Privacy Policy

1. Controller

The controller responsible for processing personal data on this website is:

ZM-Security UG (haftungsbeschränkt) Lehmäckerweg 7b 97769 Bad Brückenau Deutschland

Email: keven1998@web.de

Further contact information can be found in our Legal Notice.

2. Website visits and analytics

We use privacy-friendly, server-side analytics to understand how our website is used, for example how often individual pages are visited and how visitors arrive at them.

We do not use analytics cookies or third-party tracking technologies for this purpose.

When you visit the website, technical information such as your IP address, browser information, the page visited and referral information may be processed. IP addresses are anonymised before being used for analytics. We use short-lived identifiers that cannot be used to recognise a visitor across different days.

We use this information only to produce aggregated statistics about website usage and the performance of our experiments.

The legal basis is our legitimate interest in measuring and improving our website and evaluating our experiments pursuant to Art. 6(1)(f) GDPR.

This deployment additionally runs Umami, an analytics tool we host ourselves and serve from this same domain, so no data is sent to a third party. It records the pages visited, approximate region, device type and referrer, and it sets no cookie.

3. Signing up for an experiment

If you sign up for an experiment or indicate your interest in an idea, we process the information you provide through the form.

This may include:

• your email address;
• your name, if you provide it;
• the experiment or idea you signed up for; and
• information about how you reached the page, such as referral information and campaign parameters.

We use this information to record your interest, evaluate the experiment and contact you in connection with the experiment you signed up for.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future by contacting us using the details above. The lawfulness of processing carried out before withdrawal is not affected.

4. Cookies and local storage

We do not use cookies for advertising or third-party tracking.

The website may use technically necessary cookies, for example to maintain authenticated sessions in the operator area or remember settings required for the operation of the website.

Your selected language may be stored in a cookie.

Display preferences, such as light or dark mode, may be stored locally in your browser. Where these preferences remain exclusively on your device, we do not receive this information.

Because we do not use non-essential cookies or similar technologies requiring consent, we do not currently display a cookie consent banner.

5. Email communication

If you sign up for an experiment, we may send you emails relating to that experiment, for example to confirm your email address, provide information about the experiment or contact you regarding your expressed interest.

Emails are delivered using an external email service provider acting on our behalf as a processor pursuant to Art. 28 GDPR.

We do not use your email address for unrelated advertising unless you have separately consented to this.

6. Hosting and service providers

We use external service providers to operate this website and deliver emails.

These providers may process personal data on our behalf where this is necessary to provide their services. Where required, they act as processors under Art. 28 GDPR and may process data only in accordance with our instructions.

Our hosting provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Deutschland.

If personal data is transferred outside the European Economic Area, we ensure that an appropriate legal mechanism for the transfer is in place as required by the GDPR.

7. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected.

Information submitted when signing up for an experiment is generally retained while the relevant experiment is being conducted and for as long as necessary to evaluate its results or follow up with participants.

If you withdraw your consent or request deletion, we will delete your personal data unless we are legally entitled or required to retain it for another reason.

Technical data used for analytics is anonymised or designed to prevent long-term recognition of individual visitors.

8. Data sharing

We do not sell your personal data.

Personal data may be shared with service providers that help us operate the website or deliver emails, as described above.

We may also disclose personal data where required by law or where necessary to establish, exercise or defend legal claims.

9. Your rights

Under the GDPR, you may have the right to:

• obtain information about the personal data we process about you (Art. 15 GDPR);
• correct inaccurate personal data (Art. 16 GDPR);
• request deletion of your personal data (Art. 17 GDPR);
• request restriction of processing (Art. 18 GDPR);
• receive certain personal data in a portable format (Art. 20 GDPR);
• object to processing based on legitimate interests (Art. 21 GDPR); and
• withdraw consent at any time where processing is based on consent (Art. 7(3) GDPR).

To exercise these rights, contact us using the details provided above.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

10. Changes to this privacy policy

We may update this privacy policy if the website, our experiments or the way we process personal data changes.

The current version published on this website applies.