Privacy Policy
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for entering into a contract. You are not obligated to provide the data. Failure to provide it will have no consequences. This applies only insofar as no other information is provided in the following processing operations. "Personal data" means any information relating to an identified or identifiable natural person.
Server log files
You can visit our website without providing any personal information. Each time you access our website, your internet browser transmits usage data to us or our web host/IT service provider, which is then stored in log files (server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider. This processing is based on Article 6(1)(f) GDPR, due to our overriding legitimate interest in ensuring the smooth operation of our website and improving our services. Your data will be transferred to Canada, among other places. The EU Commission has issued an adequacy decision for data transfers to Canada.
contact
The data controller is: Eszter Al-Kaissy, Nymphenburger Str. 113a, 80636 Munich, Germany, +4917621893134, info@zarabia.de
Customer-initiated contact via email: If you contact us proactively via email, we collect your personal data (name, email address, message text) only to the extent that you provide it. This data processing serves to process and respond to your contact request. If the contact is for the purpose of carrying out pre-contractual measures (e.g., providing advice regarding a potential purchase, preparing a quote) or relates to a contract already concluded between you and us, this data processing is based on Article 6(1)(b) GDPR.
If you contact us for other reasons, this data processing is based on Article 6(1)(f) GDPR, due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) GDPR. We will only use your email address to process your inquiry. Your data will then be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.
Orders
Collection, processing and transfer of personal data during orders
When you place an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your inquiries. Providing this data is necessary for entering into a contract. Failure to provide this data will result in the contract not being concluded. Processing is based on Article 6(1)(b) GDPR and is necessary for the performance of a contract with you. Your data will be shared, for example, with your chosen shipping companies and dropshipping providers, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly adhere to legal requirements. The scope of data transfer is limited to the minimum necessary. Your data will be transferred to Canada, among other countries. The EU Commission has issued an adequacy decision for data transfers to Canada.
Inventory management
Use of an external merchandise management system: We use a merchandise management system for order processing. For this purpose, your personal data collected during the ordering process will be transmitted to Billbee GmbH, Arolser Str. 10, 34477 Twistetal.
Data subject rights and storage period
Storage duration
After complete contract fulfillment, the data will initially be stored for the duration of the warranty period, then taking into account legal, in particular tax and commercial law retention periods, and then deleted after the expiry of the period, unless you have consented to further processing and use.
Rights of the data subject
Provided the legal requirements are met, you have the following rights under Articles 15 to 20 of the GDPR: the right to information, to rectification, to erasure, to restriction of processing, and to data portability. Furthermore, under Article 21(1) of the GDPR, you have the right to object to processing based on Article 6(1)(f) of the GDPR, as well as to processing for direct marketing purposes.
Right to lodge a complaint with the supervisory authority
According to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is unlawful. You can lodge a complaint, among others, with the supervisory authority responsible for us, which you can contact using the following contact details:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, P.O. Box 20 04 44
40102 Düsseldorf
Tel.: +49 211 384240
Fax: +49 211 38424999
Email: poststelle@ldi.nrw.de
Right to object
If the processing of personal data listed here is based on our legitimate interest pursuant to Article 6(1)(f) GDPR, you have the right to object to this processing at any time, on grounds relating to your particular situation, with effect for the future. Following your objection, the processing of the data in question will cease, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims. Last updated: November 29, 2023