Privacy policy

ZerZiv GmbH operates this shop and website, including all related information, content, functions, tools, products, and services, to provide you as a customer with an individual shopping experience (the “Services”). Our website is based on Shopify, which enables us to provide these Services to you.

This Privacy Policy describes how we collect, use, or share personal data when you visit, use, or make a purchase on the website. This statement applies in addition to our Terms and Conditions.

1. Controller

ZerZiv GmbH
Hirschgartenallee 45
80639 Munich
Germany
Phone: +49 8918923227
Email: info@zerziiv.com
Managing Director: Seref Yardimci

2. Collection and Processing of Personal Data

We process personal data when you visit our website, create an account, or place an order. This includes in particular:

  • Contact details (name, address, email, phone number)
  • Payment and order details (selected products, payment method, billing and shipping address, bank or credit card data)
  • Device and usage data (IP address, browser information, access times, cookies)
  • Communication data (contents of inquiries via our contact form or by email)

3. Legal Bases for Processing

We process your data on the basis of Art. 6 GDPR:

  • Art. 6 (1) b GDPR (contract performance): for orders, payments, delivery, customer service
  • Art. 6 (1) c GDPR (legal obligation): to comply with tax and commercial law obligations
  • Art. 6 (1) f GDPR (legitimate interest): for security, fraud prevention, and to improve our offering
  • Art. 6 (1) a GDPR (consent): for marketing cookies, tracking, and analytics tools, provided you have consented via our cookie banner

4. Cookies and Consent

Our website uses cookies. Technically necessary cookies are set automatically as they are required for the operation of the shop (e.g., shopping cart, login, language settings). For all other cookies (e.g., marketing, analytics), we ask for your consent via a cookie banner displayed on your first visit. You may withdraw your consent at any time via the cookie banner.

5. Use of Meta Services (Facebook and Instagram)

We use the “Meta Pixel” provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta”), on our website. This allows us to track the behavior of visitors who were redirected to our website after clicking on a Facebook or Instagram ad. This helps us evaluate the effectiveness of advertisements and optimize future campaigns.

Data collection and processing only occur if you have consented via our cookie banner (Art. 6 (1) a GDPR). Consent can be withdrawn at any time via the cookie banner.

The data collected via the Meta Pixel is anonymous to us and does not allow us to identify users. However, Meta may link this data to user profiles and use it for its own advertising purposes. We have no control over this processing.

In addition, we use the integrated shopping features of Instagram and Facebook. When you interact with our shop there (e.g., view, save, or purchase products), the processing of personal data is carried out directly by Meta. Please refer to Meta’s privacy policy: https://www.facebook.com/privacy/policy/

Meta may also transfer data to the USA. For this transfer, Meta relies on the EU Commission’s Standard Contractual Clauses.

6. Use of Google Ads (Google Tag / Conversion Tracking)

We use services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), in particular Google Ads and the associated conversion tracking. When you are redirected to our website via a Google ad, Google sets a cookie on your device. This cookie enables us and Google to determine that someone clicked on an ad and was redirected to our website. This serves statistical evaluation and optimization of advertising campaigns.

Data collection and processing only occur if you have consented via our cookie banner (Art. 6 (1) a GDPR). Consent can be withdrawn at any time via the cookie banner.

The information collected through conversion tracking is used to generate conversion statistics. We learn the total number of users who clicked on an ad and were redirected to our website. However, we do not receive any information that personally identifies users. Google may link the data with your Google account and use it for its own purposes. For more details, see Google’s Privacy Policy: https://policies.google.com/privacy?hl=en.

Google may also transfer data to the USA. For this transfer, Google relies on the EU Commission’s Standard Contractual Clauses.

7. Use of Pinterest Ads (Pinterest Tag)

We use the “Pinterest Tag” provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”), on our website. The Pinterest Tag enables us to track the actions of website visitors who were redirected to us via a Pinterest ad. This helps us measure the effectiveness of Pinterest campaigns and optimize future ads.

Data collection and processing only occur if you have consented via our cookie banner (Art. 6 (1) a GDPR). Consent can be withdrawn at any time via the cookie banner.

The data collected in this way is anonymous to us and does not allow us to identify users. However, Pinterest may link this data to user accounts and use it for its own purposes. We have no control over this processing. For more details, see Pinterest’s Privacy Policy: https://policy.pinterest.com/en/privacy-policy.

Pinterest may also transfer data to the USA. For this transfer, Pinterest relies on the EU Commission’s Standard Contractual Clauses.

8. Use of TikTok Pixel and TikTok Ads

We use the TikTok Pixel provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok”). The TikTok Pixel enables us to understand and analyze how visitors interact with our website after engaging with our TikTok advertisements. This allows us to measure the effectiveness of our TikTok campaigns and optimize our future advertising activities.

The processing of data is based solely on your consent pursuant to Article 6 (1)(a) GDPR, which you may grant or withdraw at any time through our cookie banner. No data will be transmitted to TikTok until you have actively provided such consent.

TikTok may link the data collected via the TikTok Pixel with your TikTok user account and may also use this information for its own advertising and analytical purposes. We have no control over these subsequent data processing activities conducted by TikTok.

For certain processing operations, we and TikTok act as joint controllers within the meaning of Article 26 GDPR. The corresponding agreement on joint controllership can be reviewed at the following link:
https://ads.tiktok.com/i18n/official/policy/jurisdiction-specific-terms

TikTok may transfer personal data to other entities within the TikTok Group, including TikTok Information Technologies UK Limited and ByteDance Ltd. (China). Such transfers may involve processing in third countries outside the European Union, in particular the United States and China. These transfers are carried out on the basis of the European Commission’s Standard Contractual Clauses pursuant to Article 46 (2)(c) GDPR, which ensure an adequate level of data protection.

Further information on data processing by TikTok can be found in TikTok’s Privacy Policy:
https://www.tiktok.com/legal/page/eea/privacy-policy/en

9. Disclosure of Data

We only disclose personal data if this is permitted by law or if you have given your consent. Recipients may include:

10. Data Transfers to Third Countries

Shopify and some of our service providers are located outside the EU (e.g., Canada, USA). We ensure that an adequate level of data protection is guaranteed, for example by using the EU Commission’s Standard Contractual Clauses. For further details, see the Shopify Privacy Policy.

11. Storage Period

  • Order data: 10 years (statutory retention under commercial and tax law)
  • Communication data: 3 years (regular limitation period under German Civil Code)
  • Cookies/tracking data: according to consent or until withdrawal

12. Your Rights

Under the GDPR, you have the following rights:

  • Right of access to the stored data (Art. 15 GDPR)
  • Right to rectification of inaccurate data (Art. 16 GDPR)
  • Right to erasure (“right to be forgotten”, Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7 (3) GDPR)

To exercise your rights, please contact: info@zerziiv.com.

13. Security

We use technical and organizational security measures to protect your data against loss, misuse, or unauthorized access. However, we cannot guarantee absolute security.

14. Complaints to the Supervisory Authority

If you believe that we are not processing your data in compliance with data protection regulations, you may lodge a complaint with a data protection supervisory authority at any time. A list of authorities in Germany can be found here: List of German supervisory authorities.

15. Changes to this Privacy Policy

We may amend this Privacy Policy from time to time to reflect legal requirements or changes in our processes. The current version will always be available on this website.