Legal

Privacy Policy

Privacy Notice pursuant to Articles 13 and 21 GDPR

The protection of your personal data is important to us. This document transparently informs you about how we handle your information and what rights you have under the General Data Protection Regulation.

1. Data Controller and Contact

Responsible for data processing: ZeptronIT Owner: Leon Marzoll

P.O. Box 54 02 63 22502 Hamburg

Phone: +49 176 913 68870 Email: info@zeptronit.com Web: www.zeptronit.de

2. Legal Basis and Purposes of Data Processing

We process personal data exclusively within the framework of applicable data protection laws (GDPR, BDSG).

2.1 Contract Fulfillment (Art. 6(1)(b) GDPR)

We process your data to fulfill our contractual agreements with you:

Communication in connection with your projects
Preparation of offers and invoices
Documentation of agreements and services
Quality assurance of our services
Ensuring smooth order processing
Business evaluations and controlling
Accounting and tax documentation
Assertion and enforcement of legal claims

2.2 Legitimate Interests (Art. 6(1)(f) GDPR)

Additionally, we process your data to safeguard legitimate interests:

Marketing measures and market analyses
Further development of our services and products
Optimization of business processes and internal operations
Statistical evaluations for corporate management
Ensuring IT security and network integrity
Legal advice and enforcement of claims
Detection and prevention of legal violations
Protection of business premises and technical systems

2.3 Consent (Art. 6(1)(a) GDPR)

With your express consent, you can subscribe to our newsletter. You can revoke your consent at any time.

2.4 Legal Obligations (Art. 6(1)(c) GDPR)

We are subject to various legal requirements:

Fulfillment of tax reporting and documentation obligations
Retention of business documents as required by law
Cooperation with authorities within the framework of legal requirements
Prevention of fraud and money laundering
Disclosure in the context of official or judicial proceedings

3. Categories of Processed Data and Their Origin

Where necessary, we also process data that we have lawfully received from third parties or from publicly accessible sources.

The following data categories may be processed:

Personal information (name, date of birth, nationality)
Contact information (address, email, phone number)
Payment information (bank details, payment history)
Contract data (orders, agreements, correspondence)
Usage data (website visits, interactions)
Technical data (IP address, browser, operating system)

4. Recipients of Your Data

Data is only shared with external parties:

to fulfill contractual obligations
when legally required to share data
when external service providers act on our behalf
to safeguard legitimate interests
with your express consent

All external service providers are contractually obligated to comply with data protection regulations.

5. Storage Duration

We store your data for the duration of our business relationship.

Additionally, we are legally required to retain certain data:

Commercial retention: up to 10 years
Tax retention: up to 10 years
Statute of limitations under German Civil Code: generally 3 years

After these periods expire, your data will be deleted.

6. Data Processing in Third Countries

Data is only transferred to countries outside the EU/EEA when:

this is necessary for contract fulfillment
a legal obligation exists
you have expressly consented

In such cases, we ensure through appropriate safeguards that your data is adequately protected.

6.1 Hosting

Our website is hosted on a self-managed server provided by the following infrastructure provider:

Hetzner Online GmbH Industriestr. 25 91710 Gunzenhausen Germany

Server location: Helsinki, Finland

The server is independently operated and managed by ZeptronIT. The use of the server infrastructure is based on Art. 6(1)(f) GDPR.

6.2 SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons to protect the transmission of confidential content.

When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.

6.3 Data Collection on This Website

How do we collect your data?
Your data is collected partly by you providing it to us. Other data is automatically collected by our IT systems when you visit the website.

What do we use your data for?
Part of the data is collected to ensure error-free provision of the website.

Server Log Files
The hosting provider automatically collects and stores information in server log files:

Browser type and version
Operating system
Referrer URL
Hostname of the accessing computer
Time of server request
IP address

The legal basis is Art. 6(1)(f) GDPR.

7. Your Rights

You have the following rights:

Right of Access (Art. 15 GDPR): You can request information about your stored data
Right to Rectification (Art. 16 GDPR): You can request correction of inaccurate data
Right to Erasure (Art. 17 GDPR): You can request deletion of your data
Right to Restriction (Art. 18 GDPR): You can request restriction of processing
Right to Data Portability (Art. 20 GDPR): You can receive your data in a structured format
Right to Object (Art. 21 GDPR): You can object to the processing of your data
Right to Lodge a Complaint: You can contact a data protection supervisory authority

8. Special Right to Object under Art. 21 GDPR

You have the right to object to the processing of your data at any time when it is based on Art. 6(1)(f) GDPR or Art. 6(1)(e) GDPR.

After your objection, we will no longer process your data unless we can demonstrate compelling legitimate grounds.

Objection to Direct Marketing: If we process your data for advertising purposes, you can object at any time.

You can send your objection informally to:

ZeptronIT Owner: Leon Marzoll P.O. Box 54 02 63 22502 Hamburg Email: info@zeptronit.com

Last updated: October 2025