Privacy & Personal Data Protection Policy

Last Updated: October 12, 2026

This Privacy Policy explains how personal information is collected, processed, used, disclosed, retained, and protected when customers visit https://zvlnwb.shop, purchase products, submit inquiries, or use services available through the website.

We recognize that the protection of personal information is an important part of maintaining a secure and transparent online shopping environment.

Our data handling practices are intended to comply with applicable privacy and data protection requirements, including the General Data Protection Regulation (GDPR) where applicable.

This policy also describes the rights individuals may exercise regarding their personal information and how to contact us with privacy-related concerns.

1. Business Identity and Data Controller

For personal data processing activities covered by this policy, the responsible data controller is identified as follows:

Legal Business Name: J B V/ Jimmy Bak

Company Registration Number (CVR): 11899242

Business Type: Sole Proprietorship

Registered Business Address: Hovedgaden 20, 8831 Løgstrup, Denmark

Website: https://zvlnwb.shop

Privacy Contact Email: AblassiAmnon792@gmail.com

The data controller determines the purposes and means of processing personal information in connection with the website's shopping services and related business operations.

This policy covers data processing associated with browsing, order placement, payment coordination, delivery, customer support, returns, refunds, and other related services.

Independent third-party organizations may act as separate data controllers for processing activities they determine themselves.

2. Personal Information We Process

The categories of information processed depend on the services requested and the way visitors interact with the website.

Information provided by customers

When placing an order, contacting customer support, or requesting after-sales assistance, customers may provide:

• Full name.

• Email address.

• Telephone number.

• Billing and delivery addresses.

• Order references and purchase details.

• Product selections and transaction amounts.

• Delivery instructions.

• Return, exchange, cancellation, and refund information.

• Customer support correspondence.

• Other information voluntarily submitted for a specific purpose.

Technical and device information

Certain technical information may be collected when visitors access the website, including:

• IP address.

• Browser and operating system information.

• Device category and technical identifiers.

• Website access dates and times.

• Pages accessed and navigation activity.

• Referring websites.

• Error reports and security logs.

• Cookie identifiers and related information, where legally permitted.

Payment-related information

Payment transactions may be processed by independent payment service providers.

These providers may collect payment details necessary to authorize and complete purchases.

We may receive transaction identifiers, confirmation of payment, payment status, and information necessary for refunds, order records, or accounting.

Full payment card information is generally processed through the relevant payment provider rather than being stored directly by the website.

3. Why Personal Information Is Used

We process personal information for specific purposes connected with the operation of the website and the provision of customer services.

Order fulfillment

Customer information is used to receive and manage orders, verify transaction details, arrange payments, prepare shipments, coordinate delivery, and issue relevant order notifications.

Customer assistance

Information is used to answer inquiries, identify purchases, investigate order problems, process returns, arrange refunds, and respond to after-sales requests.

Website security

Technical and operational data may be processed to identify suspicious activity, prevent unauthorized access, investigate security concerns, and maintain system reliability.

Website improvements

Where legally permitted, information about website functionality and visitor interactions may be evaluated to identify technical issues and improve website navigation, accessibility, and service quality.

Commercial communications

Where appropriate consent or another valid legal basis exists, personal information may be used to provide product updates, promotional communications, or relevant commercial information.

Legal compliance

Certain information must be processed or retained to comply with taxation, accounting, financial reporting, consumer protection, and other applicable legal requirements.

Personal information will not be used for unrelated purposes without an appropriate legal basis.

4. Legal Bases for Data Processing

Where the GDPR applies, personal information is processed only when an appropriate legal basis exists.

The legal grounds may include the following:

Processing Purpose	Applicable Legal Basis
Processing customer orders and arranging delivery	Performance of a contract
Providing contractual customer services	Performance of a contract
Maintaining mandatory accounting and tax records	Compliance with legal obligations
Protecting systems and preventing fraud	Legitimate interests, where applicable
Sending marketing communications requiring consent	Consent
Operating non-essential analytics or advertising cookies where consent is required	Consent
Handling certain legal disputes and operational risks	Legitimate interests or legal obligations, as applicable

Where legitimate interests are relied upon, we consider the necessity of the processing and whether the interests, rights, or freedoms of individuals override those interests.

Where processing is based on consent, individuals may withdraw that consent at any time.

Withdrawal does not affect the legality of processing performed before consent was withdrawn.

5. Cookies and Similar Technologies

Cookies are small files or identifiers that websites may use to support their functionality and remember certain information.

Depending on the website's configuration, cookies and comparable technologies may serve different purposes.

Essential cookies

These support core website functions, such as shopping cart operation, checkout, security, and session management.

Preference cookies

These may remember selected website preferences, such as language or display settings.

Analytics cookies

Where enabled, these help measure website performance, identify technical problems, and understand how visitors interact with website content.

Advertising cookies

Where enabled, these may support advertising attribution, conversion measurement, or personalized advertising.

Where applicable law requires consent for non-essential cookies or similar tracking technologies, those technologies will not be activated before valid consent has been obtained.

Visitors must be given an appropriate opportunity to manage their consent choices, including rejecting non-essential technologies where required by law.

Consent may be withdrawn through the available website preference controls.

Users may also manage certain cookies through their browser settings.

Disabling necessary cookies may affect shopping cart functionality, checkout operations, or other essential services.

6. Payments and Financial Information

When customers select an available payment method, necessary transaction information may be communicated to the relevant payment service provider.

Payment providers may independently process information for authorization, transaction completion, fraud detection, dispute handling, and compliance with applicable regulations.

Payment processing arrangements depend on the methods actually available during checkout.

We do not request complete payment card numbers, account passwords, or security codes through ordinary customer support email correspondence.

Customers should review the privacy notices of the relevant payment providers for further information about their independent processing activities.

Payment information must be handled using security measures appropriate to the relevant risks and legal requirements.

7. Disclosure to External Service Providers

Certain business functions require cooperation with external organizations.

Personal information may be disclosed to appropriate recipients where necessary for providing the requested services.

These recipients may include:

• Payment processing organizations.

• Shipping companies and logistics providers.

• Website hosting and infrastructure providers.

• Technical maintenance providers.

• Information security service providers.

• Customer service and communication systems.

• Analytics providers, where used.

• Advertising service providers, where applicable.

• Accounting, legal, and other professional service providers.

Information will be shared only for appropriate purposes and subject to applicable data protection requirements.

Where service providers process personal information on our behalf, appropriate data processing arrangements will be implemented as required by law.

We do not sell customer contact information as an independent commercial product.

Personal information may also be disclosed where necessary to comply with lawful requests from competent authorities or other binding legal obligations.

8. Website Analytics and Google Services

Depending on the tools actually enabled, the website may use analytics, advertising measurement, or other third-party technical services.

Where Google Analytics, Google Ads, or related services are used, certain technical identifiers and information about website interactions may be processed.

Potential purposes include:

• Measuring website traffic.

• Understanding website performance.

• Analyzing visitor interactions.

• Evaluating advertising effectiveness.

• Recording eligible conversions.

• Supporting relevant technical and security functions.

The actual categories of information collected depend on the configuration of the services and the visitor's applicable consent choices.

Where European privacy or electronic communications law requires consent, non-essential tracking will only take place after the required consent has been obtained.

Information about how Google may process data through participating websites is available at:

https://policies.google.com/technologies/partner-sites

Google's general Privacy Policy is available at:

https://policies.google.com/privacy

Any analytics or advertising technology used must operate consistently with applicable privacy requirements and the website's actual consent settings.

9. International Processing and Data Transfers

Some third-party service providers may operate systems or facilities in multiple countries.

Consequently, personal information may be processed, stored, or accessed outside the country where an individual resides.

When personal information subject to the GDPR is transferred outside the European Economic Area, appropriate legal safeguards will be applied where required.

Depending on the destination and circumstances, these safeguards may include:

• An applicable European Commission adequacy decision.

• Standard Contractual Clauses approved by the European Commission.

• Supplementary technical or organizational protections where necessary.

• Other legally recognized transfer mechanisms.

Individuals may request additional information about applicable transfer arrangements using the privacy contact details below.

10. How Long Personal Information Is Retained

We aim to retain personal information only for the time necessary to fulfill legitimate processing purposes or comply with applicable legal requirements.

Retention periods depend on the type of information and why it is processed.

Order information

Order and transaction records may be retained for the time necessary to fulfill purchases, manage after-sales obligations, and comply with accounting or tax requirements.

Customer support records

Communications may be retained while inquiries are being handled and for any additional period reasonably necessary to resolve disputes or satisfy legal obligations.

Website technical records

Technical and security information may be retained for appropriate periods necessary to maintain system security and investigate relevant incidents.

Marketing information

Where marketing processing relies on consent, the applicable processing will be reviewed when consent is withdrawn, subject to lawful retention of limited records where necessary.

When personal data is no longer needed and no lawful retention obligation applies, it will be deleted, anonymized, or otherwise appropriately handled.

Specific retention periods or the criteria used to determine them may be provided when required by applicable law.

11. Information Security and Confidentiality

We recognize the importance of protecting personal information against unauthorized access, accidental loss, improper disclosure, alteration, and unlawful use.

Appropriate technical and organizational measures should be applied according to the nature of the data and the risks associated with its processing.

Such measures may include:

• Secure data transmission.

• Access restrictions.

• Authentication and account security controls.

• Regular technical maintenance.

• Monitoring for suspicious activity.

• Appropriate backup procedures.

• Security updates.

• Controls governing relevant service provider access.

• Procedures for responding to security concerns.

Although reasonable safeguards are used, no method of electronic storage or internet transmission can guarantee complete protection against every possible security incident.

If you become aware of a potential security concern involving your personal information, please notify us through the contact details provided in this policy.

12. Privacy Rights Under Applicable Law

Individuals whose personal data is protected by the GDPR may have the following rights, subject to applicable legal conditions.

Right to information and access

You may request information about how your personal data is processed and obtain access to relevant records.

Right to rectification

You may request correction of inaccurate personal information or completion of incomplete data.

Right to erasure

You may request deletion of personal information where the legal requirements for erasure are satisfied.

Right to restriction of processing

You may request that certain processing activities be restricted in circumstances recognized by law.

Right to data portability

Where applicable, you may receive personal data in a structured, commonly used, machine-readable format or request its transfer to another controller.

Right to object

You may object to processing based on legitimate interests in relevant circumstances.

You also have the right to object to processing of personal data for direct marketing purposes.

Right to withdraw consent

Where processing relies on consent, you may withdraw that consent at any time.

Rights related to automated decision-making

Where applicable, you may have rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.

To submit a request, please contact:

AblassiAmnon792@gmail.com

We may request information reasonably necessary to verify the identity of the person submitting a request.

Requests covered by the GDPR will generally be answered within one month.

Where permitted by law, this period may be extended by up to two additional months when necessary due to complexity or the number of requests. Any such extension will be communicated within the initial response period.

13. Complaints and Data Protection Authorities

Individuals may raise concerns about the handling of personal information by contacting us directly.

Where the GDPR applies, individuals also have the right to lodge a complaint with a competent supervisory authority.

For matters falling under Danish data protection supervision, the relevant authority is:

Danish Data Protection Agency (Datatilsynet)

Website: https://www.datatilsynet.dk

Individuals may also have the right to complain to a data protection authority in the European Economic Area country where they live, work, or where the alleged infringement occurred.

Contacting customer support first is not a mandatory condition for exercising the right to lodge a complaint.

14. Protection of Minors' Information

The website is intended for individuals who are legally permitted to make purchases and use the relevant services.

We do not intentionally collect children's personal information where such collection would be unlawful.

Where parental or guardian authorization is legally required, the applicable requirements must be satisfied.

If a parent or guardian believes that a minor's personal information has been collected or processed improperly, they may contact:

AblassiAmnon792@gmail.com

We will examine the concern and take appropriate steps in accordance with applicable law.

15. External Links and Independent Websites

The website may contain links to external platforms or services that operate independently.

Such services may maintain their own privacy policies, security practices, and contractual conditions.

When customers navigate to an external website, its independent privacy terms may apply.

We encourage visitors to review the relevant privacy information before sharing personal data with independent third-party services.

The presence of a link does not automatically mean that we control the external provider's processing activities.

16. Handling Personal Data Breaches

If a security incident involving personal information occurs, appropriate measures will be taken to assess, contain, investigate, and address the situation.

Where the GDPR requires notification to a supervisory authority, the relevant report will be submitted without undue delay and, where feasible, within 72 hours after becoming aware of the reportable breach.

Where a breach is likely to create a high risk to individuals' rights and freedoms, affected individuals will be notified without undue delay unless an applicable legal exception exists.

The response will depend on the type of information affected, the nature of the incident, and the relevant legal requirements.

17. Changes to the Privacy Policy

This policy may be updated to reflect changes in legal obligations, operational arrangements, third-party services, or the way personal information is processed.

Revised information will be published on this website together with the relevant update date.

Where significant changes require prior notification or renewed consent, appropriate steps will be taken as required by law.

Updates will not remove any mandatory privacy rights granted under applicable legislation.

We encourage visitors to review the current policy periodically.

18. Contact Information and Privacy Requests

For questions about this Privacy Policy, personal information processing, cookies, privacy rights, or data protection concerns, please contact:

Legal Business Name: J B V/ Jimmy Bak

Company Registration Number (CVR): 11899242

Business Type: Sole Proprietorship

Registered Business Address: Hovedgaden 20, 8831 Løgstrup, Denmark

Website: https://zvlnwb.shop

Customer Support and Privacy Email: AblassiAmnon792@gmail.com

General Customer Service Days: Monday–Friday, excluding public holidays.

Estimated General Customer Service Response Time: 1–3 business days.

Privacy rights requests will be handled within the applicable statutory deadlines, regardless of general customer service response estimates.

This policy is intended to support transparent personal data handling while preserving the legal rights and protections available under applicable data protection legislation.