Datenschutz

Privacy Policy

House of Zuuma – Effective as of May 2026

1. Data Controller

The entity responsible for data processing on this website is:

2. General Information on Data Processing

We take the protection of your personal data very seriously and treat your personal data confidentially in accordance with applicable data protection laws and this Privacy Policy.

The legal basis for the processing of personal data is Article 6 of the GDPR, in particular:
Article 6(1)(a) of the GDPR – Consent of the data subject
Art. 6(1)(b) GDPR – Processing for the performance of a contract
Art. 6(1)(c) GDPR – Compliance with a legal obligation
Art. 6(1)(f) GDPR – Protection of legitimate interests

3. Data Collection on Our Website

3.1 Server Log Files

When you visit our website, information is automatically stored in so-called server log files. This includes: IP address, date and time of access, page accessed, browser type and version, operating system, and referrer URL. This data is not combined with other data sources and is deleted after 7 days at the latest. Legal basis: Art. 6(1)(f) GDPR.

3.2 Contact via Email
When you contact us via email, your information, including the contact details you provide, will be stored for the purpose of processing your inquiry. We will not share this data without your consent. Legal basis: Art. 6(1)(b) and (f) GDPR.

3.3 Cookies
Our website uses cookies. These are small text files that your browser automatically creates and that are stored on your device. We use only technically necessary cookies that are required for the operation of the shop. These cookies do not require consent. You can set your browser to refuse cookies, but this may limit the functionality of the shop.

4. Shopify

Our online store is operated via the Shopify platform. The provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

Shopify processes personal data (e.g., name, address, payment details) on our behalf to fulfill orders. We have a data processing agreement with Shopify in accordance with Art. 28 GDPR. For more information, please see Shopify’s privacy policy at: https://www.shopify.com/legal/privacy

Shopify may process data in countries outside the EU. Shopify is certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection. Legal basis: Art. 6(1)(b) GDPR.

5. Payment Providers

5.1 PayPal
We offer PayPal for payment processing. The provider is PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

When you pay with PayPal, your payment data is transmitted to PayPal. PayPal may obtain credit reports. For more information, please see PayPal’s Privacy Policy at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Legal basis: Art. 6(1)(b) GDPR.

5.2 Stripe
We use Stripe for credit card payments. The provider is Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

Your payment data is transmitted directly to Stripe and processed securely there. We do not store any credit card data on our servers. Stripe is PCI-DSS certified. Further information: https://stripe.com/de/privacy

Legal basis: Art. 6(1)(b) GDPR.

6. Order Data and Contract Processing

To process orders, we process the following data: name, shipping address, email address, phone number (optional), payment details, and order history.

This data is used exclusively for the performance of the contract and is deleted after the statutory retention periods have expired (generally 10 years in accordance with the German Commercial Code (HGB) and the German Fiscal Code (AO)).

Legal basis: Art. 6(1)(b) and (c) GDPR.

7. Disclosure of Data

Your data will only be disclosed to third parties to the extent necessary for the performance of the contract (e.g., to shipping providers for the delivery of your order). No further disclosure to third parties will take place unless we are legally required to do so.

The following categories of recipients may receive your data:

Shipping service providers (e.g., DHL, DPD) – for the delivery of your order

Shopify – as the operator of our shop platform (data processor)

PayPal / Stripe – for payment processing

8. International Data Transfer

In connection with the use of Shopify, PayPal, and Stripe, your data may be transferred to countries outside the European Union (in particular the United States). These providers are certified under the EU-US Data Privacy Framework or have implemented other appropriate safeguards in accordance with Article 46 of the GDPR.

9. Retention Period

We store personal data only for as long as necessary for the respective purpose or as required by legal retention obligations. Order-related data is stored in accordance with the retention periods under commercial and tax law (6–10 years). Contact inquiries are deleted once they have been fully processed.

10. Your Rights as a Data Subject

Under the GDPR, you have the following rights with respect to us:
Right of access (Art. 15 GDPR): You have the right to know what data we have stored about you.

Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate data.

Right to erasure (Art. 17 GDPR): You have the right to have your data erased, provided that no legal retention obligations prevent this.

Restriction of processing (Art. 18 GDPR): You may request the restriction of the processing of your data.

Data portability (Art. 20 GDPR): You have the right to receive your data in a commonly used format.

Right to object (Art. 21 GDPR): You may object to the processing of your data based on legitimate interests.

Right to lodge a complaint: You have the right to lodge a complaint with the competent data protection authority. The competent authority is the Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstr. 219, 10969 Berlin.

To exercise your rights, please contact: info@houseofzuuma.com

11. Data Security

Our website uses SSL encryption (indicated by “https://” in the browser address bar) to protect your data during transmission. Shopify and our payment providers also adhere to high security standards.

12. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy to ensure it always complies with current legal requirements. You can find the most recent version on our website. We will notify you of any significant changes.

As of: May 2026 – House of Zuuma, Berlin