0

PRIVACY POLICY AND PERSONAL DATA PROTECTION (GDPR)

Zelli of Sweden AB – www.zaza-lili.com
Last updated: February 2026

1. Identity of the Data Controller

Zelli of Sweden AB
Address: Sveavägen 13, 544 32 Hjo, Sweden
Registered with the Västra Götaland Register, Skövde, under number 559040-2888
Share capital: SEK 50,000
Represented by: Ms. Madeleine Jarl
Email: [email protected]
Phone: +46760066905

Website hosting provider:
o2switch, Chemin des Pardiaux, 63000 Clermont-Ferrand, France
Phone: +33 4 44 44 60 40

Ms. Madeleine Jarl acts as the data controller for the personal data collected via the website www.zaza-lili.com.
She also serves as the Data Protection Officer (DPO).

2. Personal Data Collected

When you place an order for ZAZA&LILI jewelry, you are required to provide certain personal information, including:
first and last name, postal address, email address, telephone number, and information necessary for billing and delivery.

This information is essential to process your order and fulfill our contractual obligations.
Without this data, we would be unable to accept or process your purchase.

3. Legal Basis and Purposes of Processing

Your personal data is processed in accordance with Regulation (EU) 2016/679 (GDPR) and the Swedish Dataskyddsförordningen.

The processing purposes and legal bases are as follows:

  • Order management and fulfillment: performance of a contract (Article 6(1)(b))
  • Customer service and returns: legitimate interest (Article 6(1)(f))
  • Payment processing and fraud prevention: legitimate interest (Article 6(1)(f))
  • Accounting and tax obligations: legal obligation (Article 6(1)(c))
  • Marketing and newsletters: consent (Article 6(1)(a))
  • Website traffic analysis: legitimate interest (Article 6(1)(f))

4. Recipients of the Data

Personal data is neither sold nor exchanged.
It may be disclosed only to the following recipients, strictly for the purposes described above:

  • Payment service providers (PayPal, Stripe, Qliro)
  • Logistics providers (PostNord, FedEx)
  • Website hosting provider (o2switch)
  • Contractual data processors bound by a data processing agreement (Article 28 GDPR)

5. International Data Transfers

Some partners may be located outside the European Union.
In such cases, data transfers are governed by:

  • an adequacy decision issued by the European Commission, or
  • Standard Contractual Clauses (SCCs).

You may request a copy of these safeguards by writing to: [email protected].

6. Data Security

All sensitive information (payment details, login data) is encrypted using SSL technology.
Appropriate technical and organizational measures are implemented to ensure the confidentiality, integrity, and availability of personal data, including access controls, firewalls, and secure backups.

7. Data Retention Period

Your personal data is retained for 5 years from your last interaction (order, contact, or login).
Data relating to analytical cookies is retained for a maximum of 24 months.
Accounting and financial data is retained in accordance with applicable legal obligations.

8. Your Rights

In accordance with Articles 15 to 22 of the GDPR, you have the following rights:

  • Right of access, rectification, erasure, restriction of processing, and data portability
  • Right to object, in particular to commercial prospecting
  • Right to withdraw your consent at any time
  • Right to lodge a complaint with the IMY (Integritetsskyddsmyndigheten)

Any request may be sent to [email protected] or to the registered office of Zelli of Sweden AB.

9. Cookies

Our website uses cookies to ensure its proper functioning and to improve your user experience.

Technical cookies (WooCommerce, PayPal):

  • woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session: management of shopping carts and customer sessions
  • PayPal cookies: securing payment transactions

Analytical cookies:

  • Google Analytics: __utma, __utmb, __utmz, _ga, _gid
  • MediaMath: uuid, uuidc
  • Akamai: 01AI

These cookies are used solely for statistical and anonymous purposes.

We use cookies only to ensure that the website functions as effectively as possible, both technically and in terms of content. Google Analytics and MediaMath are used to monitor and improve website content.

We do not process any user-specific information. We are interested only in aggregated data, such as the number of visitors to the website and which pages attract interest. This allows us to ensure that the content of our website remains relevant.

Although Google Analytics has the technical capability to process personal data, we do not use this functionality, as it is not necessary for our purposes. Google Analytics is used solely to develop and improve the website. Our legal basis for using cookies is therefore our legitimate interest in developing the website based on how it is used, regardless of individual users.

We do not process personal data through cookies.
If you nevertheless object to the use of cookies, you have the option to opt out. If you wish to actively opt out, please click the relevant link for further information.
Please note that if you choose not to accept cookies, certain website features may be limited.

Cookies

Cookies are used to give you, as a visitor, access to various functions. We do this to ensure that the website functions as effectively as possible. zaza-lili.com also uses cookies to improve the website.

There are two main types of cookies:

  1. Persistent cookies remain on the visitor’s computer for a specified period of time.
  2. Session cookies are temporarily stored in the computer’s memory while a visitor is browsing a website. Session cookies disappear when you close your browser.

Technical cookies required for the operation of the website

These are cookies used to provide services or to remember settings in order to improve your visit and user experience on the website. The information shared is used solely to provide the service, product, or functionality, and never for any other purpose.

More information can be found at the following link:

Cookies used

DomainCookie nameDescriptionDuration
PayPal.comx-pp-s, tsrce, ts_c, ts, enforce_policy, X-PP-SILOVER, LANG, akavpau_ppsd, nsid, AKDC, PYPFPayPal is used to accept payments on our online store. The above cookies are set via the payment widget integrated into the checkout page through a pop-up window. PayPal also uses cookies on its own website to recognize customers and to shorten login time by verifying email addresses in the PayPal database.n/a
zaza-lili.comwoocommerce_cart_hashContains information about the shopping cart as a whole and helps WooCommerce detect when cart data changes.n/a
zaza-lili.comwoocommerce_items_in_cartContains information about the shopping cart as a whole and helps WooCommerce detect when cart data changes.n/a
zaza-lili.comwp_woocommerce_sessionContains a unique code for each customer so that WooCommerce knows where to find the cart data in the database for each customer.n/a

Analytical cookies for monitoring and improving website content

As described above, we use Google Analytics and MediaMath to analyze how many people visit the website and which pages are of interest to visitors. This information is used to develop the website and improve marketing activities.

We also use Akamai to collect anonymous technical information about visitors.

Further information is available at the following links:

Analytical cookies used

DomainCookie nameDescriptionDuration
mathtag.comuuidcMediaMath Inc., targeting / advertising392 days
mathtag.comuuidMediaMath Inc., targeting / advertising392 days
Google Analytics__utmaUsed to distinguish users and sessions. Created when the JavaScript library executes and no existing __utma cookie is present. Updated each time data is sent to Google Analytics.2 years
Google Analytics__utmtUsed to throttle request rate.10 minutes
Google Analytics__utmbUsed to determine new sessions or visits. Created when the JavaScript library executes and no existing __utmb cookie is present. Updated each time data is sent to Google Analytics.30 minutes
Google Analytics__utmcNot used in ga.js. Historically used with __utmb to determine whether the user was in a new session or visit.Session
Google Analytics__utmzStores the traffic source or campaign that explains how the user reached the website. Created when the JavaScript library executes and updated each time data is sent to Google Analytics.6 months
Google Analytics__utmvUsed to store custom visitor-level variable data. Created when a developer uses the _setCustomVar method. Updated each time data is sent to Google Analytics.2 years
Google Analytics_gatUsed to limit the rate of requests. If Google Analytics is deployed via Google Tag Manager, this cookie is named dc_gtm.1 minute
Google Analytics_gidUsed to distinguish users.24 hours
Google Analytics_gaUsed to distinguish users.2 years
akamai.com / abmr.net01AIUsed to collect anonymous technical information about the user’s browser, operating system, IP address, screen resolution, and website navigation.1 year

10. Automated decision-making and profiling

No automated decision-making or individual profiling is carried out. All analyses are purely statistical and anonymized.

11. Accounting data and legal obligations

Certain information (invoices, transactions, order history) must be retained to comply with our legal and fiscal obligations. Such data cannot be deleted before the expiration of the legal retention period (5 years).

12. Policy updates

This policy may be updated at any time to remain compliant with legislation or internal practices. The most recent version is available on www.zaza-lili.com under the “Privacy Policy” section.

13. Contact

For any questions regarding the protection of your personal data:
📧 [email protected]
📞 +46760066905
📮 Zelli of Sweden AB, Sveavägen 13, 544 32 Hjo, Sweden