Privacy policy

Last updated: 19 October 2026

1. Who is responsible for your data?

Zeno is operated by Sohail Ahmed, who currently runs the business alone as a private individual. The business is not yet registered, so there is no legal business form at present; this information will be updated once the business form is registered and customer relationships are established. Until then, this website serves as advance information for potential customers. The contact details supplied for the business are:

Zeno
Markt 4
25746 Heide
Germany
Email: info@zeno-eu.com

The controller within the meaning of the GDPR is therefore Sohail Ahmed, Markt 4, 25746 Heide, Germany.

Privacy enquiries may be sent to the email address above.

2. Visiting this website

To deliver pages and protect the website, the hosting infrastructure processes technical connection data. This can include your IP address, request date and time, requested page or file, response status, browser and operating-system information, and the referring page if your browser sends it. These data may be recorded in access or security logs.

The purpose is reliable delivery, troubleshooting and protection against misuse. Where this processing is necessary and proportionate, the legal basis is our legitimate interest in operating a secure website under Article 6(1)(f) GDPR.

The website is hosted and delivered by Lovable Labs Incorporated, 1 Lincoln St, Boston, MA 02111, United States, which acts as Zeno's processor under a data processing agreement (lovable.dev/data-processing-agreement). Its representative within the EU is Lovable Labs AB, Regeringsgatan 25, 111 53 Stockholm, Sweden; platform data protection enquiries can be sent to dpo@lovable.dev. The third parties engaged by that provider are listed at lovable.dev/subprocessors. Access and security logs are kept by that provider for the period set out in its agreement.

3. The quote request form

The form contains the following fields:

• Name — required.
• Company — required.
• Email address — required.
• Phone number — optional.
• Service interested in — a selected service category.
• Message — required; includes any details you choose to share about your request.

Selecting “Send request” transmits the fields via HTTPS to a server function hosted by Vercel. The function sends the request to Zeno over an authenticated SMTP connection through ALL-INKL.COM. The form does not open your email application. If automatic delivery has not been configured or a delivery fails, the form reports that and does not claim the request was sent; you can contact Zeno directly by email instead.

The server function does not save form entries to a website database; it processes them to send the requested email. Vercel processes the request to run the server function, and ALL-INKL processes the email and may process technical connection data, such as the IP address and request time, in its access or security logs. The browser may retain autofill information according to your browser settings.

Please do not include passwords, payment details or sensitive personal information in your message unless specifically necessary and agreed with us. Email transmission is not guaranteed to be end-to-end encrypted.

4. What happens when you send the email?

When you submit the quote form, the Vercel-hosted server function receives the form fields and sends them over SMTP to Zeno using ALL-INKL. We receive the details together with ordinary email metadata, such as the sender address, sending time and relevant mail headers. If you contact us directly, we also receive any attachments or other information you include.

We use this information to answer enquiries, prepare quotes, clarify logistics or service requirements, and manage the resulting business correspondence. Providing a phone number is optional and allows us to contact you by phone about your enquiry. Enquiries are not automatically subscribed to marketing messages.

Where the enquiry concerns steps towards a contract with you, the legal basis is Article 6(1)(b) GDPR. For other business enquiries, including correspondence with representatives of a company, it is Article 6(1)(f) GDPR: our legitimate interest in responding to business communications. Article 6(1)(c) GDPR applies where legal retention or other legal obligations require processing.

5. Recipients and service providers

Business correspondence is accessible to authorised people handling your request. Vercel hosts the website server function that receives quote form submissions, and ALL-INKL provides the SMTP email transport that delivers them to Zeno. These providers process data for their respective services. We disclose information to authorities or professional advisers only where legally required or necessary for a lawful purpose.

Email service and SMTP transport for quote requests are provided by ALL-INKL.COM - Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. Emails sent to and from Zeno are processed on the provider's servers in Germany.

If fulfilling a request requires sharing relevant details with a logistics or sourcing partner, we limit the information to what is necessary and provide additional information where required. Zeno does not yet work with storage or logistics partners. Where a request is handled together with such a partner in future, the recipient will be a storage or fulfilment service provider that receives only the details necessary for that order and is bound by a written service agreement.

6. Fonts

The Inter and Manrope typefaces are served directly from this website’s own hosting. Your browser downloads the font files from the same server as the rest of the website. No connection to Google Fonts or any other external font provider is made, and no font-related data, such as your IP address or browser information, is passed on to third parties for font loading.

7. Cookies, browser storage and diagnostics

The website’s own quote form does not use cookies or local storage. The application code does not include a newsletter signup, user account system, advertising pixels or an analytics integration.

The application includes technical error handling. If platform diagnostic hooks are available, errors may be reported with the current page path, error message and technical stack trace. The quote handler does not intentionally attach form entries to these reports. Diagnostic services may also receive technical connection information.

The hosting and diagnostic provider is the platform operator named in section 2. Its technical error reporting receives the page path, the error message and a technical stack trace; it does not receive the entries from the quote form. The website loads no advertising, marketing or analytics scripts and sets no cookies of its own. If Zeno later enables tracking or optional browser storage, this policy will be updated and consent obtained where required.

8. International data transfers

If you contact Zeno directly by email, your chosen email application and its provider process data according to their own terms. Quote form submissions are sent from your browser to the Vercel-hosted server function, which sends the email through ALL-INKL in Germany. Website hosting or server providers may process information outside the European Economic Area. Transfers by Zeno or its processors require an applicable GDPR transfer mechanism, such as a valid adequacy decision or appropriate safeguards under Article 46 GDPR.

Email is processed in Germany by the provider named in section 5. The hosting platform operator named in section 2 is established in the United States, so information may also be processed there. Where a transfer leaves the European Economic Area without an adequacy decision, it is based on the EU standard contractual clauses under Article 46 GDPR as set out in the platform's data processing agreement. A copy of the safeguards can be requested from Zeno at info@zeno-eu.com.

9. How long we keep information

We keep enquiry correspondence only for as long as it is needed to handle the request and any subsequent business relationship, unless legal retention obligations or the establishment, exercise or defence of legal claims require further retention. Records that must be retained by law are restricted to the relevant purpose.

Enquiry correspondence from unsuccessful or completed requests is deleted after six months, unless a business relationship follows or legal obligations require longer retention. Accounting-relevant correspondence and invoices are retained for ten years in line with statutory retention obligations. Backups are overwritten in the hosting platform’s ordinary rotation cycle; access and diagnostic logs follow the periods set by that platform, as described in section 2.

10. Your rights

Subject to the applicable GDPR conditions, you may request access to your personal data, correction, erasure, restriction of processing and data portability. You may withdraw any consent you have given at any time, without affecting the lawfulness of processing before withdrawal.

You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. If personal data are used for direct marketing, you may object to that use at any time. Contact us at info@zeno-eu.com to exercise your rights. We may need proportionate information to verify your identity.

You may lodge a complaint with a data protection supervisory authority, particularly in the country of your habitual residence, workplace or the alleged infringement. Based on the supplied address in Schleswig-Holstein, the relevant regional authority is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD): www.datenschutzzentrum.de.

11. Required information and automated decisions

You are not legally required to submit a quote request. The form requires name, company, email and message so we can address and understand your enquiry. You may contact us directly by email instead. The quote form does not perform profiling or automated decisions with legal or similarly significant effects.

12. Updates to this policy

We update this policy when our services, providers or data processing change. The date above identifies this version. All placeholders and provider-specific arrangements must be completed and checked before the website goes live.