Privacy Policy

Last updated:

1. Introduction

Zibralongrizelon ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website zibralongrizelon.world and purchase our products.

This policy complies with the General Data Protection Regulation (GDPR), the Dutch GDPR Implementation Act (Uitvoeringswet AVG / UAVG), and other applicable data protection laws in the Netherlands.

2. Data Controller Information

The data controller responsible for your personal data is:

  • Company Name: Zibralongrizelon
  • Address: Buurtboslaan 10, 6731 CZ Otterlo, Netherlands
  • Email: customer@zibralongrizelon.world
  • Country: Netherlands

3. Information We Collect

3.1 Personal Data You Provide

We collect personal data that you voluntarily provide when you:

  • Place an order through our website
  • Contact us via email or contact forms
  • Subscribe to our newsletter
  • Create an account on our website

This information may include:

  • Full name
  • Email address
  • Phone number (optional)
  • Shipping and billing address
  • Payment information (processed securely by third-party payment providers)
  • Order history and preferences

3.2 Automatically Collected Data

When you visit our website, we may automatically collect certain information, including:

  • IP address
  • Browser type and version
  • Operating system
  • Pages visited and time spent
  • Referring website
  • Device information

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contract Performance: Processing necessary to fulfill your orders and provide our services
  • Consent: When you have given explicit consent for specific processing activities
  • Legitimate Interests: For improving our services, fraud prevention, and marketing (where applicable)
  • Legal Obligation: To comply with applicable laws and regulations

5. How We Use Your Information

We use your personal data for the following purposes:

  • Processing and fulfilling your orders
  • Communicating with you about your orders and inquiries
  • Sending order confirmations and shipping updates
  • Providing customer support
  • Improving our website and services
  • Sending marketing communications (with your consent)
  • Preventing fraud and ensuring security
  • Complying with legal obligations

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

  • Order Data: Retained for 7 years for legal and accounting purposes
  • Marketing Data: Retained until you withdraw consent or unsubscribe
  • Website Analytics: Retained for up to 26 months
  • Customer Support Data: Retained for 3 years after last interaction

7. Data Sharing and Third Parties

We may share your personal data with:

  • Payment Processors: To securely process your payments
  • Shipping Partners: To deliver your orders
  • Analytics Providers: To understand website usage (with your consent)
  • Legal Authorities: When required by law

We do not sell your personal data to third parties.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • SSL/TLS encryption for data transmission
  • Secure server infrastructure
  • Regular security assessments
  • Access controls and authentication
  • Employee training on data protection

9. Your Rights Under GDPR

As a data subject, you have the following rights:

  • Right of Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your personal data
  • Right to Restriction: Request limitation of processing
  • Right to Data Portability: Receive your data in a structured format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, please contact us using the details in Section 14. We will respond to your request without undue delay and at the latest within one month of receipt, as required by Article 12 of the GDPR. If we need to extend this period due to the complexity of your request, we will inform you within one month and may extend by a further two months where necessary.

10. Automated Decision-Making and Profiling

We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you. All decisions regarding your orders and customer service are made by humans.

11. International Data Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

12. Children's Privacy

Our website is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

15. Supervisory Authority

If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, AP). You must first contact us directly; if we do not respond or resolve your concern within a reasonable time, you may submit a complaint to the AP. For more information and to submit a complaint, visit autoriteitpersoonsgegevens.nl. You may also lodge a complaint with the supervisory authority in your country of residence if you are located in another EU/EEA member state.