Privacy Policy

Introduction

Zenthira GmbH ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website or use our services.

As a company based in Austria, we comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This policy applies to all personal data we process about you.

Data Controller

Zenthira GmbH is the data controller for your personal data. Our contact details are:

Data We Collect

We may collect and process the following categories of personal data about you:

• Contact Information: Name, email address, phone number, postal address
• Professional Information: Company name, job title, business contact details
• Communication Data: Records of correspondence and communications with us
• Website Usage Data: IP address, browser type, pages visited, time spent on site
• Technical Data: Device information, operating system, internet connection details
• Marketing Data: Your preferences for receiving marketing communications

The data we collect depends on how you interact with our website and services. We only collect data that is necessary for the purposes outlined in this policy.

How We Use Your Information

We use your personal data for the following purposes, based on the legal grounds indicated:

• Service Provision: To provide our financial analysis and consulting services (Contract performance)
• Communication: To respond to your enquiries and provide customer support (Legitimate interest)
• Website Operation: To ensure our website functions properly and securely (Legitimate interest)
• Legal Compliance: To comply with legal obligations and regulatory requirements (Legal obligation)
• Marketing: To send you relevant information about our services (Consent or legitimate interest)
• Analytics: To understand how our website is used and improve our services (Legitimate interest)

We will only use your data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about our use of cookies, please see our Cookie Policy.

Data Sharing and Disclosure

We may share your personal data with the following categories of recipients:

• Service Providers: Third-party companies that provide services on our behalf (e.g., IT support, analytics)
• Legal Authorities: When required by law or to protect our legal rights
• Business Partners: With your consent, to provide joint services or offerings
• Professional Advisors: Lawyers, accountants, and other professional advisors

We ensure that all third parties respect the security of your personal data and treat it in accordance with applicable law. We only allow them to process your data for specified purposes and in accordance with our instructions.

Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including:

• Client Data: For the duration of our business relationship plus 7 years for legal and regulatory compliance
• Marketing Data: Until you withdraw consent or we no longer have a legitimate interest
• Website Analytics: Up to 26 months for Google Analytics data
• Communication Records: Up to 3 years from the date of last contact

When determining retention periods, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm, and applicable legal requirements.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Access: The right to request copies of your personal data
• Rectification: The right to request correction of inaccurate or incomplete data
• Erasure: The right to request deletion of your personal data in certain circumstances
• Restriction: The right to request limitation of processing in certain circumstances
• Portability: The right to receive your data in a portable format
• Objection: The right to object to processing based on legitimate interests
• Withdraw Consent: The right to withdraw consent where processing is based on consent

To exercise any of these rights, please contact us using the details provided in the contact section below. We will respond to your request within one month.

Data Security

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication procedures
• Staff training on data protection and security
• Incident response and breach notification procedures

While we strive to protect your personal data, no method of transmission or storage is completely secure. We cannot guarantee absolute security but we continuously work to improve our security measures.

International Transfers

We may transfer your personal data to countries outside the European Economic Area (EEA) for processing by our service providers. When we do so, we ensure that:

• The country has been deemed to provide adequate protection by the European Commission, or
• We have implemented appropriate safeguards such as Standard Contractual Clauses, or
• The transfer is otherwise permitted under GDPR

For more information about the safeguards we use for international transfers, please contact us using the details below.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make significant changes, we will notify you by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending you an email notification if you have provided us with your email address
• Displaying a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us about data protection matters, please contact us:

You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde) if you believe we have not handled your personal data in accordance with applicable law.