1. Data Controller

Zig Zeig GmbH
Koenigsallee 16 i
14193 Berlin, Germany
Email: support@zigzeig.com

2. Data We Collect

We collect and process the following types of personal data:

• Account Information: Name, email address, password (encrypted)
• Brand Content: Brand names, logos, colors, fonts, marketing campaigns, assets, and documents you upload
• Usage Data: How you interact with our service, feature usage, error logs
• Technical Data: IP address, browser type, device information, cookies
• AI-Generated Content: Campaigns, posts, and assets created through our AI features

3. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Contract Performance (Art. 6(1)(b) GDPR): To provide our AI marketing services
• Consent (Art. 6(1)(a) GDPR): For optional features and marketing communications
• Legitimate Interest (Art. 6(1)(f) GDPR): To improve our services, prevent fraud, and ensure security
• Legal Obligation (Art. 6(1)(c) GDPR): To comply with applicable laws and regulations

4. How We Use Your Data

• Provide and maintain Zig Zeig services (campaign generation, brand management)
• Generate AI-powered marketing content tailored to your brand
• Store and manage your brand assets and campaigns
• Communicate with you about your account and our services
• Improve our AI models and service quality
• Ensure security and prevent fraud
• Comply with legal obligations

5. Data Sharing and Third-Party Processors

We share your data only with trusted third-party service providers who help us operate Zig Zeig, including:

• Cloud infrastructure and hosting providers
• Database and authentication services
• AI and machine learning service providers
• File storage and content delivery services

All processors are GDPR-compliant and operate under data processing agreements. We ensure adequate safeguards are in place for any international data transfers. We do not sell your personal data to third parties.

6. Data Retention

We retain your personal data for as long as:

• Your account is active and you use our services
• Required to comply with legal obligations (e.g., tax records: 10 years)
• Necessary to resolve disputes or enforce our agreements

You can request deletion of your account and data at any time by contacting us.

7. Your Rights (GDPR)

Under the GDPR, you have the following rights:

• Right of Access (Art. 15): Request a copy of your personal data
• Right to Rectification (Art. 16): Correct inaccurate or incomplete data
• Right to Erasure (Art. 17): Request deletion of your data ("right to be forgotten")
• Right to Restriction (Art. 18): Limit how we process your data
• Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format
• Right to Object (Art. 21): Object to processing based on legitimate interests
• Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time

To exercise your rights, contact us at support@zigzeig.com

8. Cookies and Tracking

We use only essential cookies necessary to operate our service, including authentication and session management. These cookies are required for the platform to function and do not require consent under GDPR.

We do not currently use analytics, advertising, or tracking cookies. If we introduce optional cookies in the future, we will obtain your consent before doing so.

You can manage cookie preferences through your browser settings at any time.

9. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (TLS/SSL) and at rest
• Secure authentication with encrypted passwords
• Regular security audits and monitoring
• Access controls and role-based permissions

10. International Data Transfers

Your data is primarily stored within the European Union. If data is transferred outside the EU, we ensure adequate safeguards through:

• EU Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission
• GDPR-compliant data processing agreements

11. Children's Privacy

Zig Zeig is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our service. Continued use after changes constitutes acceptance of the updated policy.

13. Supervisory Authority

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the supervisory authority:

Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstr. 219
10969 Berlin, Germany
Website: https://www.datenschutz-berlin.de