KoreaPrivacy policy
Last updated: 3 October 2026
This document explains what personal data we process through this website, for what purpose, on what legal basis, how long we keep it and what rights you have. Processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR).
Who we are
The controller of your personal data is ZIEGERT SRL, registered office at Str. Sfântul Petru Tei nr. 59, Sector 2, București, Romania, VAT / tax ID (CUI) RO35793880, Trade Register no. J40/3733/2016 (“we”), which operates this shop. For any question about your data, write to us through the contact form.
1. What data we process
| Situation | Data |
|---|---|
| Order | first and last name, phone, email, billing and delivery address, company name and VAT/company ID (if you request a company invoice), order contents |
| Card payment | card details are entered on Stripe’s payment page and processed by Stripe; we receive only the payment confirmation, the card brand and its last four digits |
| Contact form | name, email, phone (optional), message content |
| Browsing | basic technical data: IP address, browser type, pages visited — only to the extent that you accept analytics cookies |
We do not request or process special categories of data (health data, biometric data). Please do not include information about your clients' health in your messages.
2. Purposes and legal bases
- Processing and delivering your order — basis: performance of a contract (Art. 6(1)(b) GDPR).
- Issuing invoices and keeping accounting records — basis: legal obligation (Art. 6(1)(c) GDPR).
- Replying to messages sent through the contact form — basis: your consent (Art. 6(1)(a) GDPR).
- Traffic analytics and marketing — basis: your consent, given through the cookie banner, which you may withdraw at any time.
- Defending our rights in the event of a dispute — basis: legitimate interest (Art. 6(1)(f) GDPR).
3. Who we share data with
We share data only with those who help us deliver your order and meet our legal obligations: the courier company, the hosting provider, the payment processor — Stripe Payments Europe, Ltd. (Dublin, Ireland), under its own privacy policy —, our accountants and, on express request, public authorities. We do not sell or rent personal data.
4. How long we keep data
- Billing data and accounting documents: 10 years, as required by tax law.
- Contact data and correspondence: 3 years from the last exchange of messages.
- Analytics data: at most 14 months, or until you withdraw consent.
- Your cookie preference: 12 months.
5. Your rights
You have the right of access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability and objection, and the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
You can exercise your rights through the contact form. We reply within one month of receiving your request.
You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — dataprotection.ro — or with the supervisory authority in your country of residence.
6. Security
The website is served exclusively over an encrypted connection (HTTPS). Access to order data is limited to the people who need it to process your order.
7. Transfers outside the EU
Data is hosted in the European Union. Stripe may process some payment data outside the European Economic Area, including in the United States; any such transfer, like any transfer by another provider, takes place only on the basis of the safeguards provided by the GDPR (an adequacy decision or standard contractual clauses).
8. Changes
If we change this policy, we publish the new version on this page and update the date at the top of the document.