PRIVACY & COOKIES

This document (privacy statement & cookie policy) relates to (i) the processing of your personal data and (ii) the use of cookies on or through the www.zusto.com website (hereinafter the “Zùsto Website”) by the company Zùsto NV (hereinafter “Zùsto”), trading under the name “Zùsto”, entered in the Crossroads Enterprise Database in Belgium under number 0656.824.810, having its registered office at Schaliënhoevedreef 20T 2800 Mechelen, and intracommunity VAT number BE0656.824.810.

1.3.1 Privacy Statement

Zùsto may collect personal data from you through the Zùsto Website or through e-mail or other direct contact. This personal data may include your name, e-mail address and other contact details, as well as any other information that may be relevant to your query or to your order.

Zùsto is sole controller for this personal data, and it uses it to respond to you (as sender) regarding the reason for which Zùsto was contacted (based on its legitimate interest in doing so). In addition, if you place an order with Zùsto, Zùsto will process your personal data for the purposes of handling the order and, if accepted, performing its contract with you. Finally, Zùsto may keep such personal data for the purposes of customer relationship management and for the purposes of evidence of the provision of services, based on its legitimate interest in doing so.

Zùsto does not use or share any of this personal data for marketing purposes, and it never rents or sells that personal data to anyone. If Zùsto decides to change this practice, it undertakes not to include you in any relevant distribution list without complying with the applicable information requirements and any other requirements under applicable legislation (including requesting consent where required).

Zùsto takes precautions to protect your information. When you submit any kinds of personal data via the Zùsto Website, your information is protected (both online and offline). Only authorized staff and trusted providers are granted access to such personal data.

Zùsto also tries to ensure that any personal data in our possession remains relevant, and that any outdated or irrelevant information is deleted. We therefore delete old data at regular intervals, taking into account legally permitted retention periods (e.g. regarding civil liability – order-related personal data is for instance kept 10 years after fulfilment of the order).

As data subject, you have various rights in relation to your personal data:

  • You have the right to access your personal data and even to obtain a copy thereof. However, this is not an absolute right and the rights and interests of other individuals may restrict your right of access.
  • You have a right of rectification, i.e. the right to obtain from us the correction of inaccurate personal data concerning you.
  • You have the right to object to the processing of your personal data in specific cases, where the personal data is processed based on our legitimate interests (see above). Please note that this will not prevent us from e.g. responding to a query or from fulfilling an order, or from keeping data regarding an order for evidence purposes.
  • You have a right of erasure, i.e. the right to obtain from us the removal of personal data concerning you, in a range of scenarios, but again there are exceptions that will allow us in certain cases to keep the personal data for a certain period.
  • You have the right to request a restriction on the processing of your personal data in specific cases (such that it can only be processed for specific purposes foreseen by law).
  • Under certain circumstances, you may have the right to data portability, i.e. the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. Note that the scope of this right is more limited than the right of access.
  • You also have the right to lodge a complaint with the competent data protection supervisory authority, in particular in the EU Member State of your habitual residence or of an alleged infringement of the GDPR. For contact details of such authorities, please consult the following list.

Any concerns about privacy or use of personal data should be immediately provided to Zùsto directly through our contact page.

1.3.2 Cookie Policy

The Zùsto Website uses web cookies to distinguish you from other users of the Zùsto Website. This helps us provide you with a good experience when you browse the Zùsto Website and also allows us to improve the Zùsto Website and our services.

In many cases, these cookies lead to the use of your device’s processing or storage capabilities. Some of these cookies are set by Zùsto itself, others by third parties; some only last as long as your browser session, while others can stay active on your device for a longer period of time.

These cookies can fall into several categories: (i) those that are necessary for functionality or

services that you request or for the transmission of communications (functionality cookies); (ii) those that we use to carry out website performance and audience metrics (analytics cookies) and (iii) the rest (tracking across a network of other websites, advertising, etc.) (other cookies).

Internet browsers allow you to change your cookie settings, for instance to block certain kinds of cookies. You can therefore block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies, you may not be able to access or use all or parts of the Zùsto Website, due to the fact that some may be functionality cookies.

Functionality and analytical cookies do not require your consent. For analytical and other cookies, however, we request your consent before placing them on your device. You can give your consent by clicking on the appropriate button on the banner displayed to you.

We use the following cookies on the Zùsto Website :

CAT 1 – Necessary and Analytical Functional Cookies

These cookies ensure optimal functioning of the site and allow the collection of aggregated analytical data. These cookies are enabled by default and cannot be disabled, because without them we cannot guarantee the proper functioning of our website.

NECESSARY FUNCTIONAL COOKIES

Host Cookie Name Purpose Type of Cookie Lifespan
List-manage.com _abck

Used to detect and defend against replay- cookie-attacks – The cookie is necessary for the security and integrity of the website.

3rd party 1 year
Us4.list- manage.com ak_bmsc

This cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website

3rd party 1 day
list-manage.com bm_sz

Used in context with the

3rd party 1 day
Zusto.com cookies.js

Determines wether the visitor has accepted the cookie consent box. This ensures that the cookie consent box will not be presented again upon re-entry

   

1st party

session
zusto.com wordpress_test_cookie

Send for Secure connections only

1st Party session
zusto.com woocommerce_items_in_cart

Creates hashed id for cart

1st Party session
zusto.com woocommerce_cart_hash

Checks items in cart

1st Party session
zusto.com wp_woocommerce_session_id

remember items in cart

1st Party max. 1 week
.us4.list-manage.com bm_sv

Akamai bot manager for fraud prevention

1st Party Session
s_gl, Wide, YSC youtube.com  They are used by Youtube to assist in functionality.           3rd party session

ANALYTICAL COOKIES

Host Cookie Name Purpose Type of Cookie Lifespan
Zusto.com _ga, _gat, _gid, _hjid, _hjid Used to generate statistical data on howthe visitor uses the website    

1st party

2 years, 1 day, 1 day, 1
Google- analytics.com Collect Used tos end data to Google Analytics about the visitor’s device and behaviour. Tracks the visitor across devices and marketing channels 3rd party Session
Script.hotjar.com _hjIncludedInSample Hotjar cookie. This session cookie is set to let Hotjar know whether that visitor is included in the sample which is used to generate funnels. 3rd party 365 days
youtube.com GPS Registers a unique ID on mobile devices to enable tracking based on geographical GPS location. 3rd party 1day
Script.hotjar.com _hjCachedUserAttributes, This cookie stores User Attributes which are sent through the Hotjar Identify API, whenever the user is not in the sample. These attributes will only be saved if the user interacts with a Hotjar Feedback tool. 3rd party Session
ajs_anonymous_id .hotjar.com Counts the number of returning visitors 3rd party 365 days
_hjAbsoluteSessionInProgress .hotjar.com The cookie is set so Hotjar can track the beginning of the user’s journey for a total session count. It does not contain any identifiable information. 3rd party 30 minutes
_hjClosedSurveyInvites .hotjar.com Hotjar cookie. This cookie is set once a visitor interacts with a Survey invitation modal popup. It is used to ensure that the same invite does not re-appear if it has already been shown. 3rd party 365 days
_hjDonePolls .hotjar.com Hotjar cookie. This cookie is set once a visitor completes a poll using the Feedback Poll widget. It is used to ensure that the same poll does not re-appear if it has already been filled in. 3rd party 365 days
_hjMinimizedPolls .hotjar.com Hotjar cookie. This cookie is set once a visitor minimizes a Feedback Poll widget. It is used to ensure that the widget stays minimizes 3rd party 365 days
_hjAbsoluteSessionInProgress .hotjar.com The cookie is set so Hotjar can track the beginning of the user’s journey for a total session count. It does not contain any identifiable information. 3rd party 30 minutes

CAT 2 – Personalisation Cookies

These cookies help us to know you better so that we can better tailor the content of the site to your needs, interests and preferences.

Host Cookie Name Purpose Type of Cookie Lifespan
mc.us4.list- manage.com _AVESTA_ENVIRONMENT The cookie is set when the user subscribes to an email service from MailChimp   

3rd party

Session
Mailchimp.com Mailchimp_landing_site Used to register how the user entered the website – function provided by Mailchimp 3rd party 27 days
stripe.com __stripe_mid, __stripe_orig_props, __stripe_sid, cid, land, __stripe-js-v3-features__ Stripe is used to make payments via credit card. Stripe is a cookie to remember who you are and to allow Zusto to process payments without storing any information from the credit card on its own servers. 3rd party up to 5 years

CAT 3 – Commercial Cookies

These cookies allow third parties to track your internet habits, collect data and display personalized advertisements. You can see who these third parties are in our cookie policy.

Host Cookie Name Purpose Type of Cookie Lifespan
Facebook.com _fbp, fr, tr Used by Facebook to deliver a series of advertisement products such as real time bidding from 3rd party advertisers.    

3rd party

3 months, 3 months, session
Zusto.com _hjlncludeInSample Determines if a users’s navigation should be registered in a certain statistical place holder. 1st party Session
google.com Pagead/1p-user- list/# Unclassified 3rd party Session
Doubleclick.net r/collect This cookie is used tos end data to Google Analytics about the visitor’s device and behavior. It tracks the visitor across devices and marketing channels 3rd party Session
Doubleclick.net test_cookie Used to check if the user’s browser supports cookies 3rd party 1 day
Doubleclick.net IDE One of the main advertising cookies on non- Google sites is named ‘IDE‘ and is stored in browsers under the domain doubleclick.net. Another is stored in google.com and

           

3rd party 1 year
youtube.com PREF This cookie stores your preferences and other information, in particular preferred language, how many search results you wish to be shown on your page, and whether or not you wish to have Google’s SafeSearch filter turned on. 3rd party 10 year
youtube.com VISITOR_INFO1_LIVE A cookie that YouTube sets that measures your bandwidth to determine whether you get the new player interface or the old.

           

3rd party max 365 days
youtube.com __Secure-3PAPISID, __Secure-APISID, __Secure-HSID, __Secure-SSID, A cookie that YouTube sets that transfer data safely.

           

3rd party 365 days
.list-manage.com bm_sz This cookie is used to load the site as quickly as possible and to recognize bots. 3rd Party 1day
.zusto.com _uetsid This is a cookie utilised by Microsoft Bing Ads and is a tracking cookie. It allows us to engage with a user that has previously visited our website. Expires 30 minutes after the browsing session ends. For more information, please visit https://advertise.bingads.microsoft.com/en-us/resources/policies/remarketing-in-paid-search-policies. 3rd Party 3 days
.bing.com MUID This cookie is widely used my Microsoft as a unique user identifier. It can be set by embedded microsoft scripts. Widely believed to sync across many different Microsoft 3rd party 1 year Invisible Puppy | Zùsto: Privacy Management 15 domains, allowing user tracking. 3rd Party 1 year
Google ads _gac_UA-156309549-1 Google Ads conversion tags on your website use the _gac cookie to obtain GCLID information when the user converts, which improves the accuracy of its conversion measurement
.hotjar.com _fbp Used by Hotjar/Facebook to deliver a series of advertisement products such as real time bidding from 3rd party advertisers. 3rd Party 3 months
.doubleclick.net IDE One of the main advertising cookies on nonGoogle sites is named ‘IDE‘ and is stored in browsers under the domain doubleclick.net. Another is stored in google.com and 3rd party 1 year Invisible Puppy | Zùsto: Privacy Management 14 is called ANID. Google uses other cookies with names such as DSID, FLC, AID, TAID, and exchange_uid. Other Google properties, like YouTube, may also use these cookies to show you more relevant ads 3rd Party 1 year
zusto.com MCPopupClosed remembers  pop up Mailchimp was closed 3rd Party 365 days