1. Introduction

We are pleased about your visit to our website zahaglobal.co and your interest in our company. Protecting your personal data, such as date of birth, name, telephone number, address, etc., is important to us. This privacy policy informs you about the processing of your personal data when you visit our website.

Our data protection practices comply with the Swiss Federal Data Protection Act (DSG) and the EU General Data Protection Regulation (GDPR). The following privacy policy fulfills the information obligations under Art. 19 ff. DSG and Art. 13 ff. GDPR.

2. Controller

The controller within the meaning of Art. 5(j) DSG or Art. 4 No. 7 GDPR is the person who decides on the purposes and means of processing personal data. For our website, the controller is:

3. Provision of the Website and Creation of Log Files

3.1. Data Collected

When you access our website, our system automatically records data, including:

• Browser type and version
• Operating system
• Host name of the accessing computer
• IP address
• Date and time of access
• Accessed resources (e.g., images, files)
• Referrer website
• Success notification of the access
• Amount of data transferred

This data is stored in log files and does not allow for the identification of individual users.

3.2. Legal Basis

• Art. 6 para. 1 DSG
• Art. 6 para. 2 DSG or Art. 2 ZGB
• Art. 6 para. 1 lit. f GDPR (legitimate interest)

3.3. Purpose

Data is stored temporarily to ensure the functionality, security, and optimization of the website and to combat misuse or errors.

3.4. Duration of Storage

Data is deleted after three months unless required for troubleshooting or legal obligations.

3.5. Rights

You may request restriction, correction, or deletion of your data under Art. 16-18 and Art. 21 GDPR.

4. Special Features of the Website

4.1. Order Form

• Data Collected: Information entered in the form fields (e.g., name, address).
• Legal Basis: Art. 6 para. 1 DSG, Art. 6 para. 1 lit. b GDPR.
• Purpose: Process your order and fulfill or initiate contracts.
• Storage Duration: Data is deleted after the order is processed and no legal retention periods apply (typically 10 years).
• Rights: You can restrict processing, object to processing, or request data correction or deletion.
• Necessity: Mandatory fields are required to process your order.

4.2. Contact Form

• Data Collected: Information entered in the contact form.
• Legal Basis: Art. 6 para. 1 DSG, Art. 6 para. 1 lit. a GDPR.
• Purpose: Process specific contact requests and provide confirmation emails.
• Storage Duration: Data is deleted after the request is processed, unless required by law.
• Rights: Restrict processing, object, or request correction or deletion.
• Necessity: Use of the form is voluntary, and other contact options are available.

5. Disclosure to Third Parties

Personal data may be disclosed to third parties under the following conditions:

• Debt collection service providers, authorities, or private individuals entitled to the data under legal provisions, court decisions, or official orders.
• Authorities for initiating legal proceedings or protecting our rights.

6. Statistical Evaluation and Web Tracking

6.1. Data Collected

We collect non-personalized data such as IP address, accessed files, date and time, and success of access for statistical analysis.

6.2. Web Trackers

We use Google services:

• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
• Data Transfer: Personal data may be transferred to the USA under the EU-US Data Privacy Framework (DPF).
• Legal Basis: Art. 6 para. 6 DSG, Art. 31 para. 2 DSG, and Art. 6 para. 1 lit. a GDPR (consent).
• Purpose: To load additional Google services and enhance website functionality.

7. Your Rights

7.1. Right to Information

You can request information about the personal data stored about you (Art. 15 GDPR).

7.2. Right to Rectification

You have the right to correct inaccurate or incomplete personal data (Art. 16 GDPR).

7.3. Right to Deletion

You may request the deletion of personal data under certain conditions (Art. 17 GDPR).

7.4. Right to Restriction

You can request the restriction of data processing (Art. 18 GDPR).

7.5. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format (Art. 20 GDPR).

7.6. Right to Object

You may object to the processing of your personal data (Art. 21 GDPR).

7.7. Contact for Exercising Rights

Disclosure of information to third parties

Personal data is processed in accordance with the principle of legality (Art. 6 para. 1 DSG) and the principle of good faith (Art. 6 para. 2 DSG or Art. 2 ZGB). The transfer of information to third parties depends on the scope of the activities or offers of our website or our business model described below. As a general rule, we only keep your information for as long as necessary and treat it confidentially. This does not include the transfer of personal data to debt collection service providers, to public bodies and authorities, and to private individuals who are entitled to it due to legal provisions, court decisions or official orders, as well as the transfer to authorities for the purpose of initiating legal proceedings or for law enforcement purposes if our legally protected rights are attacked.

Statistical evaluation of visits to this website – Webtracker

When you access this website or individual files on the website, we collect, process and store the following data: IP address, website from which the file was accessed, name of the file, date and time of access, amount of data transferred and notification of the success of the access (so-called web log). We use this access data exclusively in a non-personalized form for the continuous improvement of our internet offering and for statistical purposes. Any personal data will be processed in accordance with the principle of legality (Art. 6 Para. 1 DSG) and in accordance with the principle of good faith (Art. 6 Para. 2 DSG or Art. 2 ZGB). We also use the following web trackers to evaluate visits to this website:

• Google: We use the Google service on our website provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/ . According to the assessment of the Swiss authorities, processing takes place in safe third countries. The list of Swiss states and further information can be found under the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html . Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified within the framework of the DPF, so that the usual level of protection of the GDPR applies to the transmission. The legal basis for the transmission of personal data is your consent in accordance with Art. 6 Para. 6 DSG or Art. 31 Para. 2 DSG and in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have given on our website. We use Google to be able to load additional Google services onto the website. The service is used to be able to provide additional Google services, such as the data processing required when providing streams and fonts and relevant Google search content. It is technically required in order to be able to exchange the information about the site visitor that Google already has between the Google services and to be able to provide the site visitor with individual content tailored to their Google account. For the processing itself, the service or we collect the following data: Background data stored in the Google user account or in other Google services about the site visitor, background data for the provision of Google services such as streaming data or advertising data, data about the site user’s use of Google search, information on the device used, the user’s IP address and browser and other data from Google services for the provision of Google services related to our website. If the service is activated on our website, our website establishes a connection to the servers of the company Google Ireland Limited and transfers the required data. As part of the order processing, personal data may also be transferred to the servers of the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may transmit and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be transferred to the Google services Google Apis, Doubleclick, Google Cloud, and Google Ads and Google Fonts in accordance with the Google privacy policy. You can access the provider’s certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list . You can revoke your consent at any time. Further information on revoking your consent can be found either in the consent itself or at the end of this privacy policy. Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://policies.google.com/privacy . The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de .
• Google Maps: We use the Google Maps service on our website from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/ . According to the assessment of the Swiss authorities, the data is processed in safe third countries. The list of Swiss states and further information can be found under the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html . Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified within the framework of the DPF, so that the usual level of protection of the GDPR applies to the transmission. The legal basis for the transmission of personal data is your consent in accordance with Art. 6 Para. 6 DSG or Art. 31 Para. 2 DSG and in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have given on our website. On our behalf, Google will use the information obtained via Google Maps to show you the map. Using Google Maps, you can find us faster and more accurately than with a simple non-interactive route map. The corresponding data is also used to assign the page visitors who view our Google Maps map, if necessary with the help of the Google advertising ID, and to link them with physical visits and calls to other contact information listed on Google. In this way, Google can make an estimate of the expected flow of visitors. For the processing itself, the service or we collect the following data: Data required to visualize and display location data in the form of a map, such as IP address, information from Google background services such as Google APIs, search terms, IP address, coordinates, starting point and destination when using the route planner, location data, Google advertising ID, Android advertising ID. We have concluded a joint processing agreement with Google with regard to Google Maps. The content can be found at https://privacy.google.com/intl/de/businesses/mapscontrollerterms/. If the service is activated on our website, our website establishes a connection to the servers of the company Google Ireland Limited and transfers the required data. As part of the order processing, personal data may also be transferred to the servers of the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When the Google service is used on our website, Google may transmit and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be processed by the Google services Google Apis, Google Cloud and Google Fonts in accordance with the Google privacy policy under Google’s data protection responsibility. You can access the provider’s certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list . You can revoke your consent at any time. Further information on revoking your consent can be found either in the consent itself or at the end of this privacy policy. Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://policies.google.com/privacy . The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de .
• Gstatic: We use the Gstatic service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/ . According to the assessment of the Swiss authorities, processing takes place in safe third countries. The list of Swiss states and further information can be found under the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html . Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified within the framework of the DPF, so that the usual level of protection of the GDPR applies to the transmission. The legal basis for the transmission of personal data is your consent in accordance with Art. 6 Para. 6 DSG or Art. 31 Para. 2 DSG and in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have given on our website. Gstatic is a background service used by Google to retrieve static content in order to reduce bandwidth usage and to pre-load required catalog files. In particular, the service loads background data for Google Fonts and Google Maps. As part of the order processing, personal data may also be transmitted to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. The provider’s certification within the framework of the EU-US Data Privacy Framework can be found at https://www.dataprivacyframework.gov/list . You can revoke your consent at any time. Further information on revoking your consent can be found either in the consent itself or at the end of this privacy policy. Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://policies.google.com/privacy . The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de .

Integration of external web services and processing of data outside the EU

We use active content from external providers, so-called web services, on our website. When you access our website, these external providers may receive personal information about your visit to our website. This may involve data processing outside of Switzerland and the EU. You can prevent this by installing a corresponding browser plug-in or by deactivating the execution of scripts in your browser. This may result in functional restrictions on the websites you visit. We use the following external web services:

• Google Cloud APIs: We use the Google Cloud APIs service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/ . According to the assessment of the Swiss authorities, processing takes place in safe third countries. The list of Swiss states and further information can be found under the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html . Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified within the framework of the DPF, so that the usual level of protection of the GDPR applies to the transmission. The legal basis for the transmission of personal data is your consent in accordance with Art. 6 Para. 6 DSG or Art. 31 Para. 2 DSG and in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have given on our website. We use Google APIs to be able to load additional Google services onto the website. Google APIs is a collection of interfaces for communication between the various Google services used on your website. The service is used in particular to display Google Fonts and to provide the Google Maps map. For processing itself, the service or we collect the following data: IP address If the service is active on our website, our website establishes a connection to the servers of the company Google Ireland Limited and transfers the required data. As part of the order processing, personal data may also be transmitted to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may transmit and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be transferred to the Google services Google Cloud, Google Maps, Google Ads and Google Fonts in accordance with the Google privacy policy under Google’s data protection responsibility. The provider’s certification under the EU-US Data Privacy Framework can be found at https://www.dataprivacyframework.gov/list . You can revoke your consent at any time. You can find more information about revoking your consent either in the consent itself or at the end of this privacy policy. You can find more information about how the transferred data is handled in the provider’s privacy policy at https://policies.google.com/privacy . The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de .
• Google Fonts: We use the Google Fonts service on our website from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/ . According to the assessment of the Swiss authorities, the processing takes place in safe third countries. The list of Swiss states and further information can be found under the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html . Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified within the framework of the DPF, so that the usual level of protection of the GDPR applies to the transmission. The legal basis for the transmission of personal data is your consent in accordance with Art. 6 Para. 6 DSG or Art. 31 Para. 2 DSG and in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have given on our website. We use the Google Fonts service to be able to integrate attractive fonts on our site in order to be able to show you a visually better version of our website. The service may also be used on our website if other Google services are loaded on our website that require Google Fonts to run. This is the case, for example, if our website uses Google services that absolutely require Google Fonts to run. For processing itself, the service or we collect the following data: data on fonts, IP address of the site visitor, statistics on the use of fonts and other data from Google services related to our website. If the service is activated on our website, our website establishes a connection to the servers of the company Google Ireland Limited and transfers the required data. As part of the order processing, personal data may also be transferred to the servers of the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may transmit and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be transferred to the Google services Google Apis, Google Cloud and Google Ads in accordance with the Google privacy policy. You can access the provider’s certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list . You can revoke your consent at any time. Further information on revoking your consent can be found either in the consent itself or at the end of this privacy policy. Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://policies.google.com/privacy . The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de .
• Gravatar: We use the Gravatar service from Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Pl, D02 AY86 Dublin, Ireland, email: privacypolicyupdates@automattic.com, website: https://de.gravatar.com/ . According to the assessment of the Swiss authorities, processing takes place in safe third countries. The list of Swiss states and further information can be found under the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html . Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified within the framework of the DPF, so that the usual level of protection of the GDPR applies to the transfer. The legal basis for the transfer of personal data is your consent in accordance with Art. 6 Para. 6 DSG or Art. 31 Para. 2 DSG and in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have given on our website. Gravatar is a service for providing avatars across websites. You can view the certification of the parent company Automattic Inc. under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list . You can revoke your consent at any time. You can find more information about revoking your consent either in the consent itself or at the end of this privacy policy. You can find more information about handling the transferred data in the provider’s privacy policy at https://automattic.com/privacy/ . The provider also offers an opt-out option at https://automattic.com/privacy/ .
• Legally ok legal text snippet and modules: We use the Legally ok legal text snippet and modules service from Legally ok GmbH, Schochenmühlestrasse 6, 6340 Baar, Switzerland, email: hello@legally-ok.com, website: https://www.legally-ok.com/ on our website . Processing takes place exclusively in Switzerland in accordance with the data protection legislation applicable there. Processing also takes place in a third country outside the EU. There is an adequacy decision by the Commission for this third country. You can find a current list of all adequacy decisions on the EU Commission website (link: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_de ). The legal basis for transmission and processing is Art. 31 Para. 1 DSG and Art. 6 Para. 1 lit. c GDPR. The use of the service helps us to comply with our legal obligations. The service is used to reload the content of our legal texts on our website. The latest legal texts are reloaded via the integration on our site. This integration can also be used to reload other technical modules with regard to the legal texts or legally required elements. You can find out what rights you have with regard to processing at the end of this data protection declaration. You can find more information on how the transferred data is handled in the provider’s data protection declaration at https://www.legally-ok.com/datenschutz/ .
• PayPal: We use the PayPal service from PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg on our website. According to the assessment of the Swiss authorities, processing takes place in safe third countries. The list of Swiss states and further information can be found under the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html . The transmission and processing of personal data takes place exclusively on servers in the European Union. The legal basis for the transmission of personal data is the contract already concluded or still to be concluded between you and us in accordance with Art. 31 Para. 2 Letter a DSG and Art. 6 Para. 1 Letter b GDPR. We integrate the service so that we can show you the PayPal button on every subpage of our online shop so that you know which payment method you can use to shop with us. Due to the contract concluded between you and PayPal, if you pay using PayPal, data may be transferred to companies affiliated with PayPal. These companies may also be based in the USA, which is why it cannot be ruled out that US authorities may access your data. You can find out what rights you have with regard to processing at the end of this privacy policy. You can find more information about how the transferred data is handled in the provider’s privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE .
• cookieyes: We use the cookieyes service from CookieYes Limited, Warren Park, 3 Warren Yard, Wolverton Mill, Wolverton, MK12 5NW Milton Keynes , United Kingdom, email: support@cookieyes.com, website: https://www.cookieyes.com/de/ . According to the assessment of the Swiss authorities, processing takes place in safe third countries. The list of Swiss states and further information can be found under the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html . Processing also takes place in a third country outside the EU. There is an adequacy decision by the Commission for this third country. On the EU Commission website (link: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_de ) you will find a current list of all adequacy decisions. The legal basis for the transmission and processing is Art. 31 Para. 1 DSG and Art. 6 Para. 1 lit. c GDPR. The use of the service helps us to comply with our legal obligations. The Cookieyes service is used both to create and implement data protection declarations, as well as to integrate a cookie banner that stores and implements the individual settings of the website visitor. You can find out which rights you are entitled to with regard to processing at the end of this data protection declaration. Further information on the handling of the transferred data can be found in the provider’s data protection declaration at https://www.cookieyes.com/privacy-policy/ .