Datenschutzerklärung

Privacy Policy

Last updated: August 7, 2026

This Privacy Policy describes how TØMRERMESTER BO HVID ApS ("we", "us", or "our") collects, uses, stores, discloses, and otherwise processes personal data when you visit, use, or make a purchase from zhglxw.shop (the "Website").

This Privacy Policy is intended in particular for customers and visitors located in Germany and the European Economic Area ("EEA") and is designed to provide information in accordance with the General Data Protection Regulation ("GDPR") and applicable German data protection and privacy laws.

1. Data Controller

The controller responsible for the processing of your personal data through this Website is:

TØMRERMESTER BO HVID ApS
Maglekærvej 20
4600 Køge
Denmark

CVR No.: 26552877
Email: support@zhglxw.shop
Phone: +45 23 28 52 60
Website: zhglxw.shop

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us using the details above.

2. Personal Data We Collect

Depending on how you use our Website and services, we may collect the following categories of personal data.

Contact and Identification Information

This may include:

First and last name
Billing address
Shipping address
Postal code
City
Country
Email address
Telephone number

Order and Transaction Information

When you place an order, we may process information such as:

Products ordered
Order number
Order value
Order date
Shipping and delivery information
Returns and refund information
Customer service history
Cash on Delivery payment status

Our store currently offers Cash on Delivery (COD). Where payment is collected by a carrier or logistics partner, information necessary to collect and confirm the payment may be shared with that partner.

Account Information

If customer accounts are available on our Website and you create an account, we may process information such as your:

Name
Email address
Account login information
Saved addresses
Order history
Account preferences

Communications

If you contact us by email, telephone, contact form, or another communication channel, we may process:

Your contact information
The content of your message
Order information
Previous correspondence
Information necessary to resolve your request

Device and Usage Information

When you visit our Website, certain technical information may be collected automatically, including:

IP address
Browser type and version
Device type
Operating system
Referring website
Pages visited
Date and time of access
Session information
Cookie identifiers
Website interaction information
Technical error and security information

The exact information collected depends on the Website functions, Shopify services, cookies, and other technologies that are enabled.

3. How We Collect Personal Data

We may collect personal data:

Directly from you when you place an order
When you create or use a customer account
When you contact customer service
When you subscribe to marketing communications
Automatically when you browse or interact with our Website
From Shopify and service providers that support our online store
From shipping, logistics, and Cash on Delivery service providers
From fraud prevention and security service providers where applicable

4. Purposes and Legal Bases for Processing

We process personal data only where there is an appropriate legal basis under applicable data protection law.

Performance of a Contract — Article 6(1)(b) GDPR

We process personal data where necessary to enter into or perform a contract with you, including to:

Process your order
Confirm your purchase
Arrange shipping and delivery
Process Cash on Delivery transactions
Communicate about your order
Handle returns, refunds, and complaints
Provide customer support
Manage customer accounts where applicable

Compliance with Legal Obligations — Article 6(1)(c) GDPR

We may process and retain information where required to comply with legal obligations, including:

Accounting obligations
Tax obligations
Recordkeeping obligations
Consumer protection requirements
Regulatory requirements
Valid requests from competent public authorities

Legitimate Interests — Article 6(1)(f) GDPR

Where permitted by law, we may process personal data where necessary for our legitimate interests or those of a third party, provided that your fundamental rights and freedoms do not override those interests.

These interests may include:

Protecting our Website and business against fraud and abuse
Preventing unauthorized transactions
Ensuring network and information security
Improving our Website and customer service
Managing and defending legal claims
Maintaining business records
Understanding the performance of our Website using privacy-compliant methods

Where applicable, you have the right to object to processing based on legitimate interests.

Consent — Article 6(1)(a) GDPR

Where consent is legally required, we will process your data only after obtaining your consent.

This may apply in particular to:

Non-essential cookies
Advertising technologies
Certain analytics technologies
Personalized marketing
Email marketing where consent is required

You may withdraw your consent at any time with effect for the future.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Shopify

Our online store is hosted and operated using the Shopify e-commerce platform.

Shopify provides the technical infrastructure that enables us to operate the Website, display products, process orders, maintain store functionality, and provide related e-commerce services.

As a result, personal data relating to visitors and customers may be processed through Shopify's systems.

Depending on the particular processing activity, Shopify may process certain personal data on our behalf and may also process certain information for its own purposes where permitted by applicable law.

For further information about Shopify's processing practices, you may review Shopify's current privacy information on Shopify's official website.

6. Shipping and Cash on Delivery

Because our store offers free shipping and Cash on Delivery, we need to provide certain personal data to shipping, logistics, and delivery partners in order to fulfil your order.

The information shared may include:

Your name
Shipping address
Postal code
Telephone number
Order reference
Delivery instructions
Amount to be collected upon delivery

These providers may process your information to:

Deliver your order
Contact you regarding delivery
Arrange a delivery date or time
Collect Cash on Delivery payments
Confirm delivery
Handle failed or returned deliveries

We disclose only the information reasonably necessary for these purposes.

7. Service Providers and Other Recipients

We may disclose personal data to service providers where necessary to operate our business and provide our services.

These recipients may include:

Shopify and e-commerce infrastructure providers
Website hosting and technical service providers
Shipping and logistics companies
Cash on Delivery collection partners
Customer support providers
IT and cybersecurity providers
Analytics providers where permitted
Marketing and advertising providers where consent or another lawful basis exists
Accountants, auditors, legal advisers, and other professional advisers
Government authorities, courts, regulators, or law enforcement agencies where disclosure is legally required

Service providers that process personal data on our behalf are required, where applicable, to process that data in accordance with our instructions and applicable data protection requirements.

8. Cookies and Similar Technologies

Our Website may use cookies, pixels, local storage, and similar technologies.

Cookies may be used for different purposes.

Strictly Necessary Technologies

Some technologies are necessary for the operation of the Website and may be used to:

Keep the Website secure
Maintain shopping cart functionality
Remember essential session information
Complete checkout
Prevent fraud
Provide services specifically requested by you

Where applicable law allows, these technologies may be used without your consent because they are strictly necessary to provide the requested service.

Analytics, Advertising and Other Non-Essential Technologies

Non-essential cookies or similar technologies used for purposes such as:

Analytics
Advertising
Marketing measurement
Personalization
Cross-site tracking

will be activated only where we have an appropriate legal basis and, where legally required, after you have provided your consent.

You can manage your choices through the cookie consent tool or privacy settings available on our Website.

You may withdraw or change your consent at any time for the future.

Disabling certain cookies may affect some non-essential Website features.

9. Direct Marketing

If you subscribe to marketing communications, we may use your contact details to send information about products, promotions, or offers where permitted by law.

Where consent is required, we will send such communications only after obtaining your consent.

You may unsubscribe at any time by:

Using the unsubscribe option included in the relevant marketing communication; or
Contacting us at support@zhglxw.shop.

You have the right to object at any time to the processing of your personal data for direct marketing purposes.

If you object, we will no longer process your personal data for such direct marketing.

10. International Data Transfers

Some of our service providers, including providers involved in operating the Shopify platform and related technical services, may process personal data outside Germany or the EEA.

Where personal data is transferred to a country outside the EEA and that country does not benefit from an applicable adequacy decision, we will rely on an appropriate transfer mechanism where required by law.

Such safeguards may include:

European Commission Standard Contractual Clauses
Approved Binding Corporate Rules
An applicable adequacy decision
Another legally recognized transfer mechanism

Where required, additional measures may also be implemented to protect personal data.

11. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to:

Complete and document transactions
Fulfil orders
Provide customer service
Handle returns and refunds
Resolve disputes
Establish, exercise, or defend legal claims
Comply with accounting, taxation, and other legal obligations
Prevent fraud and maintain security

The exact retention period depends on the type of information, the purpose of processing, and applicable statutory retention requirements.

When personal data is no longer required, we will delete or anonymize it in accordance with applicable law.

12. Data Security

We use appropriate technical and organizational measures designed to protect personal data against:

Unauthorized access
Unlawful processing
Accidental loss
Destruction
Alteration
Unauthorized disclosure

However, no method of transmission over the Internet or electronic storage system can guarantee absolute security.

You are responsible for keeping any account credentials confidential and should contact us if you believe that your account or personal information has been compromised.

13. Your GDPR Rights

If the GDPR applies to the processing of your personal data, you may have the following rights, subject to applicable legal requirements and exceptions:

Right of Access

You may request confirmation as to whether we process personal data concerning you and request access to that personal data.

Right to Rectification

You may ask us to correct inaccurate personal data or complete incomplete information.

Right to Erasure

You may request deletion of your personal data where the legal requirements for erasure are satisfied.

Right to Restriction of Processing

You may request that processing of your personal data be restricted in certain circumstances.

Right to Data Portability

Where the applicable requirements are met, you may receive personal data you have provided to us in a structured, commonly used, machine-readable format and may have the right to transmit that data to another controller.

Right to Object

Where processing is based on Article 6(1)(e) or Article 6(1)(f) GDPR, you may have the right to object to processing based on reasons arising from your particular situation.

You may object at any time to the processing of your personal data for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.

Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

In particular, you may contact a supervisory authority in the EU/EEA Member State of your habitual residence, place of work, or place of the alleged infringement.

14. Exercising Your Rights

To exercise any applicable privacy right, please contact:

TØMRERMESTER BO HVID ApS

Email: support@zhglxw.shop
Phone: +45 23 28 52 60

For security reasons, we may need to verify your identity before responding to certain requests.

We will process valid requests within the time limits required by applicable data protection law.

Generally, exercising your statutory data protection rights is free of charge. However, applicable law may permit a reasonable fee or refusal of a request where a request is manifestly unfounded or excessive.

15. Required Information for Orders

Certain personal data is necessary for us to enter into and perform a purchase contract with you.

For example, we generally require your:

Name
Delivery address
Contact information
Order information

Because we use Cash on Delivery, certain delivery and contact information may also be necessary for the carrier to deliver the order and collect payment.

If you do not provide information that is necessary to process and deliver your order, we may be unable to accept or fulfil the order.

16. Automated Decision-Making

We do not ordinarily make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

We may use automated systems for fraud prevention, security, or Website operation. Where processing constitutes automated decision-making subject to specific GDPR requirements, we will provide any additional information and safeguards required by applicable law.

17. Third-Party Websites

Our Website may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices of independent third-party websites.

We recommend reviewing the privacy policy of any third-party service before providing personal data to it.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

Changes to our Website or services
Changes to our data processing practices
New service providers or technologies
Legal or regulatory requirements
Operational or security changes

The current version will be published on zhglxw.shop, together with the applicable "Last updated" date.

Where required by law, we will provide additional notice or request renewed consent before making material changes affecting consent-based processing.

19. Contact Information

For questions, concerns, complaints, or requests relating to privacy or the processing of your personal data, please contact: