Privacy policy

Privacy Policy

Below, we inform you about the nature, scope, and purpose of the processing of your personal data when using our shop at "www.gazur.de". Personal data refers to any information relating to an identified or identifiable natural person.

1. Data Controller
The controller within the meaning of the EU General Data Protection Regulation (GDPR) is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data. For this shop, the controller is:

Waks & Sharet GbR
Kreuzbergstr. 9
10965 Berlin
Germany
Phone: +49 (0)157 71765397
Email: info@gazur.de (hereinafter "we").

2. Visiting Our Website
When you visit our website, our server automatically collects technical information: browser type and version, operating system, referrer URL, IP address, and timestamp of the access.
We process these data to ensure smooth operation, prevent abuse, and optimize our shop performance. The legal basis for this data processing is Art. 6(1)(f) GDPR (legitimate interest). Personal log data are deleted after 14 days at the latest, unless longer storage is required for evidence in security incidents.

3. Placing an Order
When you place an order, we process your name, delivery address, and email address (and optional details such as billing address or phone number) to fulfill the contract, handle delivery, process payments, and manage returns. Legal basis: Art. 6(1)(b) GDPR. Data are retained until mutual claims are settled and statutory commercial/tax retention obligations expire.

4. Customer Account
Creating a customer account is optional and based on your explicit consent under Art. 6(1)(a) GDPR. You may request deletion of your account at any time.

5. Shipping and Payment
For order fulfillment, recipient name and address (and email address where consented) are shared with delivery service providers (Deutsche Post AG / DHL Paket GmbH) under Art. 6(1)(b) GDPR. Payment providers process transaction details according to their respective privacy terms.

6. Data Processors & International Data Transfers
We use specialized service providers to run our operations:
– Billbee GmbH, Germany (Order management processor)
– Shopify International Limited, Ireland (Shop platform processor)

Data processed via Shopify may be transferred to parent companies (Shopify Inc. in the US/Canada). Transfers to the US rely on the EU-U.S. Data Privacy Framework (DPF) and EU Standard Contractual Clauses under Art. 44 et seq. GDPR.

7. Contact Inquiries
When contacting us via form, chat, or email, your provided details are processed to respond to your inquiry based on Art. 6(1)(f) GDPR (or Art. 6(1)(b) GDPR for contractual matters). Inquiry data are deleted after 12 months unless retention laws apply.

8. Newsletter
With your consent (Art. 6(1)(a) GDPR), we send email newsletters. You may unsubscribe at any time via the unsubscribe link in any newsletter.

9. Product Reviews & Comments
Published comments include your submitted name or pseudonym. IP addresses are saved for up to 14 days to prevent abuse (Art. 6(1)(f) GDPR).

10. Cookies & Consent Management
Where consented via our cookie banner, non-essential cookies and storage tools are deployed. Storage/retrieval access is based on § 25(1) TDDDG; processing of personal data relies on Art. 6(1)(a) GDPR. You can manage settings or revoke consent at any time.

11–13. Google Services (Analytics, Fonts, Maps)
Subject to your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR), we use services provided by Google Ireland Limited (or Google LLC, US). Data transfers to the US operate under the EU-U.S. Data Privacy Framework. Google Analytics operates with enabled IP anonymization under a Data Processing Agreement (Art. 28 GDPR).

14. Social Media Links
Our site includes direct text/icon links to social networks (e.g., Facebook, X / Twitter, Pinterest). Data transfers to platforms occur only after clicking the links.

15. Your Rights
Under the GDPR, you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), withdrawal of consent (Art. 7(3)), and to lodge a complaint with a supervisory authority (Art. 77).

RIGHT TO OBJECT (ART. 21 GDPR):
YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON ART. 6(1)(F) GDPR.
IF YOU OBJECT TO PROCESSING FOR DIRECT MARKETING PURPOSES, WE WILL IMMEDIATELY CEASE PROCESSING YOUR DATA FOR SUCH PURPOSES.