Privacy Policy

1. Controller and contact details

This privacy policy applies to data processing by:

Zasa Lights GmbH, represented by its managing director Christian Saalfeld
Fodermayrstr. 35
80993 Munich, Germany

Email: info@zasalights.de
Phone: +49 89 15 98 43 06

2. Collection and storage of personal data, and the nature and purpose of its use

a) When you visit the website

When you visit our website zasalights.de, the browser on your device automatically sends information to our website's server. This information is temporarily stored in a log file. The following data is collected without any action on your part and stored for [X] days until it is deleted automatically:

  • the IP address of the requesting computer,
  • the date and time of access,
  • the name and URL of the file requested,
  • the website from which access is made (referrer URL),
  • the browser used and, where applicable, the operating system of your computer and the name of your access provider.

We process this data for the following purposes:

  • ensuring a smooth connection to the website,
  • ensuring comfortable use of our website,
  • evaluating system security and stability, and
  • other administrative purposes.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest follows from the purposes listed above. We do not use the data collected to draw conclusions about you personally.

b) When you use our contact form

If you have questions of any kind, you can contact us through the form on our website. We need your name and a valid email address so that we know who the enquiry comes from and can answer it. All other details, such as phone number and organisation, are optional.

The data is processed to get in touch with you, based on your voluntary consent under Art. 6(1)(a) GDPR. We delete the data collected through the contact form once your enquiry has been dealt with, unless statutory retention obligations apply.

3. Disclosure of data

Your personal data will not be passed on to third parties for purposes other than those listed below. We only disclose your personal data to third parties if:

  • you have given your express consent under Art. 6(1)(a) GDPR,
  • disclosure is necessary under Art. 6(1)(f) GDPR to establish, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed,
  • there is a legal obligation to disclose it under Art. 6(1)(c) GDPR, or
  • it is legally permitted and necessary under Art. 6(1)(b) GDPR for performing a contract with you.

4. Cookies and tracking

Our website does not use cookies for analytics or marketing purposes, and we do not use any tracking or analytics services. No data is passed on to third parties for advertising or evaluation purposes.

5. Your rights as a data subject

You have the right:

  • under Art. 15 GDPR, to request information about your personal data that we process, in particular the purposes of processing, the categories of data, the recipients, the planned storage period, the source of the data if it was not collected from you, and the existence of automated decision-making including profiling;
  • under Art. 16 GDPR, to request without delay the correction of inaccurate data or the completion of your data stored by us;
  • under Art. 17 GDPR, to request the erasure of your data stored by us, unless processing is necessary to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to establish, exercise or defend legal claims;
  • under Art. 18 GDPR, to request the restriction of processing of your data where you contest its accuracy, the processing is unlawful but you oppose its erasure, we no longer need the data but you need it to establish, exercise or defend legal claims, or you have objected to the processing under Art. 21 GDPR;
  • under Art. 20 GDPR, to receive the data you have provided to us in a structured, commonly used and machine-readable format, or to have it transmitted to another controller;
  • under Art. 7(3) GDPR, to withdraw your consent at any time. We may then no longer continue the processing that was based on that consent;
  • under Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you can contact the authority at your place of residence or work, or at our registered office.

6. Right to object

Where we process your personal data on the basis of legitimate interests under Art. 6(1)(f) GDPR, you have the right under Art. 21 GDPR to object to the processing on grounds relating to your particular situation, or where the objection is directed against direct marketing. In the latter case you have a general right to object, which we will honour without you having to state a particular situation.

To exercise your right to withdraw consent or to object, an email to info@zasalights.de is sufficient.

7. Data security

We use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

8. Currency and amendment of this privacy policy

This privacy policy is currently valid and was last updated in October 2026.