ZEP privacy policy

(Last updated: 06.01.2025)

ZEP GmbH (hereinafter: “we”, “us”) is pleased that you are visiting our website www.zep.de (hereinafter: “website”). Our policy is to only collect what we need and process that information exclusively to provide you with the service you have signed up for.

1. Responsible person

Responsible within the meaning of the GDPR is

ZEP GmbH
Stuttgarter Strasse 41
71254 Ditzingen
Telephone: +49 7156/43623-0
email: support@zep.de

2. Data Protection Officer

You can contact our data protection officer as follows:

Dr. Kilian Schmidt
Kertos GmbH
Brienner Strasse 41
80333 Munich
germany
dsb@kertos.io
+49 151 525 797 93

3. Definition

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address or IP address. Information that we are unable to identify you personally (or only with disproportionate effort), e.g. by anonymizing the information, is not personal data. The processing of personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis such as your consent.

4. Data for providing the website and creating log files

Provision and use of the website

Scope and purpose of data processing

We only collect and use personal data from our users insofar as this is technically necessary to provide a functional website and our content and services or information. When you access and use our website, we collect personal data that your browser automatically transmits to our server. This information is temporarily stored in a so-called log file.

The following information is collected without your intervention and stored until it is automatically deleted:

• IP address of the requesting computer,
• date and time of access,
• name and URL of the retrieved file,
• website from which access is made (referrer URL),
• the browser used and, if applicable, the operating system of your computer and the name of your access provider.

We process the above data for the following purposes:

• Ensuring a smooth connection to the website
• Ensuring the convenient use of our website
• For IT security purposes

legal basis

Art. 6 para. 1 lit. f DSGVO serves as the legal basis. The processing of the above data is necessary to provide a website and to enable secure and convenient use and thus serves to protect the legitimate interest of our company.

Storage period and data deletion

As soon as the above data is no longer required to display the website, it will be deleted (after 30 days at the latest). The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. The user therefore has no option to object. Further storage takes place in individual cases if this is required by law.

third parties

To host the website, we use an external service provider, Webflow, Inc, 398 11th St., Floor 2, San Francisco, CA 94103 (hereinafter: “Webflow”). Your personal information is shared with Webflow to provide the services. Webflow's servers are located in the United States, so it is possible that the personal data collected will be transferred to the United States. There is an adequacy decision by the EU Commission for data transfers to the USA, the EU-US data protection framework. “Webflow” is certified within this framework, which is why such transfers are based on the legal basis of Art. 45 GDPR.

For more information, please see Webflow's privacy policy (https://webflow.com/legal/eu-privacy-policy) or ask us about the completed DPA.

Contact via email

Scope and purpose of data processing

On our website, we offer you the opportunity to contact us via e-mail. When you contact us, the personal data you provide, such as title, name, content of the email and your email address, will be processed.

We process this data so that we can properly process your request. If you contact us via email, your personal data will not be shared with third parties.

legal basis

The data processing described above for the purpose of contacting you is carried out on the basis of Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in being able to process your request. If your request serves to prepare a contract, Art. 6 para. 1 lit. b GDPR is an additional legal basis.

Storage period and data deletion

As soon as your request has been processed and the matter has been finally clarified, your personal data processed via the contact form will be deleted. Further storage may take place in individual cases if this is required by law or is necessary to fulfill the contract

contact form

Scope and purpose of data processing

On our website, we offer you the opportunity to contact us via a contact form, e.g. for advice. For this purpose, we use “Webflow” from Webflow, Inc. 398 11th St., Floor 2, San Francisco, CA 94103 (hereinafter: “Webflow”). Your personal information is shared with Webflow to provide the services. Webflow's servers are located in the United States, so it is possible that the personal data collected will be transferred to the United States. There is an adequacy decision by the EU Commission for data transfers to the USA, the EU-US Data Privacy Framework. “Webflow” is certified within this framework, which is why such transfers are based on the legal basis of Art. 45 GDPR.

If you contact us via this form, the following personal data will be processed:

• name
• email address
• phone number
• nationality
• Reason for the request

We process this data so that we can properly process your request. When using the contact form, your personal data will not be passed on to third parties.

legal basis

The data processing described above for the purpose of contacting you is carried out in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest in being able to process your request. If your request serves to prepare a contract, Art. 6 para. 1 lit. b GDPR is an additional legal basis.

Storage period and data deletion

As soon as your request has been processed and the matter has been finally clarified, your personal data processed via the contact form will be deleted. Further storage may take place in individual cases if this is required by law or is necessary to fulfill the contract.

Demo booking

You can book a demo of our platform on our website. For this purpose, we provide you with the function “Book a demo” available. To make this possible, we use the service “HubSpot”, which is provided by HubSpot, Inc., 25 First Street, Cambridge, MA 02141 USA (hereinafter: “HubSpot”).

By using HubSpot, the following personal data is processed:

• Your name
• your email address
• Your company name

HubSpot is used for quick and easy communication in order to be able to offer you an available date for the demo. This allows you to quickly see when we have an available appointment and select it.

Your personal data is processed to carry out a pre-contractual measure by using the “Book a demo” function Request a product presentation. The processing of your data is therefore lawful in accordance with Art. 6 para. 1 lit. b GDPR. If no contract is concluded, we will store the data even after the negotiations have been broken off. The legal basis for this is Article 6 (1) (f) GDPR. The legitimate interest can be derived from the fact that we want to ensure organized and efficient planning of our demos.

We will then only store the data for as long as is absolutely necessary. Further storage may take place in individual cases if this is required by law or is necessary to fulfill the contract.

The information is usually forwarded to a HubSpot server in the USA and stored there. For data transfers to the USA, there is an adequacy decision by the EU Commission, which EU-U.S. Data Privacy Framework. “HubSpot” is certified within this framework, which is why such transfers are based on the legal basis of Art. 45 GDPR.
More information about data protection at “HubSpot” can be found at: https://legal.hubspot.com/de/privacy-policy.

Try it for free

You can request a free 30-day trial of our platform on our website. For this purpose, we provide you with the function “Try it for free” available. To make this possible, we use the service “HubSpot”, which is provided by HubSpot, Inc., 25 First Street, Cambridge, MA 02141 USA (hereinafter: “HubSpot”).

By using HubSpot, the following personal data is processed:

• Your name
• your email address
• Your company name

HubSpot is used to quickly and easily deploy the trial version. In addition, we will send you information on how to use the platform as part of an email sequence and, if necessary, contact you to ask whether you are interested in a further sales demo.

Your personal data is processed to carry out a pre-contractual measure by using the “Try it for free” feature Request a trial period for our product. The processing of your data is therefore lawful in accordance with Article 6 (1) (b) GDPR. If no contract is concluded, we will store the data even after the negotiations have been broken off. The legal basis for this is Article 6 (1) (f) GDPR. The legitimate interest can be derived from the fact that we want to prevent several people in a company from repeatedly booking trial versions. This makes our test offering cost-effective.

We will then only store the data for as long as is absolutely necessary. Further storage may take place in individual cases if this is required by law or is necessary to fulfill the contract.

The information is usually forwarded to a HubSpot server in the USA and stored there. For data transfers to the USA, there is an adequacy decision by the EU Commission, which EU-U.S. Data Privacy Framework. “HubSpot” is certified within this framework, which is why such transfers are based on the legal basis of Art. 45 GDPR.
More information about data protection at “HubSpot” can be found at: https://legal.hubspot.com/de/privacy-policy.

4. Cookies

Scope and purpose of processing

We use cookies on our website.
A cookie is a set of information that is stored on your computer when you visit our website and that allows your browser to be reassigned. Cookies store information, such as your language settings, for the duration of your visit to our website or the entries you make there.

There are different types of cookies. Session cookies are temporary cookies that are stored in the user's Internet browser until the browser window is closed and the session cookies are deleted. Permanent or persistent cookies are used for repeated visits and stored in the user's browser for a predefined period of time. First-party cookies are set by the website that the user is visiting. Only this website is authorized to read information from cookies. Third party cookies are set by organizations that do not operate the website that the user is visiting.

A distinction can also be made between technically necessary, functional and advertising cookies. The former are necessary to ensure basic functions of the website (e.g. saving the language setting). Functional cookies collect information about the user's behavior and whether they receive error messages. Advertising cookies, on the other hand, are used to offer the user tailored advertising.

legal basis

The legal basis for processing personal data using technically necessary cookies is Art. 6 para. 1 lit. f DSGVO due to the described purposes of use, as we have an interest in the user-friendly presentation of our website. If you have given us your consent to use functional and advertising cookies on the basis of a notice provided by us on the website (“cookie banner”), the legality of use is also governed by Article 6 (1) sentence 1 lit. a GDPR.

Storage period and data deletion

As soon as the data transmitted to us via the cookies is no longer required to fulfill the purposes described above, this information will be deleted. Further storage takes place in individual cases if this is required by law.

Configuring browser settings

Most browsers are set to accept cookies by default. However, you can configure your browser to accept only certain cookies or no cookies at all. However, we would like to point out that if you disable cookies via your browser settings on our website, you may no longer be able to use all features of our website. You can also use your browser settings to delete cookies that have already been stored in your browser or view the storage period. It is also possible to set your browser so that it notifies you before cookies are saved. Since the various browsers may differ in their respective functions, we ask you to use the respective help menu of your browser for the configuration options.

cookie list

6. Content Delivery Network (CDN)

6. International data transfer
We process your data primarily within the European Union (EU) and the European Economic Area (EEA). However, some of our service providers may be based outside the EEA in so-called “third countries.” The General Data Protection Regulation places high demands on the transfer of personal data to third countries. All of our data recipients must meet these requirements. Before we transfer your data to a service provider in a third country, each service provider is first checked for its level of data protection. A service provider is only selected if it can demonstrate an adequate level of data protection outside the EEA. Regardless of whether our service providers are based within the EEA or in third countries, each service provider must conclude an order processing contract with us. For service providers outside the EEA, additional requirements must be met. In accordance with Art. 44 ff. GDPR, personal data may be transferred to service providers who meet at least one of the following requirements:

• The European Commission has decided that the third country ensures an adequate level of protection (e.g. Israel and Canada).
• Standard contractual clauses have been included in our contract with the data recipient (including any additional measures, if necessary).
• Further appropriate guarantees are provided in accordance with Art. 46 GDPR (e.g. Binding Corporate Rules).
• In special exceptional cases in accordance with Art. 49 GDPR

7. Analysis

We use tracking and analysis tools to ensure continuous optimization and needs-based design of our website. With the help of tracking measures, we are also able to statistically record the use of our website by visitors and use the knowledge gained to further develop our online offering for you. If you have given us your consent to use cookies on the basis of a notice provided by us on the website (“cookie banner”), the legality of the use is also governed by Article 6 (1) sentence 1 lit. a GDPR. The following description of the tracking and analysis tools also shows the respective processing purposes and the data processed.

Google Analytics 4

This website uses Google Analytics 4, a web analysis service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland and Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: “Google”). Google Analytics uses “cookies” (see § 5) and similar tracking methods such as device fingerprinting.
The information stored in these cookies, such as the time, location and frequency of your use of this website, is usually forwarded to a Google server in the USA and stored there. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. “Google” is certified within this framework, which is why such transfers are based on the legal basis in accordance with Article 45 GDPR. When using Google Analytics, it cannot be ruled out that the cookies set by Google Analytics collect other personal data in addition to the IP address. Please note that Google may transfer this information to third parties if required to do so by law or if third parties process this data on behalf of Google.
Google will use the information generated by the cookie on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and Internet usage to the website operator. According to Google, the IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
In principle, you can prevent cookies from being saved by setting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
You can withdraw your consent to processing and transfer to third countries at any time using the “Cookiebot” consent tool. This does not affect the lawfulness of previous processing.

Google Tag Manager

This website uses Google Tag Manager, which is provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland and Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: “Google”). Google Tag Manager allows you to manage website tags. When you visit the website, an HTTP request is sent to Google. This transmits device information (such as your IP address) to Google and within a Google server in the USA. There is an adequacy decision by the EU Commission for data transfers to the USA, the EU-U.S. Data Privacy Framework. “Google” is certified within this framework, which is why such transfers are based on the legal basis of Art. 45 GDPR.

HubSpot

We use the “HubSpot” service provided by HubSpot, Inc., 25 First Street, Cambridge, MA 02141 USA (hereinafter: “HubSpot”).

By using HubSpot, the following personal data is processed:

• A unique user ID in the form of a user token
• Site domain
• Date and time of your visit to our website
• number of sessions

For more information about cookie content on HubSpot, visit:
https://knowledge.hubspot.com/de/privacy-and-consent/what-cookies-does-hubspot-set-in-a-visitor-s-browser.

The use of “HubSpot” enables us to monitor the website and helps us improve its functionality. The data is further used to support and improve our digital marketing.

• Your personal data will only be processed with express consent in accordance with Art. 6 para. 1 lit. a GDPR.
• You are entitled to withdraw your consent at any time. However, this does not affect the lawfulness of processing carried out before the withdrawal.

The information is usually forwarded to a HubSpot server in the USA and stored there. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. “HubSpot” is certified within this framework, which is why such transfers are based on the legal basis of Art. 45 GDPR.

More information about data protection at “HubSpot” can be found at:
https://legal.hubspot.com/de/privacy-policy.

Visual Website Optimizer (VWO)

On our website, we use the “Visual Website Optimizer” (VWO) tool, a service provided by Wingify Software Pvt. Ltd., KLJ Tower North, Netaji Subhash Place, Pitam Pura, Delhi 110034, India. VWO allows us to perform A/B tests, multivariate tests, and other features to optimize the user experience and conversion rate of our website. By using this service, we can display different variants of website content and analyze their impact.

Data processing and purpose
VWO uses cookies and similar technologies to recognize visitors, evaluate their behavior and show them different versions of the website. Among other things, the following data can be processed:

• Information about user behavior (e.g. clicks, scroll depth, length of stay)
• Browser and device information
• Anonymized IP address (abbreviated)
• URLs visited and referrer data

The data is processed exclusively pseudonymized and is used to optimize our content and offers. Your personal data will only be processed with express consent in accordance with Art. 6 para. 1 lit. a GDPR. You are entitled to withdraw your consent at any time. However, this does not affect the lawfulness of processing carried out before the withdrawal.

Transfer of data to third countries
VWO is a provider based in India. Data transmission to servers outside the EU cannot therefore be ruled out. In order to nevertheless ensure an appropriate level of data protection, we have concluded the standard contractual clauses approved by the EU Commission with VWO. For more information, see: https://vwo.com/privacy-policy/

8th content delivery network

To speed up the loading time of our website and protect against distributed denial of service attacks (an attack on our system through a variety of requests), we use the content delivery network “Cloudflare”, which is provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107 (hereinafter: “Cloudflare”).

By using Cloudflare, the following personal data is processed:

• the retrieved web page
• the type of browser used
• the operating system
• the referrer URL
• the IP address
• the requesting provider

Your personal data will only be processed with express consent in accordance with Art. 6 para. 1 lit. a GDPR. You are entitled to withdraw your consent at any time. However, this does not affect the lawfulness of processing carried out before the withdrawal.

The information is usually forwarded to a Cloudflare server in the USA and stored there. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. “Cloudflare” is certified within this framework, which is why such transfers are based on the legal basis of Art. 45 GDPR.

More information about data protection at “Cloudflare” can be found at:
https://www.cloudflare.com/privacypolicy/

9. Recipients of personal data

Within our company, only those people have access to your personal data who need it for the purposes specified in each case. Your personal data will only be passed on to external recipients if we are legally entitled to do so or if you have given your consent. The following is an overview of the respective recipients:

• processors: Group companies or external service providers, e.g. in the areas of technical infrastructure and processing, maintenance and payment processing, which are carefully selected and controlled. Contract processors may only use the data in accordance with our instructions.
• Public bodies: Authorities and state institutions, such as tax authorities, public prosecutors or courts, to which we (must) transfer personal data, e.g. to fulfill legal obligations or to protect legitimate interests.

10. Plug-ins

Our presence on social networks and platforms serves to actively communicate with our customers and prospects.

linkedin

Our website therefore includes a link to our company page on the social network “LinkedIn” of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Based on the data that is transmitted to the respective service via the social plugin, the service may be able to associate you with your account with it.

• No data is sent directly to LinkedIn before you click on the link.
• Data is only transferred when you click on the button. As a result, you leave our website and establish a direct connection between your browser and LinkedIn's servers.

Information about the data that is subsequently collected by LinkedIn can be found at:
https://de.linkedin.com/legal/privacy-policy

youtube

Our website also has a link to our company page on the “YouTube” video platform, which is provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland and Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

• No data is sent directly to Google before you click on the link.
• Data is only transferred when you click on the button. As a result, you leave our website and establish a direct connection between your browser and Google's servers.

Information about the data that is then collected by Google can be found at:
https://policies.google.com/privacy

facebook

Our website also has a link to our company page on the social network “Facebook”, which is provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

• No data is transmitted directly to Meta Platforms Ireland Limited before you click on the link.
• Data is only transferred when you click on the button. As a result, you leave our website and establish a direct connection between your browser and the Facebook servers.

Information about the data that is subsequently collected by Facebook can be found at:
https://de-de.facebook.com/privacy/policy/

instagram

Our website also has a link to our company page on the social network “Instagram”, which is provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

• No data is transmitted directly to Meta Platforms Ireland Limited before you click on the link.
• Data is only transferred when you click on the button. As a result, you leave our website and establish a direct connection between your browser and Instagram's servers.

Information about the data that is then collected by Instagram can be found at:
https://privacycenter.instagram.com/policy

11. Data security and security measures

We are committed to keeping your personal information confidential. In order to prevent manipulation, loss or misuse of your data stored by us, we take extensive technical and organizational security measures, which are regularly checked and adapted to technical progress.

However, we would like to point out that due to the structure of the Internet, it is possible that the rules of data protection and the above-mentioned security measures may not be observed by other persons or institutions outside our area of responsibility. In particular, unencrypted data — e.g. when transmitted by email — can be viewed by third parties. We have no technical influence on this. It is your responsibility as a user to protect the data you provide against misuse by means of encryption or other means.

12. Storage of data

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by European or national legislators in EU regulations, laws or other regulations to which the person responsible for processing is subject. Data will also be blocked or deleted when a storage period prescribed by the above standards expires, unless further storage of the data is necessary to conclude or fulfill a contract.

13. Rights of the person concerned

With regard to your personal data, you have the following legal rights vis-à-vis us:

Right of access

You have the right to request confirmation as to whether we are processing personal data relating to you. If this is the case, you have the right to information about this personal data and further information, e.g. about the processing purposes, the recipients and the planned duration of storage or the criteria for determining the duration.

Right to rectification

You have the right to request the correction of incorrect data without undue delay. Taking into account the purposes of processing, you have the right to request the completion of incomplete data.

Right to delete (“right to be forgotten”)

You have the right to request deletion if processing is not necessary. This is the case, for example, if your data is no longer required for the original purposes, if you have withdrawn your declaration of consent under data protection law, or if the data has been processed unlawfully.

Right to restrict processing

You have the right to restrict processing, for example if you believe that the personal data is incorrect.

Right to data portability

You have the right to receive personal data concerning you in a structured, commonly used and machine-readable format.

Right to object

You have the right to object to the processing of certain personal data concerning you at any time for reasons arising from your particular situation.

In the case of direct marketing, you as a data subject have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is associated with such direct marketing.

Right to withdraw your data protection consent

You can withdraw your consent to the processing of your personal data at any time with effect for the future. However, this does not affect the lawfulness of the processing carried out up to the time of withdrawal.

Without prejudice to these rights, you have the right to complain to a supervisory authority at any time if you believe that the processing of your personal data violates data protection regulations.

14. Change history

With regard to your personal data, you have the following legal rights vis-à-vis us: