1. Controller
The controller responsible for data processing on this website is:
Francesca Martinez Bojorges
trading under the name Zalvent
Volkmar-von-Kemnat-Straße 12
86807 Buchloe
Germany
Phone: +49 176 24603174
Email: fmartinez@zalvent.com
2. General information about data processing
Protecting your personal data is important to us. We process personal data exclusively in accordance with applicable data-protection law, in particular the General Data Protection Regulation (GDPR) and the relevant German data-protection provisions.
Personal data means any information by which a natural person can be identified directly or indirectly.
We process personal data only where this is necessary to provide this website, handle enquiries, take steps before entering into or performing a contract, or on the basis of consent.
3. Website hosting
This website is provided through Netlify.
The hosting service provider is Netlify, Inc., USA.
When our website is accessed, technically necessary connection data is processed. This may include in particular:
- IP address
- date and time of access
- page or file accessed
- amount of data transferred
- browser type and version
- operating system
- referrer URL
- technical status and error information
This data is required to provide the website technically, ensure its stability and security, and detect technical faults.
Processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable and reliable provision of our website.
Where Netlify processes personal data on our behalf, the processing takes place in accordance with the data-protection requirements applicable to processors.
As Netlify is a company based in the United States, personal data may also be processed outside the European Union or European Economic Area. Where required, such transfers take place on the basis of the safeguards for international data transfers provided for by the GDPR.
4. SSL/TLS encryption
Our website uses SSL or TLS encryption for security reasons.
This is intended to protect data you transmit to us, particularly through forms or other input fields, from unauthorised access by third parties.
You can generally recognise an encrypted connection in your browser because the website address begins with “https://”.
5. Contacting us
If you contact us by email, phone or contact form, we process the data you provide in order to handle your enquiry.
The data processed may include in particular:
- name
- company
- email address
- phone number, if provided
- content of your message
- other information you provide voluntarily
Where your enquiry concerns entering into a contract or steps before entering into a contract, processing is based on Article 6(1)(b) GDPR.
For other enquiries, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is responding to incoming enquiries and communicating with prospects, customers and business partners.
Where processing is based on your express consent, the legal basis is Article 6(1)(a) GDPR. Consent may be withdrawn at any time with effect for the future.
Data transmitted when you contact us is deleted when the purpose of processing no longer applies and there are no statutory retention obligations or other legitimate reasons for further storage.
6. Marketing Clarity Check
We offer a Marketing Clarity Check on our website.
The check may ask for and evaluate information about a company's current marketing situation.
Where the check can be used without entering contact details, only the data technically necessary to conduct the check and display the result is processed.
If you voluntarily submit your contact details after completing the check, the data processed may include in particular:
- name
- company
- email address
- phone number, if provided voluntarily
- Marketing Clarity Check results
- voluntary message or additional information
We use this data to handle your enquiry, discuss the result with you and, where applicable, prepare for a possible collaboration.
Depending on the nature of the enquiry, processing is based on Article 6(1)(b) GDPR or Article 6(1)(f) GDPR.
Contact details are used for any additional advertising only where an appropriate legal basis exists.
7. Appointment booking through Google Calendar
On our website, we offer the option to book an appointment through Google Calendar / Google Appointment Scheduling.
The service provider is Google Ireland Limited, Ireland. Services from affiliated Google companies may also be used.
When you use the appointment-booking service, the data processed may include in particular:
- name
- email address
- requested appointment
- time zone
- any additional information you enter
- IP address and technical connection data
- device and browser information
The data you enter to arrange an appointment is processed in order to take steps before entering into a contract or to organise a conversation you have requested, on the basis of Article 6(1)(b) GDPR.
Where information is stored on or read from your device when embedded Google content is loaded, this takes place—where legally required—only after you have given consent. The legal basis is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
Consent may be withdrawn at any time with effect for the future.
When Google services are used, personal data may also be processed outside the European Union or European Economic Area, in particular in the United States. Where required, such transfers take place on the basis of the safeguards for international data transfers provided for by the GDPR.
Alternatively, Google's appointment-booking page can be opened through an external link. In that case, data is transferred to Google only when you open the relevant link.
8. Communication through Google Workspace
We use Google Workspace services for our business email communication.
If you contact us by email, your email address, the content of your message, any attachments and other technical data associated with the email may be processed through Google systems.
Where the communication concerns entering into or performing a contract, processing takes place to handle your enquiry and for business communication on the basis of Article 6(1)(b) GDPR.
In other cases, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is reliable and efficient business communication.
9. Cookies and similar technologies
Our website may use technically necessary cookies or comparable technologies where these are required to provide certain functions.
Non-essential cookies or comparable technologies are used only where legally required consent has been obtained.
Consent may be withdrawn at any time with effect for the future.
Where third-party content such as Google services is embedded, it is loaded only after the relevant consent has been given if the integration requires consent.
10. Retention period
We store personal data only for as long as necessary for the relevant processing purpose.
Where statutory retention obligations apply, the relevant data is stored for the duration of those statutory periods.
Once the purpose of processing no longer applies or the relevant retention period expires, the data is deleted unless another legal basis permits or requires further storage.
11. Recipients of personal data
Personal data is generally disclosed to third parties only where this is necessary to provide our services, technically provide our website, handle your enquiry, or comply with legal obligations.
Recipients may include in particular:
- hosting and IT service providers
- communication and email service providers
- appointment-booking and calendar services
- technical service providers engaged by us
- tax advisers or other professional advisers, where necessary
- authorities or other public bodies, where required by law
Where service providers process personal data on our behalf, they are engaged as processors in accordance with legal requirements.
12. Transfers to third countries
When certain service providers are used, personal data may be processed outside the European Union or European Economic Area.
A transfer to a third country takes place only where the requirements of Articles 44 et seq. GDPR are met.
This may take place in particular on the basis of an adequacy decision by the European Commission or appropriate safeguards such as Standard Contractual Clauses.
13. Your rights
Subject to the statutory requirements, you have the right to:
- request access to your processed personal data under Article 15 GDPR,
- request rectification of inaccurate or incomplete data under Article 16 GDPR,
- request erasure of your personal data under Article 17 GDPR,
- request restriction of processing under Article 18 GDPR,
- receive your personal data in a structured, commonly used and machine-readable format under Article 20 GDPR,
- object to certain processing under Article 21 GDPR,
- withdraw consent at any time with effect for the future under Article 7(3) GDPR.
To exercise your rights, please contact:
14. Right to object
Where we process personal data on the basis of Article 6(1)(f) GDPR, Article 21 GDPR gives you the right to object to the processing at any time on grounds relating to your particular situation.
Where personal data is processed for direct marketing, you may object to this processing at any time.
15. Right to lodge a complaint with a supervisory authority
Under Article 77 GDPR, you have the right to lodge a complaint with a data-protection supervisory authority if you believe that the processing of your personal data infringes data-protection law.
For non-public organisations based in Bavaria, the competent authority is in particular:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany
16. Changes to this privacy policy
We reserve the right to amend this privacy policy if our website, the services used or legal requirements change.
Last updated: August 2026