Privacy Policy

I. Preliminary remark

We, Zalin Products GmbH + Co. KG, represented by Zalin Products Verwaltungs GmbH, which is represented by the managing director Sabo Coban, Ludwig-Erhard-Straße 2, 33397 Rietberg, take data protection seriously and want to ensure that your privacy is protected when using our website under the domain zalin-products.de.
We have therefore created this privacy policy in which we explain how we handle your data.
We reserve the right to adjust the content from time to time. It is therefore advisable to review our data processing statement regularly.
Structure of the privacy policy:
Under II. you will find general information about the scope of processing your personal data, the legal basis for data processing, storage duration and deletion, and especially about your rights as a data subject.
Under III. we provide information about the responsible person.
Under IV. we explain which personal data is collected when visiting our website.
If you want to use our website for more than purely informational purposes, you usually have to provide additional personal data that we use to provide the respective service. We address the special usage forms of the website (the online shop, etc.) and the associated data processing under V.

II. General information on data processing

  1. Definitions
    “Personal data” means any data relating to an identified or identifiable natural person. This includes, for example, name, email address, residential address, gender, date of birth, telephone number, or age. A legal definition can be found in Art. 4 No. 1 of the General Data Protection Regulation (hereinafter GDPR).

“Processing” of personal data includes, among other things, collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. A legal definition can be found in Art. 4 No. 2 GDPR.

  1. Scope of processing personal data
    We process your personal data only with your consent or if a legal provision allows it.
    We partially use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored.
  2. Legal basis for the processing of personal data
    To the extent that we obtain consent from the data subject for processing personal data, Art. 6 para. 1 sentence 1 lit. a GDPR serves as the legal basis for processing personal data.
    When processing personal data necessary to fulfill a contract to which the data subject is a party, Art. 6 para. 1 sentence 1 lit. b GDPR serves as the legal basis. This also applies to processing operations necessary to carry out pre-contractual measures.
    To the extent that processing of personal data is necessary to fulfill a legal obligation to which we are subject, Art. 6 para. 1 sentence 1 lit. c GDPR serves as the legal basis.
    In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 sentence 1 lit. d GDPR serves as the legal basis.
    If processing is necessary to protect a legitimate interest of ours or a third party and the interests, fundamental rights, and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 sentence 1 lit. f GDPR serves as the legal basis for processing.
  3. Data deletion and storage duration
    The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this is provided for by the European or national legislator in Union regulations, laws, or other provisions to which the controller is subject. Blocking or deletion of the data also occurs if a storage period prescribed by the aforementioned standards expires, unless there is a necessity to continue storing the data for contract conclusion or contract fulfillment.
  4. Rights of the data subject
    a. Overview
    If personal data about you is processed, you are the data subject within the meaning of the GDPR.
    You have the following rights towards the controller (if the data is processed by us, then towards us) regarding your personal data:
    -Right to information (Art. 15 GDPR),
    -Right to rectification or deletion (Art. 16, Art. 17 GDPR),
    -Right to restriction of processing (Art. 18 GDPR),
    -Right to object to processing (Art. 21 GDPR, details see under II. 5. b. of this privacy policy),
    -Right to withdraw consent to data processing (Art. 7 para. 3 GDPR, details see under II. 5. b. of this privacy policy),
    -Right to data portability (Art. 20 GDPR).
    You also have the right to complain to a data protection supervisory authority about the processing of your personal data by the controller (if the data is processed by us, i.e., by us) (Art. 77 GDPR).

b. Objection or revocation against the processing of your data
If you have given consent to the processing of your data, you can revoke it at any time. Such a revocation affects the lawfulness of the processing of your personal data after you have communicated it to us.
If we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if the processing is not necessary for the performance of a contract with you, which we will explain in each case in the following description of the functions. When exercising such an objection, we ask you to state the reasons why we should not process your personal data as we do. In the event of your justified objection, we will examine the matter and either stop or adjust the data processing or inform you of our compelling legitimate reasons for continuing the processing.
Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time.
You can inform us of your (advertising) objection using the contact details provided below:

III. Name and address of the controller
The controller within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection regulations is:

Zalin Products GmbH + Co. KG
represented by the managing and personally liable partner Zalin Products Verwaltungs GmbH

represented by the managing director Sabo Coban

Ludwig-Erhard-Straße 2
33397 Rietberg

Tel.: +49 5244 9037703
Fax: +49 5244 9037704
Email: info@zalin-products.com

IV. Collection of personal data when visiting our website

  1. Informational website use
    a. Description and scope of data processing
    When using our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we collect only the personal data that your browser transmits to our server. These are:
    -IP address
    -Date and time of the request
    -Time zone difference to Greenwich Mean Time (GMT)
    -Content of the request (specific page)
    -Access status/HTTP status code
    -Amount of data transferred each time
    -Website from which the request originates
    -Browser
    -Operating system and its interface
    -Language and version of the browser software.

The data is also stored in the log files of our system. Storage of this data together with other personal data of the user does not take place.

b. Legal basis for data processing
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 sentence 1 lit. f GDPR.

c. Purpose of data processing
The collection of personal data described above when visiting our website is technically necessary to display our website to you and to ensure stability and security.
These purposes also constitute our legitimate interest in data processing according to Art. 6 para. 1 sentence 1 lit. f GDPR.

d. Duration of storage
The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of data collection for providing the website, this is when the respective session ends.
In the case of data storage in log files, this occurs after a maximum of seven days. Further storage is possible. In this case, the users' IP addresses are deleted or anonymized so that assignment to the calling client is no longer possible.

e. Options to object and remove
Since the collection of personal data described above when visiting our website is technically necessary to display our website to you and to ensure stability and security, you have no option to object in this respect.

  1. Use of cookies
    a. Description and scope of data processing
    In addition to the data mentioned above, cookies are stored on your computer when you use our website.
    Cookies are small text files that are assigned to and stored on your hard drive by the browser you use, through which certain information flows to the entity setting the cookies (here by us).
    Cookies cannot run programs or transmit viruses to your computer.

There are different types of cookies, namely:
-Transient cookies (temporary use)
-Persistent cookies (limited-time use)
-Third-party cookies (from third-party providers)
-Flash cookies (permanent use).

This website uses the aforementioned cookies to the following extent:
-Transient cookies are automatically deleted when you close the browser. These include in particular session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the same session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
-Persistent cookies are automatically deleted after a specified duration, which can vary depending on the cookie.

We use cookies on the one hand to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. In the related cookies, for example, language settings or log-in information are stored.
On the other hand, we also use cookies that enable an analysis of the surfing behavior of users of our website. In this way, for example, data about the entered search terms, the frequency of page views, or the use of website functions can be transmitted. The data collected from users in this way is pseudonymized by technical measures. Therefore, it is no longer possible to assign the data to the calling user. The data is not stored together with other personal data of the users.
When accessing our website, users are informed about the use of cookies through an info banner and referred to this privacy policy. In this context, there is also a note on how the storage of cookies can be prevented in the browser settings.

b. Legal basis for data processing
The legal basis for processing personal data using cookies is Art. 6 para. 1 sentence 1 lit. f GDPR.

c. Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of our website for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again after a page change. The user data collected by technically necessary cookies is not used to create user profiles.
The use of analysis cookies serves the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can continuously optimize our offer.
Our legitimate interest in processing personal data according to Art. 6 para. 1 sentence 1 lit. f GDPR also lies in these purposes.

d. Duration of storage, objection and deletion options
Since cookies are stored on the user's computer, you as a user have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies (e.g., reject third-party cookies or all cookies). Cookies already stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may no longer be possible to use all functions of the website fully.

V. Special usage forms of our website

  1. Contact
    a. Description and scope of data processing
    On our website, we provide our postal and electronic address as well as our telephone and fax number, which you can use to get in touch.
    When you contact us, your transmitted personal data is stored.
    No data is passed on to third parties in this context. The data is used exclusively for processing the conversation.

b. Legal basis for data processing
The legal basis for processing the data transmitted by you during contact is Art. 6 para. 1 sentence 1 lit. f GDPR.
If the contact aims at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

c. Purpose of data processing
The processing of personal data serves solely to handle the contact, which also constitutes the necessary legitimate interest in processing the data.

d. Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This is the case when the respective conversation with the user has ended. The conversation is considered ended when the circumstances indicate that the matter concerned has been conclusively clarified.

e. Right to object and deletion option
If the data processing is based on Art. 6 para. 1 lit. f GDPR, you can object to this at any time. In such a case, the conversation cannot be continued.
You can inform us of your objection using the contact details provided under III. of this privacy policy.
All personal data stored during the contact process will be deleted in this case.

  1. Use of our webshop
    a. Scope of processing personal data
    If you want to order in our webshop, we ask for various personal data. Mandatory information necessary for processing the contracts (…) is marked separately, further information (…) is voluntary.
    The data you provide is processed to handle your order. Your data will not be passed on to third parties without your explicit consent. Exceptions are only our service partners, whom we need to fulfill the contractual relationship, or service providers we use within the scope of order processing. These include, for example, the following categories of recipients: shipping service providers, inventory management service providers, payment service providers, service providers for order processing, web hosts, IT service providers, dropshipping dealers. In all cases, we strictly observe the legal requirements. The scope of data transmission is limited to a minimum.
    Regarding the payment service providers, we additionally point out the following:
    PayPal
    We have integrated components of PayPal on this website. PayPal is an online payment service provider (European operating company: PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg). Payments are processed via so-called PayPal accounts (virtual private or business accounts). Additionally, PayPal offers the option to process virtual payments via credit cards if one does not have a PayPal account. A PayPal account is managed via an email address. There is no account number in the conventional sense. With PayPal, you can initiate or receive online payments to third parties. PayPal also acts as a trustee and offers buyer protection services.
    If the affected person selects the payment option "PayPal" during their ordering process in our shop, data of this person will be automatically transmitted to PayPal. By choosing the payment method "PayPal," the affected person consents to the transmission of their personal data required for payment processing.
    The following data of the affected person are usually transmitted: first name, last name, address, email address, IP address, phone number, mobile number, data concerning the specific order or other data necessary for payment processing.
    The purpose of data transmission is both payment processing and fraud prevention. We will transmit personal data to PayPal especially when there is a legitimate interest in the transmission. Under certain circumstances, the personal data exchanged between us and PayPal may be transmitted by PayPal to credit agencies for the purpose of identity and creditworthiness verification.
    PayPal may also pass on personal data to affiliated companies, service providers, or subcontractors as far as necessary for service provision or if the data are to be processed on behalf.
    The data subject can revoke consent to the handling of their personal data with PayPal at any time, whereby the revocation does not affect those personal data that must be processed necessarily for (contractual) payment processing.
    You can find PayPal's privacy policy at: https://paypal.com/de/webapps/mpp/ua/privacy-full.

You can voluntarily create a customer account through which we can store your data for future purchases. When creating an account under "Customer login," the data you provide (which also includes both mandatory and voluntary information) are stored with the option to revoke consent.
We reserve the right to also use the data you provide when using our webshop to send you interesting offers and information about our products by postal mail.

b. Legal basis for data processing
The legal basis for processing the data we process in the context of your order or when creating and operating a customer account that are marked as mandatory information is Art. 6 para. 1 sentence 1 lit. b GDPR.
The legal basis for processing the data we process in the context of your order or when creating and operating a customer account that are not marked as mandatory information is Art. 6 para. 1 sentence 1 lit. f GDPR.
The legal basis for processing your data provided when using our webshop to send interesting offers and information about our products by postal mail is Art. 6 para. 1 sentence 1 lit. f GDPR.

c. Purpose of data processing
The data marked as mandatory information in the context of your order are required for contract fulfillment.
The data processed when creating the customer account and marked as mandatory information are required to create the customer account.
The data processed when ordering and creating the customer account that are not marked as mandatory information serve to make the processing of the order or the operation of the customer account more user-friendly and effective and to improve your shopping experience.
Our legitimate interest in processing personal data according to Art. 6 para. 1 sentence 1 lit. f GDPR also lies in these purposes.
The use of the data you provide when using our webshop to send interesting offers and information about our products by postal mail serves personalized direct advertising, which also constitutes our legitimate interest in processing personal data according to Art. 6 para. 1 sentence 1 lit. f GDPR.

d. Duration of storage
Due to commercial and tax law requirements, we are obliged to store your address, payment, and order data for ten years. However, after 2 years, we restrict processing, i.e., your data will only be used to comply with legal obligations.
To prevent unauthorized third-party access to your personal data, especially financial data, the ordering process is encrypted using TLS technology.

e. Right to object and deletion option
You can object at any time to the processing of your personal data that is not marked as mandatory in the context of order processing, the creation, or operation of the customer account.
We will then stop processing this data.
Of course, you can also object at any time to the processing of your data collected in the context of the webshop for sending interesting offers and information about our products by postal mail.
We will then no longer process your data collected in the context of the webshop for this purpose.
You can inform us of your objection using the contact details provided under III. of the Privacy Policy.
If you have a customer account, you can also delete it yourself.
Of course, this can then no longer be continued.

2. “Email advertising with newsletter subscription

When you subscribe to our newsletter, we use the data required for this or separately provided by you to regularly send you our email newsletter based on your consent according to Art. 6 para. 1 sentence 1 lit. a GDPR.

Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below or via a dedicated

via the designated link in the newsletter. After unsubscribing, we will delete your email address unless you have explicitly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this statement.”

End of the Privacy Policy