Privacy Policy

The controller responsible for data processing on this website is:

Serhat Rencber
Untere Hauptstraße 15
78532 Tuttlingen, Germany
Email: info@zedmos.com

When you access this website, the web server automatically stores information in so-called server log files transmitted by your browser. This includes:

• IP address of the requesting device (truncated after 7 days)
• Date and time of the request
• Requested URL and HTTP status code
• Bytes transferred
• Browser identifier (User-Agent), referrer (if available)

Legal basis is Art. 6 (1) (f) GDPR (legitimate interest in operational security, content delivery, and abuse prevention). No combination with other data sources takes place. Logs are automatically deleted after at most 14 days unless a security incident requires longer retention.

This website is hosted in a data centre operated by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany in Frankfurt am Main (Germany). A data processing agreement (DPA) in accordance with Art. 28 GDPR has been concluded with the provider. No transfers to third countries take place.

We use the typefaces “Inter” and “JetBrains Mono”. These are downloaded at build time and served exclusively from our own server (self-hosted via next/font). No connection is made to Google servers when visiting the site.

This site uses no tracking cookies. We store only two purely technical preferences in your browser’s localStorage that you have triggered yourself:

• theme — your choice between light and dark mode
• locale — your language preference (cookie, 1 year)

These settings never leave your browser and are not used for profiling.

If you contact us by email, your details (email address, content of the message) will be stored for the purpose of processing the inquiry and any follow-up questions. Legal basis is Art. 6 (1) (b) GDPR (pre-contractual measure) or Art. 6 (1) (f) GDPR. The data will be deleted as soon as the inquiry has been finally processed, unless statutory retention obligations prevent this.

The Console is a separate service from this website. Opening an account there requires a name, an e-mail address and a password; the password is stored only as a cryptographic hash and never in clear text. The purpose is providing the service and the legal basis is Art. 6(1)(b) GDPR (contract or steps prior to a contract).

Signing in with Google. Sign-in through Google is optional. It passes us the Google account identifier, e-mail address and name. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; an onward transfer to Google LLC in the United States may occur and relies on the European Commission adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR). Use is voluntary; signing in with credentials remains available.

Payments. Paid services are handled through Stripe. Payment data, card details in particular, are processed solely by Stripe and never reach our systems. The provider is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland; a transfer to Stripe, Inc. in the United States likewise relies on the adequacy decision for the EU-US Data Privacy Framework. The legal basis is Art. 6(1)(b) GDPR.

What you process in the Console. Where you manage your own firewalls through the Console, we process the resulting data about your users solely on your instructions. For that processing you are the controller and we are the processor, under a contract meeting Art. 28 GDPR. A template is available on request at info@zedmos.com.

Retention. Account data is kept for the term of the contract and deleted afterwards unless a statutory retention period applies; commercial and tax records are kept for six and ten years respectively under § 257 HGB and § 147 AO.

To measure reach — to understand which pages are visited and where visitors come from — we run our own, cookieless statistics. It uses no Google Analytics, Matomo, social-media plug-ins, ad networks or other third parties, and no data is shared with anyone.

Per page view we process:

• the page visited (path) and the language version
• the traffic source (referrer — e.g. a search engine or linking site)
• a coarse region derived from your browser timezone (no IP geolocation)
• device category (mobile/tablet/desktop) and language
• your IP address only as a salted hash — the plain address is never stored; the hash only distinguishes unique visitors within a period

No cookies are set and nothing is stored on or read from your device. We build no profiles and do not combine the data with other sources. If your browser sends a Do-Not-Track or Global Privacy Control signal, no measurement is taken at all. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in privacy-friendly audience measurement); processing happens on our own servers. Data is deleted once it is no longer needed for the analysis.

You have the following rights at any time:

• Right of access to data we hold about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (“right to be forgotten”, Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

An informal email to the address above is sufficient to exercise your rights.

The competent data protection supervisory authority is determined by the controller’s place of establishment. A full list of all German supervisory authorities is available at bfdi.bund.de.

We reserve the right to update this privacy policy so that it always complies with current legal requirements or to reflect changes in our services. The version applicable to your next visit will be the one available at that time.