played with the /DATA directory permissions, set it to 777, no good. changed ownership to vmail with 777, no good.
the problem seems to be that the mail directory doesn't exist and dovecot is trying to create it but has insufficient privileges to do so. This should only happen on the initial login for a new user (which this is).
question is, what user needs +W permissions?