Privacy policy

PRIVACY POLICY

Last updated: 22 January 2026

1. GENERAL INFORMATION

This Privacy Policy explains what happens to your personal data when you visit and use our website www.zerrromusic.com (“Website”) and when you purchase or interact with our services (“Services”). Personal data is any information that can be used to identify you directly or indirectly.

We process your personal data in accordance with applicable data protection laws, in particular the General Data Protection Regulation (“GDPR”). We take the protection of your data seriously and implement appropriate technical and organizational measures to protect it.

2. DATA CONTROLLER

The data controller responsible for processing personal data on this Website is:

zerrro
Metzinger Klein Linsenmeier GbR
Höhenweg 23
66133 Saarbrücken
Germany
Email: info@zerrromusic.com

3. ACCESS DATA (SERVER LOG FILES)

When you visit our Website, our hosting infrastructure (Shopify) automatically collects and stores access data in server log files. This data may include:

  • Browser type and browser version

  • Operating system used

  • Referrer URL (the previously visited page)

  • Hostname of the accessing device/system

  • Date and time of the request

  • IP address (possibly in anonymized or truncated form)

  • Requested page, amount of data transferred, status information (HTTP status codes), and other technical protocol data

We generally cannot and do not intend to assign this data to a specific person.

Legal basis: Art. 6(1)(f) GDPR (legitimate interests) to ensure the stability, security, and proper functioning of the Website (e.g., troubleshooting, abuse prevention, and system security).

4. COOKIES AND CONSENT MANAGEMENT

We use cookies and similar technologies to enable core website functions and to provide and improve our Services. Cookies are small text files stored on your device.

4.1 Essential (Required) Cookies

Essential cookies are necessary for the Website to function (e.g., shopping cart, login/session management, security). These cookies are processed on the basis of Art. 6(1)(f) GDPR (legitimate interests) and, where applicable, Art. 6(1)(b) GDPR (performance of a contract), because they are required for providing the Services you request. Where processing is based on Art. 6(1)(f) GDPR, you have the right to object at any time for reasons arising from your particular situation.

4.2 Optional Cookies (Marketing / Measurement / Personalization)

Where we use optional cookies (e.g., for marketing or measurement), they are set only if you give consent via our cookie preferences banner/settings (Art. 6(1)(a) GDPR). You can change or withdraw your consent at any time via the cookie preferences on our Website.

You can also configure your browser settings to block or delete cookies. Please note that disabling cookies may limit Website functionality.

5. NEWSLETTER (SHOPIFY EMAIL)

If you subscribe to our newsletter, we will send you emails about products, offers, and updates. Subscription is based on your explicit consent (Art. 6(1)(a) GDPR). We use a double opt-in procedure to verify your subscription.

For sending newsletters we use Shopify Email (a Shopify service). Your email address and any related subscription metadata are processed for the purpose of sending the newsletter and managing subscriptions.

You can withdraw your consent at any time by clicking the unsubscribe link in any newsletter email or by contacting us at zerrromusic@gmail.com.

6. CONTACT BY EMAIL (CUSTOMER SUPPORT)

If you contact us by email, we will process the personal data you provide (e.g., name, email address, message content) to handle your request.

Legal basis:

  • Art. 6(1)(b) GDPR if your request relates to a contract or pre-contractual measures (e.g., order questions, support for purchased products)

  • Art. 6(1)(f) GDPR for general inquiries and our legitimate interest in responding to messages and maintaining business communication

We keep contact communications only as long as necessary and in accordance with statutory retention periods.

7. CUSTOMER ACCOUNT

If you create a customer account, we process the data necessary for account creation and use (e.g., name, email address, password, order history).

Legal basis: Art. 6(1)(b) GDPR (performance of a contract / provision of account functionality).

8. ONLINE SHOP, ORDERS, AND PAYMENT PROCESSING

To process purchases in our online shop, we process personal data required for the conclusion and performance of the contract (Art. 6(1)(b) GDPR), including:

  • Identity and contact data

  • Order data

  • Payment-related data

Our shop is hosted on Shopify.

8.1 Shopify (Hosting and Store Platform)

We use Shopify as our store platform and hosting provider.

8.2 Payment Methods

We offer in particular:

  • Shopify Payments (including card payments, Apple Pay, Google Pay)

  • PayPal

  • Klarna

Legal basis: Art. 6(1)(b) GDPR.

Payment providers process data under their own responsibility. Please refer to their privacy policies.

9. MARKETING AND ADVERTISING (META / FACEBOOK & INSTAGRAM PIXEL)

If you give consent, we use Meta Pixel for advertising, conversion measurement, and remarketing.

Provider: Meta Platforms Ireland Limited.

Data processed may include:

  • Visited pages, events (e.g., purchases)

  • Device information, identifiers, IP address

Legal basis: Art. 6(1)(a) GDPR (consent).

Meta may transfer data to third countries (e.g., USA). Transfers are based on Standard Contractual Clauses or equivalent safeguards.

We and Meta Platforms Ireland Limited are joint controllers within the meaning of Art. 26 GDPR for data processing via Meta Pixel.

10. PRODUCT REVIEWS (JUDGE.ME)

We use Judge.me to collect and display product reviews.

Provider: Judge.me Ltd.

When you submit a review, the following data may be processed:

  • Name or nickname

  • Email address

  • Review content

  • Product reference

  • IP address and technical metadata

Reviews may be publicly visible.

Legal basis:

  • Art. 6(1)(b) GDPR (customer relationship), and/or

  • Art. 6(1)(f) GDPR (legitimate interest in transparent feedback), and/or

  • Art. 6(1)(a) GDPR (consent during submission)

Judge.me may process data outside the EU/EEA using appropriate safeguards.

11. RECIPIENTS AND DATA SHARING

We do not sell your personal data. Data is shared only where necessary, e.g.:

  • Shopify

  • Payment providers

  • Shopify Email

  • Judge.me

  • Meta

  • Authorities or legal advisors where required

12. INTERNATIONAL DATA TRANSFERS

Some providers (e.g., Shopify, Meta, Judge.me) may process data outside the EU/EEA. Transfers are protected by Standard Contractual Clauses or adequacy decisions.

13. DATA RETENTION

We store personal data only as long as necessary. Legal retention obligations (e.g., tax law) may require storage for up to 10 years.

14. YOUR RIGHTS

You have the following rights under the GDPR:

  • Right of access (Art. 15)

  • Right to rectification (Art. 16)

  • Right to erasure (Art. 17)

  • Right to restriction (Art. 18)

  • Right to data portability (Art. 20)

  • Right to object (Art. 21)

  • Right to withdraw consent (Art. 7(3))

  • Right to lodge a complaint (Art. 77)

Supervisory authority:

Independent Data Protection Center Saarland
poststelle@datenschutz.saarland.de
https://www.datenschutz.saarland.de

15. SECURITY (SSL/TLS)

We use SSL/TLS encryption to protect transmitted data.

16. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy when necessary. The current version on our Website applies.

— END OF PRIVACY POLICY —