Privacy Policy

Preamble

With the following privacy policy, we would like to inform you about the types of personal data (hereinafter also referred to as "data") we process, for what purposes and to what extent. The privacy policy applies to all processing of personal data carried out by us, both in the context of providing our services and, in particular, on our websites, in mobile applications and within external online presences, such as our social media profiles (hereinafter collectively referred to as "online offering").

The terms used are not gender-specific.

As of 7 February 2025

Table of contents

•    Preamble

•    Responsible party

•    Overview of processing

•    Relevant legal basis

•    Security measures

•    General information on data storage and deletion

•    Rights of data subjects

•    Business services

•    Use of cookies

• Community functions

• Contact and enquiry management

• Artificial intelligence (AI)

• Newsletters and electronic notifications

• Presence on social networks (social media)

• Plug-ins and embedded functions and content

• Changes and updates

• Definitions of terms

Responsible parties

ZEBRA-FACTOR Productions UG (limited liability)

Saseler Damm 43-45

22395 Hamburg

Authorised representative: Michael Reffi (Managing Director)

ZEBRA-FACTOR Academy GmbH

Managing Director: Dr Renate Mayer

Kasernstr. 52

89231 Neu-Ulm, Germany

Authorised representative: Dr Renate Mayer (Managing Director)

Email address: info@zebra-factor.com

Overview of processing

Types of data processed

•    Inventory data

•    Payment data

•    Contact details

•    Content data

•    Contract data

•    Usage data

    •    Meta, communication and procedural data

Categories of data subjects

•    Service recipients and clients

•    Prospective customers

•    Communication partners

•    Users

•    Business and contractual partners

•    Third parties

Purposes of processing

•    Provision of contractual services and fulfilment of contractual obligations

    • Communication

• Security measures

• Direct marketing

• Office and organisational procedures

• Organisational and administrative procedures

• Feedback

• Provision of our online services and user-friendliness

• Public relations

• Business processes and business management procedures

• Artificial intelligence (AI)

Relevant legal bases

Relevant legal bases under the GDPR:

We process personal data on the basis of the following legal bases:

• Consent (Art. 6(1)(a) GDPR): The data subject has given their consent for one or more specific purposes.

• Performance of a contract and pre-contractual enquiries (Art. 6(1)(b) GDPR): Processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract.

• Legal obligation (Art. 6(1)(c) GDPR): Processing is necessary for compliance with a legal obligation.

• Legitimate interests (Art. 6(1)(f) GDPR): Processing is necessary for the purposes of legitimate interests, unless the interests or fundamental rights and freedoms of the data subject prevail.

National data protection regulations in Germany:

In addition to the GDPR, national data protection regulations apply, in particular the Federal Data Protection Act (BDSG) and, where applicable, state data protection laws.

Reference to the applicability of the GDPR and Swiss DSG:

This privacy policy serves to provide information in accordance with both the Swiss DSG and the GDPR. Terms from the GDPR are used; the legal meaning under the Swiss DSG remains unaffected.

Security measures

We take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk. This includes, in particular, ensuring the confidentiality, integrity and availability of data and securing online connections using TLS/SSL encryption technology (HTTPS).

General information on data storage and deletion

We delete personal data in accordance with the statutory provisions as soon as the underlying consents are revoked or no further legal basis exists. Exceptions exist if legal obligations or special interests require longer storage.

General periods according to German law:

•    10 years: books, annual financial statements, inventories, etc.

•    8 years: Booking receipts, invoices

•    6 years: Business documents, commercial letters

•    3 years: Data for potential warranty and compensation claims

Rights of data subjects

Under the GDPR, you have the following rights in particular:

•    Right to object

•    Right to withdraw consent

    •    Right to information

•    Right to rectification

•    Right to erasure and restriction of processing

•    Right to data portability

•    Right to lodge a complaint with a supervisory authority

Business services

We process data from our contractual and business partners within the framework of contractual and comparable legal relationships, as well as for related measures and communication.

Types of data processed:

Inventory data, payment data, contact data, contract data

Legal basis:

Contract fulfilment, legal obligation, legitimate interests

Use of cookies

We use cookies in accordance with legal requirements. User consent is obtained where necessary. Cookies are used for functionality, security, user-friendliness and analysis.

Types of cookies:

• Temporary cookies (session cookies)

• Permanent cookies

Revocation and objection:

Users can revoke their consent and object at any time.

Community functions

Our community functions allow users to exchange information with each other. Use is only permitted in compliance with the applicable legal situation and our terms and conditions.

Contact and enquiry management

When contacting us, the details of the enquirer are processed to the extent necessary to respond to and carry out the requested measures.

Artificial intelligence (AI)

We use AI systems in compliance with legal requirements. The processing of personal data is carried out on a legal basis, in particular with consent or legal permission.

Newsletters and electronic notifications

Newsletters and electronic notifications are only sent with consent or on a legal basis. You can unsubscribe at any time.

Presence on social networks (social media)

We maintain an online presence on social networks. User data is processed for communication and public relations purposes. Data may be processed outside the EU.

Plug-ins and embedded functions and content

We integrate functional and content elements from third-party providers. The IP address of users is processed for the delivery of content.

Changes and updates

Please check the content of this privacy policy regularly. Changes will be published as soon as they are necessary.

Definition of terms

An overview of the terms used can be found at the end of this privacy policy. Where defined by law, the legal definitions apply.