Términos del servicio

Privacy Policy

At ztae, we believe that protecting personal information is an essential part of providing a trustworthy online shopping experience. We respect your privacy and aim to be transparent about the information collected through our online store, how it is used, and the measures taken to safeguard it.

This Privacy Policy describes our approach to personal data when you browse our store, purchase products, communicate with customer support, or interact with other available website features.

We process personal information in accordance with applicable privacy and data protection legislation, including the General Data Protection Regulation (GDPR) where applicable.

1. Who Is Responsible for Your Information?

For the purposes of this policy, ztae is the brand through which our online shopping services are offered.

The following business is identified as the intended data controller, subject to confirmation of its actual role in operating the store:

Registered Company: J.E.R.INVEST ApS

Company Registration Number (CVR): 71377911

Registered Address: C/O Jørgen Rosbøg, Gjelstensåsen 4, 3650 Ølstykke, Denmark

Customer Service and Privacy Contact: bokilothiadokilitha@gmail.com

The data controller determines the purposes and means of processing personal information and is responsible for responding to applicable privacy requests.

2. Categories of Personal Data

The information processed through our online store depends on how you interact with our services.

Information You Submit

When placing an order, making an inquiry, or requesting customer assistance, you may provide:

Full name and contact details.
Email address and telephone number.
Billing and shipping addresses.
Purchased items, quantities, and order references.
Payment method and transaction status.
Delivery preferences and order instructions.
Return, refund, and exchange information.
Messages and correspondence sent to customer support.

We ask customers to provide information relevant to their transactions and service requests.

Payment card details may be handled by external payment service providers. Whether complete card numbers are stored by the store depends on its actual payment integration.

Information Collected During Website Visits

When you access the website, certain technical information may be generated or recorded, including:

Internet Protocol (IP) address.
Browser type and version.
Device and operating system details.
Date and time of access.
Pages visited and interactions with website features.
Referring website information.
Cookie identifiers and related preferences.
Security and server activity logs.

The specific categories collected depend on the technologies enabled on the website.

3. How and Why We Process Information

Personal data may be processed for the following purposes:

Purchases and Fulfilment

To accept orders, verify transaction information, arrange payments, coordinate deliveries, issue order confirmations, and manage purchase-related communications.

Customer Assistance

To answer questions, identify orders, resolve delivery concerns, and manage requests involving returns, exchanges, refunds, or product issues.

Website Administration

To operate essential website functions, maintain technical performance, diagnose errors, and improve the reliability of the shopping experience.

Security and Fraud Prevention

To help detect suspicious transactions, prevent unauthorized access, protect customer information, and investigate security incidents.

Service Improvement

To evaluate how customers interact with the website and identify improvements to navigation, functionality, and product information, subject to applicable privacy requirements.

Marketing Communications

To provide promotional messages or information about offers where a lawful basis exists. Consent will be obtained when required, and customers may withdraw marketing consent at any time.

Legal and Regulatory Compliance

To comply with lawful obligations relating to taxation, accounting, consumer protection, data security, and other regulatory matters.

4. Legal Grounds for Processing

Where GDPR applies, we rely on an appropriate legal basis for each processing activity.

Processing purpose	Potential legal basis
Order fulfilment and delivery	Performance of a contract
Customer support related to purchases	Contractual necessity or legitimate interests, as applicable
Accounting and statutory records	Legal obligation
Website security and fraud prevention	Legitimate interests or legal obligation, as applicable
Optional marketing and non-essential tracking	Consent where legally required
Certain operational improvements	Legitimate interests where a balancing assessment supports their use

Where processing is based on legitimate interests, we consider the impact on individuals and the protection of their rights.

Where consent is the legal basis, individuals may withdraw that consent without affecting the lawfulness of processing carried out before withdrawal.

5. Cookies and Website Technologies

Cookies and related technologies can support website functionality, remember preferences, and provide information about how visitors use online services.

Depending on the website configuration, the following categories may be used:

Essential Cookies

These support core features such as shopping carts, checkout functions, session management, and website security.

Preference Cookies

These may remember selected language, regional settings, or other user preferences.

Analytics Cookies

These may help us understand website usage patterns and evaluate website performance.

Advertising Cookies

Where enabled, these may support advertising measurement, conversion reporting, and relevant marketing activities.

Non-essential cookies or similar technologies requiring prior consent will be activated only where the necessary lawful permission has been obtained.

Where available, you may adjust your preferences through the website's cookie management tools. Browser settings may also allow you to restrict or delete cookies.

Disabling certain essential technologies may affect the operation of some website features.

6. Payment Information and Transaction Security

When customers complete a purchase, certain personal and transaction details are necessary for payment authorization and order processing.

Payments may be facilitated by external payment processors, banks, or other authorized financial service providers.

These providers may process payment data under their own privacy notices and applicable legal obligations.

We seek to limit access to payment-related information to personnel and service providers who need it for legitimate operational purposes.

Personal information entered during checkout must be transmitted and handled through appropriately secured systems.

7. When Information May Be Disclosed

Personal data may be disclosed to external service providers when necessary for the operation of the store or the fulfilment of customer requests.

Relevant categories may include:

Payment processors and financial institutions.
Shipping companies and delivery partners.
Website hosting and cloud infrastructure providers.
Customer communication and support platforms.
IT maintenance and security providers.
Professional advisers and accounting service providers.
Analytics and advertising technology providers, where applicable and lawfully permitted.

Such information should be limited to what is reasonably necessary for the relevant service.

We do not sell customer contact information to third parties for resale.

Personal data may also be disclosed when required by applicable law, a valid regulatory request, or legal proceedings.

Where providers process information on our behalf, appropriate contractual and organizational safeguards will be applied as required by law.

8. Advertising, Analytics, and Google Services

Our online store may use website analytics or advertising tools to understand traffic, assess campaign effectiveness, and improve the customer experience.

If services such as Google Analytics or Google Ads are implemented, relevant data may include technical identifiers, browsing interactions, conversion events, and other information supported by the configured services.

Where applicable law requires consent for advertising cookies, analytics storage, or personalized advertising, the relevant technologies will be subject to appropriate consent controls.

Customers should be given information about the technologies actually used and the available privacy choices.

Additional information about Google's handling of information is available through Google's Privacy Policy.

Any use of customer information for advertising must follow applicable law and the relevant platform requirements.

9. International Processing of Personal Data

Some technology providers or operational partners may process information in countries outside the European Economic Area.

Where personal data is transferred internationally, the transfer must comply with the applicable legal requirements.

For transfers outside the EEA where GDPR applies, appropriate safeguards may include:

An applicable adequacy decision.
European Commission Standard Contractual Clauses.
Other legally recognized transfer mechanisms.
Supplementary protections where necessary.

Information about applicable safeguards may be requested using the privacy contact details provided in this policy.

Actual international transfer destinations and safeguards depend on the service providers used.

10. How Long Information Is Retained

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to relevant legal obligations.

Retention considerations may include:

Completion and administration of orders.
Delivery and after-sales support.
Applicable accounting and tax requirements.
Consumer warranty and contractual obligations.
Resolution of disputes and legal claims.
Security investigations and fraud prevention.
Marketing preferences and consent records.

Information may be deleted, anonymized, or securely archived when it is no longer needed, depending on applicable retention requirements.

Specific retention periods are determined by the relevant data category, purpose, and legal obligations.

11. Protecting Customer Data

We recognize the importance of maintaining appropriate safeguards for personal information.

Depending on the relevant systems and risks, security measures may include encrypted communication, access restrictions, authentication controls, monitoring, secure storage procedures, and administrative oversight.

Access to personal information should be restricted to authorized personnel and service providers with a legitimate need.

While reasonable measures are taken to reduce security risks, no online system can guarantee complete protection from every threat.

If you believe your information has been exposed or used without authorization, please contact us.

12. Your Rights Under Data Protection Law

If GDPR or another applicable privacy law applies, you may have the right to:

Access: Request information about personal data we process and receive a copy where permitted.

Rectification: Ask us to correct inaccurate or incomplete personal information.

Erasure: Request deletion where the applicable legal conditions are met.

Restriction: Request limits on certain processing activities in circumstances provided by law.

Objection: Object to processing based on legitimate interests and to processing for direct marketing.

Portability: Receive certain information in a structured, commonly used, machine-readable format, where applicable.

Withdrawal of Consent: Withdraw previously granted consent for processing based on consent.

Automated Decisions: Exercise applicable rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

To submit a privacy rights request, email:

bokilothiadokilitha@gmail.com

Please describe the nature of your request and provide enough information for us to identify the relevant records.

We may request reasonable identity verification before disclosing or changing personal information.

Requests covered by GDPR will generally be answered within one month, subject to any lawful extension or exception.

13. Children's Personal Information

Our online store is intended for general retail customers and is not specifically directed at children.

We do not intentionally seek personal information from children in circumstances where collection would be unlawful.

If we become aware that personal data has been collected from a child without the legally required authorization, we will take appropriate steps to address the situation.

Parents or legal guardians with concerns may contact us at bokilothiadokilitha@gmail.com.

14. Marketing Preferences and Opt-Out Requests

Where marketing communications are offered, customers may be given an opportunity to receive product news, promotional updates, or other commercial messages.

When consent is required, marketing communications will be based on appropriate permission.

You can request to stop receiving promotional messages by using the unsubscribe mechanism included in the communication or by contacting our support team.

Opting out of promotional communications does not necessarily prevent the receipt of essential transactional messages, including order confirmations, delivery updates, and legally required notices.

15. Security Incidents and Data Breaches

If a personal data security incident occurs, we will assess its nature, scope, and potential consequences.

Appropriate steps may include investigating the incident, limiting unauthorized access, addressing relevant system vulnerabilities, and documenting the response.

Where legally required, relevant supervisory authorities and affected individuals will be notified within the applicable deadlines.

Our approach will depend on the circumstances and the obligations imposed by applicable legislation.

16. External Websites and Third-Party Links

Our website may include links to external websites or services operated independently by other organizations.

These third parties may have their own privacy policies and data protection practices.

We encourage customers to review the privacy information of external services before providing personal information.

This policy does not govern independent data processing carried out by unrelated third-party websites.

17. Updates to This Privacy Policy

We may revise this Privacy Policy to reflect changes in applicable legislation, website services, technical operations, or information-handling practices.

When updates are made, the revised policy will be published on the website.

Where legally required, additional notice or consent will be provided before material changes to processing activities take effect.

We recommend reviewing this page periodically to understand how personal information is managed.

18. Contact and Privacy Inquiries

If you have questions about personal information, data processing, cookies, privacy rights, or this Privacy Policy, please contact us.

Brand: ztae