1. Controller
Responsible for data processing on this website:
Felix Rosek
Gertrud-Meyer-Straße 1a, 22335 Hamburg, Germany
Phone: +49 151 67837750
Email: hello@zenolabs.de
2. Hosting
This website is hosted by an external provider (Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA). When the site is accessed, technically necessary data (e.g. IP address, browser type, time of access) is processed in server log files. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). Processing may also take place in the USA; this is safeguarded by the EU-US Data Privacy Framework (Vercel is certified) or EU Standard Contractual Clauses.
3. Contact form
When you contact us via the form, we process the data you provide (name, email address, company, message) in order to respond to your enquiry. The data goes to the Zeno Labs Dashboard (dashboard.zenolabs.de) and is stored there in a database at Supabase (EU region). Sending the emails — your confirmation of receipt and our internal notification — is handled by Resend (Resend, Inc., USA) as a processor; transfers to the USA are safeguarded by the EU-US Data Privacy Framework (Resend is certified) or EU Standard Contractual Clauses. The legal basis is Art. 6(1)(b) and (f) GDPR. The data is deleted as soon as it is no longer required.
We also note, when the form is submitted, how you arrived at the site: utm parameters of the address you opened, a referring third-party server, and the first page you visited. This information is held temporarily in your browser's sessionStorage (key "zeno_herkunft") — not a cookie, not subject to consent, gone once you close the tab, and never sent automatically. The same tracking of origin applies to the tools (section 4).
4. Tools
The eight tools on this website (calculators, checks, glossary, prompt library) always show their result in full first. If you like, you can have that result — or, for the glossary and the prompt library, a PDF — sent to you by email as well. For this we collect:
- Name, company and email address — all three required.
- the tool's state at the moment you submit it, i.e. your inputs and the calculated result — for the AI ROI calculator, for example, the number of employees, the hourly rate, and the estimated savings. On the server this state is checked against a fixed list of allowed fields per tool; anything not on that list is discarded.
- Information about where you came from (utm parameters, a referring third-party server, the first page visited) — collected the same way as for the contact form (section 3).
The purpose is to send you what you requested and to contact you about your enquiry if needed. The legal basis is Art. 6(1)(b) or (f) GDPR (pre-contractual measures or legitimate interest in contacting prospective clients).
You can also tick a box to additionally get occasional real-world examples from live AI projects. For this we store the time and the exact wording of the consent text shown at that moment, as proof of consent. The legal basis is your consent (Art. 6(1)(a) GDPR), revocable at any time with effect for the future.
Important: Ticking the box alone does not trigger any sending. You will first receive an email with a confirmation link; only after you click it do we add you to the list (double opt-in). If you do not click it, nothing happens, and the signup expires after seven days.
This data also goes to the Zeno Labs Dashboard (dashboard.zenolabs.de) and is stored at Supabase (EU region); sending the emails is handled by Resend (Resend, Inc., USA) as a processor — see section 3 for how transfers to the USA are safeguarded. The data is deleted as soon as it is no longer required for initiating contact; the consent record is kept until revoked.
5. Newsletter
Via the signup field on this website or the checkbox in one of the tools, you can subscribe to our newsletter “Klartext zu KI”. For this we collect your email address and — in the case of the tools — your name.
The signup runs on a double opt-in basis: after you submit the form, we send you an email with a confirmation link. Only after you click it do we add you to the list. As proof, we store the time and the exact wording of the consent text shown to you at the moment you submitted it, as well as the time of your confirmation. The legal basis is your consent (Art. 6(1)(a) GDPR).
You can unsubscribe at any time — via the unsubscribe link at the end of every newsletter email, or informally to hello@zenolabs.de. The withdrawal takes effect for the future; processing carried out until then remains lawful.
Sending and recipient management are handled by Resend (Resend, Inc., USA) as a processor — see section 3 for how transfers to the USA are safeguarded. Resend also processes whether an email was delivered and opened; we use this exclusively to identify undeliverable addresses and to carry out your unsubscribe request. We store your data in the list until you unsubscribe; we retain the consent record for a further three years beyond that.
6. Fonts
All fonts are served locally from our own server. There is no connection to Google Fonts or other external font providers, and no personal data is transferred to third parties for this purpose.
7. Web analytics
To measure reach we use Vercel Web Analytics (Vercel Inc.). The tool is cookieless and does not track across websites. Only aggregated, anonymised usage data is collected (e.g. pages viewed, approximate location, device type), without identifying individuals. No profiling takes place. The legal basis is our legitimate interest in a statistical analysis of website usage (Art. 6(1)(f) GDPR).
8. Cookies
This website does not set any consent-requiring or marketing cookies. A cookie banner is therefore not required.
9. Your rights
Under the GDPR you have, in particular, the following rights:
- Access to your stored data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
You also have the right to lodge a complaint with a data protection supervisory authority.
10. Status
This privacy policy is dated August 2026 and will be updated as needed.