Privacy.

The following information explains what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

This website does not use any tracking or analytics cookies and serves no advertising. Our hosting provider (Cloudflare) may set strictly necessary cookies (for example for security and bot protection, such as “__cf_bm”) that are required to deliver the site reliably; their use is based on § 25 (2) No. 2 TDDDG. Beyond that, only technically necessary server log data is collected when you access a page.

The party responsible for data processing on this website is:

ZELU UG (haftungsbeschränkt)
In den Ziegeläckern 4
71332 Waiblingen, Germany
contact@zelu.house

This website is hosted externally. We host the content of our website with the following provider:

Cloudflare, Inc.
101 Townsend St, San Francisco, CA 94107, USA
Website: cloudflare.com

Personal data collected on this website (in particular IP addresses in server log files) is stored on the servers of the hosting provider. Hosting is based on Art. 6(1)(f) GDPR (legitimate interest in a secure, fast, and efficient provision of our website).

Data Processing Agreement: We have concluded a Data Processing Agreement (DPA) with the provider in accordance with Art. 28 GDPR. This ensures that the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

This website uses the open-source fonts Inter and Playfair Display as locally hosted font files, delivered directly from our own hosting. No connection to Google servers or any other third-party font service is established when these fonts are loaded.

Your display preference (light or dark mode) is stored locally in your browser (localStorage). This value is strictly necessary to render the site in the mode you request (§ 25 (2) No. 2 TDDDG), never leaves your device, and is not used for tracking.

This website uses SSL/TLS encryption for security purposes. An encrypted connection is indicated by the browser address bar switching from “http://” to “https://” and a lock icon. When SSL/TLS encryption is active, data you transmit to us is protected against unauthorized access by third parties during transmission.

The hosting provider automatically collects and stores information in server log files that your browser transmits automatically:

• Browser type and version
• Operating system
• Referrer URL
• Host name of the accessing device
• Time of the server request
• IP address

This data is not merged with other data sources. Collection is based on Art. 6(1)(f) GDPR (legitimate interest in the technically error-free presentation and optimization of the website).

When you submit an inquiry via the contact form, your details are stored for the purpose of processing your request and for follow-up questions. Name, email address, and message are required to process your inquiry; without them, we cannot respond. All other fields are optional. Beyond the processors named in this policy (Formspree for form transmission, Cloudflare for hosting), we do not share this data with third parties unless we are legally required to do so.

Processing is based on Art. 6(1)(b) GDPR where your inquiry relates to contract performance or pre-contractual measures, and on Art. 6(1)(f) GDPR (legitimate interest in effective inquiry handling) in all other cases.

Your data remains with us until the purpose for storage ceases or you validly request deletion or object to the processing. Inquiries stored with the form processing service are deleted there once their processing is complete. Mandatory statutory retention periods remain unaffected.

The contact form on this website uses Formspree, Inc. (USA) as a form processing service. When you submit the contact form, the data you provide (name, email address, company and inquiry reason where given, your message, and technical transmission metadata) is transmitted to Formspree servers in the United States for processing and forwarding to us. Transfers to the United States are safeguarded by the EU Standard Contractual Clauses concluded with Formspree.

Processing is based on Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in reliable form processing). Formspree processes your data in accordance with their privacy policy.

When you contact us by email, your inquiry and all resulting personal data are stored and processed for the purpose of handling your request. We do not share this data with third parties unless we are legally required to do so. The same legal bases and retention periods apply as for the contact form (see section 7).

Under applicable law, you have the right to free information about your stored personal data, its origin and recipients, the purpose of processing, and the right to rectification, restriction, or deletion of this data.

In particular, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)

You also have the right to lodge a complaint with the competent supervisory authority. The responsible authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg).

Right to Object (Art. 21 GDPR): Where data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation. The respective legal basis for each processing activity can be found in this privacy policy.

This website sets no tracking cookies, uses no analytics tools, and serves no advertising. Strictly necessary hosting cookies are described in section 1.