• Rent
Login

Language

Cart

Your cart is empty

Privacy policy

The data controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

ZAUNKÖNIG® | Ursula Schreck
Am Kirchtor 18
06108 Halle (Saale)
Germany
Email: hallo@znkg.de

We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data.

YOUR RIGHTS AS DATA SUBJECTS

You may exercise the following rights at any time using the contact details provided in this privacy policy:

  • Access to your data stored with us and information about its processing (Art. 15 GDPR),
  • Correction of inaccurate personal data (Art. 16 GDPR),
  • Deletion of your data stored with us (Art. 17 GDPR),
  • restriction of data processing, provided we are not yet permitted to delete your data due to legal obligations (Art. 18 GDPR)
  • objection to the processing of your data (Art. 21 GDPR), and data portability, provided you have consented to the data processing or the processing is based on a contract (Art. 20 GDPR).

If you have given us your consent, you may revoke it at any time with future effect.

You may also lodge a complaint with a supervisory authority at any time, e.g., with the competent data protection authority in your state or with the supervisory authority responsible for us.

A list of data protection supervisory authorities (for the private sector) with addresses can be found here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

COLLECTION OF GENERAL INFORMATION WHEN VISITING OUR WEBSITE

Nature and Purpose of Processing

When you access our website—that is, when you do not register or otherwise submit information—general information is automatically collected. This information (server log files) includes, for example: the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address (truncated or pseudonymized), the time of access, and similar technical data.

This data is technically necessary to:

  • ensure a stable connection to the website,
  • guarantee technical security and system stability,
  • enable convenient use,
  • and to optimize our website administratively.

We do not use your data to draw conclusions about your identity. We may statistically analyze information of this kind to optimize our website and the underlying technology.

Legal basis

Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website.

Recipients

The recipients of the data are us as the data controller, as well as technical service providers acting within the scope of data processing. This includes, in particular, Shopify International Ltd., based in Ireland. The data may also be transferred to servers of the parent company Shopify Inc. in Canada (with an adequacy decision) or to the USA. In this case, the transfer is based on the EU Commission’s Standard Contractual Clauses. Further information on this can be found in the following section “Hosting and Provision of the Website by Shopify”.

Retention Period

The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. For data used to provide the website, this is generally the case once the respective session has ended.

Provision Required or Necessary

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. Additionally, certain features and services may be unavailable or limited. You generally have the right to object to the processing. However, since the collection of this data is technically necessary for the operation of the website, an objection may, under certain circumstances, only be possible by leaving the site.

HOSTING AND PROVISION OF THE WEBSITE BY SHOPIFY

Our online store is operated via the Shopify platform. The provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”).

Shopify handles hosting, the presentation of the shop, as well as the technical provision, storage, and processing of personal data on our behalf when you visit our website, place an order, or interact with us.

In doing so, Shopify stores and processes personal data such as IP addresses, order data, contact details, payment information, and technical data regarding your device, browser, and usage behavior. Data processing is carried out for the purpose of contract fulfillment pursuant to Art. 6(1)(b) GDPR, as well as for the provision of technical infrastructure pursuant to Art. 6(1)(f) GDPR (legitimate interest in a secure and high-performance online store). Shopify acts on our behalf as a data processor in accordance with Art. 28 GDPR.

To optimize performance and secure the website infrastructure, Shopify uses Content Delivery Networks (CDNs) and security services. In doing so, personal data (such as IP addresses) may be transmitted for technical reasons.

Data Transfer to Third Countries

Shopify uses server locations in Canada (with an adequacy decision by the EU Commission) as well as in the USA, operated by the parent company Shopify Inc., 151 O’Connor Street, Ground Floor, Ottawa, ON K2P 2L8, Canada. Data transfers to the USA are based on the EU Commission’s Standard Data Protection Clauses pursuant to Article 46 of the GDPR to ensure an adequate level of data protection.

Further information on data processing by Shopify can be found in Shopify’s Privacy Policy at: https://www.shopify.com/de/legal/datenschutz.

COOKIES

Nature and Purpose of Processing

To make your visit to our website more engaging and to enable the use of certain features, we use technologies on various pages, including so-called “cookies.” Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies). This allows us to receive certain data, such as your IP address, the browser you are using, and your operating system. Cookies cannot be used to launch programs or transmit viruses to a computer.

Privacy Protection on End Devices

When you use our online services, we employ technologies that are strictly necessary to provide the explicitly requested telemedia service. The storage of information on your device or access to information already stored on your device does not require your consent in this regard.

For functions that are not strictly necessary, the storage of information on your device or access to information already stored on your device requires your consent. Please note that if you do not grant consent, parts of the website may not be fully usable. Any consent you have granted remains in effect until you adjust or reset the respective settings on your device.

Any subsequent data processing via cookies and other technologies

We use technologies that are strictly necessary for the use of certain features of our website (e.g., the shopping cart feature). These technologies collect and process your IP address, the time of your visit, device and browser information, as well as information regarding your use of our website (e.g., information about the contents of your shopping cart). This serves our overriding legitimate interests in optimizing the presentation of our offerings pursuant to Article 6(1)(f) of the GDPR, following a balancing of interests.

In addition, we use technologies to fulfill the legal obligations to which we are subject (e.g., to be able to demonstrate consent to the processing of your personal data) as well as for web analytics and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this Privacy Policy.

Use of Cookies by Shopify

Our website is hosted by the service provider Shopify International Limited (Ireland). As part of providing the website and the online store’s functions, Shopify itself uses cookies and similar technologies to ensure, for example, the functionality of the shopping cart, login features, security, language settings, and for analytical purposes. Some of these cookies are technically necessary, while others serve statistical or marketing purposes.

Depending on your settings and usage, Shopify may also involve service providers whose servers are located outside the EU or the EEA (e.g., in Canada or the U.S.) . Where necessary—i.e., for cookies that are not technically necessary—we obtain your consent for this via our consent banner in accordance with Art. 6(1)(a) GDPR and, where applicable, in accordance with Art. 49(1)(a) GDPR. You can revoke or adjust this consent at any time via the “Cookie Settings” link.

You can find an overview of the cookies used by Shopify and their functions at the following link: https://www.shopify.com/legal/cookies.

Cookie Settings

Of course, you can generally view our website without cookies. Internet browsers are typically set to accept cookies. In general, you can disable the use of cookies at any time via your browser settings. You can find the cookie settings for your browser at the following links:

Please use the help functions of your web browser to learn how to change these settings. If you have consented to the use of these technologies pursuant to Art. 6(1)(a) of the GDPR, you may revoke your consent at any time by contacting us via the contact information provided in the Privacy Policy. Please note that certain features of our website may not function properly if you have disabled cookies.

Consent Management Tool (CMT)

On our website, we use a consent management service (“Consent Management Tool (CMT)” to inform you about the cookies and other technologies we use on our website, as well as to obtain, manage, and document your consent—where required—to the processing of your personal data by these technologies. This is necessary pursuant to Art. 6(1)(c) GDPR to fulfill our legal obligation under Art. 7(1) GDPR to be able to demonstrate your consent to the processing of your personal data, to which we are subject. The Consent Management Tool (CMT) used is a service provided by Pandectes GDPR Compliance Ltd., Pudisoo küla, Männimäe/1, 74626, Kuusalu vald, Estonia, which processes your data on our behalf.

After you submit your cookie declaration on our website, the web server stores the following data: IP address, device information, browser information, selected language, the website visited or its URL, the date and time of your declaration of consent, and information regarding your consent behavior.

Your data will be stored for as long as necessary to fulfill our record-keeping obligations under Article 7(1) of the GDPR. The consent cookie, in which your selection is stored, is valid for 30 days and will be automatically queried again thereafter. Further storage will only occur if you have expressly consented to further use of your data in accordance with Art. 6(1)(a) GDPR or if we reserve the right to use your data beyond this scope, provided such use is permitted by law and we inform you of it in this statement.

Information on Transfers to Third Countries (Data Transfer to Third Countries)

We use technologies from service providers on our website—including Shopify, our hosting and shop system provider—whose headquarters or server locations may be in so-called third countries outside the EU or the European Economic Area (EEA).

Shopify International Ltd. is headquartered in Ireland but relies on parent and partner companies in Canada, the U.S., and other countries for certain services and support. Canada has an adequacy decision from the European Commission (Art. 45 GDPR). Data transfers to other third countries—such as the U.S.—are carried out on the basis of the European Commission’s Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

In addition, we assess on a case-by-case basis whether supplementary technical or organizational measures are necessary to ensure the security of the transferred data—e.g., encryption or pseudonymization. Despite these measures, it cannot be guaranteed in all cases that the level of data protection fully corresponds to that of the EU. In particular, there is a risk that authorities in third countries may, under certain circumstances, access personal data without the data subjects being aware of this or being able to seek effective legal remedies against it. In these cases, we ask for your explicit consent—as part of the cookie consent process—to the data transfer in accordance with Art. 49(1)(a) GDPR. Third countries without an adequacy decision currently include, for example, the U.S., China, Russia, and Taiwan.

A complete overview of all cookies used on our website, their storage duration and purpose, as well as information on third-party providers, is available at any time directly in the cookie banner. To access this, click on the cookie icon at the bottom left of the website.

The provisions described here apply equally to all visitors—regardless of whether they use our website as a consumer or as a business.

DATA PROCESSING FOR CONTRACT FULFILLMENT AND CONTACT

Contract fulfillment

When you place an order on our website, we process your personal data for the purpose of contract fulfillment—e.g., to process your order, for any inquiries, in warranty cases, or to comply with legal obligations.

Processing is based on Art. 6(1)(b) GDPR (performance of a contract). The exact data required depends on the respective form. Mandatory fields are marked accordingly—without this data, we cannot process your order. After the contract has been fully executed, we restrict the processing of your data. It will be deleted upon expiration of statutory retention periods in accordance with Art. 6(1)(c) GDPR—unless you have consented to further use of your data (Art. 6(1)(a) GDPR) or legal regulations permit us to do so.

Use of Shopify for Order Processing

We use the Shopify e-commerce platform, provided by Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland, to process and fulfill orders on our website. Shopify provides us with the technical infrastructure to operate our online store and processes personal data on our behalf that is collected during the ordering process, customer registration, and payment processing.

The legal basis for this integration is Art. 6(1)(b) GDPR (performance of a contract) in conjunction with Art. 28 GDPR (data processing). We have entered into a corresponding data processing agreement with Shopify. For more information on data processing by Shopify, please refer to Shopify’s Privacy Policy at: https://www.shopify.de/legal/datenschutz.

Customer Account

When you create a customer account with us, we use your data to set up this account and to facilitate future orders for you. The data in the customer account is also processed via Shopify, as we use the Shopify “Customer Account” feature directly within the system. The legal basis for this is your consent pursuant to Art. 6(1)(a) GDPR. You can delete your customer account at any time—either via the feature within the account or by sending us a message. In this case, we will delete your data unless there is a legal obligation to retain it or another legal basis for further storage.

Contacting Us

When you contact us (e.g., via email or contact form), we process your information to handle your inquiry. This processing is based on Art. 6(1)(b) GDPR (pre-contractual measures). The data we collect depends on the respective means of communication. Required fields are marked accordingly. As soon as your inquiry has been fully processed, we will delete your data—unless you have consented to further use (Art. 6(1)(a) GDPR) or there are other legal grounds for storage.

DATA PROCESSING FOR THE PURPOSE OF SHIPPING

To fulfill our contract with you (pursuant to Art. 6(1)(b) GDPR), we share your data with the shipping service providers we have commissioned, to the extent necessary for the delivery of your order.

Shipping service providers used

  • DHL (GO Green) – for shipping smaller items such as children’s tableware or accessories
  • GO! Express & Logistics – for shipping our ZAUNKÖNIG® Learning Tower (3-in-1)

In cases where shipping is handled directly by our manufacturers (drop shipping), we also share your data to the extent necessary for delivery.

The shipping service providers receive the data under their own responsibility regarding data protection, as they require it to independently carry out the shipping process. Further information on data processing by the shipping service providers can be found in the privacy policies of the respective providers.

Technical Processing via Shopify

The technical processing of shipping data (e.g., transfer of names, addresses, and order details for label creation or communication with shipping service providers) is handled by our shop provider Shopify, Shopify International Ltd., Dublin, Ireland. Shopify processes this data exclusively on our behalf and only for this purpose. The legal basis is Art. 6(1)(b) GDPR in conjunction with Art. 28 GDPR (Processing on Behalf of the Controller). Further information can be found in Shopify’s Privacy Policy at: https://www.shopify.de/legal/datenschutz.

Data Transfer to Shipping Providers for the Purpose of Delivery Notification

If you expressly grant us your consent (pursuant to Art. 6(1)(a) GDPR) during the ordering process or thereafter, we will share your phone number with the respective shipping provider so that they can coordinate the delivery date with you or notify you of it.

You can revoke your consent at any time—either by sending us a message (see Contact in this Privacy Policy) or directly to the shipping provider. For freight delivery, this is currently generally:

GO! Express & Logistics
Kirschhöhe 1
06188 Landsberg

After revocation, your data stored for this purpose will be deleted, provided there is no other legal basis for further storage or you have consented to further use.

DATA PROCESSING FOR PAYMENT PROCESSING

To process payments in our online shop, we work with the following payment service providers:

Prepayment

If you select the prepayment method, the data required to process the payment (e.g., name, IBAN, BIC, payment amount) will be transmitted to our bank, Consors Bank, account holder: Ursula Schreck. Data processing is carried out for the purpose of contract fulfillment in accordance with Art. 6(1)(b) GDPR.

PayPal

The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). Data transfer to the U.S. is based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://www.paypal.com/de/legalhub/paypal/pocpsa-full.

Data Processing for Transaction Processing

Depending on the selected payment method, we forward the data necessary for processing the payment transaction (e.g., name, payment amount, bank account details, credit card number) to the commissioned financial institutions or to the selected payment service provider, to the extent necessary for processing the payment. This serves the purpose of contract fulfillment in accordance with Art. 6(1)(b) GDPR. In some cases, the payment service providers collect the data required for processing the payment themselves, e.g., on their own website or via a technical integration into the ordering process. In this regard, the privacy policy of the respective payment service provider applies:

If you have any questions about our payment processing partners and the basis of our cooperation with them, please use the contact options described in this privacy policy.

Please note that the aforementioned payment service providers—especially if you are redirected to their own websites or embedded payment functions to make a payment—are independently responsible for processing your data in these cases. Data processing therefore does not take place on our behalf, but rather in accordance with the privacy policies of the respective providers. For more detailed information, please refer directly to the privacy policies of the payment service providers, which we have linked for you above.

Shopify Payments / Payment Processing via Shopify

To process payments in our online store, we also use the Shopify Payments service, offered by Shopify International Ltd., 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland. Depending on the selected payment method, Shopify Payments may rely on additional payment service providers (e.g., Visa, Mastercard, Maestro, Apple Pay, Google Pay, Klarna) for technical processing.

Data processing is based on Article 6(1)(b) of the GDPR (performance of a contract) and, where applicable, on Article 6(1)(f) of the GDPR (legitimate interest in secure and efficient payment processing).

Please note: For certain payment methods, particularly Klarna Invoice, the terms of use and privacy policies of the respective provider also apply. These will be displayed to you during the payment process. For Klarna, the terms and conditions of Klarna Bank AB (publ) apply—you can find further information directly at Klarna: https://www.klarna.com/de/datenschutz/.

Further information on data processing by Shopify Payments can be found at: https://www.shopify.de/legal/datenschutz.

Data processing for the purpose of fraud prevention and the optimization of our payment processes

Where applicable, we provide our service providers with additional data, which they use—along with the

data necessary for processing the payment—as our data processors for the purpose of fraud prevention and the optimization of our payment processes (e.g., invoicing, handling

disputed payments, accounting support). This serves, in accordance with Art. 6(1)(f) GDPR, to safeguard our legitimate

interests—which prevail following a balancing of interests—in protecting ourselves against fraud and in ensuring efficient payment management.

EMAIL MARKETING

Email Newsletter with Subscription

When you subscribe to our newsletter, we use the data required for this purpose or data you have provided separately to send you our email newsletter on a regular basis based on your consent in accordance with Article 6(1)(a) of the GDPR.

You can unsubscribe from the newsletter at any time by either sending a message to the contact address provided below or by clicking the link provided for this purpose in the newsletter. After unsubscribing, we will delete your email address from the recipient list, unless you have expressly consented to further use of your data in accordance with Art. 6(1)(a) GDPR or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.

We use the service provider Shopify Inc., 151 O’Farrell Street, San Francisco, CA 94107, USA, to send our newsletter; Shopify acts as a data processor on our behalf. Any transfer to a third country (e.g., the USA) is based on the EU Commission’s Standard Contractual Clauses. Further information regarding the processing of your data by Shopify can be found here: https://www.shopify.com/de/legal/datenschutz.

Our newsletter may contain so-called tracking technologies that enable us to perform statistical analyses (e.g., open rates, click behavior). This analysis is conducted to optimize our content based on your consent pursuant to Art. 6(1)(a) GDPR.

USE OF COOKIES AND OTHER TECHNOLOGIES

We use cookies and similar third-party technologies on our website. Unless otherwise specified below, the use of these technologies is based on your consent in accordance with Art. 6(1)(a) GDPR. Your consent is managed via the Pandectes GDPR Compliance consent management tool, which appears when you visit our website and can be accessed at any time via the “Cookie Settings” link.

Once the purpose has ceased and the use of the respective technology has ended, we will delete the data collected in this context, unless you have expressly consented to further use or there is a legally permissible basis for use beyond this. An overview of all cookies used, storage periods, providers used, and their legal bases can be found directly in the “Pandectes GDPR Compliance” tool.

The processing of cookies and similar technologies occurs regardless of whether access is made as a private individual or as part of business use.

Hosting via Shopify and technically necessary cookies

Our online store is operated via Shopify (Shopify International Ltd., 2nd Floor, 1–2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland). Shopify uses its own cookies and similar technologies to provide basic functions—e.g., for the shopping cart, checkout, security measures, or session management. These cookies are considered technically necessary and are processed without consent on the basis of Section 25(2) of the German Teleservices Data Protection Act (TTDSG) and Article 6(1)(b) and (f) of the GDPR. Further information on the cookies used by Shopify can be found here: https://www.shopify.com/legal/cookies.

Use of Google Services

Google Analytics 4

For the purpose of website analysis, we use Google Analytics 4, a web analytics service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). In doing so, data such as IP address, time of visit, device information, and user actions are collected and stored. This information is processed in a pseudonymized manner and aggregated into user profiles.

The IP address is truncated on a server in the EU before being transferred to the U.S. Further processing is carried out on the basis of a data processing agreement with Google in accordance with Art. 28 GDPR. The legal basis is—provided you have given your consent—Art. 6(1)(a) GDPR. If you do not give your consent, no cookies will be stored and no data will be processed. Google may nevertheless receive so-called “pings” (basic technical data such as browser type, screen resolution, consent status), which are used for statistical modeling within the framework of Google Consent Mode v2.

Google Ads / Conversion Tracking

We also use Google Ads, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to evaluate and optimize our advertising efforts. If consent is given (Art. 6(1)(a) GDPR), data such as ad clicks, IP address (truncated), URLs of visited pages, and technical characteristics are collected and processed. Cookies or comparable technologies may be used to enable recognition across multiple page views.

Here, too—even without consent—minimal technical data (“pings”) may be transmitted to Google, which is used exclusively for statistical modeling within the scope of Google Consent Mode v2.

Transfer to Third Countries for Google Services

Google may transfer personal data to the United States. In the absence of an adequacy decision by the European Commission, the transfer is based on the Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

Further information can be found in the respective privacy policy:

SOCIAL MEDIA

We communicate with you and provide content on our website and via platforms such as Instagram, Facebook, and Pinterest. This communication is directed at both private customers (B2C) and business customers (B2B).

Integration of Social Media Buttons

On our website, we use social media buttons from Facebook, Instagram, and Pinterest. These are integrated solely as HTML links. When you visit our website, no connection is established with the providers’ servers. Only when you click on one of the buttons is the respective network’s page opened, where data may be processed.

If social media services are integrated via our shop system (Shopify)—e.g., as a plugin, feed, or pixel—we will indicate this separately in the relevant sections of this privacy policy (e.g., Cookies, Tracking).

Our Social Media Presence

We maintain online presences on social networks and platforms to communicate with customers and interested parties active there and to provide information about our products.

Legal basis

If you have given your consent to the respective provider (Art. 6(1)(a) GDPR), personal data will be processed by the platforms for market research and advertising purposes during your visit. In doing so, pseudonymized user profiles may be created and cookies may be used. Please note that when using these platforms, data may also be processed outside the EU/EEA, such as in the U.S. Unless an adequacy decision is in place, data transfers are based on the EU Commission’s Standard Data Protection Clauses.

Joint controllership

For certain data processing operations (e.g., Facebook/Instagram Insights), there is joint controllership with the respective provider in accordance with Art. 26 GDPR.

Provider overview:

Please note that when interacting with our social media accounts (e.g., likes, comments, direct messages), additional data processing may occur by the platform providers over which we have no control.

If you have questions regarding data processing by the respective platforms or wish to exercise your data subject rights, you may contact both us and the respective provider.

DATA SECURITY

To secure your data, we use up-to-date technical and organizational measures (TOMs) in accordance with Art. 32 GDPR to protect it from loss, manipulation, or unauthorized access. Your data is transmitted in encrypted form via the HTTPS protocol using SSL/TLS encryption.

Our online store is operated via the Shopify platform. Shopify employs modern security standards, including firewalls, intrusion detection systems, regular security updates, and certified data centers. All payments are processed in compliance with PCI-DSS (Payment Card Industry Data Security Standard). You can find more information about data security at Shopify here: https://www.shopify.com/security.

CHANGES TO THIS PRIVACY POLICY

We reserve the right to amend this Privacy Policy to adapt it to changed legal requirements or changes to our services—such as the introduction of new features, the use of additional services (e.g., via Shopify apps), or changes to our platform (e.g., by Shopify itself).

We will notify you of significant changes—if necessary—via email or upon your next visit to our website.

Until then, the current Privacy Policy available on this website applies to your subsequent visits.

CONTACT INFORMATION

If you have questions regarding the collection, processing, or use of your personal data, or if you wish to request information, correction, restriction, or deletion of data, as well as to revoke consent or

objecting to a specific use of data, please contact us by email at hallo@znkg.de or by mail at:

ZAUNKÖNIG® | Ursula Schreck
Am Kirchtor 18
06108 Halle (Saale)