Privacy policy

Last updated: 20.06.2025

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. For detailed information on data protection, please refer to our full Privacy Policy outlined below.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. The relevant contact details can be found under “Information on the Responsible Party” in this Privacy Policy.

How do we collect your data?

Your data is collected in part by you providing it to us – for example, through a contact form.

Other data is collected automatically or after your consent when you visit the website. This primarily includes technical data (e.g., browser type, operating system, or time of page access). This data is collected automatically as soon as you enter the website.

Why do we use your data?

Part of the data is collected to ensure the proper functioning of the website. Other data may be used to analyze user behavior. If contracts can be concluded or initiated via the website, the data you provide may be processed for quotes, orders, or other service requests.

What rights do you have regarding your data?

You have the right to obtain information about the origin, recipient, and purpose of your stored personal data at any time, free of charge. You also have the right to request correction or deletion of this data. If you have given consent to data processing, you may revoke this consent at any time for the future. Under certain conditions, you may also request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the relevant supervisory authority.

For further information or questions regarding data protection, you can contact us at any time.

2. Hosting

Squarespace

This website is hosted using Squarespace, operated by Squarespace Ireland Ltd., Le Pole House, Ship Street Great, Dublin 8, Ireland. Your data is processed on Squarespace servers, and may also be transferred to the parent company Squarespace Inc., 8 Clarkson St, New York, NY 10014, USA.

Squarespace uses cookies that are essential for displaying the site and ensuring security (necessary cookies).

The use of Squarespace is based on Art. 6(1)(f) GDPR. We have a legitimate interest in providing a reliable and visually appealing website. If consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, where applicable (e.g., device fingerprinting). Consent can be withdrawn at any time.

Data transfers to the USA are based on the EU Commission’s Standard Contractual Clauses. Details can be found at:
Squarespace and GDPR

Squarespace is certified under the EU-U.S. Data Privacy Framework (DPF). More information:
Data Privacy Framework Participant

Data Processing Agreement (DPA)

We have entered into a data processing agreement with Squarespace. This contract ensures that Squarespace processes personal data of our website visitors strictly in accordance with our instructions and the GDPR.

Strato

This website also uses services from Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.

STRATO verarbeitet ggf. technische Daten wie IP-Adressen im Rahmen ihrer Serverinfrastruktur.

Wenn Sie uns per E-Mail kontaktieren, werden Ihre Angaben (E-Mail-Adresse, Inhalt, Metadaten) über die Server von STRATO verarbeitet. Die Verarbeitung erfolgt auf Grundlage von Art. 6 Abs. 1 lit. b oder f DSGVO.

Data Processing Agreement

We have entered into a legally required data processing agreement with Strato, ensuring that personal data is processed only in accordance with our instructions and GDPR.

3. General Information and Mandatory Disclosures

Data Protection

We take the protection of your personal data very seriously. We treat your personal information confidentially and in accordance with the applicable data protection laws and this Privacy Policy.

When using this website, various types of personal data may be collected. This Privacy Policy explains what data we collect, how and for what purpose.

Please note: Data transmission over the Internet (e.g., via email) may have security vulnerabilities. A complete protection of data from third-party access is not possible.

Responsible Party

Universals101 oHG
Euckenstr. 17
81369 Munich
Germany
Phone: +49 1577 4179036
Email: info@zeroguess.de

The controller is the person or entity that determines the purposes and means of processing personal data.

Storage Period

Unless a more specific storage period has been stated within this Privacy Policy, your personal data will be retained until the purpose for the data processing ceases to apply. If you request deletion or revoke consent, your data will be deleted unless legal retention obligations (e.g., tax or commercial laws) require otherwise.

4. General Legal Basis for Data Processing on This Website

If you have given consent, we process your personal data based on Art. 6(1)(a) GDPR and, if applicable, Art. 9(2)(a) GDPR in the case of special categories of data. If you have expressly consented to the transfer of personal data to third countries, the processing is also based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), data processing is additionally based on § 25(1) TDDDG. You may revoke your consent at any time.

If your data is required for the fulfillment of a contract or for pre-contractual measures, we process it based on Art. 6(1)(b) GDPR. If processing is necessary to fulfill a legal obligation, we rely on Art. 6(1)(c) GDPR. Processing may also be based on our legitimate interests pursuant to Art. 6(1)(f) GDPR. More specific legal bases are outlined below.

5. Recipients of Personal Data

In the course of our business activities, we may work with external parties, which may involve the transfer of personal data. Data is shared only:

if necessary to fulfill a contract,
if legally required (e.g., for tax authorities),
if there is a legitimate interest (Art. 6(1)(f) GDPR),
or if another legal basis permits such sharing.

When using processors, we ensure valid data processing agreements (DPAs) are in place. If joint processing occurs, a joint controller agreement is concluded.

6. Your Rights

Revocation of Your Consent

You may withdraw your consent to data processing at any time. The legality of processing before revocation remains unaffected.

Right to Object (Art. 21 GDPR)

If data processing is based on Art. 6(1)(e) or (f) GDPR, you may object at any time for reasons arising from your particular situation, including profiling based on those provisions.

If your personal data is processed for direct marketing, you have the right to object at any time to such use, including profiling related to direct marketing.
If you object, your data will no longer be processed for these purposes.

Right to Lodge a Complaint

If you believe that your data protection rights have been violated, you can file a complaint with the competent supervisory authority in your country of residence, workplace, or the place of the alleged violation. This does not affect other administrative or judicial remedies.

Right to Data Portability

You have the right to receive your data in a structured, commonly used, and machine-readable format, and, where technically feasible, to have it transferred directly to another controller.

Right of Access, Rectification, and Erasure

You have the right to request:

access to your personal data,
correction of incorrect data,
deletion of your data, where permissible by law.

Right to Restriction of Processing

You have the right to restrict the processing of your data in the following cases:

You contest the accuracy of the data (restriction during verification).
The processing is unlawful, and you oppose erasure.
We no longer need the data, but you need it to assert legal claims.
You have objected under Art. 21(1) GDPR, pending the outcome of the balancing of interests.

If processing is restricted, your data may only be processed (except for storage) with your consent or for legal claims or public interest.

7. SSL or TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content (e.g., orders or inquiries). You can recognize a secure connection by the browser's address bar changing from “http://” to “https://” and the padlock icon.

When SSL or TLS encryption is active, data you send cannot be read by third parties.

8. Objection to Promotional Emails

We hereby object to the use of contact data published under legal notice requirements for sending unsolicited advertising or informational material. We reserve the right to take legal action against spam emails or similar communications.

9. Data Collection on This Website

Server Log Files

The provider of this website automatically collects and stores information in server log files, which your browser transmits to us. This includes:

Browser type and version
Operating system
Referrer URL
Hostname of the accessing device
Time of server request
IP address

This data is not merged with other data sources.

The processing is based on Art. 6(1)(f) GDPR — our legitimate interest in ensuring the technical functionality and optimization of the website.

Contact Form

When you submit inquiries via our contact form, we store the entered data (including contact details) to process your request and for follow-up.

We do not share this data without your consent.

Processing is based on:

Art. 6(1)(b) GDPR (contract/pre-contract),
or our legitimate interest in efficiently processing inquiries (Art. 6(1)(f) GDPR),
or, if requested, your consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time.

Data remains with us until you request deletion, revoke consent, or the storage purpose no longer applies (e.g., after resolution of your inquiry). Mandatory legal retention periods remain unaffected.

Inquiries by Email, Phone, or Fax

If you contact us via email, phone, or fax, we store and process your inquiry and all related personal data (e.g., name, request) for handling your concern.