Privacy Policy
Last updated: August 2026
This Privacy Policy explains how DMZ Boutique collects, uses, stores and shares personal data when you visit dmzboutique.com, place an order, submit a form or otherwise contact us.
The Website is operated by:
DFILM PICTURES, MARUŠA ZAMORANO SP
Pod ostrim vrhom 31
1420 Trbovlje
Slovenia
Email: info@dmzboutique.com
For the purposes of applicable data-protection law, we are the controller of personal data processed as described in this Policy.
1. Personal Data We Collect
Depending on how you use the Website, we may collect:
your name and contact information;
billing and delivery information;
email address and telephone number where provided;
information relating to your orders and purchases;
payment and transaction information;
information you provide when contacting us;
information submitted through our return or withdrawal forms;
technical information relating to your use of the Website, such as device, browser and IP information; and
cookie and similar technology information where applicable.
We collect only information reasonably necessary for the purposes described in this Policy.
2. How We Use Personal Data
We may use personal data to:
process and fulfil orders;
arrange production, shipping and delivery;
process payments and refunds;
communicate with you about an order;
administer returns and statutory withdrawals;
respond to questions and customer-service requests;
maintain business, accounting and transaction records;
prevent or investigate fraud, misuse or security incidents;
operate, secure and improve the Website;
comply with legal obligations; and
send marketing communications where you have consented to receive them or where otherwise permitted by law.
3. Legal Bases for Processing
We process personal data only where we have an appropriate legal basis.
Depending on the circumstances, this may include:
Performance of a contract — where processing is necessary to process an order, arrange delivery, administer a return or otherwise perform our obligations to you.
Legal obligation — where we are required to retain or process information under applicable tax, accounting, consumer-protection or other laws.
Legitimate interests — where processing is reasonably necessary for operating, securing or improving our business and Website, provided those interests do not override your rights and freedoms.
Consent — where you have expressly agreed to particular processing, such as certain marketing communications or non-essential cookies where consent is required.
Where processing is based on consent, you may withdraw your consent at any time.
4. Orders and Payments
When you place an order, we process the information necessary to complete the transaction, fulfil the order and communicate with you.
Payments are processed through payment-service providers available through our online checkout. Payment providers may process your payment information in accordance with their own privacy policies and applicable law.
We do not ask customers to send payment-card information to us by ordinary email.
5. Fulfilment and Delivery Partners
We may share the personal data necessary to fulfil and deliver an order with companies involved in production, fulfilment, shipping and delivery.
For MDCI perfume orders, the information necessary to fulfil and deliver the order may be provided to MDCI because MDCI ships those products directly to the customer on behalf of DMZ Boutique.
Only information reasonably necessary for fulfilment, delivery, returns or related customer service is shared for these purposes.
6. Returns and Withdrawal Requests
When you submit a return or withdrawal request, we process the information you provide in order to identify your purchase, administer the request, communicate with you and comply with our consumer-law and record-keeping obligations.
Information submitted through our online withdrawal form may include your name, email address, order number, products concerned, date received and any additional information you voluntarily provide.
Where necessary, relevant information may be shared with a fulfilment or delivery partner to arrange the return of a product.
7. Website Platform and Service Providers
Our Website is operated using Squarespace.
Squarespace and other service providers supporting our Website may process certain personal data on our behalf or in connection with providing their services.
We may also use service providers for functions such as:
website hosting and operation;
payment processing;
email and customer communications;
order fulfilment;
shipping and delivery;
data storage;
security and fraud prevention; and
other technical services necessary to operate the Website.
These providers receive personal data only where reasonably necessary for the relevant service and are subject to applicable data-protection requirements.
8. International Data Transfers
Some technology and service providers may process personal data outside Slovenia or the European Economic Area.
Where personal data is transferred internationally, appropriate safeguards required by applicable data-protection law will be used where necessary.
9. Marketing Communications
We will send marketing emails or similar communications only where we have an appropriate legal basis to do so.
You may unsubscribe from marketing communications at any time using the unsubscribe option provided in the communication or by contacting us at info@dmzboutique.com.
Transactional communications concerning orders, returns, withdrawal requests or customer service are separate from marketing communications.
10. Cookies
The Website may use cookies and similar technologies necessary for its operation, including functions such as security, checkout and shopping-cart functionality.
Additional cookies or technologies may be used for analytics or other purposes where configured on the Website.
Where required by law, non-essential cookies will be used only after obtaining the appropriate consent.
You can also manage cookies through your browser settings. Disabling certain essential cookies may affect Website functionality.
11. How Long We Keep Personal Data
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting, tax, consumer-protection and record-keeping requirements.
Different categories of information may therefore be retained for different periods.
Where personal data is no longer required, it will be deleted or anonymised where appropriate.
12. Your Data-Protection Rights
Subject to the conditions provided by applicable law, you may have the right to:
access personal data we hold about you;
request correction of inaccurate or incomplete information;
request deletion of personal data;
request restriction of processing;
object to certain processing;
receive certain personal data in a portable format;
withdraw consent where processing is based on consent; and
lodge a complaint with a competent supervisory authority.
These rights are not absolute and may be subject to legal exceptions, including obligations requiring us to retain certain records.
To exercise your rights, contact info@dmzboutique.com.
13. Slovenian Supervisory Authority
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent supervisory authority.
In Slovenia, this is the Informacijski pooblaščenec Republike Slovenije (Information Commissioner of the Republic of Slovenia).
14. Children's Privacy
The Website is intended for customers who are legally capable of entering into online purchase contracts.
We do not knowingly collect personal data from children through the online shop for the purpose of allowing them to make purchases independently where they are not legally entitled to do so.
15. Security
We take reasonable organisational and technical measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
No online system can be guaranteed to be completely secure.
16. Sharing and Sale of Personal Data
We do not sell personal data.
We share personal data only where necessary for the purposes described in this Policy, where required by law, or where another lawful basis permits the disclosure.
17. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to the Website, our services, our processing activities or applicable law.
The current version and its latest update date will be published on this page.
18. Contact
For questions about this Privacy Policy or the processing of your personal data, contact:
DFILM PICTURES, MARUŠA ZAMORANO SP
Pod ostrim vrhom 31
1420 Trbovlje
Slovenia
Email: info@dmzboutique.com