Privacy Policy

This website is deliberately simple. It sets no cookies, runs no analytics or advertising scripts, embeds no third-party content, and has no forms or user accounts.

The only personal data processed is what is technically required to deliver the pages to your browser, plus whatever you choose to send us by e-mail. The sections below explain this in detail.

The controller responsible for data processing on this website within the meaning of Art. 4(7) GDPR is:

E-mail for privacy matters and data requests: privacy@zyloft.eu

We are not legally required to appoint a data protection officer. For any question about this policy or your data, please write to the address above.

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. The servers used for this website are located in: Frankfurt, Germany (EU). The provider processes data on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

Whenever you open a page, your browser automatically transmits information that the hosting provider records in server log files:

• IP address of the requesting device
• date and time of the request
• the page or file requested and the referring page (referrer)
• HTTP status code and amount of data transferred
• browser type and version, and operating system

Purpose: delivering the website, keeping it stable and secure, and detecting and defending against attacks and misuse.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of this website.

Retention: log data is deleted after 30 days, unless it must be kept longer to investigate a specific security incident. We do not combine it with other data or use it to identify individual visitors.

You are not obliged to provide this data, but the website cannot be delivered to your browser without it.

We do not use cookies or comparable technologies such as local storage identifiers, tracking pixels or fingerprinting. We do not use analytics tools, advertising networks or social media plug-ins. No usage profiles are created, which is why you will not see a cookie banner here.

The fonts, scripts and style sheets used on this website are served from our own hosting. Nothing is loaded from Google Fonts or other third-party servers, so opening a page does not transmit your IP address to any third party.

If you write to support@zyloft.eu or privacy@zyloft.eu, we process your e-mail address, your name if you provide it, and the content of your message in order to handle your request.

Legal basis: Art. 6(1)(b) GDPR where your message relates to a contract or to steps prior to entering into one, for example support for an app you use. In all other cases the basis is Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries.

Retention: we delete your enquiry once it has been fully resolved, unless statutory retention periods under German commercial and tax law (§ 257 HGB, § 147 AO) require us to keep the correspondence for longer.

Our mailboxes are operated by an e-mail hosting provider that processes messages on our behalf (Art. 28 GDPR). Please remember that unencrypted e-mail is not a secure channel for sensitive information.

This website links to external services such as the Apple App Store and Google Play. No data is transferred to these providers until you click a link. Once you do, the provider of the linked site is responsible for the processing and its own privacy policy applies.

This policy covers the website zyloft.eu only. Each Zyloft app comes with its own privacy notice, available inside the app and on its store listing, describing exactly what that app processes.

We do not sell your personal data and we do not share it with third parties for their own purposes. The only recipients are the service providers named in this policy (web hosting and e-mail hosting), who act on our instructions.

If personal data is processed outside the European Union or the European Economic Area, this happens only where an adequacy decision of the European Commission exists or appropriate safeguards such as standard contractual clauses are in place (Art. 44 et seq. GDPR).

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15)
• have inaccurate data rectified (Art. 16)
• have your data erased (Art. 17)
• restrict its processing (Art. 18)
• receive your data in a portable format (data portability, Art. 20)
• withdraw consent at any time with effect for the future, where processing is based on consent (Art. 7(3))

Right to object (Art. 21 GDPR)

Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. We will then stop the processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims.

How to exercise your rights

Send an e-mail to privacy@zyloft.eu. We respond without undue delay and at the latest within one month (Art. 12(3) GDPR). Exercising your rights is free of charge.

Right to lodge a complaint (Art. 77 GDPR)

You may complain to a data protection supervisory authority, in particular in the EU member state where you live or work. The authority responsible for us is:

This website is delivered exclusively over an encrypted HTTPS (TLS) connection, which protects the data exchanged between your browser and our server from being read by third parties.

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

We update this policy whenever the website or the legal situation changes. The current version is always available on this page. Our provider details can be found in the Impressum.