Last updated: 2026-07-29
1. Controller (Art. 4(7), Art. 13(1)(a) GDPR)
Zimun Labs UG (haftungsbeschränkt)
Buchenteich 3
73773 Aichwald
Germany
Phone: +49 176 63030716
Email: info@zimunlabs.com
Commercial register: Handelsregister B of the Local Court (Amtsgericht) of Stuttgart, HRB 806662
Managing Director (Geschäftsführerin): Svetlana Ponomarenko
No data protection officer has been appointed, as the statutory requirements of Section 38 BDSG (as a rule, at least 20 persons constantly engaged in the automated processing of personal data) are not met. Contact person for data protection enquiries: Svetlana Ponomarenko, reachable at info@zimunlabs.com or the contact details above.
2. Overview: what this website does not do
zimunlabs.com is a purely informational corporate website with no user accounts, no login, no forms, and no server-side application logic. In particular:
- The website sets no cookies and uses no local storage or session storage.
- The website executes no JavaScript.
- No analytics, tracking, or advertising services are integrated (no Google Analytics, no tag manager, no social-media plugins).
- No content is loaded from third-party servers (no external font CDNs, no embedded maps, videos, or iframes).
Personal data is therefore processed in only two situations: when the website is technically delivered via our hosting provider (Section 3), and when you contact us of your own accord (Section 6).
3. Hosting and technical access data
The website is hosted with Google (Firebase Hosting / Google Cloud Platform; contracting entity: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on the basis of a data processing agreement (Google Cloud Data Processing Addendum). Delivery takes place via Google's worldwide edge/content delivery network; the hosting service provides no fixed storage region, so content of this website is regularly served from server locations outside the EU as well (on third-country transfers, see Section 9). Delivery is transport-encrypted (TLS/HTTPS).
On every access to the website, Google processes connection data for technical reasons, in order to deliver the website and to secure its own infrastructure, in particular:
- IP address
- date and time of access
- requested file/URL and referrer URL
- browser type and version, operating system
- volume of data transferred and HTTP status code
This processing takes place exclusively within the Google infrastructure as part of the hosting. We ourselves neither receive, store, nor evaluate this connection data: request logging of website accesses is not enabled in our hosting project, so no visitor access logs accrue on our side. The only logs generated in our project are audit logs of our own administrative actions (e.g. publishing the website); they contain no visitor data.
Purpose: technical provision of the website, stability, abuse prevention, and IT security. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and reliable provision of the website). Retention: no visitor access data is stored on our side; the processing of connection data within the Google infrastructure is governed by the data processing agreement and its retention rules for technical operations.
4. No cookies, no access to your terminal equipment (Section 25 TDDDG)
This website stores no information on your terminal equipment and accesses no information stored there — neither via cookies nor via local storage, session storage, or comparable techniques. Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) is therefore not triggered; no consent is required, and for this reason no cookie or consent banner is used — deliberately.
5. Fonts (locally hosted)
For a consistent appearance, this website uses the typefaces Barlow and Barlow Condensed (SIL Open Font License 1.1), which are hosted locally as part of the website. When a page is loaded, the font files are delivered by our hosting (Section 3); no connection is made to Google Fonts servers (fonts.googleapis.com / fonts.gstatic.com) or any other third party, and your IP address is not transmitted to any further third party in this respect.
Legal basis for the associated processing (delivery of the files via our hosting): Art. 6(1)(f) GDPR (legitimate interest in a consistent and technically reliable presentation of the website).
6. Contacting us (email, phone, post)
If you contact us — by email to info@zimunlabs.com, by phone, or by post — we process the data you provide (e.g. name, contact details, and the content of your message) exclusively to handle and answer your enquiry.
Legal basis: Art. 6(1)(b) GDPR where your enquiry is directed at the conclusion or performance of a contract (including pre-contractual enquiries); otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries addressed to us).
For our email mailbox we use Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) as a processor on the basis of a data processing agreement (Google Workspace/Cloud Data Processing Addendum). On possible third-country transfers, see Section 9.
Retention: we store your enquiry for as long as is necessary to handle it and delete it afterwards, unless statutory retention obligations require otherwise. Commercial correspondence is subject to retention periods under German commercial and tax law of, as a rule, six years (Section 257 HGB, Section 147 AO); to that extent, the legal basis for continued storage is Art. 6(1)(c) GDPR.
7. External link to zimun.online
This website contains a link to the separate online service zimun.online, which is also operated by Zimun Labs UG (haftungsbeschränkt). It is a plain hyperlink: merely visiting this website transmits no data to zimun.online. Only when you click the link do you leave zimunlabs.com; the service you then access is governed by its own privacy policy and terms.
8. Recipients and processors (Art. 13(1)(e) GDPR)
We pass personal data only to the following processors; no data is shared for advertising purposes or sold:
| Service | Purpose | Provider and role | Third-country aspect |
|---|---|---|---|
| Firebase Hosting / Google Cloud Platform | Hosting and delivery of the website, technical connection data (Section 3) | Google Ireland Limited, Dublin, Ireland — processor (Cloud Data Processing Addendum) | Delivery via the global edge network — processing outside the EU in normal operation; safeguards see Section 9 |
| Google Workspace | Email mailbox for correspondence to info@zimunlabs.com (Section 6) | Google Ireland Limited, Dublin, Ireland — processor (Data Processing Addendum) | Intra-group access possible; safeguards see Section 9 |
Beyond this, data may be disclosed to third parties where we are legally obliged to do so (Art. 6(1)(c) GDPR) or where this is necessary to establish, exercise, or defend legal claims (Art. 6(1)(f) GDPR).
9. Third-country transfers (Art. 44 et seq. GDPR)
The contracting entity for both hosting and the email mailbox is Google Ireland Limited, established in the EU. Because the website is delivered via Google's worldwide edge network (Section 3), connection data (in particular IP addresses) is, in normal operation, also processed outside the EU/EEA, including by Google LLC in the USA; for the email mailbox, intra-group access from third countries may additionally occur. Google LLC is certified under the EU-U.S. Data Privacy Framework (adequacy decision of the EU Commission, Art. 45 GDPR); in addition, EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) apply as part of Google's data processing terms. A copy of the Standard Contractual Clauses is available via Google or from us on request.
10. Your rights (Art. 12–21, 77 GDPR)
As a data subject, you have the following rights:
- access to the personal data concerning you (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR).
Right to object (Art. 21 GDPR): You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on Art. 6(1)(f) GDPR (legitimate interest). We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims.
No processing on this website is currently based on consent; should that change in the future, you may withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR).
To exercise your rights, an informal message to the contact details in Section 1 is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority competent for us is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart, Germany, www.baden-wuerttemberg.datenschutz.de. You may also contact the supervisory authority of your habitual residence.
11. No obligation to provide data (Art. 13(2)(e) GDPR)
You are neither legally nor contractually obliged to provide us with personal data. The website can be visited without providing any personal data; only the processing of the access data described in Section 3 is technically unavoidable. Without your contact details, we are simply unable to answer an enquiry.
12. No automated decision-making (Art. 22 GDPR)
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
13. Changes to this privacy policy
We will amend this privacy policy whenever the actual data processing on this website changes (for example, if new features are introduced). The current version published here, with the date stated above, applies.
The German version of this privacy policy is solely authoritative; this English version is a non-binding translation.