Privacy.Information pursuant to Art. 13 and 14 GDPR

When you open a page and when you switch the language, a cookie zulano_lang with the value “de” or “en” is set. It contains only this information and no identifier that makes a person recognisable. Validity: twelve months; on zulano.io it applies to all subdomains.

Purpose

Keeping your language choice for your next visit

Legal basis

Section 25(2) no. 2 TDDDG — strictly necessary for the service you have expressly requested; additionally Art. 6(1)(f) GDPR

Retention

12 months from being set; can be deleted in the browser at any time

Recipients

not disclosed

The notice at the bottom of the page records in your browser’s local storage (zulano_cookie_consent) that you have read it, so that it does not reappear on every visit. It does not set a cookie itself. As this website uses no services that require consent, it is not a consent banner: there is nothing to allow or refuse, so it only has one button to close it. You can show it again at any time via “Cookie settings” in the footer.

Purpose

Not showing the notice again after you have closed it

Legal basis

Section 25(2) no. 2 TDDDG — strictly necessary; additionally Art. 6(1)(f) GDPR

Retention

until you clear your browser data; no expiry date

Recipients

not disclosed — the value does not leave your browser

The fonts used are bundled when the site is built and delivered from our own server. Visiting this website establishes no connection to Google or any other font provider; your IP address is not transmitted to them. This does not apply to the catalogue — see section 7.

Only Groq, Inc. and OpenRouter, Inc., both based in the United States, are used to generate the answers. Google LLC, additionally named in section 8.4, is not used here.

Purpose

Answering your question and finding suitable services in the catalogue

Legal basis

Art. 6(1)(b) GDPR — performing the function you have requested; additionally Art. 6(1)(f) GDPR

Retention

Processing takes place to generate the answer; retention by the operator and the AI providers follows their terms and is not conclusively documented here

Recipients

Groq, Inc. and OpenRouter, Inc. (both US); Amazon Web Services EMEA SARL

So that the free allowance is not used without limit, your browser stores a randomly generated identifier in local storage (zulano_sandbox_id). It consists of a random sequence, contains no information about you and is only sent to this service. In addition, your IP address is kept on the server for 24 hours in order to limit the number of requests.

Purpose

Preventing misuse and assigning the free allowance

Legal basis

Art. 6(1)(f) GDPR — legitimate interest in protection against excessive use

Retention

Identifier: until you clear your browser data · IP address: 24 hours plus one hour until automatic deletion

Recipients

Amazon Web Services EMEA SARL as processor

An account is required for the application assistants. Sign-in runs via Amazon Cognito; email address and password are collected, and confirmation takes place via a code sent by email. Passwords are stored only as hash values.

Purpose

Creating the account, signing in, assigning your applications

Legal basis

Art. 6(1)(b) GDPR — performance of the user agreement

Retention

for the lifetime of the account; after its deletion the data are removed unless statutory retention obligations apply

Recipients

Amazon Web Services EMEA SARL as processor

The information you enter into an application is stored in a database (Amazon DynamoDB) in the Frankfurt am Main region.

Purpose

Creating, saving and outputting the application as a document

Legal basis

Art. 6(1)(b) GDPR

Retention

for the lifetime of the account; after its deletion the data are removed unless statutory retention obligations apply

Recipients

Amazon Web Services EMEA SARL as processor

The building assistant keeps your intermediate state exclusively in your browser’s local storage. This information is not transmitted to a server; it stays on your device until you clear your browser data.

To suggest and fill in application fields, to check your information for completeness and to analyse web addresses you provide, your input is transmitted to AI providers: Groq, Inc., OpenRouter, Inc. and Google LLC (Gemini model). All three are based in the United States; this is therefore a transfer to a third country (see section 9). Here, too, please only enter the information required for the application.

Purpose

Suggesting and filling in application fields, checking information for completeness, analysing web addresses provided

Legal basis

Art. 6(1)(b) GDPR — performing the function you have requested

Retention

Processing to generate the answer; retention by the providers follows their terms

Recipients

Groq, Inc., OpenRouter, Inc. and Google LLC (all US)

Where a paid service is offered and booked by you, payment is processed by Stripe Payments Europe, Limited, Ireland. Your payment details — such as card number or bank details — are entered directly at Stripe and not transmitted to us; we only receive the information whether the payment was successful. As long as no paid service is booked, this processing does not take place.

Purpose

Processing a payment you have instructed

Legal basis

Art. 6(1)(b) GDPR

Retention

in accordance with the retention periods under commercial and tax law

Recipients

Stripe Payments Europe, Limited, Ireland

The following service providers are part of the shared infrastructure of Creativate Technologies GmbH and are listed in its data processing agreement. At Zulano they currently receive no data. If that changes, this notice will be updated beforehand.