Datenschutzerklärung

Privacy Policy – zapakaax.shop

This Privacy Policy explains how zapakaax.shop collects, uses, stores and otherwise processes personal information when individuals visit our online store, place orders, contact us or otherwise interact with our services.

Data Controller / Store Operator: zapakaax.shop
Privacy Contact: info@zapakaax.shop

This policy is intended to reflect the principles of the General Data Protection Regulation, Regulation (EU) 2016/679 ("GDPR"), where applicable.

1. Personal Data We May Collect

Depending on how you interact with zapakaax.shop, we may process categories of personal data including:

Identity Information

This may include:

• name;
• account information;
• customer identifiers; and
• other information used to identify you in connection with an order.

Contact Information

This may include:

• email address;
• telephone number;
• billing address; and
• shipping address.

Order Information

This may include:

• products ordered;
• order number;
• purchase history;
• order value;
• returns;
• refunds; and
• fulfilment information.

Transaction Information

This may include information relating to:

• payment status;
• payment method;
• transaction reference;
• refunds; and
• fraud-prevention checks.

Payment card information may be handled by payment processors and payment service providers rather than being stored directly by zapakaax.shop.

Device and Technical Information

When you use the website, information may be processed relating to:

• IP address;
• browser;
• operating system;
• device type;
• cookie identifiers;
• website interactions;
• referring pages;
• pages viewed; and
• technical events.

Communication Information

If you contact us, we may process:

• your email address;
• the contents of your communication;
• attachments you submit; and
• our correspondence with you.

2. Why We Process Personal Data

We may process personal information for purposes including:

• operating our online store;
• displaying products and content;
• processing purchases;
• accepting and administering payments;
• fulfilling orders;
• arranging delivery;
• communicating about orders;
• handling returns and refunds;
• responding to customer service enquiries;
• maintaining customer accounts;
• preventing fraud and misuse;
• protecting website security;
• maintaining business and accounting records;
• complying with legal obligations;
• establishing or defending legal claims;
• improving store functionality; and
• sending marketing where there is a valid legal basis.

3. Legal Bases Under GDPR

Where GDPR applies, processing may be based on one or more lawful bases.

Performance of a Contract

We process information necessary to take steps requested before entering into a contract and to perform a purchase contract.

This may include processing a customer's:

• name;
• contact details;
• shipping information;
• order details; and
• transaction information.

Legal Obligations

We may process or retain information where necessary to comply with legal, regulatory, accounting, taxation or consumer-protection obligations.

Legitimate Interests

Where permitted, we may process information where necessary for legitimate interests such as:

• preventing fraud;
• protecting account security;
• maintaining the website;
• managing customer enquiries;
• protecting legal rights; and
• improving business operations,

provided those interests are not overridden by the rights and interests of the individual.

Consent

Where required, we rely on consent, including for certain:

• marketing communications;
• analytics technologies;
• advertising technologies; and
• non-essential cookies.

Consent may be withdrawn where applicable.

4. Shopify

Our ecommerce store is hosted and supported through Shopify technology.

Shopify may process customer personal data in connection with providing ecommerce services to us. Depending on the particular Shopify features enabled, Shopify may act in different data-protection roles.

Shopify states that when acting as a processor or service provider it processes merchant customer data in accordance with its applicable data-processing arrangements. Shopify also provides privacy and GDPR settings to merchants.

Shopify's own consumer privacy information explains that it may receive information relating to browsing, orders, billing and shipping, device information and interactions with merchants where Shopify services are used.

5. Payment Providers

Payment information may be transmitted to payment service providers used to process transactions.

Those providers may independently process personal data for purposes such as:

• authorising transactions;
• preventing fraud;
• complying with financial regulations;
• managing disputes; and
• processing refunds.

Their processing may also be subject to their respective privacy terms.

6. Fulfilment and Delivery Providers

We may disclose necessary personal data to suppliers, fulfilment providers, warehouses and delivery carriers where required to fulfil an order.

This may include:

• recipient name;
• delivery address;
• telephone number;
• email address;
• order reference; and
• delivery instructions.

Only information reasonably necessary for fulfilment should be shared for these purposes.

7. Service Providers

Personal data may be shared with service providers performing services for zapakaax.shop, including providers involved in:

• ecommerce hosting;
• payment processing;
• shipping;
• email;
• customer support;
• security;
• fraud prevention;
• website analytics;
• marketing; and
• technical infrastructure.

Such disclosure will be handled according to applicable data-protection requirements.

8. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Some technologies are essential for functions such as:

• maintaining a shopping cart;
• enabling checkout;
• maintaining security;
• remembering privacy choices; and
• providing services explicitly requested by users.

Other technologies may be used for analytics or advertising where legally permitted.

German TDDDG §25 generally requires consent for storing or accessing information on a user's terminal equipment unless a statutory exception applies, including where the technology is strictly necessary to provide a digital service expressly requested by the user.

Where required, non-essential technologies will be subject to appropriate consent choices.

Shopify provides merchants with customer privacy settings that can include cookie-banner functionality.

9. Marketing

Where legally permitted, we may send marketing communications.

Where consent is required, marketing will be sent on the basis of valid consent.

You can withdraw applicable marketing consent or unsubscribe from marketing communications.

Withdrawal of marketing consent does not prevent us from sending non-marketing communications relating to:

• existing orders;
• returns;
• security;
• customer service; or
• legally required notices.

10. International Data Transfers

The operation of ecommerce services may involve processing personal data in countries outside Germany or the European Economic Area.

Where GDPR applies, international transfers must be supported by an appropriate lawful transfer mechanism where required.

Shopify states that EEA personal data may be processed internationally and that it uses mechanisms including approved Binding Corporate Rules and contractual protections in applicable circumstances.

11. Data Retention

We retain personal data for as long as reasonably necessary for the purpose for which it was collected and for additional periods where required or permitted by law.

Retention periods may depend on:

• the duration of the customer relationship;
• outstanding orders;
• returns or disputes;
• legal obligations;
• taxation and accounting requirements;
• security needs; and
• legal limitation periods.

When personal data is no longer required, it may be deleted, anonymised or otherwise handled according to applicable requirements.

12. Data Security

We use reasonable organisational and technical measures intended to protect personal data against:

• unauthorised access;
• unlawful disclosure;
• alteration;
• destruction;
• accidental loss; and
• misuse.

No online transmission or storage method can guarantee absolute security.

13. GDPR Rights

Where GDPR applies, individuals may have rights including:

• the right of access;
• the right to rectification;
• the right to erasure;
• the right to restriction of processing;
• the right to data portability where applicable;
• the right to object to certain processing;
• the right to withdraw consent where processing is based on consent; and
• the right to lodge a complaint with a competent supervisory authority.

These rights arise under the GDPR and are subject to the conditions and exceptions set out in applicable law.

Requests may be sent to:

info@zapakaax.shop

We may need to verify the identity of the requesting individual before fulfilling a request.

14. Children

zapakaax.shop is intended for individuals legally capable of entering into the relevant purchase arrangements or acting with appropriate legal authorisation.

We do not intentionally seek to collect personal data from children in a manner inconsistent with applicable law.

15. Legal Disclosure

We may process or disclose information where reasonably necessary to:

• comply with applicable law;
• comply with lawful orders;
• respond to competent authorities;
• protect our rights;
• protect customers;
• prevent fraud;
• investigate abuse; or
• establish, exercise or defend legal claims.

16. Changes to This Privacy Policy

We may update this Privacy Policy when reasonably necessary to reflect changes to:

• our services;
• technology;
• Shopify functionality;
• data-processing practices; or
• legal requirements.

The version published on zapakaax.shop will be the current version.

17. Contact

Privacy enquiries and data-protection requests should be directed to:

zapakaax.shop
Email: info@zapakaax.shop