Zuri & Lopi

Privacy Policy

1. Controller

Michailidou Digital Services I.E.
Zakaria Paliashvili Street 41, 0179 Tbilisi, Georgia
E-mail: info@michailidou-services.de

Representative in the European Union (Art. 27 GDPR):
Admir Xhoxha, Psaron 17, 12132 Peristeri, Greece
E-mail: info@michailidou-services.de

2. Overview

This website (available at zuri-lopi.com) is the online presence of the children's educational brand “Zuri & Lopi”. It is a purely informational website; no online shop, account system or newsletter is currently operated. We process personal data only to the extent necessary to operate the website, respond to enquiries and — where you consent — measure audience reach. There is no newsletter and no e-mail marketing.

3. Children

Our content is made for children (approx. 4–10 years) — our website is directed, as a contact and contracting party, exclusively at adults (parents, grandparents, educators, institutions). We do not knowingly collect personal data from children:

  • There are no accounts, comment functions, competitions or forms directed at children.
  • We do not serve personalised advertising, in particular no personalised advertising directed at children, and we do not use advertising tracking for that purpose.
  • If we become aware that a child has provided us with personal data, we will delete it promptly. Parents and guardians may contact us at any time at info@michailidou-services.de.

4. Hosting (Vercel)

The website is hosted by Vercel Inc. When you visit the website, Vercel processes technically necessary data (in particular IP address, date/time, requested URL, user agent) in server logs in order to deliver the website and ensure security and stability.

  • Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure, performant operation).
  • A data processing agreement (Data Processing Addendum, Art. 28 GDPR) is in place with Vercel.
  • Vercel may process data in third countries, in particular the USA; the transfer is based on the EU standard contractual clauses contained in Vercel's Data Processing Addendum.
  • Retention of server logs: as specified by Vercel.

5. Cookies and local storage

When you first visit the website, we show you a consent banner. For consent management we use the self-hosted open-source solution Klaro; no data is transferred to third parties for this purpose. You can change or withdraw your selection at any time via the “Privacy settings” link on the website.

We set the following cookies:

  • zuri-lopi-consent (first-party cookie, stored for 180 days): stores nothing but your consent selection. Legal basis: Section 25 (2) no. 2 TDDDG (technically necessary, no consent required) and Art. 6 (1) (f) GDPR.
  • Google Analytics cookies (e.g. _ga and other cookies beginning with “_ga”): are only set after you have consented to audience measurement with Google Analytics (see section 7). Legal basis: Section 25 (1) TDDDG and Art. 6 (1) (a) GDPR (consent).

Beyond this, we set no cookies, in particular no cookies for advertising purposes. There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR; we do not create user profiles.

6. Cookieless audience measurement (Vercel Web Analytics)

For audience measurement we use Vercel Web Analytics. In the configuration we use, the service works without cookies and without cross-device tracking; it produces aggregated usage statistics (e.g. page views, country of origin, referrer) without re-identifying individual persons. No advertising identifiers are used. IP addresses are not stored permanently.

  • Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in analysing usage in non-personal form).

7. Audience measurement with consent: Google Analytics 4 via Google Tag Manager

If you consent, we use Google Analytics 4 and Google Tag Manager (provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) to analyse the use of the website. Google Tag Manager is only loaded after you have given your consent; without your consent, no analytics cookies are set and no identifiers are stored (Consent Mode v2, default “denied” — analytics storage is only enabled once you consent).

  • Legal basis: Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG (consent); you may withdraw consent at any time via the “Privacy settings”.
  • Advertising features are permanently deactivated: the Consent Mode signals for advertising (ad_storage, ad_user_data, ad_personalization) remain set to “denied” regardless of your selection, Google Signals is switched off, and no signals are transmitted to Google advertising services.
  • There is no personalised advertising; personalised advertising directed at children is excluded.
  • Google may process data in the USA; the transfer is based on the EU standard contractual clauses or — where its conditions are met — on the adequacy decision for the EU-US Data Privacy Framework.

8. YouTube and Instagram

We operate a YouTube channel and an Instagram profile. On the website these are included as plain links only: merely visiting our website transfers no data to YouTube/Google or Instagram/Meta; processing by those providers only begins if you follow the link and visit their platform — their privacy policies then apply.

9. Contact

If you contact us by e-mail, we process your details (e-mail address, content of the message) to handle the enquiry.

  • Legal basis: Art. 6 (1) (b) GDPR (initiation/performance of a contract) or Art. 6 (1) (f) GDPR (legitimate interest in responding).
  • Deletion once the enquiry has been fully dealt with and no retention obligations apply.

10. Your rights

You have the following rights vis-à-vis us regarding your personal data:

  • access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20),
  • objection to processing based on Art. 6 (1) (f) GDPR (Art. 21),
  • withdrawal of consent with effect for the future (Art. 7 (3)) — for audience measurement at any time via the “Privacy settings”,
  • complaint to a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work or the place of the alleged infringement.

An informal message to info@michailidou-services.de is sufficient to exercise these rights.

11. Retention period

Unless stated otherwise above, we store personal data only for as long as necessary for the stated purposes or as required by statutory retention obligations (in particular under commercial and tax law).

12. Obligation to provide data

No personal data is required to visit the website. To contact us by e-mail, your e-mail address is required — without it, we cannot respond to your enquiry.

This policy is available in German, English and Greek. In case of doubt, the German version prevails.

Version date: July 2026