Privacy Policy

We are happy that you have visited our website and thank you for your interest! The protection of your privacy when using our website is important to us, so please take note of the information below about the handling of your data:

1. DATA PROTECTION AND DATA PRIVACY

1.1 The privacy and protection of the data of our customers is important to ZOEVA GmbH ("ZOEVA"). An adequate level of data protection is a prerequisite for the proper handling of personal data. This basic understanding shapes the data processing by ZOEVA. ZOEVA has therefore implemented technical and organizational measures in order to ensure an adequate level of data protection for all interactions with its customers.

1.2 The collection processing, storage and disclosure of certain personal data is necessary for the operation of the ZOEVA online shop. We would otherwise be unable to perform the services offered through the shop or offer our customers the usual superior and attentive service. Without the corresponding data we cannot inform you about our changing range of offers either.

1.3 In order to guarantee the greatest possible transparency, we will adequately describe the use of your data by ZOEVA below.

1.4 By agreeing to the Data Privacy Statement below, you consent to the described collection, processing, and use of your personal data by ZOEVA.

 

2. SUBJECT MATTER OF THE STATEMENT

ZOEVA operates an online shop for decorative cosmetics, cosmetic articles, and similar products at https://www.zoevacosmetics.com. In the ZOEVA online shop you can get an overview of the ZOEVA product range, learn more about the application of the products through videos, and purchase the products. You can also subscribe to a newsletter and request a "Back in Stock" notification.

The subject matter of this statement is therefore the processing of personal data for the purpose of performing the services available through the ZOEVA online shop as well as for the management and maintenance of the customer master data of ZOEVA.

 

3. CONTROLLER

The data controller within the framework of the ZOEVA online shop is: 
ZOEVA GmbH 
Karl-Ritscher-Anlage 1-3 
60437 Frankfurt am Main Germany 
Tel.: +49 (0) 69 506843 - 000 
Email:service@zoeva.de

 

4. SHOP FUNCTIONS

The ZOEVA online shop offers you various functions that require the processing of your personal data. An overview of the functions is presented for you below:

4.1 Product range

ZOEVA offers a wide variety of various products for purchase, particularly in the area of cosmetics. The individual products are presented on individual product pages with images, a description, and sometimes application videos.

4.2 Product purchase

You can buy the offered products directly online. To do this, go to the individual product page and click the "ADD TO CART" button. The desired product will be placed in your virtual shopping cart. You can access this and initiate the ordering and payment procedure by clicking the "CHECKOUT" button.

There are two options available to you for purchasing products from ZOEVA: You can login using an already existing customer account or create a new customer account. You provide various personal information such as your name and address for this and can then decide whether you would like to create a permanent customer account by defining a password. Finally, you select between the payment methods PayPal, instant bank transfer, and credit card, you enter the corresponding data, and you can then conclude the purchase by clicking the "SEND ORDER" button.

4.3 Newsletter

ZOEVA offers its customers a newsletter that regularly provides information about new products, makeup tutorials, beauty tips, and similar topics. You can use the "join our newsletter" button or the "subscribe to our newsletter" button to provide your email address and subscribe to the newsletter.

4.4 Back in Stock Notification

If a product is not available, you have the option to enter your email address and be informed when new products arrive by using the "Back in Stock notification" function.

 

5. PROCESSING OF DATA, CATEGORIES OF DATA PROCESSED, AND LEGAL BASIS

Different personal data is collected depending on the function of the ZOEVA online shop that you use. ZOEVA has various legal bases for the collection and processing of the specified data. ZOEVA gives you an overview of the data processed in the individual functions as well as the respective legal basis for the processing of the data below.

5.1 Operation of the website
(a) Personal data processed

 

When the website is merely used to obtain information, i.e. not to register or convey any other information to us, we only collect the personal data that your browser transmits to our server. If you would like to view our website, we collect the following information that is required by us for technical purposes in order to display our website to you and to ensure its stability and security:

  • IP address
  • date and time of the request
  • content of the request (specific page)
  • access status / HTTP status code
  • respective data volume transferred
  • website from which the request is coming
  • browser
  • operation system and its interface
  • language and version of the browser software

 

(b) Legal basis 

The processing of the specified personal data is carried out on the basis of Article 6(1) Sentence 1(f) of the General Data Protection Regulation (GDPR).

5.2 Product purchase processing
(a) Personal data processed

The following data is collected within the framework of the product purchase described in point 4.2: 

 
Category
List of information used
1

Required customer account information

  • First name and surname
  • Address
  • Email address
  • Telephone number
      2

      Voluntary customer account information

      • Company name
      • Birthday
            3

            Payment information

            • If payment is made by credit card through iframe integration through our partner company Wirecard:

                     Card holder 
                     Card number 
                     Expiration date 
                     Card security code

            • If payment is made through PayPal then the data processing is carried out solely through the systems of PayPal
            • If payment is made by instant bank transfer then the data processing is carried out solely by your bank's systems.


                The listed information is collected regardless of whether you create a guest account or a permanent customer account. If you are merely logged in as a guest then we will erase the data after your purchase transaction is completed, unless the data are to be retained in accordance with generally accepted accounting principles or due to other statutory provisions.

                (b) Legal basis

                The processing of personal data is carried out on the basis of Article 6(1)(b) of the General Data Protection Regulation (GDPR), i.e. solely for the purpose of fulfilling contractual obligations within the framework of the product purchase.

                5.3 Newsletter

                Within the framework of the sending of the newsletter we evaluate your user behavior on our web pages as well as within the newsletter sent by us and associate it with your email address/user profile within our database.

                We use the data obtained in this way to create a user profile in order to tailor the newsletter to your individual interests. We process the data listed below and draw conclusions about your personal interests from it.

                (a) Personal data processed 
                 
                Category
                List of information used
                1

                 

                Personal information about the customer

                 

                • First name and surname
                • Address
                • Email address
                • IP address of the accessing computer
                • Country (with the aid of the IP address)
                • Language
                2

                Purchase information

                • Average order value
                • Shopping behaviour
                • Shopping preferences
                • Shopping frequency
                • Motivation to purchase
                • Profile of the shopping cart
                • Average time interval between orders
                3 Shop-related information
                • Surfing behaviour
                • Customer group
                • Date of subscription to the newsletter
                • Viewed products
                • Registration for "Back in Stock Notification" 
                • Activities on the ZOEVA website
                • Confirmations that you have received and read information 
                • Information about the links you have clicked in the newsletter


                We use a double opt-in procedure in order to ensure that you will only receive the newsletter if you actually wish to receive it. This means that we will only send you our newsletter if you have expressly subscribed to it and then confirmed that you wish to receive it by clicking on the link contained in the subsequent confirmation email. 

                You can cancel at any time if you no longer wish to receive the newsletter. The lawfulness if the processing carried out on the basis of the consent before the cancellation remains unaffected by this. You can cancel here

                (b) Legal basis

                ZOEVA's legal basis for the processing of the specified personal data within the framework of the sending of the newsletter is Article 6(1)(a) of the General Data Protection Regulation (GDPR). According to this, data may be processed if the data subject has given consent.

                5.4 Back in Stock notification
                (a) personal data processed

                The following data is collected when you request notification using the "Back in Stock" function.

                1
                General information
                Email address
                (b) Legal basis

                ZOEVA's legal basis for the processing of the specified personal data within the framework of the notification is Article 6(1)(a) of the General Data Protection Regulation (GDPR). According to this, data may be processed if the data subject has given consent.

                5.5 Customer master data
                (a) Personal data processed

                If you are not merely visiting our ZOEVA online shop as a guest but rather have opened a customer account then the following data is collected and stored:

                 
                Category
                List of information used
                1

                Personal information about the customer

                 

                • Title
                • First name and surname
                • Address
                • Telephone number
                • Email address
                • Language
                  2

                  Payment and purchase information

                  • Preferred payment option
                  • Currency
                  • Revenue
                  • Purchased product categories
                  • Purchased products
                  • Date of purchase
                          3

                          Shop-related information

                          • Date of registration or login to the online shop
                          • Date of subscription to the newsletter
                          • Customer group

                             

                            We reserve the right to contact our customers who have an active customer account with offers from ZOEVA through electronic media. The electronic media that we use include email, SMS, WhatsApp, and other social media services, provided that you have individually consented to their use as a communication channel

                            (b) Legal basis

                            ZOEVA's legal basis for the processing of the specified personal data within the framework of the communication is Article 6(1)(a) of the General Data Protection Regulation (GDPR). According to this, data may be processed if the data subject has given consent. 

                            You can delete your customer account at any time. To do this, please send an email to service@zoeva.de.

                            5.6 Reviews
                            (a) Personal data processed
                            1 Required information Email address
                            2 Voluntary information
                            Name/nickname

                            (b) Legal basis

                            ZOEVA's legal basis for the processing of the specified personal data within the framework of the reviews left on the website is Article 6(1)(a) of the General Data Protection Regulation (GDPR).

                            5.7 Linking to the ZOEVA website of a different country
                            (a) Personal data processed
                            • IP address

                             

                            6. DURATION

                            ZOEVA will process your data only within the scope necessary and/or permitted in accordance with your consent. If the collected personal data is no longer required for the specified purpose then ZOEVA will erase or otherwise destroy it. The same applies in the event that you withdraw your consent.

                             

                            7. RECIPIENTS

                            ZOEVA employs various service providers in order to be able to offer you optimal service. ZOEVA works closely with various partner companies for this. ZOEVA places great value on the careful selection of trustworthy partner companies. 

                            ZOEVA transfers your personal information to partner companies in order to fulfil our contractual obligations to you as well as within the framework of the consent you have granted. These companies work either within the framework of commissioned data processing relationships or as independent data processors. ZOEVA places the partner companies under an obligation to comply with adequate security and data protection standards. The data transfer is not limited to the European Union but can also include countries whose data protection level is below that of the European Union in individual cases. 

                            Our partner companies include:

                            • Shopify
                            • WeMakeWebsites UK
                            • Reload Digital UK
                            • Alphabet, in particular for Google Analytics as well as Adwords
                            • Klaviyo
                            • Sage
                            • Schwindt
                            • PayPal (Europe) S.à.r.l et Cie
                            • Sofort GmbH
                            • Wirecard
                            • MHP
                            • Syscon
                            • Zendesk
                            • Desk
                            • Rexx
                            • Facebook
                            • Maxmind
                            • Searchanise
                            • Store Mapper 
                            • Directed Edge
                            • Yotpo
                            • Back in Stock

                             

                            8. USE OF TRACKING TOOLS

                            ZOEVA makes use of cookies as well as other tracking tools within the framework of the online shop and offers the option to activate social plugins. Your personal data are also processed within this framework. For more information, please read our Cookie & Social PlugIns Policy.

                             

                            9. RIGHTS OF THE CUSTOMER

                            9.1 You have the right to receive detailed information about the processing, storage, and use of your respective personal data (access). Furthermore, you also have the right to obtain the correction of incorrect data pertaining to you or the completion of incomplete personal data pertaining to you. In addition, you have the right to obtain the restriction of the processing of your personal data or the erasure of your data. In addition, you have the right to data portability. If you desire further information about these rights to which you are entitled in accordance with the General Data Protection Regulation 2016/697, we will be happy to provide you with this information upon request.

                            9.2 Any consent you have granted can be freely withdrawn at any time. The withdrawal of consent as well as all other rights can be exercised by sending an e-mail to the following address: service@zoeva.de.

                            9.3 Notwithstanding the provisions above, you have the right to contact the competent supervisory authority with a complaint and to submit claims for any violations of the relevant provisions of data protection law.

                             

                            10. DATA PROTECTION OFFICER

                            ZOEVA's Data Protection Officer is Nils Gustke. You can contact the Data Protection Officer with questions about the processing of your personal data at any time. Contact information: 
                            Name: Mr Nils Gustke
                            Telephone number:+49 561 78968-93 
                            Email address: datenschutz@gfp24.de

                            POSITIVELY BEAUTIFUL. AUTHENTICALLY YOU.