Privacy policy

PRIVACY POLICY

1) INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER

1.1

We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when using our website. Personal data refers to all data by which you can be personally identified.

1.2

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is ZARA MOON. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

1.3

For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” string and the lock symbol in your browser’s address bar.

2) DATA COLLECTION WHEN VISITING OUR WEBSITE

When you use our website for informational purposes only (i.e., you do not register or otherwise provide us with information), we collect only the data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following technically necessary data in order to display the website to you:

  • Website visited

  • Date and time of access

  • Amount of data sent in bytes

  • Source/reference from which you reached the page

  • Browser used

  • Operating system used

  • IP address used (possibly in anonymized form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or otherwise used. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

3) COOKIES

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files stored on your device.

Some cookies are deleted after the browser session ends (session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). Persistent cookies are automatically deleted after a predefined period, which may vary depending on the cookie.

Cookies may collect and process certain user information such as browser data, location data, and IP address values.

Some cookies serve to simplify the ordering process by saving settings (e.g., remembering the contents of a shopping cart for a later visit).

If personal data is processed by individual cookies, processing is carried out in accordance with:

  • Art. 6(1)(b) GDPR (contract performance), or

  • Art. 6(1)(f) GDPR (legitimate interest in optimal website functionality and a customer-friendly design).

We may work with advertising partners who help make our online offer more interesting. In this case, cookies from partner companies (third-party cookies) may also be stored on your hard drive when you visit our website.

You can configure your browser to inform you about the setting of cookies and decide individually whether to accept them or exclude them for specific cases or in general. Please note that if cookies are not accepted, the functionality of our website may be limited.

4) CONTACTING US

When contacting us (e.g., via contact form or email), personal data is collected. The data collected via a contact form can be seen in the respective form.

This data is used exclusively for responding to your inquiry and related technical administration.

The legal basis for processing is our legitimate interest in responding to your request in accordance with Art. 6(1)(f) GDPR. If your contact aims at concluding a contract, the additional legal basis is Art. 6(1)(b) GDPR.

Your data will be deleted after your request has been fully processed, provided there are no statutory retention obligations.

5) DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT PROCESSING

Pursuant to Art. 6(1)(b) GDPR, personal data will continue to be collected and processed if you provide it to us for contract execution or when opening a customer account.

The data collected can be seen from the respective input forms.

You can delete your customer account at any time by contacting the controller.

We store and use the data you provide for contract processing. After complete processing of the contract or deletion of your account, your data will be blocked in accordance with tax and commercial retention periods and deleted after these periods expire, unless you have expressly consented to further use or legally permitted further use has been reserved.

6) USE OF YOUR DATA FOR DIRECT MARKETING

6.1 Subscription to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required is your email address.

We use the double opt-in procedure. This means you will only receive the newsletter after you have expressly confirmed your consent by clicking a confirmation link sent to you by email.

By activating the confirmation link, you give consent pursuant to Art. 6(1)(a) GDPR.

You can unsubscribe at any time via the link in the newsletter or by contacting the controller. After unsubscribing, your email address will be deleted from our distribution list unless further consent exists.

6.2 Newsletter to Existing Customers

If you provide your email address when purchasing goods or services, we reserve the right to send you offers for similar products from our range by email.

This processing is based on our legitimate interest in personalized direct advertising pursuant to Art. 6(1)(f) GDPR.

You may object at any time to the use of your email address for advertising purposes.

7) DATA PROCESSING FOR ORDER HANDLING

7.1

Personal data collected by us will be passed on to the transport company responsible for delivery if necessary for delivery. Payment data will be passed to the responsible credit institution if necessary for payment processing.

Legal basis: Art. 6(1)(b) GDPR.

7.2 Payment Service Providers

PayPal
If you pay via PayPal, your payment data will be transmitted to PayPal (Europe) S.a.r.l. et Cie, S.C.A., Luxembourg.
PayPal may conduct a credit check for certain payment methods.
Legal basis: Art. 6(1)(b) and Art. 6(1)(f) GDPR.
More information: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

SOFORT
If you select SOFORT, payment processing is handled by SOFORT GmbH (part of Klarna Group).
More information: https://www.klarna.com/sofort/datenschutz

8) CONTACT FOR REVIEW REMINDER

We may use your email address once to remind you to submit a review if you have expressly consented pursuant to Art. 6(1)(a) GDPR.

You may withdraw your consent at any time.

9) USE OF SOCIAL MEDIA: SOCIAL PLUGINS

This website uses social plugins from:

  • Facebook

  • Google+

  • Instagram

These are integrated using the Shariff solution, meaning no automatic connection to social network servers is made until you click the respective button.

The providers are certified under the EU–US Privacy Shield framework.

Further details can be found in the respective privacy policies of the providers.

10) ONLINE MARKETING

10.1 DoubleClick by Google

Used to display relevant ads and measure campaign performance.
Legal basis: Art. 6(1)(f) GDPR.

10.2 Google AdWords Conversion Tracking

Used to measure advertising success.
Legal basis: Art. 6(1)(f) GDPR.

You can disable tracking via browser settings or Google plugins.

11) WEB ANALYTICS SERVICES

Google (Universal) Analytics

This website uses Google Analytics with IP anonymization ("_anonymizeIp()").

Data processing is based on our legitimate interest in statistical analysis and marketing optimization pursuant to Art. 6(1)(f) GDPR.

You can prevent tracking by installing the browser plugin:
https://tools.google.com/dlpage/gaoptout

12) RETARGETING / REMARKETING

  • Facebook Pixel (with consent pursuant to Art. 6(1)(a) GDPR)

  • Google AdWords Remarketing

Used for interest-based advertising and campaign optimization.

13) RIGHTS OF THE DATA SUBJECT

Under GDPR, you have the following rights:

  • Right of access (Art. 15 GDPR)

  • Right to rectification (Art. 16 GDPR)

  • Right to erasure (Art. 17 GDPR)

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to notification (Art. 19 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to withdraw consent (Art. 7(3) GDPR)

  • Right to lodge a complaint (Art. 77 GDPR)

Right to Object

If we process your personal data based on legitimate interests, you have the right to object at any time for reasons arising from your particular situation.

If you object to direct marketing, we will cease processing your data for that purpose.

14) DURATION OF STORAGE OF PERSONAL DATA

The storage period for personal data depends on the respective statutory retention period (e.g., tax or commercial law requirements).

After expiration of the retention period, the data will be routinely deleted unless it is still required for contract fulfillment or initiation, or unless we have a legitimate interest in further storage.