Privacy policy

1) Introduction and Contact Information of the Responsible Party

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2 The responsible party for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Aleea Sulfinei 2, bloc g5, sc B, 410378 Oradea Bihor, Romania, Tel.: +40 0744309747, Email: business.zewen@gmail.com. The responsible party for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

When you use our website for purely informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website:

- Our visited website
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Used browser
- Used operating system
- Used IP address (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6(1) lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

3) Hosting & Content Delivery Network

Shopify

For hosting our website and displaying the page contents, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify").

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc.

All data collected on our website is processed on the servers of the provider. We have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

An adequate level of data protection is guaranteed for data transmission to Canada by an adequacy decision of the European Commission.

For the transmission of data to the USA, the provider relies on the standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

4) Cookies

To make the visit to our website attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your end device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), some remain longer on your device and enable saving of page settings (so-called "persistent cookies"). In the latter case, you can see the storage duration from the overview in the cookie settings of your web browser.

If individual cookies implemented by us also process personal data, the processing is carried out either for the execution of the contract in accordance with Art. 6(1) lit. b GDPR, in the case of consent granted in accordance with Art. 6(1) lit. a GDPR, or to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit in accordance with Art. 6(1) lit. f GDPR.

You can set your browser to inform you about the setting of cookies and decide individually on their acceptance or to exclude the acceptance of cookies for certain cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be restricted.

5) Contact

When contacting us (e.g., via contact form or email), personal data is processed exclusively for the purpose of handling and responding to your request and only to the extent necessary for this purpose.

The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6(1) lit. f GDPR. If your contact aims at concluding a contract, an additional legal basis for the processing is Art. 6(1) lit. b GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter in question has been finally clarified and provided that there are no statutory retention obligations to the contrary.

6) Use of Customer Data for Direct Advertising

6.1 Subscription to our email newsletter

If you sign up for our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing further data is voluntary and will be used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you only receive newsletters if you have explicitly confirmed your consent to receive the newsletter by clicking on a verification link sent to the provided email address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1) lit. a GDPR. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration to be able to trace a possible misuse of your email address at a later time. The data collected by us when registering for the newsletter will be used exclusively for the purpose of addressing you in an appropriate manner.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by notifying the responsible party mentioned above. After unsubscribing, your email address will be promptly deleted from our newsletter distribution list, provided you have not explicitly consented to a further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this statement.

6.2 Product availability notification by email

For temporarily unavailable items, you can sign up to receive email product availability notifications. In this case, we will send you a one-time email notification about the availability of the item you have selected. The only mandatory information for sending this notification is your email address. Providing further data is voluntary and will be used to address you personally. For sending the email, we use the so-called double opt-in procedure, which ensures that you only receive a notification if you have explicitly confirmed your consent by clicking on a verification link sent to the provided email address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1) lit. a GDPR. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration to be able to trace a possible misuse of your email address at a later time. The data collected by us when registering for the email notification service will be used exclusively for this purpose.

You can unsubscribe from the product availability notifications at any time by notifying the responsible party mentioned above. After unsubscribing, your email address will be promptly deleted from our distribution list, provided you have not explicitly consented to a further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this statement.

6.3 Shopping cart reminders by email

If you abort your purchase on our website before completing the order, you have the option of being reminded of the content of your virtual shopping cart via a one-time email.

The only mandatory information for sending this reminder is your email address. Providing further data is voluntary and will be used to address you personally. For sending the email, we use the so-called double opt-in procedure, which ensures that you only receive a notification if you have explicitly confirmed your consent by clicking on a verification link sent to the provided email address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1) lit. a GDPR for sending a shopping cart reminder. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration to be able to trace a possible misuse of your email address at a later time. The data collected by us when registering for the email notification service will be used exclusively for this purpose.

You can unsubscribe from the shopping cart reminders at any time by notifying the responsible party mentioned above. After unsubscribing, your email address will be promptly deleted from our distribution list, provided you have not explicitly consented to a further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this statement.

7) Data Processing for Order Handling

7.1 To the extent necessary for the fulfillment of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6(1) lit. b GDPR.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact data you provided at the time of the order (name, address, email address) in order to inform you personally about upcoming updates within the legally prescribed period through suitable communication channels (e.g., postal mail or email). Your contact data will be used strictly for notifications about updates owed by us and processed to this extent only as necessary for the respective information.

For the processing of your order, we also work with the following service providers who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.

7.2 Transfer of Personal Data to Shipping Service Providers

- DPD

We use the following provider as a shipping service provider: DPD, Oficiul DPD Alexandria – București, Romania.

We will disclose your email address and/or phone number to the provider prior to the delivery of the goods for the purpose of coordinating a delivery date or delivery notification, provided you have given your explicit consent during the order process in accordance with Art. 6 para. 1 lit. a GDPR. Otherwise, for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR, we will only disclose the recipient's name and delivery address to the provider. The disclosure occurs only to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.

You can revoke your consent at any time with effect for the future either to the responsible party mentioned above or to the provider.

7.3 Use of Payment Service Providers

- Shopify Payments

This website offers one or more online payment methods from the following provider: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

When selecting a payment method from this provider that requires you to make an advance payment (such as credit card payment), the payment data you provide during the order process (including name, address, bank and card information, currency, and transaction number) as well as information about your order will be disclosed to the provider in accordance with Art. 6 para. 1 lit. b GDPR. This data disclosure is solely for the purpose of payment processing and only to the extent necessary for that purpose.

8) Web Analysis Services

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables the analysis of your use of our website.

By default, Google Analytics 4 sets cookies when you visit the website, which are small text blocks placed on your device that collect certain information. This includes your IP address, which, however, is truncated by Google to exclude direct personal identification.

The information is transmitted to Google's servers and processed there. This may involve transfers to Google LLC in the USA.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet use. The truncated IP address transmitted by your browser in the context of Google Analytics is not merged with other data from Google. The data collected through Google Analytics 4 is stored for two months and then deleted.

All the aforementioned processing, especially the setting of cookies on your device, will only take place if you have given your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. Without your consent, Google Analytics 4 will not be used during your visit to the site. You can revoke your consent at any time with effect for the future by disabling this service via the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with Google, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

Further legal information on Google Analytics 4 can be found at https://policies.google.com/privacy?hl=en and https://policies.google.com/technologies/partner-sites.

Demographic Features

Google Analytics 4 uses the "demographic features" function to compile statistics about the age, gender, and interests of site visitors. This is done by analyzing advertising and information from third-party providers. This helps identify target groups for marketing activities. The collected data cannot be assigned to any specific individual and is deleted after two months.

Google Signals

As an extension of Google Analytics 4, this website may use Google Signals to create cross-device reports. If you have personalized ads enabled and your devices are linked to your Google account, Google can analyze your usage behavior across devices and create database models, including cross-device conversions, with your consent to the use of Google Analytics in accordance with Art. 6 para. 1 lit. a GDPR. We receive only statistics from Google, not personal data. To stop cross-device analysis, you can disable the "Personalized Ads" function in your Google account settings. Follow the instructions here: https://support.google.com/ads/answer/2662922?hl=en. Further information on Google Signals can be found here: https://support.google.com/analytics/answer/7532985?hl=en.

UserIDs

As an extension of Google Analytics 4, the "UserIDs" function may be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 para. 1 lit. a GDPR, have set up an account on this website, and log in to this account across multiple devices, your activities, including conversions, can be analyzed across devices.

For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

9) Retargeting/Remarketing and Conversion Tracking

Google Ads Conversion Tracking

This website uses the online advertising program "Google Ads" and, within Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google Adwords). In relation to the data from the advertising campaigns, we can determine how successful the individual advertising measures are. We aim to show you advertisements that are of interest to you, make our website more interesting for you, and achieve a fair calculation of advertising costs.

The cookie for conversion tracking is set when a user clicks on a Google Ads advertisement. These cookies are small text files placed on your device. These cookies usually expire after 30 days and do not personally identify you. If you visit certain pages on this website and the cookie has not yet expired, Google and we can recognize that you clicked on the advertisement and were redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information obtained with the help of the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive information that personally identifies users. In the course of using Google Ads, personal data may also be transmitted to the servers of Google LLC in the USA.

Details on the processing triggered by Google Ads Conversion Tracking and on Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites.

All the aforementioned processing, especially the setting of cookies for retrieving information on your device, will only take place if you have given your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by disabling this service via the "Cookie Consent Tool" provided on the website.

You can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/plugin?hl=en.

Please note that certain functions of this website may not be available or only to a limited extent if you have deactivated the use of cookies.

Google's privacy policy can be viewed here: https://www.google.com/policies/privacy/.

10) Website Features

Instagram Plugins

Plugins of the social network of the following provider are used on our website: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

These plugins enable direct interactions with content on the social network.

To enhance the protection of your data when visiting our website, the plugins are initially disabled and integrated into the page using the so-called "2-click" or "Shariff" solution.

This integration ensures that no connection to the provider's servers is established when you access a page on our website that contains such plugins.

Only when you activate the plugins and thus give your consent to the data transfer in accordance with Art. 6 para. 1 lit. a GDPR, your browser will establish a direct connection to the provider's servers. Information about your device (including your IP address), browser, and browsing history may be transferred to and possibly processed by the provider, regardless of whether you have an existing account with the provider or are logged in to the account. If you are logged into your social network account, the provider can directly assign the visit to our website to your account. The interaction with plugins, e.g., clicking the "Like" button or leaving a comment, will be transferred to the provider and stored there.

You can revoke your consent at any time with effect for the future by deactivating the plugin using the "Cookie Consent Tool" provided on the website.

11) Rights of the Data Subject

11.1 The applicable data protection law grants you the following rights regarding the processing of your personal data by the controller (rights of access and intervention), with reference to the relevant legal basis for the respective conditions of exercise:

- Right to access according to Art. 15 GDPR;
- Right to rectification according to Art. 16 GDPR;
- Right to erasure according to Art. 17 GDPR;
- Right to restriction of processing according to Art. 18 GDPR;
- Right to notification according to Art. 19 GDPR;
- Right to data portability according to Art. 20 GDPR;
- Right to withdraw consent according to Art. 7(3) GDPR;
- Right to lodge a complaint according to Art. 77 GDPR.

11.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES. YOU CAN EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

12) Duration of Storage of Personal Data

The duration of the storage of personal data is determined based on the respective legal basis, the purpose of processing, and, where relevant, based on the applicable statutory retention periods (e.g., commercial and tax retention periods).

When processing personal data based on explicit consent according to Art. 6(1)(a) GDPR, the data concerned will be stored until you revoke your consent.

If there are statutory retention periods for data processed within the scope of legal or quasi-legal obligations based on Art. 6(1)(b) GDPR, such data will be routinely deleted after the retention periods expire, provided they are no longer required for the performance or initiation of a contract and/or there is no legitimate interest on our part for further storage.

When processing personal data based on Art. 6(1)(f) GDPR, such data will be stored until you exercise your right to object according to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims.

When processing personal data for the purposes of direct marketing based on Art. 6(1)(f) GDPR, such data will be stored until you exercise your right to object according to Art. 21(2) GDPR.

Unless otherwise stated in the specific information of this declaration about specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

Your cart is empty

Your cart

Estimated total