Privacy Policy

1. Privacy at a Glance

The following notices provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you could be personally identified. Detailed information on the subject of data protection can be found in our privacy policy listed below.

2. Controller

The controller responsible for data processing on this website is:

Alexander Bering
ZenSation Enterprise Solutions
Heitholmer Weg 16
24109 Kiel

Legal form: Sole proprietorship (operated under the name of the owner)
D-U-N-S Number: 317163443

Phone: +49 151 27477096
Email: datenschutz@zensation.ai

The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

3. Hosting

This website is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). When you visit our website, your personal data is processed on Vercel's servers. This may include your IP address, browser type, operating system, the page accessed, date and time of access.

Vercel uses EU Standard Contractual Clauses (SCCs) as a safeguard for data transfers to the USA pursuant to Art. 46 GDPR.

Further information: https://vercel.com/legal/privacy-policy

The use of Vercel is based on Art. 6(1)(f) GDPR. We have a legitimate interest in reliable and fast provision of our website.

4. Web Analytics (Plausible Analytics)

This website uses Plausible Analytics (Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia), a privacy-friendly web analytics service.

Plausible Analytics sets no cookies, stores no personal data, and creates no user profiles. Only aggregated, anonymized statistics are collected (page views, referral sources). Identification of individual persons is not possible.

All data remains within the EU. No transfers to third countries take place.

The use is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the anonymized analysis of user behavior to improve our offering. As no personal data is processed, no consent is required.

Further information: https://plausible.io/privacy-focused-web-analytics

5. AI-assisted processing in our web tools

Where you use one of our web tools (such as ZenEntry for structured AI adoption), we process the content you enter, upload or record there.

• Documents: The text contained in an uploaded file is extracted and used for the analysis. Processing takes place on our servers; the uploaded file itself is not stored permanently.
• Audio recordings: To convert speech into text, we transmit the recording to OpenAI (OpenAI, L.L.C., 1455 3rd Street, San Francisco, CA 94158, USA), where the Whisper model is used. The recording is therefore transferred to the United States. The EU Standard Contractual Clauses serve as the safeguard for this third-country transfer.
• Text input: Free text you enter into the tool is processed for the analysis and limited to 20,000 characters.

The legal basis is Art. 6(1)(b) GDPR where use is aimed at initiating or performing a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in providing the tool).

Please do not upload content containing special categories of personal data under Art. 9 GDPR, or documents you are not entitled to share.

6. Cookies

This website uses only technically necessary cookies. We do not set analytics cookies, tracking cookies, or third-party cookies for advertising purposes.

Technically necessary cookies (e.g., for language preferences) are stored on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the technically flawless provision of our website.

You can configure your browser to inform you about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser.

7. Payment Provider

For payment processing, we use Stripe (Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland). During payment transactions, the payment data you enter (e.g., credit card number, bank details) is transmitted directly to Stripe and processed there.

Stripe is PCI DSS Level 1 certified. Stripe uses EU Standard Contractual Clauses for data transfers to the USA.

Data processing is based on Art. 6(1)(b) GDPR (contract performance).

Further information: https://stripe.com/privacy

8. Additional Services and Third Parties

We use the following additional services to provide our offerings:

• Railway (Railway Corp., USA) — Backend hosting. Legal basis: Art. 6(1)(f) GDPR.
• Supabase (Supabase Inc., USA) — Database hosting. Legal basis: Art. 6(1)(f) GDPR.
• Neon (Neon Inc., USA) — Database hosting; data is stored on servers located in the EU. Legal basis: Art. 6(1)(f) GDPR.
• Apple App Store (Apple Inc., USA) — App distribution. Legal basis: Art. 6(1)(b) GDPR.
• OpenAI (OpenAI, L.L.C., USA) — speech-to-text conversion for audio recordings in our web tools (see section 5). Legal basis: Art. 6(1)(f) GDPR.

Where processing by the named US providers takes place outside the EU, or where provider-side access from the US is possible, EU Standard Contractual Clauses (SCCs) serve as a safeguard pursuant to Art. 46 GDPR.

9. Contact Form and Newsletter

When you send us an enquiry via the contact form, we process the data you provide (name, email address, optionally company, and the content of your message) in order to handle and respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry is aimed at entering into or performing a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). The data is deleted once it is no longer required to handle your enquiry and no statutory retention obligations apply.

For our newsletter, we process your email address on the basis of your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time and thereby withdraw your consent with effect for the future — via the unsubscribe link in every newsletter email or by message to datenschutz@zensation.ai.

To send the messages submitted through the contact form and to manage newsletter recipients, we use Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). Resend processes this data solely on our behalf as a processor. EU Standard Contractual Clauses (SCCs) serve as a safeguard for the data transfer to the USA pursuant to Art. 46 GDPR.

Further information: https://resend.com/legal/privacy-policy

10. Your Rights as a Data Subject

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)

To exercise your rights, please contact: datenschutz@zensation.ai

You also have the right to lodge a complaint with a data protection supervisory authority. Responsible supervisory authority:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD)
Holstenstraße 98
24103 Kiel
https://www.datenschutzzentrum.de

11. SSL/TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock icon in your browser line.

12. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy to ensure it always complies with current legal requirements or to implement changes to our services. The new privacy policy will then apply to your next visit.