Privacy policy
Note: This translation is for information only. The German "Datenschutzerklärung" is legally binding.
1. Controller
Zeren GmbH
Rosa-Luxemburg-Str. 45a, 04315 Leipzig, Germany
Email: info@zerengmbh.de
Phone: +49 341 699 34 888
2. Hosting and server log files
When you visit the website, technically necessary data (e.g. IP address, date and time, page requested, browser type) is processed to deliver the website and protect it against attacks. The legal basis is Art. 6(1)(f) GDPR (secure and stable operation). Our web server does not keep access logs; the server’s system and error messages are deleted automatically after 14 days at the latest.
Hosting: The website and the database (including your inquiries) run on a server provided by BirSunucum İnternet ve Bilişim Hizmetleri, Beşikkaya Mah. 1953. Sokak No:6/5, Altındağ/Ankara, Turkey. The server is located in Turkey.
Delivery via Cloudflare: All requests to our website pass through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare forwards requests to our server, serves content from its caches and fends off attacks; in doing so, your IP address and technical details of the request are processed. The legal basis is Art. 6(1)(f) GDPR (fast and secure delivery of the website). Cloudflare processes the data on our behalf under a data processing agreement (Art. 28 GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; transfers to the USA are based on the European Commission’s adequacy decision (Art. 45 GDPR).
3. Cookies, local storage and consent
We may only store information on your device or read it from your device if this is strictly necessary for a function you have explicitly requested or if you have given your consent (Sec. 25 TDDDG). This website does not set any cookies of its own and does not use advertising or marketing services. Fonts are loaded locally from our server; there is no connection to Google Fonts. Maps, videos or other third-party content are not embedded – the address on the contact page merely links to OpenStreetMap; a connection to OpenStreetMap is only made when you click the link. All entries with provider, purpose, storage type, retention period and legal basis are listed in the “Cookie settings” overview at the end of this section.
Necessary (no consent required)
- Inquiry list: The products on your inquiry list are stored in your browser's localStorage (entry “zeren-anfrage-v1”, see section 4) until you send the inquiry, clear the list or delete your browser data.
- Your consent decision: We store your choice in the cookie banner in localStorage (entry “zeren-consent” with the version of the request, time, the selected categories and a random consent ID that is stored only in your browser and not transmitted to us) so that we do not have to ask you again on every page and can demonstrate your decision. After 12 months, or if we change the request (new version, e.g. for a new service), we ask again.
- Cloudflare security functions: Our website is delivered via the network of Cloudflare, Inc. If Cloudflare carries out a security check to protect against attacks or automated access, a technically necessary cookie may be set (e.g. “__cf_bm”: 30 minutes; “cf_clearance”: validity period of the security check, 30 minutes by default).
Legal basis: Sec. 25(2) no. 2 TDDDG; insofar as personal data is processed, Art. 6(1)(f) GDPR (legitimate interest in a functional and secure website) and, for storing the consent decision, Art. 6(1)(c) in conjunction with Art. 7(1) GDPR (obligation to demonstrate consent).
Optional (only with your consent)
- Offline use: A service worker (file “sw.js”) stores visited pages and program files in your browser's cache storage. This makes the website load faster and shows previously visited pages or a notice page when you are offline. The data stays on your device and is not transmitted to us or to third parties. Storage period: until you withdraw consent or delete your browser data; when you withdraw consent, the service worker and cache are removed automatically.
- Statistics (Cloudflare Web Analytics): To analyse page views and loading times statistically, we use Cloudflare Web Analytics provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. For this, a script is loaded from static.cloudflareinsights.com that reads technical details of the page view (e.g. page address, referrer, browser type, loading and response times) and transmits them to Cloudflare; your IP address is also processed. According to Cloudflare, no cookies are set, no data is stored in the browser and no user profiles are created. We only receive aggregated statistics. Cloudflare is certified under the EU-US Data Privacy Framework; the transfer to the USA is based on the European Commission's adequacy decision (Art. 45 GDPR). Without your consent, the script is not loaded.
Legal basis: your consent (Sec. 25(1) TDDDG, Art. 6(1)(a) GDPR).
Giving, changing and withdrawing consent
On your first visit, we ask for your consent in a banner. “Reject all” and “Accept all” are equally weighted; under “Settings” you can choose individual categories. Optional categories are not pre-selected. Without consent they remain switched off, and the website is still fully usable. You can change or withdraw your consent at any time with effect for the future via the “Cookie settings” link in the footer of every page or the button in the overview below. The settings dialog also shows your current status: the allowed categories, the time of your decision, how long it is valid and your consent ID. Under “Details”, each category is broken down into all of its entries. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal (Art. 7(3) GDPR).
4. Inquiry list (local storage)
When you add products to the inquiry list, the list is stored only in your browser (localStorage) and is sent to us only when you submit the inquiry. You can clear the list at any time.
5. Inquiry and contact form
We process the data you enter in the form (name, company, email, phone, message and requested products) to handle your inquiry and prepare a quote. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR. The data is deleted as soon as it is no longer needed for processing and no statutory retention obligations apply.
We need your name, email address and message (for product inquiries, the inquiry list) to process your inquiry. All other details are optional.
6. Contact via WhatsApp
If you contact us via the WhatsApp link, data is processed by WhatsApp (Meta Platforms Ireland Ltd.). If you do not want this, please use phone, email or our contact form instead.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). You can also lodge a complaint with a data protection supervisory authority, e.g. the Saxon Data Protection and Transparency Commissioner.
Right to object (Art. 21 GDPR)
Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. An informal objection, e.g. by email to info@zerengmbh.de, is sufficient.
We do not use automated decision-making, including profiling (Art. 22 GDPR).
Technical data when submitting forms
When you submit the inquiry or contact form, we also store your IP address, the country derived from it, browser, operating system, device type and browser language. This serves to prevent misuse and spam and to match your inquiry (Art. 6(1)(f) GDPR). The country is determined locally on our server without transfer to third parties. We delete the IP address automatically after 30 days; the other data is deleted together with the inquiry.
