Data Controller
The data controller is the ZipStore online shop. Personal data is processed in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR) where applicable.
Categories of Personal Data Collected
When placing an order, we collect and process the following personal data:
| Data | Purpose of Collection |
|---|---|
| Full name | Identifying the customer and processing the order |
| Phone number | Contacting the customer regarding the order and delivery |
| Delivery address | Arranging and completing the delivery of goods |
Purposes of Processing
- Placing, processing, and fulfilling orders
- Communicating with the customer at all stages of the order
- Calculating delivery costs and issuing invoices
- Transferring data to delivery services for shipment
- Resolving possible disputes and complaints
- Complying with applicable legal requirements
Legal Basis for Processing
Personal data is processed on the following legal grounds:
- Consent of the data subject
- Necessity for the performance of a contract of sale
- Compliance with applicable legal obligations
By clicking "Place Order", you confirm your consent to the processing of personal data in accordance with this Policy.
Processing Methods and Retention Periods
Personal data is processed using both automated and non-automated means.
Data is retained for as long as necessary to fulfil the purposes of processing, but no longer than 3 years from the date of the last order, or until consent is withdrawn by the data subject.
Disclosure to Third Parties
Personal data may be disclosed to third parties only in the following cases:
- Delivery services — to fulfil the delivery of the order
- Competent authorities — where required by applicable law
In all other cases, personal data is not disclosed or sold to third parties.
Your Rights as a Data Subject
You have the following rights regarding your personal data:
- Right to access — obtain information about the processing of your data
- Right to rectification — request correction or deletion of inaccurate data
- Right to erasure — request deletion of your personal data
- Right to withdraw consent at any time
To exercise your rights, please submit a request via the contact form on the website. We will respond within 30 days of receipt.
Data Security Measures
The following measures are applied to protect personal data:
- Access to data is restricted to authorised personnel only
- Secure data transmission channels (HTTPS) are used
- Security measures are subject to regular review