Privacy Policy

1. Privacy at a Glance

The following notices provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you could be personally identified. Detailed information on the subject of data protection can be found in our privacy policy listed below.

2. Controller

The controller responsible for data processing on this website is:

Alexander Bering
ZenSation Enterprise Solutions
Heitholmer Weg 16
24109 Kiel

Legal form: Sole proprietorship (operated under the name of the owner)
D-U-N-S Number: 317163443

Phone: +49 151 27477096
Email: datenschutz@zensation.ai

The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

3. Hosting

This website is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). When you visit our website, your personal data is processed on Vercel's servers. This may include your IP address, browser type, operating system, the page accessed, date and time of access.

Vercel uses EU Standard Contractual Clauses (SCCs) as a safeguard for data transfers to the USA pursuant to Art. 46 GDPR.

Further information: https://vercel.com/legal/privacy-policy

The use of Vercel is based on Art. 6(1)(f) GDPR. We have a legitimate interest in reliable and fast provision of our website.

4. Web Analytics (Plausible Analytics)

This website uses Plausible Analytics (Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia), a privacy-friendly web analytics service.

Plausible Analytics sets no cookies, stores no personal data, and creates no user profiles. Only aggregated, anonymized statistics are collected (page views, referral sources). Identification of individual persons is not possible.

All data remains within the EU. No transfers to third countries take place.

The use is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the anonymized analysis of user behavior to improve our offering. As no personal data is processed, no consent is required.

Further information: https://plausible.io/privacy-focused-web-analytics

5. Vercel Analytics & Speed Insights

This website uses Vercel Analytics and Vercel Speed Insights for collecting anonymized usage data and performance metrics. These services do not collect personal data and do not use cookies.

Processing is based on Art. 6(1)(f) GDPR (legitimate interest in optimizing website performance).

6. Cookies

This website uses only technically necessary cookies. We do not set analytics cookies, tracking cookies, or third-party cookies for advertising purposes.

Technically necessary cookies (e.g., for language preferences) are stored on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the technically flawless provision of our website.

You can configure your browser to inform you about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser.

7. Payment Provider

For payment processing, we use Stripe (Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland). During payment transactions, the payment data you enter (e.g., credit card number, bank details) is transmitted directly to Stripe and processed there.

Stripe is PCI DSS Level 1 certified. Stripe uses EU Standard Contractual Clauses for data transfers to the USA.

Data processing is based on Art. 6(1)(b) GDPR (contract performance).

Further information: https://stripe.com/privacy

8. Additional Services and Third Parties

We use the following additional services to provide our offerings:

• Railway (Railway Corp., USA) — Backend hosting. Legal basis: Art. 6(1)(f) GDPR.
• Supabase (Supabase Inc., USA) — Database hosting. Legal basis: Art. 6(1)(f) GDPR.
• Neon (Neon Inc., USA) — Database hosting; data is stored on servers located in the EU. Legal basis: Art. 6(1)(f) GDPR.
• Apple App Store (Apple Inc., USA) — App distribution. Legal basis: Art. 6(1)(b) GDPR.

Where processing by the named US providers takes place outside the EU, or where provider-side access from the US is possible, EU Standard Contractual Clauses (SCCs) serve as a safeguard pursuant to Art. 46 GDPR.

9. Contact Form and Newsletter

When you send us an enquiry via the contact form, we process the data you provide (name, email address, optionally company, and the content of your message) in order to handle and respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry is aimed at entering into or performing a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). The data is deleted once it is no longer required to handle your enquiry and no statutory retention obligations apply.

For our newsletter, we process your email address on the basis of your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time and thereby withdraw your consent with effect for the future — via the unsubscribe link in every newsletter email or by message to datenschutz@zensation.ai.

To send the messages submitted through the contact form and to manage newsletter recipients, we use Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). Resend processes this data solely on our behalf as a processor. EU Standard Contractual Clauses (SCCs) serve as a safeguard for the data transfer to the USA pursuant to Art. 46 GDPR.

Further information: https://resend.com/legal/privacy-policy

10. Your Rights as a Data Subject

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)

To exercise your rights, please contact: datenschutz@zensation.ai

You also have the right to lodge a complaint with a data protection supervisory authority. Responsible supervisory authority:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD)
Holstenstraße 98
24103 Kiel
https://www.datenschutzzentrum.de

11. SSL/TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock icon in your browser line.

12. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy to ensure it always complies with current legal requirements or to implement changes to our services. The new privacy policy will then apply to your next visit.