1. Controller
The controller responsible for data processing on this website is:
Francesca Martinez Bojorges
trading under the name Zalvent
Volkmar-von-Kemnat-Straße 12
86807 Buchloe
Germany
Phone: +49 176 24603174
Email: fmartinez@zalvent.com
2. General information about data processing
Protecting your personal data is important to us. We process personal data exclusively in accordance with applicable data-protection law, in particular the General Data Protection Regulation (GDPR) and the relevant German data-protection provisions.
Personal data means any information by which a natural person can be identified directly or indirectly.
We process personal data only where this is necessary to provide this website, handle enquiries, take steps before entering into or performing a contract, or on the basis of consent.
3. Website hosting
This website is provided through Netlify.
The hosting service provider is Netlify, Inc., USA.
When our website is accessed, technically necessary connection data is processed. This may include in particular:
- IP address
- date and time of access
- page or file accessed
- amount of data transferred
- browser type and version
- operating system
- referrer URL
- technical status and error information
This data is required to provide the website technically, ensure its stability and security, and detect technical faults.
Processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable and reliable provision of our website.
Where Netlify processes personal data on our behalf, the processing takes place in accordance with the data-protection requirements applicable to processors.
As Netlify is a company based in the United States, personal data may also be processed outside the European Union or European Economic Area. Where required, such transfers take place on the basis of the safeguards for international data transfers provided for by the GDPR.
4. SSL/TLS encryption
Our website uses SSL or TLS encryption for security reasons.
This is intended to protect data you transmit to us, particularly through forms or other input fields, from unauthorised access by third parties.
You can generally recognise an encrypted connection in your browser because the website address begins with “https://”.
5. Contacting us
If you contact us by email, phone or contact form, we process the data you provide in order to handle your enquiry.
The data processed may include in particular:
- name
- company
- email address
- phone number, if provided
- content of your message
- other information you provide voluntarily
Where your enquiry concerns entering into a contract or steps before entering into a contract, processing is based on Article 6(1)(b) GDPR.
For other enquiries, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is responding to incoming enquiries and communicating with prospects, customers and business partners.
Where processing is based on your express consent, the legal basis is Article 6(1)(a) GDPR. Consent may be withdrawn at any time with effect for the future.
Data transmitted when you contact us is deleted when the purpose of processing no longer applies and there are no statutory retention obligations or other legitimate reasons for further storage.
Contact through WhatsApp
Our website offers you the option to contact us through WhatsApp. For this purpose, we use only an external link to WhatsApp.
Simply visiting our website does not transfer any personal data to WhatsApp through this link. Only when you actively click the WhatsApp link do you leave our website and proceed to WhatsApp.
If you contact us through WhatsApp, we process the personal data you provide during the communication. This may include your phone number, your name or profile information you have provided on WhatsApp, and the content of your messages.
We process this information to handle your enquiry and communicate with you.
Where your enquiry concerns entering into or performing a contract, processing is based on Article 6(1)(b) GDPR. In other cases, processing is based on our legitimate interest in simple and efficient communication with prospective customers and business contacts pursuant to Article 6(1)(f) GDPR.
WhatsApp is a service provided by WhatsApp Ireland Limited. When you use WhatsApp, personal data may also be processed by WhatsApp and transferred to other companies or third countries. We do not have full control over this processing by WhatsApp.
Further information about processing by WhatsApp is available in WhatsApp's privacy information.
Using WhatsApp is voluntary. You can also contact us by email, phone or through the contact form.
6. Marketing Clarity Check
We offer a Marketing Clarity Check on our website.
The check may ask for and evaluate information about a company's current marketing situation.
Where the check can be used without entering contact details, only the data technically necessary to conduct the check and display the result is processed.
If you voluntarily submit your contact details after completing the check, the data processed may include in particular:
- name
- company
- email address
- phone number, if provided voluntarily
- Marketing Clarity Check results
- voluntary message or additional information
We use this data to handle your enquiry, discuss the result with you and, where applicable, prepare for a possible collaboration.
Depending on the nature of the enquiry, processing is based on Article 6(1)(b) GDPR or Article 6(1)(f) GDPR.
Contact details are used for any additional advertising only where an appropriate legal basis exists.
7. Appointment booking through Google Calendar
On our website, we offer the option to book an appointment through Google Calendar / Google Appointment Scheduling.
The service provider is Google Ireland Limited, Ireland. Services from affiliated Google companies may also be used.
When you use the appointment-booking service, the data processed may include in particular:
- name
- email address
- requested appointment
- time zone
- any additional information you enter
- IP address and technical connection data
- device and browser information
The data you enter to arrange an appointment is processed in order to take steps before entering into a contract or to organise a conversation you have requested, on the basis of Article 6(1)(b) GDPR.
Where information is stored on or read from your device when embedded Google content is loaded, this takes place—where legally required—only after you have given consent. The legal basis is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
Consent may be withdrawn at any time with effect for the future.
When Google services are used, personal data may also be processed outside the European Union or European Economic Area, in particular in the United States. Where required, such transfers take place on the basis of the safeguards for international data transfers provided for by the GDPR.
Alternatively, Google's appointment-booking page can be opened through an external link. In that case, data is transferred to Google only when you open the relevant link.
8. Communication through Google Workspace
We use Google Workspace services for our business email communication.
If you contact us by email, your email address, the content of your message, any attachments and other technical data associated with the email may be processed through Google systems.
Where the communication concerns entering into or performing a contract, processing takes place to handle your enquiry and for business communication on the basis of Article 6(1)(b) GDPR.
In other cases, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is reliable and efficient business communication.
9. Cookies and similar technologies
Our website may use technically necessary cookies or comparable technologies where these are required to provide certain functions.
Non-essential cookies or comparable technologies are used only where legally required consent has been obtained.
Consent may be withdrawn at any time with effect for the future.
Where third-party content such as Google services is embedded, it is loaded only after the relevant consent has been given if the integration requires consent.
10. Google Tag Manager and Google Analytics 4
We use Google Tag Manager and Google Analytics 4, services provided by Google, on this website.
Google Tag Manager is used to technically manage and control website tags. According to Google, Tag Manager itself does not generally collect personal visitor data for analytics purposes. Google may, however, process technical and aggregated diagnostic data as well as information contained in standard HTTP request logs. Google Help
We use Google Analytics 4 to understand how our website is used. This may include information such as pages viewed, date and duration of visits, approximate geographical information, device and browser information, interactions with the website and technical event data.
Processing only after consent
Google Analytics is activated on our website only after you have expressly consented to analytics processing.
When you first visit our website, analytics storage is disabled by default. Only after you click “Accept analytics” in our consent banner is consent for analytics_storage granted and Google Analytics activated.
If you reject analytics consent, Google Analytics does not run and no Google Analytics cookies are set.
The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR and, where information is stored on or accessed from your device, Section 25(1) TDDDG.
Withdrawal of consent
You may withdraw your consent at any time with effect for the future.
You can do this by reopening the Cookie settings in the footer of our website and changing your selection.
After withdrawal, analytics consent is set to denied and Google Analytics will no longer be executed. Where technically possible, Google Analytics cookies set through our website will be removed.
Withdrawal does not affect the lawfulness of processing carried out on the basis of your consent prior to withdrawal.
Storage of your consent preference
To ensure that your selection can be respected on subsequent visits, we store your choice locally in your browser under the key:
zalvent_analytics_consent
Only whether analytics consent was accepted or rejected is stored.
This storage is used exclusively to technically implement your consent preference and to avoid asking for the same decision on every page view.
Google Consent Mode
We use Google Consent Mode to technically implement your consent preference.
Analytics consent is initially set to denied. Only after your express consent is analytics_storage changed to granted.
Advertising-related consent signals, including ad_storage, ad_user_data and ad_personalization, remain disabled and are not granted through analytics consent on this website.
Google describes analytics_storage as the consent signal controlling storage related to analytics. Google Help
Cookies and similar technologies
After consent has been granted, Google Analytics may use cookies or comparable technologies in order to process information about the use of our website.
These may include Google Analytics cookies such as _ga.
These technologies are only used after you have granted consent.
IP addresses and location information
According to Google, Google Analytics 4 does not log or store individual IP addresses of users located in the European Union, Switzerland or the United Kingdom.
IP addresses may briefly be used to derive approximate location information such as country, region or city. Google states that the IP address is then discarded before Analytics data is logged or stored. Google Help
Recipients and processing by Google
For users in the European Economic Area, the relevant Google entity is generally:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
In connection with Google Analytics, data may be processed by Google and, where applicable, within the Google group or by other service providers.
Google provides data-processing terms for its measurement services and identifies Google Ireland Limited as the relevant Google entity for European controller personal data. Google Help
Processing or transfers of data outside the European Economic Area cannot be completely excluded. Where such transfers occur, the applicable safeguards and contractual mechanisms provided by Google apply.
Retention period
The exact retention period for data processed through Google Analytics depends on the configuration of our Google Analytics property and Google's applicable rules.
Google Analytics allows user-level and event-level data retention periods of, among other options, 2 months or 14 months. Google Help
Further information about Google's processing of personal data is available in Google's privacy documentation and terms of service.
11. Retention period
We store personal data only for as long as necessary for the relevant processing purpose.
Where statutory retention obligations apply, the relevant data is stored for the duration of those statutory periods.
Once the purpose of processing no longer applies or the relevant retention period expires, the data is deleted unless another legal basis permits or requires further storage.
12. Recipients of personal data
Personal data is generally disclosed to third parties only where this is necessary to provide our services, technically provide our website, handle your enquiry, or comply with legal obligations.
Recipients may include in particular:
- hosting and IT service providers
- communication and email service providers
- appointment-booking and calendar services
- technical service providers engaged by us
- tax advisers or other professional advisers, where necessary
- authorities or other public bodies, where required by law
Where service providers process personal data on our behalf, they are engaged as processors in accordance with legal requirements.
13. Transfers to third countries
When certain service providers are used, personal data may be processed outside the European Union or European Economic Area.
A transfer to a third country takes place only where the requirements of Articles 44 et seq. GDPR are met.
This may take place in particular on the basis of an adequacy decision by the European Commission or appropriate safeguards such as Standard Contractual Clauses.
14. Your rights
Subject to the statutory requirements, you have the right to:
- request access to your processed personal data under Article 15 GDPR,
- request rectification of inaccurate or incomplete data under Article 16 GDPR,
- request erasure of your personal data under Article 17 GDPR,
- request restriction of processing under Article 18 GDPR,
- receive your personal data in a structured, commonly used and machine-readable format under Article 20 GDPR,
- object to certain processing under Article 21 GDPR,
- withdraw consent at any time with effect for the future under Article 7(3) GDPR.
To exercise your rights, please contact:
15. Right to object
Where we process personal data on the basis of Article 6(1)(f) GDPR, Article 21 GDPR gives you the right to object to the processing at any time on grounds relating to your particular situation.
Where personal data is processed for direct marketing, you may object to this processing at any time.
16. Right to lodge a complaint with a supervisory authority
Under Article 77 GDPR, you have the right to lodge a complaint with a data-protection supervisory authority if you believe that the processing of your personal data infringes data-protection law.
For non-public organisations based in Bavaria, the competent authority is in particular:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany
17. Changes to this privacy policy
We reserve the right to amend this privacy policy if our website, the services used or legal requirements change.
Last updated: 7 October 2026