Privacy Policy

1) Collection of Personal Data and Contact Information of the Data Controller


1.1 Thank you for visiting this website. This statement explains how your personal data is processed when you use the website. Personal data refers to information that can identify you personally.


1.2 In accordance with the EU General Data Protection Regulation (GDPR), the data controller for this website is Dorothy's Art Lamps. A data controller is a legal entity or organization that, alone or jointly with others, determines the purposes and means of processing personal data.


1.3 This website uses SSL or TLS encryption technology to protect confidential information and ensure secure transmission. An encrypted connection can be identified by the “https://” prefix and padlock icon in your browser's address bar.

2) Data Collected During Website Browsing


If you visit this website solely for browsing purposes (without registration or providing information), the system will collect “server log” data transmitted by your browser, including:

  • Pages visited
  • Date and time of access
  • Amount of data transferred (in bytes)
  • Referring URL (referring webpage)
  • Browser and operating system used
  • IP address (may be anonymized)


This data is used to enhance website stability and functionality, processed under the “legitimate interests” basis per Article 6(1)(f) of the General Data Protection Regulation (GDPR). It will not be shared with third parties unless misuse is suspected.

3) Cookies (Website User Tracking Tools)


We use cookies to enhance user experience and specific features. Some cookies are temporary (deleted when you close your browser), while others are stored permanently.


Cookies may collect information such as browser type, geographic location, or IP address. Some cookies are used to remember shopping cart contents. If a cookie contains personal data, its processing is based on:

  • GDPR Article 6(1)(b): Performance of a contract
  • GDPR Article 6(1)(f): Legitimate interests


We will explicitly notify you if third-party cookies (e.g., from advertising partners) are used. You may disable cookies via your browser settings, though this may affect website functionality.

4) Data Use When Contacting Us


When you contact us via forms or email, we process the personal data you provide solely to respond to your request. This is based on legitimate interests (GDPR Article 6(1)(f)). If a contractual relationship is formed, GDPR Article 6(1)(b) also applies.


After processing is complete, we will delete the relevant data unless legal retention requirements apply.

5) Data Processing for Account Creation and Contract Performance


Data provided when creating an account or placing an order is processed under Article 6(1)(b) of the GDPR (necessary for contract performance). To delete your account, please email info@dorothyslamps.com After contract completion or account deletion, we will delete the data subject to applicable statutory retention periods.

6) Data Processing for Direct Marketing


6.1 Newsletter Subscription

If you subscribe to our newsletter, we will send promotional messages to your email address. Only your email address is required. This process includes a double opt-in mechanism, with the legal basis being Article 6(1)(a) of the GDPR (Consent). You may unsubscribe at any time by clicking the unsubscribe link in the newsletter or by emailing info@dorothyslamps.com.


6.2 Sending Recommendations to Existing Customers

If you have made a purchase, we may send you recommendations for similar products based on legitimate interest (GDPR Article 6(1)(f)). You may object to such use.

7) Data Transfer During Order Processing


7.1 Necessary Delivery Situations: We provide your data to logistics companies; payment information is provided to payment service providers.


7.2 Payment Service Providers include:

  • PayPal (data transferred to PayPal Europe S.à r.l., including credit checks where necessary; legal basis: GDPR Article 6(1)(f))
  • SOFORT / Klarna (including order and payment details)

8) Purpose of Review Notifications


If you consent to receiving review reminders, we will send reminder emails based on your consent (GDPR Article 6(1)(a)). You may withdraw consent at any time using the same method as above.

9) Social Media Plugins


This website integrates Facebook, Instagram, and Google+ page links using Shariff technology, which activates only upon click. These services comply with the Privacy Shield Framework.

10) Online Marketing Tracking


10.1 Google DoubleClick

Based on legitimate interest (GDPR Article 6(1)(f)), we use Google DoubleClick to deliver more targeted ads through anonymization techniques.


10.2 Google Ads Conversion Tracking

Cookies are used to track ad performance without identifying individuals. You may disable these cookies in your browser.

11) Website Analytics


We use Google Analytics (Universal) to analyze user behavior, anonymizing IP addresses via the _anonymizeIp() function. This is based on legitimate interests (GDPR Article 6(1)(f)). You may download a browser plugin to disable tracking.

12) Remarketing


12.1 Facebook Custom Audiences

With your consent, Facebook Pixel analyzes your behavior. Although data is anonymized, Facebook may link it to your personal account.


12.2 Google Ads Remarketing

Google may display ads based on your past browsing history. You may opt out via AboutAds.info or Google Ads settings.

13) Data Subject Rights

Under GDPR, you have the following rights:

  • Right of Access (Article 15)
  • Right to Rectification (Article 16)
  • Right to erasure (Article 17)
  • Right to restriction of processing (Article 18)
  • Right to be informed (Article 19)
  • Right to data portability (Article 20)
  • Right to withdraw consent (Article 7(3))
  • Right to lodge a complaint (Article 77, e.g., with American or Dutch supervisory authorities)


If processing is based on legitimate interests, you may also object (GDPR Article 6(1)(f)).

14) Data Retention Period


We retain data for the period permitted by law, based on legal obligations and contractual requirements. Upon expiration of this period, data will be deleted unless retention is necessary for ongoing contractual relationships or legitimate interests.