Privacy Policy • Zanoa

Last updated: November 2024

The company ZANOA (legal entity: Gruschka, Kantara & Speidel eGbR, Rathausstraße 65, 12105 Berlin, Germany) processes personal data as the responsible party in accordance with the General Data Protection Regulation (GDPR) and this Privacy Policy. If you have questions or wish to exercise your data subject rights, please contact us at: privacy@zanoa.app

1. Overview of Data Processing

We process personal data that you provide to us when using our services or that is generated during your use of our platform. This includes:

Registration and account data (email, name, profile information)
User-generated content and activity (posts, comments, projects, portfolio uploads)
Usage and interaction data (clicks, page views, device information)
Communication data (contact inquiries, support tickets)
Technical data (IP addresses, cookies, analytics)

2. Legal Basis for Processing

We process your data based on the following legal grounds:

Consent (Art. 6(1)(a) GDPR)Where you have given explicit consent for specific processing operations (e.g. newsletter, optional analytics)
Contract Performance (Art. 6(1)(b) GDPR)Processing necessary to provide our services and fulfill our contractual obligations to you
Legal Obligation (Art. 6(1)(c) GDPR)Processing required to comply with legal obligations (e.g. tax law, commercial law)
Legitimate Interests (Art. 6(1)(f) GDPR)Processing necessary for our legitimate business interests, provided your rights do not override these interests

3. Types of Data We Collect

Account & Profile Data

Email address, name, username
Profile picture, bio, professional role
Account settings and preferences
Verification status and credentials

User-Generated Content

Project pages, descriptions, media uploads
Portfolio items and visual content
Feed posts, comments, interactions
Job applications and related documents

Technical & Usage Data

Device type, browser, operating system
IP address (anonymized where possible)
Cookies and similar technologies
Page views, clicks, session duration

4. Purposes of Data Processing

Service Provision

To operate and maintain the ZANOA platform, enable account creation, provide core features (portfolio, projects, job market, communication)

Service Improvement

To analyze usage patterns, improve user experience, develop new features, and optimize performance

Communication

To send transactional emails, system notifications, and respond to your inquiries

Security & Fraud Prevention

To detect and prevent abuse, ensure platform security, and protect user data

Legal Compliance

To fulfill legal obligations and protect our rights and those of our users

5. Data Sharing & Third Parties

We do not sell your personal data. We share data only in the following circumstances:

Service Providers

We use trusted third-party service providers to help operate our platform (hosting, analytics, email delivery). These providers process data on our behalf under strict contractual obligations.

Legal Requirements

We may disclose data if required by law, court order, or legal process, or to protect rights, property, or safety.

Business Transfers

In case of merger, acquisition, or sale of assets, your data may be transferred to the new entity, subject to the same privacy protections.

Third-Party Services We Use

Google Analytics (IP Anonymization Enabled)

Purpose: Website usage analytics

Provider: Google LLC, USA

Privacy Policy: https://policies.google.com/privacy

TMDB (The Movie Database)

Purpose: Film & TV project data enrichment

Provider: TiVo Platform Technologies LLC, USA

Privacy Policy: https://www.themoviedb.org/privacy-policy

6. Data Retention

We retain your data only as long as necessary for the purposes stated in this policy or as required by law.

Active Accounts Data is retained while your account is active and for a reasonable period afterward to allow reactivation
Account Deletion Upon account deletion, personal data is deleted or anonymized within 30 days, except where retention is legally required
Legal Retention Certain data (e.g. invoices, contracts) must be retained for tax and commercial law purposes (typically 6-10 years in Germany)

7. Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of Access (Art. 15 GDPR)

You can request a copy of your personal data we hold about you

Right to Rectification (Art. 16 GDPR)

You can request correction of inaccurate or incomplete data

Right to Erasure (Art. 17 GDPR)

You can request deletion of your data under certain conditions

Right to Restriction (Art. 18 GDPR)

You can request that we limit how we use your data

Right to Data Portability (Art. 20 GDPR)

You can request your data in a structured, machine-readable format

Right to Object (Art. 21 GDPR)

You can object to processing based on legitimate interests or direct marketing

Right to Withdraw Consent (Art. 7(3) GDPR)

Where processing is based on consent, you can withdraw it at any time

Right to Lodge a Complaint

You can file a complaint with your local data protection authority if you believe your rights have been violated

privacyPage.sections.rights.contact

8. Data Security

We implement technical and organizational measures to protect your data from unauthorized access, loss, or misuse:

Encryption of data in transit (TLS/SSL) and at rest
Strict access controls and authentication requirements
Regular security monitoring and audits
Employee training on data protection and security
Regular software updates and security patches

While we strive to protect your data, no internet transmission is 100% secure. Use of our services is at your own risk.

9. Cookies & Tracking

We use cookies and similar technologies to improve user experience and analyze platform usage.

Essential Cookies

Required for basic platform functionality (login, session management). These cannot be disabled.

Analytics Cookies

Help us understand how users interact with our platform. We use Google Analytics with IP anonymization.

Your Control

You can manage cookie preferences through your browser settings or our cookie consent banner. Note that disabling cookies may affect platform functionality.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or platform notification. Continued use after changes constitutes acceptance of the updated policy.

Contact & Data Protection Officer

For privacy-related questions or to exercise your rights, contact us at:

Email: privacy@zanoa.app

Postal Address: Gruschka, Kantara & Speidel eGbR, Rathausstraße 65, 12105 Berlin, Germany