Personal data policy
1.1 This policy regarding the processing of personal data ("Personal Data Policy") describes how Zizzi Denmark ApS, Kløvermarken 29, 7190 Billund (hereinafter "Zizzi") collects and processes information about you.
1.2 The personal data policy applies to personal data that you provide to us or that we collect via Zizzi's website, www.zizzifashion.com ("www.zizzifashion.com").
1.3 Zizzi is the data controller for your personal information. All inquiries to Zizzi can be made via the contact information listed under pt. 7.
2. What personal data we collect, for what purposes and the legal basis for the processing
2.1 When you visit www.zizzifashion.com, we automatically collect information about you and your use of www.zizzifashion.com, such as the type of browser you use, the search terms you use on www.zizzifashion.com, your IP address, including your network location, and information about your computer.
2.1.1 The purpose is to optimize the user experience and www.zizzifashion.com's function, as well as carry out targeted marketing, including retargeting via Facebook and Google. This processing of information is necessary in order for us to safeguard our interests in improving www.zizzifashion.com as well as show you relevant offers.
2.1.2The legal basis for the processing is Article 6(1)(f) of the General Data Protection Regulation.
2.2 When you buy a product or communicate with us at www.zizzifashion.com, we collect the information you provide, such as name, address, e-mail address, telephone number, payment method, information about which products you purchase and may have returned, delivery requests, as well as information about the IP address from which the order was made.
2.2.1 The purpose is for us to be able to deliver the products you have ordered and otherwise fulfill our agreement with you, including to be able to manage your rights to return and submit a complaint. We can also process information about your purchases in order to comply with legal requirements, including for bookkeeping and accounting. When making a purchase, the IP address is collected for the purpose of and to maintain our interest in being able to prevent fraud.
2.2.2The legal basis for the processing is Article 6(1) (b, c and f) of the General Data Protection Regulation.
2.3 When you sign up for our newsletter, we collect information about your name, e-mail address and, if applicable, mobile number.
2.3.1 The purpose is to maintain our interest in being able to deliver newsletters to you.
2.3.2The legal basis for the processing is Article 6(1)(f) of the General Data Protection Regulation.
2.4 When you join our customer club, you will be asked to provide, for example, your name, address, date of birth, e-mail address, telephone number, your preferences and interests, etc. In addition to name, address and e-mail address, you choose what information you wish to give us. In addition, we collect information during your membership about your use of the customer club's benefits, competitions you participate in, etc. We compare this information with other information we have about you, including information about what you have purchased and possibly returned.
2.4.1 The purpose is to be able to manage your membership and provide you with the services and offer you the benefits associated with the membership of the customer club, as well as to maintain our interest in being able to send newsletters and carry out targeted marketing.
2.4.2 The legal basis for the processing is Article 6(1) (b and f) of the EU Personal Data Regulation. Upon registration, you will be asked to provide separate consent to electronic marketing.
3. Recipients of personal information
3.1 Information about your name, address, e-mail, telephone number and order number and specific delivery requests are passed on to PostNord, GLS, Bring or the carrier responsible for delivering the purchased goods to you.
3.2Data may be passed on to external partners who process the data on our behalf. We use external partners for, among other things, technical operation and improvements of www.zizzifashion.com, distribution of newsletters and targeted marketing, including retargeting, as well as for your assessment of our company and products.
These companies are data processors are under our instruction and process data for which we are the data controller. The data processors may not use the information for any purpose other than fulfilling the agreement with us, and are subject to confidentiality with regard to this. We have entered into written data processor agreements with all data processors who process personal data on our behalf.
3.3 Two of these data processors, Google Analytics v/Google LLC. and Facebook Inc. are established in the United States. The necessary guarantees for the transfer of information to the United States are secured through the certification of the data processor under the EU-U.S. Privacy Shield, cf. EU Personal Data Regulation Art. 45.
3.3.1 A copy of Google LLC's certification can be found here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI
3.3.2 A copy of Facebook Inc.'s certification can be found here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
4. Your rights
4.1 In order to create transparency regarding the processing of your data, we, as the data controller, must inform you of your rights.
4.2 The right of access
4.2.1 You are at all times entitled to request information from us about, among other things, what data we have registered about you, what purpose the registration serves, what categories of personal data and recipients of data may exist, as well as information on where the data comes from.
4.2.2 You have the right to receive a copy of the personal data that we process about you. If you would like a copy of your personal data, please send a written request to email@example.com. You may be asked to prove that you are who you claim to be.
4.3 The right to rectification
4.3.1 You have the right to have incorrect personal data about yourself corrected by us. If you become aware that there are errors in the information that we have registered about you, you are encouraged to contact us in writing so that the information can be corrected.
4.3.2 You have the opportunity to correct information that we have collected in connection with your registration to our customer club via log-in to your user profile.
4.4 The right to erasure
4.4.1 In certain cases, you have the right to have all or some of your personal data deleted by us, for example if you revoke your consent and we do not have another legal basis to continue the processing. To the extent that continued processing of your information is necessary, e.g. in order for us to comply with our legal obligations, or for legal claims to be established, asserted or defended, we are not obliged to delete your personal information.
4.5 The right to limit processing to storage
4.5.1 In certain cases, you have the right to limit the processing of your personal data to storage only, e.g. if you believe that the information we process about you is incorrect.
4.6 The right to data portability
4.6.1 You have the right to have personal data that you have provided to us delivered to you in a structured, commonly used and machine-readable format and have the right to transfer this information to another data controller.
4.7 The right to object
4.7.1 You have the right at any time to object to our processing of your personal data with regard to direct marketing, including the profiling carried out in order to target our direct marketing, as this processing is carried out on the basis of our legitimate interests, cf. Sections 2.1 and 2.3. If you do not want us to use your personal information for direct marketing and profiling, you must delete your cookies.
4.7.2 You also have the right at any time, for reasons relating to your personal situation, to object to the processing of your personal data, which we carry out on the basis of our legitimate interests, cf. pt. 2.1 and 2.3.
4.8 The right to withdraw consent
4.8.1 You have the right, at any time, to revoke consent you have given us for a given processing of personal data, including for the transmission of electronic communications.
4.9 The right to complain
4.9.1 You have the right at any time to submit a complaint to the Danish Data Protection Agency, Borgergade 28, 5, 1300 Copenhagen K regarding our processing of your personal data. Complaints can, among other things, be submitted by email firstname.lastname@example.org or telephone +45 33 19 32 00.
5. Deletion of personal data
5.1 Information collected about your use of www.zizzifashion.com cf. pt. 2.1. are deleted at the latest when you have not used www.zizzifashion.com for 1 year.
5.2When you unsubscribe from Club Zizzi, we store your information for 6 months. We do this to avoid misuse of welcome discounts, during that time it is not possible for you to receive a new Welcome discount voucher, however it is always possible to sign up again.
5.3 Information collected in connection with purchases you have made at www.zizzifashion.com cf. pt. 2.2 will in principle be deleted 2 years after the end of the calendar year in which you made your purchase. However, information can be stored for a longer period of time if we have a legitimate need for longer storage, e.g. if it is necessary for legal claims to be established, asserted or defended, or if storage is necessary for us to meet legal requirements. Accounting material is stored for 5 years until the end of a financial year to meet the requirements of the Accounting Act.
5.4 Information that we have collected in connection with your registration to and during your membership of our customer club, cf. pt. 2.4, will automatically be deleted: a) if you have not had updates or interaction for 1 year, b) If you unsubscribe from our membership to our customer club.
6.1 We have implemented appropriate technical and organizational security measures against the accidental or unlawful destruction, loss, alteration or deterioration of personal data and against the disclosure to or misuse by unauthorized persons.
6.2 Only employees who have a genuine need to access your personal data in order to perform their work have access to it.
7. Contact Information
7.1 Zizzi Denmark ApS, is the data controller for the personal data collected via www.zizzifashion.com.
7.2 If you have any questions or comments about this Personal Data Policy or would like to make use of one or more of your rights described in section 4, you can contact:
Zizzi Denmark ApS,
8. Changes in personal data policy
8.1 If we make significant changes to the Personal Data Policy, you will be informed of this on your next visit to www.zizzifashion.com.
8.2 If you have joined our customer club, you will be informed of the changes in the policy by sending information to your registered e-mail address.
9.1 This is version 1 of Zizzi Denmark ApS 'personal data policy dated 22-06-2021.