zealos energy

LEGAL

Privacy policy

This English version is provided for convenience. The German version is legally binding.

Last updated: November 2026

1. Controller

The controller responsible for processing personal data on this website (www.zealos.de) is:

Zealos Energy GmbH
Zur Mühle 20
01983 Großräschen OT Dörrwalde
Germany
Represented by the managing director Georgios Bakouros
Email: george.bakouros@zealos.de

We have not appointed a data protection officer, as the legal requirements for doing so are not met. Please send any data protection questions to the address above.

2. Overview

This website provides information about the services of Zealos Energy GmbH. You can use it without registering. We process personal data only where this is necessary to operate the website, to handle your enquiries or for data-minimising, cookieless audience measurement. We do not sell data and do not show advertising.

3. Hosting and delivery of the website

This website is hosted by Lovable. The provider is Lovable Labs Incorporated (USA), with a branch in Sweden. Lovable delivers the website via a global delivery network and uses infrastructure providers for this, including Cloudflare. Server-side functions of the website, such as the contact form, run in "Lovable Cloud", which is based on Supabase (Supabase Inc., USA) as a sub-processor, in a data centre in the USA (Oregon region).

When you visit the website, technically necessary data that your browser transmits automatically is processed (server log data):

  • IP address
  • date and time of access
  • page or file requested
  • referrer URL (previously visited page)
  • browser type and version, operating system

This processing serves to deliver the website, to ensure its stability and security and to fend off attacks. The legal basis is our legitimate interest in secure and functional operation (Art. 6(1)(f) GDPR). The hosting provider stores log data only for as long as necessary for these purposes and then deletes it.

We have concluded a data processing agreement with Lovable pursuant to Art. 28 GDPR.

4. Contact form

If you write to us via the contact form, we process the details you enter:

  • name (required)
  • email address (required)
  • topic (required)
  • message (required)
  • company and phone number (optional)

The purpose is to handle and answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

How it works: your details are transmitted in encrypted form to a server function in Lovable Cloud (data centre in the USA) and from there delivered as an email to our mailbox via the "Lovable Emails" sending service. Your enquiries are not stored on the website itself. Our email mailbox is operated by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, as a processor.

Protection against abuse: to prevent automated mass submissions, we store a non-reversible, encrypted value (hash) of your IP address together with the time of submission for one hour. Your IP address itself is not stored. The legal basis is our legitimate interest in the security of the form (Art. 6(1)(f) GDPR).

Retention: we keep your enquiry in our mailbox for as long as necessary to handle it. We then delete it unless statutory retention obligations apply, for example for business correspondence under § 257 HGB or § 147 AO (German commercial and tax law).

Providing your data is voluntary. Without the required details, however, we cannot handle your enquiry.

5. Audience measurement by Lovable

To understand how our website is used, we use the audience measurement built into Lovable's hosting. Only aggregated figures are recorded: number of visits and page views, visit duration, bounce rate, pages viewed, referring websites, device type and country of origin. The measurement script is loaded from our own domain and sends data to our own domain; no data is transmitted to an external analytics service.

The audience measurement sets no cookies and stores nothing in your browser. Each visit receives a random identifier that is discarded when the visit ends; a return visit is counted as a new visit. No profiles are created and visitors are not tracked across visits. To determine the country of origin, Lovable processes the connection data transmitted when the page is requested (in particular the IP address).

The legal basis is our legitimate interest in data-minimising statistical evaluation and improvement of our website (Art. 6(1)(f) GDPR). As no cookies or other information are stored on or read from your device, no consent is required. You may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

6. Cookies

We do not set cookies on this website and do not store information in your browser, neither for analytics nor for marketing purposes. Should our hosting provider set technically necessary cookies to fend off automated attacks, this is done on the basis of § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR; no consent is required for this.

7. Fonts

The fonts used on this website are delivered from our own server. No connection is made to servers of Google or other font providers.

8. Links to other websites

Our website contains links, for example to our product twofair (www.twofair.com). Data is only transferred to the operator of the respective website once you click such a link. Processing there is governed by that provider's privacy policy.

9. Recipients and processors

We use the following service providers, who process data on our behalf and according to our instructions:

  • Lovable Labs Incorporated (hosting, audience measurement, server functions, email sending via "Lovable Emails"), with Supabase Inc. and infrastructure providers such as Cloudflare as sub-processors
  • IONOS SE (operation of our email mailbox and domain management)

10. Transfers to third countries

Lovable, Supabase and Cloudflare are companies based in the USA. The server functions for the contact form run in a data centre in the USA; your form details are transmitted there and briefly processed in order to forward them to our mailbox, as is the hash of your IP address. Data such as server log data or your IP address may also be processed in the USA or other third countries when the website is delivered, when emails are sent and for audience measurement. For such cases we rely, where available, on the provider's certification under the EU-US Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR) and additionally on the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR).

11. Your rights

You have the following rights regarding your personal data:

  • access (Art. 15 GDPR)
  • rectification (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • objection to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation (Art. 21 GDPR)

An email to the address above is sufficient to exercise your rights.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany.

12. Data security

Transmission between your browser and our website is encrypted (TLS/HTTPS). We process as little data as possible: contact enquiries are not stored on the website, IP addresses only as a short-lived hash, and visitor statistics only in aggregated form and without cookies.

13. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

14. Changes to this privacy policy

We update this privacy policy when our website, the services we use or the legal situation change. The version published on this page applies.