Privacy Policy
At Collectnoir, we value your trust and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).
Collectnoir is operated under the brand VELVENOIR by DLS Schafer GmbH, based in Austria. This policy applies to all interactions via our website, newsletter, and this online shop / atelier.
Data Controller
DLS Schafer GmbH
Wilhelm-von-Exner Str. 14
5020 Salzburg
Austria
What Personal Data We Collect
We may collect and process the following categories of personal data:
- Contact details (name, email, phone number, address)
- Purchase data (products ordered, billing and shipping details, payment method)
- Account information (if you create a customer account)
- Newsletter engagement (email opens, click-throughs)
- Technical data (IP address, browser type, device type, operating system, language preferences)
- Usage data (your interactions with our website, products viewed, time spent)
We do not collect or process sensitive personal data unless explicitly required and with your consent.
How we use your Data
We process your personal data for the following purposes:
- To process and fulfill your order
- To communicate with you regarding your order or inquiry
- To send you our newsletter (if you have subscribed)
- To personalize your experience on our site
- To comply with legal obligations (e.g. record keeping, tax law)
- To prevent fraud and ensure the security of our platform
Legal Process
We process your data based on the following legal grounds:
- Performance of a contract (e.g. when you place an order)
- Consent (e.g. for newsletter subscriptions or analytics cookies)
- Legal obligation (e.g. for invoices, tax reporting)
- Legitimate interest (e.g. website analytics, customer service)
You may withdraw your consent at any time by contacting us or using the unsubscribe link in our newsletters.
Data Sharing and Third Parties
We only share your data where necessary, and only with trusted partners:
- Payment processors (e.g. Shopify Payments, Klarna, PayPal, Apple Pay)
- Shipping providers (to deliver your order)
- Email platforms (e.g. Klaviyo or Mailchimp, for newsletter delivery)
- Analytics services (e.g. Google Analytics, for website performance insights)
- IT and hosting providers
All service providers are contractually bound to process your data securely and only as instructed.
Cookies & Tracking
We use cookies and similar technologies to improve your browsing experience, analyze traffic, and offer personalized content.
You can manage your cookie preferences at any time via our [Cookie Settings] or through your browser.
For more detailed information, please refer to our Cookie Policy.
Data Retention
We retain your data only for as long as necessary:
- For customer orders: 7 years (for tax and accounting obligations)
- For newsletter subscribers: until you unsubscribe
- For website analytics: up to 26 months (Google Analytics retention default)
- For inquiries and correspondence: up to 2 years
When no longer required, your data will be securely deleted.
Your Rights Under GDPR
You have the following rights:
- Right to access – to know what data we hold about you
- Right to rectification – to correct inaccurate or incomplete data
- Right to erasure – to request deletion of your personal data
- Right to restrict processing – to limit how we use your data
- Right to data portability – to receive your data in a machine-readable format
- Right to object – to withdraw consent or object to direct marketing
- Right to lodge a complaint – with a data protection authority
To exercise your rights, please contact us at [contact@collectnoir.com].
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, misuse, loss, or destruction. These include SSL encryption, access controls, and secure payment processing.
International Data Transfers
Some of our service providers may process data outside the EU. In such cases, we ensure that data transfers are protected by standard contractual clauses or adequacy decisions under GDPR.
Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website. If changes are significant, we will notify you via email or on the site.

