Privacy notice

1. Controller

The controller for data processing on this website within the meaning of Article 4 (7) GDPR is:

zrockz GmbH & Co. KG
Berliner Str. 5
67273 Weisenheim am Berg
Germany
Email: info@zrockz.de

No data protection officer has been appointed; the conditions of Article 37 GDPR and § 38 BDSG are not met. For all data protection matters please use the contact details above.

2. Principles

We process personal data only to the extent necessary to provide a functional website together with our content and services. Processing generally takes place only with your consent or where a legal provision permits it.

This website uses no cookies, embeds no external fonts, scripts, maps or video services and employs no analytics, tracking or advertising services. No profiling and no automated decision-making within the meaning of Article 22 GDPR takes place.

3. Hosting and server log files

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. A data processing agreement pursuant to Article 28 GDPR is in place with this provider. The contractually agreed processing takes place in a member state of the European Union or another state party to the Agreement on the European Economic Area, unless a transfer to a third country is required to deliver the service (see section 6).

When you access this website, the server automatically collects information transmitted by your browser that is technically necessary to display the website and to ensure stability and security. The following is recorded:

• the address accessed and the name of the file retrieved
• date and time of access
• volume of data transferred and notification of successful retrieval
• browser type and version as well as the operating system used
• the previously visited page (referrer), where transmitted
• the IP address of the requesting device

Legal basis is Article 6 (1) (f) GDPR. Our legitimate interest lies in technically faultless operation, the security of our information systems and the investigation of abusive access.

Retention period: log data is deleted as soon as it is no longer required for the stated purpose. Retention follows the default settings of our hosting provider; storage beyond that occurs only where necessary to investigate a specific security incident. This data is not combined with other data sources.

4. Contact by email

If you contact us by email, we process the data you transmit — in particular your name, email address and the content of your message — in order to handle your enquiry.

Legal basis is Article 6 (1) (b) GDPR where your enquiry relates to the initiation or performance of a contract, and otherwise Article 6 (1) (f) GDPR based on our legitimate interest in responding to enquiries.

Retention period: your enquiry is deleted once it has been conclusively dealt with and no statutory retention obligations apply. Commercial and tax retention periods may require storage for up to ten years.

Please note that unencrypted email transmission is not protected against access by third parties. For confidential information we are happy to agree a secure transmission channel.

5. Encryption

For security reasons this website uses TLS encryption. You can recognise an encrypted connection by the address bar of your browser beginning with “https://” and by the padlock symbol.

6. Recipients and transfers to third countries

Your data is passed on to third parties only where necessary for the performance of a contract, where we are legally obliged to do so, or where you have consented. Recipients may include our hosting provider and, where necessary, tax and legal advisers.

Our hosting provider engages further processors of its own. Some of these are established outside the European Union or the European Economic Area, or provide support access from there — currently providers based in Switzerland, Singapore and the United States. Such transfers take place on the basis of the EU standard contractual clauses pursuant to Article 46(2)(c) GDPR. The current list of processors engaged, together with the technical and organisational measures, is published by the hosting provider at strato.de/agb/tom.

Beyond this, no transfer to countries outside the European Union or the European Economic Area takes place.

7. Data from customer projects

Operational data provided to us by customers in the course of an analysis is not covered by this website privacy notice. Scope, purpose, storage location, deletion periods and the further contractual arrangements — including a data processing agreement pursuant to Article 28 GDPR where required — are agreed separately and in writing for each project before any data is handed over.

8. Your rights as a data subject

You have the following rights with regard to your personal data:

• Access pursuant to Article 15 GDPR
• Rectification of inaccurate or incomplete data pursuant to Article 16 GDPR
• Erasure pursuant to Article 17 GDPR
• Restriction of processing pursuant to Article 18 GDPR
• Data portability pursuant to Article 20 GDPR
• Withdrawal of consent pursuant to Article 7 (3) GDPR with effect for the future
• Lodging a complaint with a supervisory authority pursuant to Article 77 GDPR

An informal message to info@zrockz.de is sufficient to exercise your rights.

Right to object pursuant to Article 21 GDPR

Where we process your data on the basis of legitimate interests pursuant to Article 6 (1) (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Competent supervisory authority

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Hintere Bleiche 34
55116 Mainz, Germany
www.datenschutz.rlp.de

9. Necessity of providing data

The provision of personal data is neither legally nor contractually required. Without a contact address, however, we cannot answer an enquiry.

10. Changes to this notice

We update this privacy notice whenever changes in the legal situation or in our services make this necessary. The version available on this page applies in each case.