Privacy policy

1. At a glance

This website sets no cookies, uses no analytics or tracking tools and loads no content from third parties (fonts are served from our own domain). We process personal data only where this is technically necessary to deliver and secure the website, and when you write to us by email. Section 8 explains how you can check this yourself.

2. Controller

Zero Data UG (haftungsbeschränkt), c/o Tech Hub K67, Kasernenstraße 67, 40213 Düsseldorf, Germany
Represented by the managing director Ashish Tyagi
Email: info@zero-data.de · Phone: +49 151 68740028

We have not appointed a data protection officer, as we are not legally required to do so (Art. 37 GDPR, § 38 BDSG). For any data protection question, you can reach us at the address above.

3. Hosting and server log files

This website is provided by Google (Firebase Hosting). When you visit, Google processes your IP address and technical access data to deliver and protect the site (Art. 6(1)(f) GDPR). We have a data processing agreement with Google (Art. 28 GDPR). Processing outside the EU, including in the USA, is possible. It is based on the EU-U.S. Data Privacy Framework adequacy decision or the EU Standard Contractual Clauses.

Technical access data means: IP address, date and time of the request, requested address (URL), amount of data transferred, HTTP status code, browser and operating system information (user agent) and, where applicable, the previously visited page (referrer). Access to information on your device is strictly necessary for this (§ 25 (2) no. 2 TDDDG). Google stores this data only for as long as these purposes require; we do not analyse it ourselves, do not use it for marketing and do not combine it with other data. We set no cookies and collect no other data.

All connections are encrypted with TLS (HTTPS, HSTS). A strict Content Security Policy prevents scripts or content from other providers from being loaded.

4. No cookies, no tracking

We use no cookies, no tracking pixels, no fingerprinting techniques and no analytics or advertising services. There are no embedded videos, maps, social media plugins or third-party fonts.

5. No cookies or browser storage

This website sets no cookies (see section 4) and writes nothing to your browser's local storage or session storage. There are no settings that would need to be remembered.

6. Contact by email

The buttons on this website open your own email program with a short template; the website itself sends or stores nothing. When you write to us, we process the information in your message (for example name, email address, company, role, request and preferred times) to answer your request and to prepare a call or a proposal.

The legal basis is Art. 6 (1)(b) GDPR where your request aims at a contract, otherwise Art. 6 (1)(f) GDPR (legitimate interest in answering enquiries). We delete the data once your request has been fully dealt with, unless statutory retention obligations apply (in particular six years for business correspondence and eight years for accounting vouchers under § 257 HGB and § 147 AO).

We run our mailbox on Microsoft 365 (Exchange Online) provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, as processor under Art. 28 GDPR (Microsoft Products and Services Data Protection Addendum). Emails at rest are stored within the EU Data Boundary, currently in Germany. Access by Microsoft from third countries, for example for support, cannot be ruled out completely; Microsoft Corporation participates in the EU-U.S. Data Privacy Framework, and the European Commission's standard contractual clauses apply in addition.

Please do not send confidential documents such as configurations or network diagrams by email. For confidential data we agree a mutual non-disclosure agreement and an encrypted transfer channel in advance.

7. Links to other websites

We link to sources and authorities (for example BSI, EUR-Lex, NIST, ISO, police). Data is only transferred to these providers when you click a link; their privacy policy then applies. External links do not send information about which of our pages you came from (rel="noreferrer").

8. How to check it yourself

Open your browser's developer tools (usually F12) and reload the page: under “Network” you will only see requests to our own domain, and under “Application” or “Storage” no cookies. You will find the Content Security Policy in the response headers.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where we process data on the basis of Art. 6 (1)(f) GDPR, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). An informal message to the email address above is enough.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, www.ldi.nrw.de.

10. Further information

Providing personal data is neither required by law nor by contract; without your message, however, we cannot deal with your request. There is no automated decision-making, including profiling (Art. 22 GDPR).

We update this policy when the website or the legal situation changes. Last updated: October 2026.