Privacy Policy

Introduction

Zenovas GmbH ("we", "our", "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect the data we collect from users of our website and services.

As a German company operating within the European Union, we comply with the General Data Protection Regulation (GDPR) and German Federal Data Protection Act (BDSG). This policy applies to all personal data processing activities conducted by Zenovas.

Data Controller Information

The data controller responsible for your personal data is:

Data Collection

We collect various types of personal data through different means when you interact with our website and services. The data we collect includes information you provide directly to us and information we collect automatically when you use our website.

Information You Provide

• Contact Information: Name, email address, phone number, and postal address when you contact us or request information
• Project Details: Information about your property development requirements, investment interests, and project specifications
• Communication Records: Records of correspondence, meeting notes, and consultation details
• Professional Information: Company details, role, and business requirements for commercial enquiries

Information We Collect Automatically

• Website Usage Data: Pages visited, time spent on pages, click patterns, and navigation behaviour
• Technical Information: IP address, browser type, device information, operating system, and screen resolution
• Cookies and Tracking: Information collected through cookies and similar technologies as detailed in our Cookie Policy

How We Use Your Information

We process your personal data for specific purposes based on legitimate legal grounds. Our use of your data is limited to the following purposes and we will always ensure we have a lawful basis for processing.

Primary Uses

• Service Provision: To respond to your enquiries, provide information about our services, and deliver property development consultations
• Project Management: To manage development projects, coordinate with stakeholders, and provide ongoing support
• Communication: To send you requested information, project updates, and respond to your questions
• Legal Compliance: To meet our legal obligations under German and EU law, including anti-money laundering requirements

Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

• Consent: Where you have given explicit consent for specific processing activities
• Contract Performance: Where processing is necessary to perform a contract or take pre-contractual steps
• Legitimate Interests: Where we have legitimate business interests that do not override your privacy rights
• Legal Obligation: Where processing is required to comply with legal or regulatory obligations

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, and protect our legitimate interests. Our data retention practices are designed to balance your privacy rights with our business and legal requirements.

Retention Periods

• Contact Enquiries: 3 years from last contact, unless you request earlier deletion
• Project Documentation: 10 years after project completion to meet legal and warranty obligations
• Marketing Communications: Until you withdraw consent or request removal
• Website Analytics: 26 months for Google Analytics data, as per our cookie settings
• Legal Documents: As required by German commercial law, typically 10 years

We regularly review our data retention practices and will securely delete or anonymise personal data when it is no longer required.

Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal data to third parties without your consent, except as described in this policy. We may share your information with trusted partners and service providers who assist us in operating our business.

Authorised Recipients

• Professional Partners: Architects, contractors, and consultants working on your projects (with your consent)
• Legal and Financial Advisors: Lawyers, accountants, and financial institutions as required for project delivery
• Technology Providers: Website hosting, email services, and analytics providers under strict data processing agreements
• Regulatory Authorities: Government agencies and regulatory bodies when required by law

International Data Transfers

As a company based in Germany, we primarily process data within the European Economic Area (EEA). When we use service providers outside the EEA, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

Any international transfers are conducted using approved transfer mechanisms such as adequacy decisions, standard contractual clauses, or other legally recognised safeguards.

Your Rights

Under GDPR and German data protection law, you have several rights regarding your personal data. We are committed to facilitating the exercise of these rights and will respond to requests within one month of receipt.

Your Privacy Rights Include

• Right of Access: Request copies of your personal data and information about how it is processed
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of processing in specific situations
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing activities that require consent

To exercise any of these rights, please contact us at privacy@zenovas.world or +49 894001639. We may need to verify your identity before processing your request.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest using industry-standard protocols
• Regular security assessments and updates of our systems and procedures
• Access controls and authentication measures for our staff and systems
• Regular staff training on data protection and security best practices
• Incident response procedures to address any potential data breaches

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to maintaining the highest standards of data protection.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse website usage. For detailed information about our use of cookies, including types of cookies, purposes, and your control options, please refer to our comprehensive Cookie Policy.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us using the following information:

We aim to respond to all privacy-related enquiries within 72 hours and will resolve any issues within one month, as required by GDPR.

Complaints and Supervisory Authority

If you believe we have not handled your personal data in accordance with this policy or applicable data protection laws, you have the right to lodge a complaint with the relevant supervisory authority.

For complaints related to our data processing activities, you can contact:

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make significant changes, we will notify you by email (if we have your email address) or by posting a prominent notice on our website.

We encourage you to review this policy periodically to stay informed about how we protect your privacy. The date of the last update is indicated at the top of this policy.

Your continued use of our website and services after any changes to this policy constitutes your acceptance of the updated terms.

Additional Information for EU Residents

As an EU-based company, we are fully committed to GDPR compliance. If you are an EU resident, you benefit from all the rights and protections outlined in this policy. We process your data lawfully, fairly, and transparently, and we are accountable for our data processing activities.

We conduct regular privacy impact assessments for high-risk processing activities and maintain records of our processing activities as required by GDPR Article 30.