Z-Zone IconZ-Zone

Privacy Policy

Last updated: March 2026

1. Controller

The controller responsible for data processing is:

M. Eng. Daniel Eisenmann
Georg-Strobel-Straße 63
90489 Nuremberg
Germany

E-mail: team@z-zone.info
Phone: +49 151 27024251

2. Access data and hosting

You can visit our website without providing any personal information. Each time a page is accessed, the web server automatically stores a so-called server log file (e.g. requested file, IP address, date/time, data transferred, requesting provider).

This access data is evaluated exclusively for the purpose of ensuring smooth operation and improving our services. This serves to safeguard our legitimate interests pursuant to Art. 6(1)(f) GDPR.

Processing takes place exclusively within the EU. Unless otherwise explained in this privacy policy, all access data and all data collected via forms are processed on servers within the EU.

3. Waitlist

When you sign up for our waitlist, we collect the following data:

  • E-mail address (required)
  • First name (optional)
  • City (required)

This data is used exclusively for managing the waitlist, sending updates and pilot invitations, and contacting you for the free sleep coaching session.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. Waitlist entries are displayed publicly on the website in anonymised form (first letter of first name and city only).

You may withdraw your consent at any time by contacting us at team@z-zone.info. Your data will then be deleted immediately.

4. Data processing for contact enquiries

In the context of communication, we collect personal data to process your enquiries when you voluntarily provide it when contacting us (e.g. contact form or e-mail).

Mandatory fields are marked as such, as we require this data to process your enquiry. The data collected can be seen from the respective form.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in efficient communication).

After your enquiry has been fully processed, your data will be deleted, provided no statutory retention obligations exist and you have not expressly consented to further use.

5. Data processing for contract fulfilment

If a contract is concluded, we process personal data for contract fulfilment, including enquiries regarding warranty and performance claims, pursuant to Art. 6(1)(b) GDPR.

After complete contract fulfilment, the data will be restricted taking into account statutory tax and commercial retention periods and then deleted, provided no further legal basis for processing exists.

6. Cookies and local storage

This website uses only technically necessary cookies and local storage. No marketing or tracking cookies are used.

7. Analytics tools

We currently do not use any analytics or tracking tools (no Google Analytics, no Matomo, no Meta Pixel).

8. SSL/TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of personal content. You can recognise an encrypted connection by "https://" in your browser's address bar.

9. Your rights

As a data subject you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent with effect for the future (Art. 7(3) GDPR)
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

If you believe that the processing of your personal data violates the GDPR, you may lodge a complaint with a data protection supervisory authority. For our registered address in Nuremberg (Bavaria), this is generally the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA): https://www.lda.bayern.de (Promenade 18, 91522 Ansbach, Germany).

10. Retention periods

We store personal data only for as long as necessary for the respective processing purposes or as required by statutory retention obligations. Typical deletion periods (where applicable) are in particular:

  • Server log files: generally for a few days (e.g. 7 days), provided no security-related evaluation is required
  • Waitlist data: until consent is withdrawn
  • Contact enquiries: generally up to 6 months; in individual cases longer if necessary for the documentation/defence of claims
  • Contract and invoice data: in accordance with statutory tax and commercial retention obligations (typically 6 or 10 years respectively)

11. Changes to this privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services.