Privacy Policy

Introduction

zenovexira.top AG ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website zenovexira.top and use our retail profit margin benchmark analysis services.

This policy applies to all personal data we process in connection with our services and website. By using our website or services, you consent to the data collection and use practices described in this Privacy Policy.

Data Controller Information

The data controller for your personal information is:

Data We Collect

We collect and process various types of personal data in connection with our services. The data we collect includes information you provide directly to us, information we collect automatically, and information we receive from third parties.

Information You Provide to Us

• Contact information (name, email address, phone number)
• Company information (business name, industry, size)
• Communication preferences and enquiry details
• Business data provided for analysis purposes
• Feedback and correspondence with our team

Information We Collect Automatically

• Website usage data (pages visited, time spent, click patterns)
• Device information (browser type, operating system, IP address)
• Location data (country and city level)
• Referral sources and website navigation patterns

How We Use Your Information

We process your personal data for various purposes based on different legal grounds under GDPR. Here's how we use your information and the legal basis for each type of processing:

Service Provision (Contract Performance)

• Providing retail profit margin analysis services
• Communicating about your projects and deliverables
• Processing payments and maintaining service records
• Delivering reports and recommendations

Legitimate Business Interests

• Improving our website and services
• Conducting business analytics and research
• Preventing fraud and ensuring security
• Managing our business operations

Consent-Based Processing

• Marketing communications (where you have opted in)
• Non-essential cookies and tracking technologies
• Personalised content and recommendations

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, their purpose, and how to manage them, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

• Service Providers: Trusted third-party providers who assist with website hosting, analytics, and business operations
• Legal Requirements: When required by law, court order, or to protect our legal rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with appropriate safeguards)
• Consent: When you have given explicit consent for specific sharing purposes

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training
• Secure data storage and backup procedures

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Our data retention periods vary based on the type of information:

• Contact Information: Retained whilst you remain a client and for 3 years after the end of our business relationship
• Service Data: Retained for the duration of the service provision and for 7 years afterwards for legal and accounting purposes
• Website Analytics: Typically retained for 26 months in accordance with Google Analytics settings
• Marketing Data: Retained until you withdraw consent or for 3 years from last engagement

Your Rights

Under GDPR and Austrian data protection law, you have several rights regarding your personal data. These rights include:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation of processing under certain conditions
• Right to Data Portability: Request transfer of your data to another controller
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing at any time (where applicable)

To exercise any of these rights, please contact us at [email protected] or +43 3166459886. We will respond to your request within one month of receipt.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) when we use certain third-party services. When such transfers occur, we ensure appropriate safeguards are in place, including:

• European Commission adequacy decisions
• Standard Contractual Clauses approved by the European Commission
• Binding Corporate Rules or certification schemes
• Other appropriate safeguards recognised under GDPR

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last updated" date at the top of this policy
• Sending you a notification if required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Complaints and Supervisory Authority

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the relevant supervisory authority. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde):

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the following information:

We are committed to addressing your privacy concerns promptly and transparently. When you contact us about privacy matters, we will respond within one month of receiving your request.