Privacy Policy and Personal Data Protection – Zellago.eu

1. Data Controller

The website Zellago.eu is operated by Zella International Distribution S.R.L., the entity responsible for processing personal data in accordance with Regulation (EU) 2016/679 (GDPR).

Registered Office: Strada Cuza Vodă nr. 97, Sector 4, București, 040283, România
CUI: 44237077
Trade Register No.: J2021008211405
Data protection contact: info@zellago.eu

2. What Data We Collect

We may collect the following categories of data:

• Full name
• Billing and delivery address
• Phone number
• Email address
• Order details
• IP address and browser information (user agent)
• Behavioral data on the website (pages visited, products viewed) — only with consent, using analytics cookies

We do not collect sensitive personal data without the user’s explicit consent.

3. How We Use the Data

The data collected is used for:

• Processing and delivering orders
• Communicating with customers (confirmation, dispatch, delivery)
• Issuing invoices and fulfilling tax obligations
• Improving user experience
• Preventing fraud and ensuring website security
• Statistical analysis (only with consent)

4. Legal Basis for Processing

The processing of personal data is carried out on the following legal grounds in accordance with GDPR:

• Performance of a contract — order processing, delivery, invoicing
• Compliance with legal obligations — tax and accounting requirements
• Legitimate interest — security, fraud prevention, service improvement
• Consent — analytics/marketing cookies

5. Data Sharing with Third Parties

Data may be transmitted to third parties only to the extent necessary for the provision of services:

• Courier services (FedEx, DPD, national postal service, and other verified carriers) — for order delivery. Data transmitted: recipient name, delivery address, phone number (for delivery notifications), and shipment details.
• PayPal (Europe) S.à r.l. et Cie, S.C.A. — for payment processing. When paying via PayPal, your data (name, address, email, amount) is transmitted to PayPal in accordance with their privacy policy
• Google reCAPTCHA (Google LLC) — for protecting the contact form against spam. When using the form, Google may collect your IP address and browser data in accordance with Google’s privacy policy
• Google Analytics (Google LLC) — for analyzing website traffic and user behavior. Google Analytics may collect IP address, browser information, and navigation data. Activated only with your consent. Google privacy policy
• Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) — hosting and server infrastructure services. Servers are located within the EU (Germany/Finland). Hetzner processes technical data (IP addresses, access logs) as a data processor. Hetzner privacy policy
• Public authorities, when required by law

We do not sell or distribute personal data to third parties for marketing purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or modification.

The website uses secure HTTPS connections and encryption protocols to protect transmitted information.

7. Data Retention Period

Personal data is retained only as long as necessary for the purposes for which it was collected or to comply with legal obligations.

• Order data is retained in accordance with tax legislation (up to 10 years)
• User account data is retained until a deletion request is made
• Data collected through cookies is retained in accordance with the Cookie Policy

8. User Rights

In accordance with GDPR, you have the following rights:

• Right of access to data
• Right to rectification
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to object
• Right to data portability

To exercise these rights, please contact us at: info@zellago.eu

9. Cookies

The Zellago.eu website uses cookies for the proper functioning of the site, traffic analysis, and improving user experience.

For detailed information about the types of cookies we use and how to manage them, please visit the Cookie Policy.

10. Supervisory Authorities

If you believe that your rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority:

Ireland:
Data Protection Commission (DPC)
Address: 21 Fitzwilliam Square South, Dublin 2, D02 RD28
Website: www.dataprotection.ie

Luxembourg:
Commission Nationale pour la Protection des Données (CNPD)
Address: 15, Boulevard du Jazz, L-4370 Belvaux
Website: cnpd.public.lu

Malta:
Office of the Information and Data Protection Commissioner (IDPC)
Address: Level 2, Airways House, High Street, Sliema SLM 1549
Website: idpc.org.mt

11. Policy Changes

We reserve the right to update this privacy policy. Any changes will be posted on this page.