Privacy policy

Last updated: [16/11-2025]

At Zoll Antiques, we take the protection of your personal data seriously.
 This privacy policy explains what information we collect, why we collect it, how we use it, and the rights you have under applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

Data Controller

Zoll Antiques
 Store Kongensgade 77, Basement
 1264 Copenhagen K
 CVR: 29479690
Email: info@zollantiques.dk

Personal data we collect

When you make a purchase

To complete and deliver your order, we collect the following information:

  • Name
  • Address
  • Delivery address (if different)
  • Email address
  • Phone number
  • Payment information (processed by our payment providers)
  • IP address (automatically logged for security and fraud prevention)

When you create a search agent

When you use our search agent feature, we collect:

  • Your email address
  • The search terms you enter

This allows us to notify you automatically when we receive products that match your criteria.

When you contact us

If you contact us with questions, feedback, or complaints, we process the information you provide, typically:

  • Name
  • Email address
  • Order number (if relevant)
  • The content of your message

Analytics and technical information

When you visit our website, we collect anonymised or pseudonymised data via cookies, including:

  • IP address (anonymised via Google Analytics)
  • Browser and device information
  • Visitor behaviour on the website (anonymised)

Purpose and legal basis

Completing your order

Purpose: To process and deliver your purchase
 Legal basis: GDPR Art. 6(1)(b) – performance of a contract

Payment processing

Purpose: Completing payment and preventing fraud
 Legal basis: Art. 6(1)(b) and Art. 6(1)(f)

Search agent

Purpose: To send you automatic notifications about products that match your search terms
 Legal basis: GDPR Art. 6(1)(f) – legitimate interest
 You may delete your search agent at any time.

Customer service

Purpose: Answering your questions and handling complaints
 Legal basis: Art. 6(1)(b) and Art. 6(1)(f)

Website functionality and analytics

Purpose: Website operation, improvement, and security
 Legal basis: Art. 6(1)(f)

Automatic notifications from the search agent

When you create a search agent, you will receive emails when new products match your criteria.
 These are not marketing emails and do not require newsletter consent.
 You may delete or deactivate your search agent at any time.

Retention period

  • Purchase-related data is stored for 5 years in accordance with bookkeeping requirements
  • Search agent data is stored for 12 months of inactivity, or until you delete it
  • Customer support messages are kept only as long as necessary
  • Analytics data follows Google Analytics retention settings

 

Recipients and data processors

We do not sell your personal data.
We only share it with trusted partners when necessary to operate our business.

Payment providers

Your payment information is processed securely by:

  • PayPal
  • Pensopay MobilePay
  • Pensopay (credit cards)

These providers are independent data controllers for payment-related data.

Delivery

For order delivery, we share your name, address, phone number, and email with:

  • Coolrunner
  • PostNord
  • DAO
  • Bring

Hosting and webshop

Our online store is hosted on:

  • Shopify (Canada/USA/EU – GDPR compliant via Standard Contractual Clauses)

Search agent and email delivery

The search agent feature and automatic product notifications are operated using:

  • Cloudflare (Workers + KV/Database) – data processor
  • Resend – email service provider (data processor)
    As Resend may process data outside the EU, data transfers are protected using Standard Contractual Clauses (SCCs).

Analytics

  • Google Analytics (GA4) – with IP anonymisation enabled

Cookies

We use cookies for:

  • essential website functionality
  • improving the user experience
  • anonymised analytics

You can manage or delete cookies via your browser settings at any time.

Transfers outside the EU

Some of our processors (Shopify, Resend, Cloudflare, Google) may process data outside the EU.

These transfers are safeguarded by:

  • Standard Contractual Clauses (SCCs)
  • Technical and organisational measures
  • IP anonymisation (Google Analytics)

Your rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate information
  • Request deletion of your data
  • Restrict processing
  • Object to processing under legitimate interest
  • Receive your data in a portable format
  • File a complaint with your national data protection authority (e.g., Datatilsynet in Denmark)

To exercise your rights, contact: zollantiques77@gmail.com

Security

We use appropriate technical and organisational measures to keep your personal data secure and prevent unauthorised access, loss, or misuse.

Changes to this policy

We may update this privacy policy if our data processing changes or if required by law.
 The latest version will always be available on our website.