Privacy Policy
Last updated: 6 March 2025
1. Controller and contact details
The controller responsible for the processing of your personal data in connection with this website is:
Zlozarinoujrozis
Vesterbrogade 6C
1620 København
Denmark
Email: message@zlozarinoujrozis.world
Phone: +45 33 14 82 66
If you have questions about this Privacy Policy or about how we process your data, you may contact us using the details above.
2. Scope and legal basis
This Privacy Policy applies to the website zlozarinoujrozis.world and to any personal data we collect when you visit the site, place an order, contact us, or interact with our services. We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the Danish Data Protection Act (Databeskyttelsesloven), and other applicable data protection laws.
We process personal data only where we have a legal basis: your consent (Article 6(1)(a) GDPR), performance of a contract (Article 6(1)(b) GDPR), compliance with a legal obligation (Article 6(1)(c) GDPR), or our legitimate interests (Article 6(1)(f) GDPR) where they are not overridden by your rights.
3. Personal data we collect
We may collect the following categories of personal data:
- Identity and contact data: name, email address, telephone number (if you provide it), and postal address when you place an order or contact us.
- Transaction and order data: details of orders, enquiries, and communications with you.
- Technical and usage data: IP address, browser type and version, device type, time zone, pages visited, and how you use the website. This may include data collected via cookies and similar technologies, as described in our Cookie Policy.
We do not collect special categories of data (e.g. health, race, religion) unless you voluntarily provide such information and we have a lawful basis to process it.
4. Purposes of processing
We use your personal data for the following purposes:
- To process and fulfil your orders and enquiries.
- To communicate with you about your order, delivery, and customer support.
- To send you service-related messages (e.g. order confirmation, shipping updates) where necessary for the performance of the contract.
- To improve our website, products, and services (e.g. analytics, where you have consented or where we rely on legitimate interests).
- To comply with legal obligations (e.g. tax, accounting, responding to lawful requests from authorities).
- To establish, exercise, or defend legal claims.
- To manage cookie preferences and respect your choices regarding cookies.
5. Retention periods
We keep your personal data only for as long as necessary for the purposes for which it was collected or as required by law.
- Order and customer data: We retain data related to orders and customer communications for up to six years after the end of the calendar year in which the transaction occurred, to comply with Danish bookkeeping and tax law and to handle any complaints or claims.
- Contact form and enquiry data: We retain data from contact and order forms for the time needed to handle your request and, where relevant, for the same period as order data if the enquiry leads to a business relationship.
- Cookie and technical data: Retention depends on the type of cookie or technology used; see our Cookie Policy for details.
- Marketing (if applicable): If you have consented to marketing, we retain your contact data until you withdraw consent or object, and then for a short period to record your preference.
After the retention period, we delete or anonymise your data so that it can no longer identify you.
6. Security measures
We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:
- Use of HTTPS and encryption in transit for data transmitted via our website.
- Restricting access to personal data to persons who need it for the purposes described in this policy.
- Regular review of our security practices and, where applicable, use of secure hosting and storage.
- Training and internal policies to ensure that staff and any processors handle data in line with this policy and the law.
While we strive to protect your data, no method of transmission or storage over the internet is completely secure. We encourage you to use strong passwords and to contact us immediately if you suspect any unauthorised use of your data.
7. Sharing and recipients
We may share your personal data with:
- Service providers (processors): For example, hosting providers, payment processors, shipping and logistics partners, and email or support tools. We choose processors that provide sufficient guarantees under GDPR Article 28 and we have contracts in place that require them to process data only on our instructions and to implement appropriate security.
- Public authorities: Where we are legally obliged to do so (e.g. tax, customs, or law enforcement).
- Professional advisers: Where necessary (e.g. lawyers, auditors) under confidentiality obligations.
We do not sell your personal data. If we transfer data to countries outside the EU/EEA, we ensure appropriate safeguards (e.g. standard contractual clauses or adequacy decisions) as required by the GDPR.
8. Your rights under the GDPR
Under the GDPR and Danish data protection law, you have the following rights in relation to your personal data:
- Right of access (Article 15): You may request a copy of the personal data we hold about you and information about how we process it.
- Right to rectification (Article 16): You may request correction of inaccurate or incomplete personal data.
- Right to erasure (Article 17): You may request deletion of your personal data in certain circumstances (e.g. where it is no longer necessary, where you withdraw consent, or where you object and we have no overriding legitimate interest).
- Right to restriction of processing (Article 18): You may request that we limit how we use your data in certain situations (e.g. while we verify accuracy or while a dispute is ongoing).
- Right to data portability (Article 20): Where processing is based on consent or contract and is carried out by automated means, you may request to receive your data in a structured, commonly used, machine-readable format, or to have it transmitted to another controller where technically feasible.
- Right to object (Article 21): You may object to processing based on legitimate interests. We will stop processing unless we demonstrate compelling legitimate grounds that override your interests, or for the establishment, exercise, or defence of legal claims. You may also object at any time to processing for direct marketing.
- Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
To exercise any of these rights, please contact us using the details in section 1. We will respond without undue delay and in any event within one month, unless extended in complex cases. We may need to verify your identity before fulfilling your request.
You also have the right to lodge a complaint with a supervisory authority. In Denmark, the competent authority is the Datatilsynet (Danish Data Protection Agency), Carl Jacobsens Vej 35, 2500 Valby, Denmark; www.datatilsynet.dk. You may also lodge a complaint in the EU member state of your residence, place of work, or place of the alleged infringement.
9. Children
Our website and services are not directed at children under 16. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us and we will take steps to delete such data.
10. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the law, or our website. We will post the updated version on this page and indicate the date of the last update. We encourage you to review this policy periodically. Where changes are material, we may notify you by email or by a notice on the website where appropriate.
11. Additional information
For information about cookies and similar technologies used on this website, please see our Cookie Policy. For the terms governing the use of our website and the purchase of products, please see our Terms of Service and Return Policy.