Privacy policy

Controller

Maik Menzel

Nordufer 24

26203 Wardenburg

moin@zelkon.de

Your rights as a data subject

Under the GDPR you have the right to access the data stored about you (Art. 15), to have inaccurate data corrected (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). You may withdraw any consent you have given at any time with future effect. You also have the right to lodge a complaint with a data protection supervisory authority.

Legal bases

We process personal data on the basis of Art. 6(1)(b) GDPR (performance of a contract and pre-contractual inquiries), Art. 6(1)(c) GDPR (compliance with legal obligations, in particular commercial and tax retention requirements), and Art. 6(1)(f) GDPR (legitimate interests, e.g. in a secure and functional operation of this website).

Registration and customer account

Placing an order requires setting up a customer account. We process your name, your billing address, for business customers also the company name and, if provided, the VAT ID, as well as your email address and a securely hashed password. Legal basis: Art. 6(1)(b) GDPR.

Order processing and file uploads

For each order we process the files you upload (e.g. sketches, photos, PDF drawings), your description of the order, and the offers, invoices, and result files created from them. This data is processed to perform the contract and is stored on our server for as long as necessary for the contract and any statutory retention obligations. Legal basis: Art. 6(1)(b) GDPR.

Contacting us

If you contact us by email or via a contact form, we process the information you provide to handle and answer your inquiry. Legal basis: Art. 6(1)(b) GDPR for pre-contractual inquiries, otherwise Art. 6(1)(f) GDPR.

Payment processing

Payment is made exclusively in advance by bank transfer to our account. We do not use any third-party payment providers; the banks involved process the transfer data as part of standard payment processing.

Retention and deletion

We delete personal data once it is no longer required for the purposes stated and no statutory retention obligations apply. Invoices and accounting records are kept for up to 10 years under German commercial and tax law (§ 147 AO, § 257 HGB). Other correspondence relating to an order is deleted after the regular three-year limitation period, unless longer retention obligations apply.

Hosting and server log files

This website runs on our own server (virtual private server). When you visit the website, we automatically process technical data such as IP address, date and time of access, the page accessed, the amount of data transferred, and browser and operating system type (server log files). This data serves the security and stability of the service and is deleted after 30 days at the latest, unless a security incident requires longer retention for evidentiary purposes. Legal basis: Art. 6(1)(f) GDPR.

Cookies

We use only a technically necessary session cookie that keeps you logged in to the customer area. It is deleted once you log out or close your browser. We do not track or analyse your usage behaviour. Legal basis: Art. 6(1)(f) GDPR.

Email notifications

For notifications about your order (e.g. a new offer, a new invoice, a status change) we send emails via our email provider. Legal basis: Art. 6(1)(b) GDPR.

Changes to this privacy policy

We update this privacy policy whenever changes to our data processing make it necessary. The version published on this page at the time of your visit applies.