Privacy Policy

Important Notice

This privacy policy applies exclusively to users accessing and placing orders via the official website zeomis.com. We do not process or take responsibility for personal information generated from third-party websites, reseller platforms or other unrelated domains. All data protection obligations only cover data collected through Zeomis.com.

We are delighted that you have taken an interest in our brand. Data protection is a top priority for the management team of Zeomis. You may browse our website without submitting any personal data. However, if you wish to use our exclusive shopping services, the processing of your personal data may become necessary. Where data processing is required and no legal statutory basis applies, we will obtain your explicit consent beforehand.

All processing of personal data including names, postal addresses, email addresses and phone numbers complies with the General Data Protection Regulation (GDPR) and applicable local data protection laws in EU member states. This privacy statement explains the type, scope and purpose of all personal data we collect, store and process. It also outlines all legal rights you hold as a data subject under GDPR.

As the data controller, Zeomis has implemented comprehensive technical and organizational security measures to fully protect personal data transmitted through our website. Nevertheless, internet data transmission carries inherent security risks, and absolute 100% protection cannot be guaranteed. You may choose to provide personal data to us via alternative offline channels such as telephone if you prefer.

1. Definitions

This privacy policy uses official terminology defined by the European GDPR legislature to ensure readability for all visitors, customers and business partners. Below are clear explanations of key terms used throughout this document:

a) Personal data

Any information relating to an identified or identifiable natural person (“data subject”). An identifiable person can be directly or indirectly identified via identifiers including names, ID numbers, location data, online tracking IDs, or unique physical, physiological, genetic, mental, economic, cultural or social personal characteristics.

b) Data subject

An identified or identifiable natural person whose personal data is processed by the data controller.

c) Processing

Any automated or manual operation performed on personal data or data sets, including collection, recording, organization, structuring, storage, modification, retrieval, consultation, usage, disclosure via transmission, distribution, restriction, erasure or destruction of data.

d) Restriction of processing

Marking stored personal data to limit its future processing activities.

e) Profiling

Automated processing of personal data to evaluate personal attributes of a natural person, including analysis or prediction of work performance, financial status, health, preferences, interests, reliability, behavior, location and movement records.

f) Pseudonymisation

Processing personal data such that the data can no longer be linked to a specific data subject without separate supplementary records. These supplementary records are stored independently with strict technical safeguards to prevent user identification.

g) Controller (data controller responsible for processing)

A natural/legal person, public authority, agency or body that independently or jointly determines the purposes and methods of personal data processing. Where processing rules are set by EU or national law, relevant legal standards will define the controller’s responsibilities.

h) Processor

A natural/legal person, public authority or agency that processes personal data on behalf of the data controller.

i) Recipient

Any natural/legal person, public authority or body that receives disclosed personal data (including third parties). Public authorities receiving data under formal legal investigation mandates are not classified as recipients; their data processing follows independent official data protection rules.

j) Third party

Any natural/legal person, public authority or entity other than the data subject, data controller, data processor, and staff authorized to process data under the controller’s direct management.

k) Consent

Voluntary, specific, informed and unambiguous confirmation of the data subject’s wishes, given via a clear statement or affirmative action to authorize processing of their personal data.

2. Data Controller Information

For GDPR, EU data protection laws and all related data compliance regulations, the data controller is:

Email: service@zeomis.com

Official Website: https://zeomis.com

3. Cookies

Zeomis.com uses cookies. Cookies are small text files stored on your device via your web browser.

Nearly all websites and servers deploy cookies, each carrying a unique cookie ID: a string of characters that identifies your specific browser to our server. This unique ID allows our site to distinguish your browser session from other visitors.

Cookies enable user-friendly website functions that would not work without cookie storage. We use cookies to optimize website content and personalized offers for visitors. Cookie recognition simplifies repeat visits: you do not need to re-enter login details on every return visit, and our online shopping cart remembers all items you add during browsing.

You may disable cookie storage at any time via your browser’s privacy settings to permanently block all new cookies. You can also manually delete existing cookies through standard browser tools available on all mainstream browsers.

If you disable cookies, some core functions of our website may become unavailable or limited.

4. Collection of General Anonymous Server Data

When you visit Zeomis.com, our server automatically collects and stores general anonymous technical data in server log files, including:

Browser type and version
Operating system of your device
Referral website (the page you visited before landing on our site)
Specific subpages you browse on our store
Exact date and time of website access
Your device’s IP address
Your internet service provider
Other technical data used to defend against cyberattacks

We will not use this anonymous data to identify individual visitors. This information serves four core legitimate purposes:

Correctly deliver full website content to visitors
Optimize website layout, product display and advertising content
Maintain stable operation of our server and website infrastructure
Provide necessary technical evidence to law enforcement authorities for cybercrime investigation

We conduct statistical analysis on fully anonymized log data to strengthen our data protection and website security. All anonymous server logs are stored separately from identifiable personal customer data.

5. Website Account Registration

You may register a customer account on our website by submitting your personal information. The exact data collected depends on the input fields within our registration form. All submitted personal data is stored solely for our internal business and order management use. We may share necessary data with authorized third-party processors (e.g. logistics delivery providers) solely to fulfill your orders.

6. Newsletter Subscription

Visitors may opt in to subscribe to our brand newsletter on our website. The registration form defines which personal data is collected for newsletter delivery.

We send regular newsletters to customers and partners to share new product launches, exclusive offers and brand updates. You may only receive our newsletter if:

You provide a valid email address;
You complete formal newsletter registration via our double opt-in system.

For legal compliance, a confirmation email will be sent to your submitted address upon registration to verify you are the legitimate owner of the email account and consent to newsletter delivery.

During newsletter sign-up, we also record your device’s IP address, registration date and registration time. This data is retained to resolve potential email abuse disputes and provide legal protection for our brand.

All data collected for newsletter delivery will only be used to send our brand newsletters. You may receive occasional operational emails related to newsletter function updates or service adjustments. We will never share newsletter subscriber personal data with external third parties.

You have full rights to cancel your newsletter subscription at any time:

An unsubscribe link is included in every newsletter email;
You may adjust subscription preferences directly on our website;
You may send a cancellation request via our support email service@zeomis.com.

Revoking your newsletter consent does not affect the legality of data processing completed prior to your cancellation.

6.1 Newsletter Tracking

Our HTML-format newsletters contain invisible tracking pixels for marketing performance analysis. These tiny embedded graphics record whether you open our emails and which internal links you click.

We collect and analyze this tracking data to optimize newsletter content and tailor future promotions to match visitor interests. No tracking data will be shared with third parties. You may revoke your separate consent for newsletter tracking at any time; all related tracking records will be permanently deleted after revocation. Unsubscribing from newsletters automatically counts as a full revocation of tracking consent.

7. Contact Form & Email Communication

Our website provides multiple electronic contact channels including a contact form and official support email service@zeomis.com. When you contact us via email or the form, all personal data you voluntarily submit is automatically stored for the sole purpose of replying to your inquiry. This contact data will never be forwarded to third parties.

8. Blog Comment Function

Zeomis hosts a public blog where users may post public comments under individual articles. When you leave a comment:

Your comment content, chosen display pseudonym and posting date will be published publicly on the blog;
Your device’s IP address will be logged and stored for security protection.

IP address storage acts as a legal safeguard: if you post illegal, infringing or harmful content that violates third-party rights, we can trace the source and defend our brand against legal liability. Comment-related personal data will not be shared with external third parties unless required by mandatory law or legal defense needs.

9. Routine Deletion & Restriction of Personal Data Storage

We only retain your personal data for the exact period required to fulfill the original collection purpose, or within legally mandated retention periods set by EU and national data protection laws.

Once the storage purpose expires or the statutory retention period ends, your personal data will be routinely blocked or fully erased in compliance with legal requirements.

10. Data Subject Rights Under GDPR

As a data subject, you hold the following enforceable legal rights. You may exercise all rights at any time by contacting our support team via service@zeomis.com.

a) Right of Confirmation

You may request formal confirmation whether we process any personal data related to you.

b) Right of Access

You have the right to receive a free copy of all stored personal data we hold about you, alongside full supporting details including:

Purposes of data processing
Categories of personal data stored
Recipients or recipient categories receiving your data (including overseas third-party organizations)
Planned data storage duration (or criteria used to calculate storage periods)
Your rights to request correction, erasure, processing restriction or data objection
Your right to submit formal complaints to local data supervisory authorities
Source of your personal data (if collected indirectly without direct submission from you)
Details of automated decision-making and profiling (where applicable), including clear explanation of algorithm logic and potential impacts on you
Information regarding cross-border data transfers to non-EU countries and relevant protective safeguards

c) Right to Rectification

You may demand immediate correction of any inaccurate personal data we store. You also have the right to supplement incomplete personal information via additional supporting statements.

d) Right to Erasure (Right to be Forgotten)

You may request full permanent deletion of your personal data without unreasonable delay if any of the following conditions apply (and processing is no longer legally required):

Your data is no longer needed for the original collection purpose;
You withdraw consent that forms the legal basis of processing, and no other valid legal grounds exist to continue processing;
You object to processing under GDPR Article 21, and no overriding legitimate business interests justify continued processing;
Your personal data has been processed unlawfully;
Deletion is required to comply with mandatory EU or national legal obligations binding to us;
Data was collected in connection with offering digital services to minors under GDPR Article 8(1).

If we have shared your data publicly and receive a valid deletion request, we will take all reasonable technical steps to notify other data controllers to remove all copies and links to your personal data.

e) Right of Restriction of Processing

You may request temporary suspension of your personal data processing when:

You dispute the accuracy of stored data (processing restricted during our verification period);
Processing is unlawful, and you refuse full deletion and request usage limits instead;
We no longer require your data for business processing, but you need the data to submit, pursue or defend legal claims;
You object to processing under GDPR Article 21 while we verify whether our legitimate business interests override your personal rights.

f) Right to Data Portability

You may obtain all personal data you submitted to us in a standard, machine-readable structured format. You have the right to transfer this data to another independent data controller without obstruction, provided processing relies on your consent or a signed contract and is completed via automated digital tools. Where technically feasible, you may also request direct cross-transfer of your data between two controllers.

g) Right to Object

You may object to processing based on our legitimate business interests (GDPR Article 6(1) e/f) at any time, citing your unique personal circumstances. This rule also applies to profiling activities built on these legal grounds.

We will stop processing your data after receiving a valid objection unless we prove compelling legitimate business interests that override your personal rights, or processing is required for legal claim defense.

If we process your data for direct marketing (including marketing profiling), you hold an unconditional right to object at any time. After your objection, we will permanently cease all marketing-related data processing.

You may also object to data processing for scientific, historical research or statistical purposes under GDPR Article 89(1), unless processing serves critical public interest tasks. You may submit automated objection requests via technical browser privacy tools compliant with EU digital privacy regulations.

h) Right to Refuse Automated Individual Decision-Making (Including Profiling)

You are protected from legally binding decisions generated solely by fully automated data processing or profiling that create significant legal or practical impacts on you, unless:

The automated decision is necessary to execute a signed contract between you and our brand;
EU/national law authorizes the automated decision with sufficient protective measures for your rights;
You provide explicit separate consent for automated decision-making.

For automated decisions based on contract performance or your explicit consent, we will implement protective safeguards including the right to request human manual review, voice your personal opinion and formally contest the automated outcome.

i) Right to Withdraw Consent

You may revoke any consent granted for personal data processing at any time. Revoking consent does not invalidate processing lawfully completed before your withdrawal.

11. Third-Party Social Platform Integrations

11.1 Facebook

Our website embeds Facebook social plugins. Facebook is a Meta-owned social networking platform.

Every time you visit a page with Facebook plugins, your browser automatically loads plugin assets from Facebook’s servers, which records the specific subpage you visited.

If you are logged into your Facebook account while browsing our site, Facebook links your website browsing activity directly to your personal Facebook profile. Clicking Facebook “Like” buttons or submitting public comments shares this browsing data with your Facebook account for storage.

Facebook will record your visit to our website continuously during your browsing session, regardless of whether you interact with Facebook plugins. To prevent this data transmission, log fully out of your Facebook account before visiting Zeomis.com.

Full Facebook privacy rules: https://facebook.com/about/privacy/

11.2 Google Analytics (IP Anonymization Enabled)

We integrate Google Analytics with full IP anonymization for website traffic analysis. Google Analytics tracks visitor behavior including referral sources, page browsing records, visit frequency and duration to optimize website layout and advertising ROI.

We use the _gat._anonymizeIp function to truncate and anonymize your full IP address before data is sent to Google for all EU/EEA visitors.

Google Analytics stores tracking cookies on your device to record browsing activity. All collected data (including anonymized IP addresses) is transmitted to and stored by Google servers in the United States. Google may share this analytics data with authorized third-party partners.

You may block Google Analytics cookies via browser privacy settings or install Google’s official opt-out browser add-on: https://tools.google.com/dlpage/gaoptout

Full Google privacy policy: https://www.google.com/intl/en/policies/privacy/

Google Analytics official terms: http://www.google.com/analytics/terms/us.html

11.3 Google Remarketing

We deploy Google Remarketing for targeted interest-based advertising across Google’s advertising network. This service stores dedicated tracking cookies to recognize repeat visitors and display personalized product ads on third-party websites.

Collected browsing data and anonymized IP addresses are sent to Google US servers for storage and advertising matching. You may disable interest-based ads via Google’s ad settings page: www.google.de/settings/ads

11.4 Google AdWords

Google AdWords conversion cookies track sales performance generated from Google search ads. Conversion cookies expire after 30 days and cannot identify individual visitors. This cookie records whether you complete checkout after clicking our Google ad, generating aggregated anonymous sales statistics for ad performance optimization. Google will not share any identifiable personal data with our brand. You may block or delete AdWords cookies via browser settings.

11.5 Instagram

Our website contains Instagram share plugins operated by Meta. When you visit pages with Instagram widgets, your browser loads Instagram assets, which records your browsing activity. If logged into your Instagram account, your site visits are linked to your Instagram profile. Log out of Instagram before browsing to prevent data sharing.

Instagram privacy information: https://help.instagram.com/155833707900388 / https://www.instagram.com/about/legal/privacy/

11.6 Pinterest

Pinterest social pin plugins are embedded on our store pages. Visiting pages with Pinterest widgets triggers data transmission to Pinterest’s servers, recording your page visits. If logged into your Pinterest account, browsing activity is linked to your personal profile. Log out of Pinterest before visiting our website to stop this data collection.

Pinterest full privacy policy: https://about.pinterest.com/privacy-policy

12. Payment Processor: PayPal Data Protection

We integrate PayPal as an official checkout payment provider. PayPal supports online payments via PayPal balances, bank transfers and credit cards. When you select PayPal during checkout, your relevant personal order data is automatically shared with PayPal for payment processing. Transmitted data includes full name, delivery address, email, IP address, contact phone numbers and all order details required to complete payment and anti-fraud checks.

PayPal may share your data with credit reference agencies for identity and credit verification, and subcontract service providers to complete payment processing. You may revoke your consent for PayPal’s data processing at any time; revocation does not affect mandatory data processing required to complete existing orders.

Full PayPal privacy policy: https://www.paypal.com/us/webapps/mpp/ua/privacy-full

13. Legal Bases for Data Processing (GDPR Article 6)

Article 6(1)(a): Processing based on your explicit specific consent (e.g. newsletter subscription, marketing tracking).
Article 6(1)(b): Processing required to fulfill your purchase contract or complete pre-order inquiry steps.
Article 6(1)(c): Processing required to satisfy legal statutory obligations (e.g. tax record retention).
Article 6(1)(d): Rare cases where processing protects the vital physical safety interests of you or another natural person.
Article 6(1)(f): Processing based on our legitimate commercial business interests, where your fundamental privacy rights do not override our business needs. This legal basis applies to standard website operation, traffic analysis and targeted marketing, which the EU legislature deems reasonable for commercial customer relationships.

Our core legitimate business interest supporting processing under Article 6(1)(f) is the sustainable operation of our e-commerce brand to deliver goods and services to global customers.

14. Data Storage Duration

All personal data storage periods follow EU and national statutory legal retention deadlines. Once the mandatory retention period expires, all related data will be fully deleted unless still required to fulfill ongoing or future contractual agreements.

15. Mandatory Data Provision Information

Some personal data submission is required by law (e.g. tax records) or contractual agreement (e.g. shipping address to deliver your order). In many cases, we cannot complete your purchase contract without you providing essential personal data. If you refuse to submit required data, we cannot process your order. You may contact our support team to clarify whether data submission is mandatory and the consequences of non-provision.

16. Automated Decision-Making & Profiling Statement

As a responsible brand, Zeomis does not deploy fully automated standalone decision-making systems or user profiling that generates legally binding outcomes for customers.