested.
To manage orders, CPDolls.at processes the data necessary for the preparation, shipping and delivery of the goods.
Customer data may be communicated to couriers, suppliers, warehouses, logistics partners and subjects involved in managing the order, exclusively for the purposes necessary for the correct execution of the purchase.
CPDolls.at uses a European logistics network and can use warehouses, suppliers and logistics partners located in various countries of the European Union. The data communicated to these subjects is limited to what is necessary to identify the order, prepare the goods, ship, manage tracking and resolve any delivery problems.
During the main phases of the order, the customer can receive updates via email and, where available, also via SMS, using the contact details provided during the order phase and in compliance with any consent given to the use of contact data.
Communications strictly necessary for order management, such as confirmations, shipping updates or service information, may be sent as they are linked to the execution of the purchase. Any promotional communications or communications not necessary for the management of the order will be sent only where permitted by applicable law and, when requested, with the consent of the interested party.
Payments made on CPDolls.at can be managed through external payment systems and suppliers, including PayPal, credit card circuits, Apple Pay, Satispay, MyBank, Trustly, bank transfer or other tools available during the checkout phase.
CPDolls.at does not directly store the complete data of the payment cards used by the customer. The payment data are processed by the respective payment service providers according to their privacy policies and security measures.
CPDolls.at may process data relating to the outcome of the payment, the transaction identifier, the amount paid, the method used and the information necessary to confirm, manage or refund the order.
The user can access the reserved area to manage their data, consult orders, follow up on any requests and use the features available on the site.
The data processed in the reserved area may include personal data, addresses, contact details, order history, requests for assistance, returns, refunds and communications linked to the user's activity on the site.
You are responsible for maintaining the confidentiality of your login credentials and must take appropriate measures to prevent unauthorized use of your account.
When the user sends a request via email, contact form or other official channels, CPDolls.at processes the data provided to respond to the request and manage any related activities.
Requests may concern products, availability, orders, payments, shipping, returns, refunds, warranty, collaboration or other information.
The data sent will be processed for the time necessary to manage the request and, where necessary, to fulfill legal obligations or protect the rights of the owner or interested party.
Through the "Work with us" section, CPDolls.at can receive applications, CVs, portfolios, commercial proposals, catalogues, price lists or other information sent spontaneously by professionals, companies and potential partners.
The data received will be processed exclusively to evaluate the application, the collaboration proposal or the possible commercial relationship.
Sending applications or proposals must only contain data relevant to the purpose of the communication. CPDolls.at invites you not to send any particular or sensitive data that is not necessary for the evaluation of the application or proposal.
CPDolls.at may send promotional communications, newsletters, offers, updates on products, commercial initiatives or information content only in cases permitted by applicable law.
When requested, such communications will be sent exclusively with the user's consent.
The user can revoke consent at any time, following the instructions in the communications received or by contacting CPDolls.at at info@cpdolls.at.
The revocation of consent does not affect the lawfulness of the processing carried out before the revocation.
The site may use technical, functional, statistical, analytical, advertising cookies or similar tools, based on the functions actually active.
Technical cookies are necessary for the functioning of the site and do not require the user's consent.
Non-technical cookies, advanced analysis tools, profiling, remarketing, personalized advertising or similar technologies can only be used in compliance with applicable legislation and, when required, with the user's prior consent via the preference management system available on the site.
For more information on the cookies used, their purposes, their duration and how to manage preferences, the user is invited to consult the Cookie Policy published on the site.
Personal data may be communicated, within the limits necessary for the purposes indicated, to the following categories of subjects:
The subjects who process personal data on behalf of CPDolls.at are appointed, where necessary, data controllers pursuant to art. 28 of the GDPR.
CPDolls.at operates in European Union countries and uses a European logistics network.
Generally speaking, personal data is processed within the European Union or the European Economic Area.
If some technical suppliers, digital tools, payment platforms, communication services, analytics, advertising or other services used involve data transfers to non-EU countries, such transfers will take place in compliance with the conditions established by the GDPR, including any adequacy decisions, standard contractual clauses or other guarantees provided for by the applicable legislation.
Personal data are processed using electronic, IT and, where necessary, manual tools, according to principles of lawfulness, correctness, transparency, minimization, accuracy, integrity and confidentiality.
CPDolls.at adopts appropriate technical and organizational measures to protect personal data from unauthorized access, loss, destruction, disclosure, modification or improper use.
Access to personal data is limited to authorized parties and suppliers who must process them for specific and legitimate purposes.
Personal data are kept for the time necessary to achieve the purposes for which they were collected and, subsequently, for the period required by legal obligations or necessary to protect the rights of the owner.
In particular:
The interested party may exercise, in the cases provided for by the GDPR, the following rights:
To exercise their rights, the interested party can contact CPDolls.at at the address:
The request will be handled within the terms established by the applicable legislation. CPDolls.at may request additional information where necessary to verify the identity of the applicant.
The interested party who believes that the processing of their personal data is in violation of the applicable legislation has the right to lodge a complaint with the competent supervisory authority.
In Italy, the competent authority is the Guarantor for the protection of personal data.
The possibility of exercising any other right provided for by the applicable legislation remains unaffected.
CPDolls.at sells products that can also be intended for boys and girls, but the site and purchasing procedures are aimed at adult users or in any case at individuals authorized to make online purchases.
CPDolls.at does not intend to knowingly collect personal data from minors without the consent or authorization of those exercising parental responsibility, in cases where such consent is required by applicable law.
If a parent or guardian believes that a minor has communicated personal data to CPDolls.at without authorization, he or she can contact the owner at info@cpdolls.at to request the appropriate checks.
CPDolls.at does not adopt decisions based solely on automated processing that produces legal effects on the interested party or similarly significantly affects his person.
Any analysis, marketing or profiling tools, where present, will be used in compliance with applicable legislation and the preferences expressed by the user.
CPDolls.at may update this Privacy Policy to adapt it to regulatory, technical, organizational changes or changes relating to the services offered by the site.
The updated version will be published on this page. The user is invited to periodically consult the Privacy Policy to check for any changes.
Last update: 01/07/2026
This information is prepared in accordance with the information contents provided for by the articles. 13 and 14 and with the rights provided for by the articles. 15-22 of EU Regulation 2016/679 (GDPR). A separate Cookie Policy remains available for cookies, marketing and tracking.