Table of contents:
Privacy Policy
1. Information on the handling of personal data
· Name and address of the data controller
· General information on data processing
· Categories of processed data
· Storage duration
2. Information on the processing activities
· Visiting the website
· Creation of a customer account and login to the customer account
· Order processing on the website
· Loyalty Program
· Newsletter and commercial communication
· Online raffles and games
· Customer service
· Customer Review and Reputation Management
· Whistleblowing / Anti-Corruption reporting system
3. Disclosure of your personal data
4. Social Media Presence
5. Your rights
Privacy policy
DIM Brands International (“DBI”) is a socially responsible manufacturer and leading marketer of everyday-basic apparel under some of the strongest apparel brands. In Europe, DIM Brands International markets brands such as Playtex, DIM, Nur Die, Bellinda, Abanderado and Lovable.
At DBI, we respect our customers and recognize the importance of protecting the privacy and security of your information. This Consumer Privacy provides an overview of the practices of DIM Brands International, its subsidiaries, affiliates and associates relating to the collection, use and disclosure of personal data about consumers.
1. Information on the handling of personal data
a) Name and address of the data controller
DIM France SAS
2 rue des Martinets
92500 Rueil-Malmaison
France
email to Data Privacy Officer: DBI.privacy@dim.com
b) General information on data processing
At DBI, we respect and recognize the importance of the privacy and security of our customers' data. Therefore, as a matter of principle, personal data is only processed if there is a legal basis for doing so. A legal basis, for example, is the fulfillment of a contract with you, the fulfillment of a legal obligation we may have or if you have provided your consent in the processing of personal data. The processing of personal data is carried out on the basis of the applicable provisions of the General Data Protection Regulation (GDPR).
c) Categories of processed data
Below you find information about the main categories of personal data we process and the purpose why we process them.
· Master data (e.g. name, address, contact information)
purpose: identification, contract management, correspondence
· Contract data (e.g. shopping cart contents, orders, invoices)
purpose: contract performance, settlement, warranty
· Payment data (e.g. payment service provider transactions)
purpose: billing, bookkeeping, accounts receivables management
· Usage data (e.g. IP address, pages visited, access times)
purpose: operations, security, website optimization and analysis
· Communication data (e.g. emails, contact-form-content, newsletters, customer relationship management CRM)
purpose: handling inquiries, support, documentation, sending information (only with a legal basis)
· Other data that you voluntarily provide to us
We may use external service providers to deliver certain services. You can find more information about this under “Disclosure of personal data" and "Links to social networks".
d) Storage duration
We store the data until the stated purposes of the processing are achieved, but at the latest after 3 years, in case there was no contact, being for example no click on an email, no tickets or associated order and no connection to the web site, unless another legal basis requires a longer retention.
2. Processing activities
a) Visiting the website
Our website is hosted by SHOPIFY International Limited, dont le siège est situé Victoria Building 1-2, Haddington Road, Dublin 4, D04XN32, Irlande. The hosting provider acts as our data processor and processes data solely in accordance with our instructions. Where personal data is transferred outside the European Economic Area (EEA), such transfers are protected by appropriate safeguards in accordance with applicable data protection laws. We use OneTrust as our Consent Management Platform (CMP). You can manage consent preferences there.
Each time you visit our website, our system automatically collects data and information from the terminal device.
The following data is collected in so called server logfiles
· Information about the browser type and version used
· The operating system of the user
· The Internet service provider of the user
· The IP address of the user (accessing device)
· Date and time of access
· Websites from which the user's system accesses our Internet site, so called referrer URL (previously visited website)
· Websites that are called up by the user's system via our website
The legal basis for the temporary storage of the data and the log files is legitimate interest (Art. 6(1)(f) GDPR) of the company.
The server log files may be used on the one hand for security purposes, e.g. to prevent server overload, and on the other hand to ensure the utilization of the servers and their stability. The temporary storage of the IP address by the system is furthermore necessary to enable delivery of the website to your computer at all.
b) Creation of a customer account and login to the customer account
On our website, we offer users the opportunity to set up a password-protected customer account by providing personal data. The creation of the customer account is voluntary and serves to offer you the greatest possible convenience.
The data is entered into an input mask and transmitted to us and stored. The following data is collected during the registration process:
· Guest account (optional)
· Title (optional)
· First name and last name
· address
· E-mail address
· Password
· Phone number (optional)
· Date of birth (optional)
The following data is also stored at the time of registration:
· The IP address of the user
· Date of registration
Your data is used to set up and personalize your user profile as part of the provision of a contractual service. The legal basis for the data processing is the fulfillment of the contract.
Registration of the user is necessary for the purpose of fulfillment of a contract with the user or for the implementation of pre-contractual measures.
If you wish to delete the account please contact our Customer Service at Global-e
c) Order processing on the website
Please be informed that sales activities on our website are operated by our partner Global-E. Regarding these processing activities, we and Global-E are independent data controller.
Therefore, we recommend you to contact our partner should you wish to exercise any of your data protection rights with Global-E directly:
Global-E France SAS
320 rue saint-honoré
75001 Paris
France
DPO e-mail: dataprotection@Global-e.com
If you place an order on our website, we process your personal data to fulfill your order. When you place an order, you can choose between different payment methods.
The following data is collected during the registration process:
· Registration (e-mail, name etc.)
· Shipping and billing address
· Voucher code (if applicable)
· Payment methods
We process the personal data on the legal basis of fulfilling the contract with you.
Name and address information is processed for the purpose of execution the sales contract and to process the order.
If you use a voucher code when placing your order, we will process your data to check whether the conditions of the voucher are met.
For the processing of the payment, we work together with payment service providers. For this purpose, we transmit your order data to the payment service provider you have chosen, which then processes the payment on its own responsibility. The payment service provider informs us whether the payment was successful. We also process your data for any necessary repayments and invoice corrections. If you do not make a payment as owed, we further process your data to remind you of the payment and, if necessary, transmit the data to collection service providers. If we agree with you on an installment payment, we will also process your data for this purpose.
d) Newsletter and commercial communication
On our website and sometimes also with our trusted wholesale or retail partners there is the option to subscribe to a free newsletter that you can receive via E-Mail. When registering for the newsletter, the data from the input mask is transmitted to us. The following data might be collected:
· Name, first name
· address
· E-mail address
· Mobile phone number
In addition, the following data is collected during registration:
· IP address of the calling device
· Date of registration
Provision of the personal data is voluntary. We will only contact you for advertisement purposes if you have provided your consent to do so, your consent serves as legal basis. You can revoke your consent at any time and unsubscribe by following the instructions provided in the communication or by contacting our customer service here: Global-e. The legality of the data processing operations already carried out remains unaffected by the revocation.
The collection of the user's e-mail address is used for the purpose of delivering the newsletter and other advertising communication. The collection of other personal data during the registration process serves to prevent misuse of the services or the e-mail address used.
e) Online raffles and games
From time to time, we offer the free participation in raffles, sweepstakes or games, like for example “Wheel of fortune”, together referred to asl “Raflles”, to win discount vouchers, online credits to use in our online shop or other prices.
Personal data that may be processed in this context is, depending on the scope of the Raffles:
· Name (first name, surname)
· Contact data (e-mail address)
Additional data that may be collected for the winner for the handover of the price, depending on the scope of the Raffles, may include:
· Postal address
Participation is always voluntary. The legal basis for the processing is your consent.
We only process personal data for the purpose of executing the Raffles, selecting and informing the winner as well as to handover the price. The scope of the data collected depends on the type of Raffles and type of price to win. More Information can be found in the respective terms of participation.
f) Customer Service
We offer customer service that can be contacted via email, telephone or contact form for questions regarding products, your order, the change of your data in your customer account or any questions you may have. The personal data that might be processed in this context is:
· Name
· Contact data (Email / telephone number)
· Order ID
· Invoice number
· Any other information you choose to provide
The following data is also stored at the time the message is sent:
· Date and time of contact
The legal basis for the processing of the data is your consent when proactively contacting us and/or the fulfillment of (pre)contractual obligations.
Personal data is processed for the purpose of handling the request made in the context of the contact. Your feedback and responses also help us to further develop and improve our product portfolio.
g) Customer Review and Reputation Management
Customer Reviews: Use of a Third-Party Review Platform
Sending review invitations: Trustpilot as a data processor
Where you have given your prior consent, we may send you an email inviting you to share your experience and leave a review of your purchase via Trustpilot.
For the sole purpose of sending this invitation on our behalf, your email address and certain information relating to your order (such as the purchase date and product category) will be shared with Trustpilot A/S, Pilestræde 58, 1112 Copenhagen K, Denmark, acting as a data processor on behalf of DIM under a data processing agreement concluded pursuant to Article 28 of the General Data Protection Regulation (GDPR).
Trustpilot will process your personal data only in accordance with our instructions and will not use it for any other purpose.
The legal basis for this processing is your consent (Article 6(1)(a) GDPR). You may withdraw your consent at any time by clicking the unsubscribe link included in our emails, without affecting the lawfulness of processing carried out before such withdrawal.
Use of the Trustpilot platform – Trustpilot as an independent data controller
If you choose to publish a review on the Trustpilot platform, Trustpilot A/S will process your personal data as an independent data controller for the purposes of managing and publishing your review, in accordance with its own Privacy Policy, available at:
https://legal.trustpilot.com/for-reviewers/end-user-privacy-terms
DIM has no control over the processing activities carried out by Trustpilot in this context and cannot be held responsible for them.
Sending review invitations after customer service interaction: SimpleSat as a data processor
Whistleblowing / Anti-Corruption Reporting System
We operate a whistleblowing and anti-corruption reporting system that enables employees and external parties to report suspected legal or compliance violations. The system is operated by an external service provider acting as our data processor (NAVEX Global) under Article 28 GDPR.
Personal data submitted through the reporting system is processed solely for the purpose of receiving, investigating, and addressing reports. Reports may also be submitted anonymously. Access to the information is restricted to authorized personnel and, where required, competent authorities.
3. Disclosure of your personal data
We may share personal data with selected recipients, such as other companies of our DBI Group (relying on Art. 6(1)(f) and (b) GDPR). We engage carefully selected service providers to support our business operations. This mainly includes marketing agencies, marketing software providers, IT service or software providers, CRM system providers, hosting and content delivery services as well as applicant tracking systems to manage the recruitment process. These service providers only act in accordance with our instructions (following Art. 28 GDPR).
To fulfil and deliver your order, we may also share your data with payment providers and carriers for sending the orders. Each of them acts as individual data controller (relying on Art. 6(1)(b) GDPR).
Furthermore, personal data may be shared with public authorities (e.g. financial authorities, police, public prosecutor's office, supervisory authorities) when we are obliged to do so (Art 6(1)(c) GDPR).
As part of our business relationships, your personal data may be passed on or disclosed to third-party companies which may also be located outside the European Economic Area (EEA), i.e. in third countries. Such processing takes place exclusively to fulfill contractual and business obligations and to maintain your business relationship with us. Even if recipients, such as service providers, are located within the EU or the EEA, it is possible that the recipient may transfer personal data to other recipients in a third country. A transfer of personal data to third countries only takes place if there are appropriate safeguards within the meaning of applicable data protection laws. Transfers may be based on an adequacy decision of the European Commission or, where no so decision exists, on standard contractual clauses (SCC) and additional safeguards. It is intended to ensure an appropriate level of protection. Where required, supplementary technical and organisational measures are implemented.
4. Social Media Presence
We maintain company presences on various social media platforms (e.g. Facebook, X (formerly known as Twitter), Instagram, YouTube, LinkedIn, TikTok). When you click on an external link, your browser establishes a connection to the respective platform. In this process, technical information such as your IP address and the time of access may be transmitted to the provider.
Further processing of your personal data on the respective platform is carried out under the responsibility of the platform operator in accordance with its privacy practices.
We have only limited influence over the data processing activities carried out by the platform operators.
If you post a comment on our social media channels, your comment will be publicly displayed and accessible worldwide. You can delete your comment yourself at any time. Please note that content shared publicly may remain accessible to third parties even after deletion.
5. Your rights
If your personal data is processed, you have the following rights, all of which you can exercise by contacting DBI.privacy@dim.com
a) Right of access, Art. 15 GDPR
You may request confirmation if personal data concerning you is being processed by us. In particular, you can request information about the processing purposes, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, and, in case the data has not been provided directly by you, the origin of your data.
b) Right to rectification, Art. 16 GDPR
You have a right to rectification and/or completion, insofar as the processed personal data concerning you is inaccurate or incomplete.
c) Right to withdraw consent, Art. 7 (3) GDPR
You have the right to withdraw your consent at any time. The withdrawal of consent shall only apply for the future and shall not affect the lawfulness of processing based on consent before its withdrawal.
d) Right to erasure, Art. 17 GDPR
You have the right to request the deletion of your personal data where the requirements of Article 17 GDPR are met, provided that no statutory retention obligations or other legal grounds require its continued storage.
e) Right to restriction of processing, Art. 18 GDPR
You have the right to request the restriction of processing under the conditions set out in Article 18 GDPR.
f) Right to data portability, Art. 20 GDPR
You have the right to obtain your personal data in a structured, commonly used and machine-readable format and transmit those data to another controller without hindrance, where technically feasible.
g) Right to object, Art. 21 GDPR
You have the right to object at any time to the processing of personal data relating to you which is carried out on the basis of Article 6 (1) (e) or (f) GDPR; this also applies to profiling based on these provisions. Where personal data is processed for direct marketing purposes, you have the right to object at any time and free of charge.
h) Right to complain to the supervisory authority, Art. 77 GDPR
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
Last updated: July 2026
We reserve the right to change or adapt this privacy policy at any time in compliance with the applicable data protection regulations.
