Privacy Policy

Last updated: October 10, 2026

At ZOLA, we respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, and share personal information when you visit https://thezolashop.com, place an order, or contact us.

1. Data Controller

The controller responsible for processing personal data is:

Jerome Martinett
Aquinostraße 2
50670 Cologne
Germany

Email: info@zolashop.de

2. Personal Information We Collect

Depending on how you use our store, we may process the following information:

• Name and contact details

• Billing and delivery addresses

• Email address

• Order details and purchase history

• Payment and transaction information

• Customer service inquiries

• IP address, browser information, and device data

• Cookie preferences and website usage information

We only process personal information where there is an appropriate legal basis.

3. How We Use Personal Information

We process personal information for the following purposes:

• Processing and fulfilling orders

• Arranging shipping and delivery

• Processing payments and refunds

• Providing customer support

• Sending order confirmations and delivery updates

• Maintaining the security and functionality of our website

• Complying with legal and accounting obligations

• Conducting analytics or marketing activities where legally permitted

4. Legal Bases for Processing

Where the General Data Protection Regulation (GDPR) applies, we rely on the following legal bases as appropriate:

Article 6(1)(b) GDPR: Processing necessary to perform a contract or take steps before entering into a contract.

Article 6(1)(c) GDPR: Processing necessary to comply with legal obligations.

Article 6(1)(f) GDPR: Processing based on legitimate interests, where those interests are not overridden by your rights and freedoms.

Article 6(1)(a) GDPR: Processing based on your consent, including where consent is required for cookies, analytics, or marketing.

You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

5. Shopify

Our online store is operated using Shopify, an e-commerce platform that provides website hosting, checkout, order management, and related services.

Shopify processes personal information as necessary to provide these services.

For more information about Shopify's privacy practices, please refer to Shopify's applicable privacy information.

6. Payments

Payments are processed through the payment methods available at checkout.

Relevant payment information may be transmitted to the selected payment provider for payment processing, fraud prevention, and compliance with legal requirements.

Payment providers may process personal information in accordance with their own privacy notices.

7. Shipping and Fulfillment

To fulfill your order, we may share the information necessary for delivery with suppliers, fulfillment partners, and shipping companies.

This may include your name, shipping address, and relevant order details.

Information is shared only to the extent necessary for the respective service or where otherwise legally permitted.

8. Cookies and Similar Technologies

Our website uses cookies and similar technologies that may be necessary for essential functions, such as maintaining a shopping cart, processing checkout, and protecting the website.

Additional cookies or technologies may be used for analytics, advertising, or personalization where these services are enabled.

Where required by law, non-essential cookies and similar technologies are used only after obtaining valid consent.

You can manage your preferences through the cookie settings provided on our website, where available.

9. Marketing Communications

If you subscribe to marketing communications, we may use your email address to send updates, offers, or promotional messages where legally permitted.

You can unsubscribe from marketing emails using the unsubscribe link in the message or by contacting us.

10. International Data Transfers

Some service providers may process personal information outside the European Economic Area.

Where required by the GDPR, such transfers are carried out using an appropriate legal mechanism, such as an adequacy decision or applicable safeguards.

11. Data Retention

We retain personal information only for as long as necessary for the purposes described in this policy or to comply with applicable legal obligations.

Order and transaction records may be retained for legally required accounting and tax periods.

Other information is deleted or anonymized when it is no longer needed, unless continued retention is legally justified.

12. Your Privacy Rights

Depending on applicable law, you may have the right to:

• Request access to your personal information

• Request correction of inaccurate information

• Request deletion of personal information

• Request restriction of processing

• Object to certain processing

• Request data portability

• Withdraw consent

• Lodge a complaint with a competent data protection authority

To exercise your rights, please contact info@zolashop.de.

13. Data Security

We take appropriate technical and organizational measures to protect personal information against unauthorized access, loss, alteration, or disclosure.

No method of electronic transmission or storage can guarantee absolute security.

14. Children's Privacy

Our online store is not intentionally directed at children.

We do not knowingly process children's personal information in violation of applicable law.

15. Changes to This Privacy Policy

We may update this Privacy Policy when our services, legal obligations, or data processing activities change.

The latest version will be published on this website.

16. Contact

For questions regarding privacy or personal data, contact:

Jerome Martinett
Aquinostraße 2
50670 Cologne
Germany

Email: info@zolashop.de