Privacyverklaring

The size finder on the fit page runs entirely in your browser. Entering measurements there sends nothing to us at all.

The size help form does send them, because a person has to read them to answer you. Those submissions are held under the rules above.

Controller

HARCO SOCKS B.V.

Address

Einsteinstraat 1, 5051 DR Goirle, Nederland

Email

support@harcosocks.pics

Telephone

+31 13 5340553

Data protection officer

Not appointed — the criteria in Article 37 GDPR are not met. Data protection questions go to the address above.

Order details

Name, email, phone, delivery address, order contents. To perform the contract (Art. 6(1)(b)). Kept 7 years to meet Dutch tax retention.

Abandoned checkout

The same details where you completed the form but did not pay. Legitimate interest in following up an incomplete order (Art. 6(1)(f)). Deleted after 6 months.

Body measurements

Height, and weight or hip, plus calf and leg length if you give them. To answer a sizing question, on your consent (Art. 6(1)(a)). Deleted after 6 months.

Contact messages

What you write to us and what we write back. Legitimate interest in handling the enquiry (Art. 6(1)(f)). Deleted after 24 months.

Email updates

Email address only, on consent (Art. 6(1)(a)). Deleted on withdrawal.

Server logs

IP address, user agent, request path, timestamp. Security and fault diagnosis, legitimate interest (Art. 6(1)(f)). Deleted after 30 days.

We do not ask for and do not want health information. A pressure value on a support style is a property of the garment; we do not record why you bought one and we would rather you did not tell us.

No automated decision-making with legal or similarly significant effect is carried out. The size finder is arithmetic, it runs in your browser, and its output is a suggestion you are free to ignore.

Processors acting on our instructions, and no one else:

• Hosting. The site and its data store run on infrastructure operated by our hosting provider, with EU regions used where the provider offers them.
• Payment. Card details are entered directly with the payment provider and never reach our servers. We receive only the result of the transaction and the last four digits.
• Carriers. Name, address and phone, so the parcel can be delivered.
• Transactional email. Email address and order contents, to send confirmations and the withdrawal form.

We do not sell personal data, and we do not share it with advertising networks or data brokers.

Where a processor operates outside the EEA, the transfer relies on an adequacy decision or on the European Commission’s standard contractual clauses. You can ask us which applies to a specific processor.

Under the GDPR you can ask us to:

• Give you a copy of your data (Art. 15).
• Correct it if it is wrong (Art. 16).
• Delete it (Art. 17) — subject to the tax retention on invoices.
• Restrict how we use it (Art. 18).
• Send it to you or another controller in a usable format (Art. 20).
• Stop processing based on legitimate interest (Art. 21).
• Withdraw a consent at any time (Art. 7(3)), without affecting what was lawful before.

Write to support@harcosocks.pics. We answer within one month. There is no charge unless a request is manifestly unfounded or excessive.

If you are not satisfied with how we have handled your data you have the right to lodge a complaint with the Dutch supervisory authority:

Authority

Autoriteit Persoonsgegevens

Address

Postbus 93374, 2509 AJ Den Haag, Nederland

Telephone

088 - 1805 250

Website

autoriteitpersoonsgegevens.nl

If you live in another EU or EEA country, you can also complain to the supervisory authority where you live or where the issue arose.

You do not have to raise it with us first, though we would rather you did — it is usually faster.

• The whole site is served over HTTPS.
• Card details never touch our servers; they go straight to the payment provider.
• Access to order data is limited to staff who need it to fulfil and support orders.
• Body measurements are held under an automatic deletion rule at 6 months rather than relying on someone remembering.

No system is perfectly secure. If we become aware of a breach likely to result in a risk to your rights we notify the Autoriteit Persoonsgegevens within 72 hours and tell you directly where the risk is high.

This site is not intended for children under 13 and we do not knowingly collect their data. Between 13 and 17, a parent or guardian must agree to a purchase. If you believe we hold data about a child, write to us and we will delete it.

We update this page when what we do changes. The date at the top is the date of the current version. Where a change materially affects you and we hold your email address, we tell you directly rather than relying on you noticing.