This privacy policy explains which personal data we process when you visit zynuvo.com, for what purposes, on which legal basis, and which rights you have.
1. Controller
Roua Alturk
Gärtnerweg 5C
65824 Schwalbach am Taunus
Germany
Email: support@zynuvo.com
2. Legal bases
We process personal data on the basis of the EU General Data Protection Regulation (GDPR): your consent (Art. 6(1)(a)), the performance of a contract or steps prior to entering into a contract (Art. 6(1)(b)), compliance with a legal obligation (Art. 6(1)(c)) and our legitimate interests (Art. 6(1)(f)). We store information on your device or access information already stored there only with your consent (§ 25(1) TDDDG), unless this is strictly necessary to provide a service you have explicitly requested (§ 25(2) TDDDG).
3. Hosting, server log files and security
Our website is hosted by Hostinger International Ltd., 61 Lordou Vironos str., 6023 Larnaca, Cyprus. When you visit the website, the server automatically records data that your browser transmits: IP address, date and time of the request, requested page, referring page, browser type and version, and operating system. We use this data to deliver the website, to keep it stable and to defend against attacks (Art. 6(1)(f) GDPR). Hostinger processes this data on our behalf under a data processing agreement (Art. 28 GDPR) and uses sub-processors, including content delivery networks. Transfers outside the European Economic Area are based on the EU Standard Contractual Clauses. Log data is deleted as soon as it is no longer required for these purposes.
To protect the website against attacks, we use the Wordfence Security plugin of Defiant, Inc., Seattle, USA. Wordfence analyses requests to our server, including IP address, browser information and the requested URL, in order to detect and block malicious traffic. For this purpose, IP addresses of suspicious requests may be transmitted to Defiant. Legal basis: Art. 6(1)(f) GDPR (security of our website).
This website uses TLS encryption. You can recognise an encrypted connection by the “https://” prefix in your browser’s address bar.
4. Cookies and consent management
We use the consent management tool Complianz, which runs on our own server. No data is sent to its provider. When you open the website for the first time, a banner asks whether you allow statistics and marketing services. These services are loaded only after you have agreed. If you decline, they are not loaded.
Your choice is stored in cookies on your device whose names begin with “cmplz_”, for 365 days, so that the banner does not appear on every page. Legal basis: § 25(2) no. 2 TDDDG and Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (documenting consent).
You can change or withdraw your consent at any time with effect for the future via “Manage consent” at the bottom of every page. You can also delete cookies in your browser settings at any time.
5. Contacting us
If you contact us by email or through our contact form, we process the data you provide, such as your name, email address and message, in order to answer your request. Legal basis: Art. 6(1)(b) GDPR if your request relates to a contract or pre-contractual measures, otherwise Art. 6(1)(f) GDPR (answering inquiries). We delete this data once your request has been dealt with completely, unless statutory retention obligations apply. Messages may be checked for spam by Akismet (see section 6).
6. Comments
When you leave a comment, we store the comment, the name and email address you enter and an optional website, in order to publish the comment and to prevent misuse (Art. 6(1)(f) GDPR). Your email address is not published. We do not set cookies for the comment function. Comments remain stored until you ask us to delete them or until their purpose no longer applies.
Comments are checked for spam by the Akismet service of Automattic Inc., USA. For this check, the comment text, your name, email address, IP address, browser information and the referring page are transmitted to Automattic. Legal basis: Art. 6(1)(f) GDPR (protection against spam).
7. Website statistics (Jetpack Stats)
If you allow statistics in the consent banner, we use Jetpack Stats of Automattic Inc., USA, to create aggregated statistics about the use of our website. Automattic processes information such as your IP address, browser, operating system, device type, referring page, the pages you visit and the time of your visit. Legal basis: Art. 6(1)(a) GDPR, § 25(1) TDDDG.
8. Affiliate links
This website contains affiliate links. When you click such a link, you leave our website, and the shop you visit, as well as other third parties including Amazon, may place and read cookies or use web beacons in your browser in order to attribute a possible purchase to us. We do not receive any personal data about you from the shops, only aggregated information about the commissions we have earned. Legal basis for including affiliate links: Art. 6(1)(f) GDPR (financing our website). Cookies set on a shop’s website are subject to that shop’s privacy policy. You can block or delete cookies at any time in your browser settings.
- Amazon Associates: we participate in the Amazon Associates program of Amazon.com Services LLC, USA. As an Amazon Associate I earn from qualifying purchases.
- Hostinger referral program: links to Hostinger that carry a referral code (Hostinger International Ltd.).
9. Links to social networks
Our website links to our profiles on X, Instagram, TikTok and YouTube. These are plain links. No data is transmitted to these networks unless you click a link.
10. Transfers to third countries
Some of the providers named above are based in the USA. Data is transferred on the basis of the EU-U.S. Data Privacy Framework where the provider is certified under it, and otherwise on the basis of the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
11. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You have the right to object at any time to processing based on our legitimate interests (Art. 21). You can withdraw any consent at any time with effect for the future (Art. 7(3)). To exercise your rights, contact us using the details in section 1.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR).
12. Changes to this privacy policy
We update this privacy policy whenever our website or the legal situation changes.