This policy explains what personal data concept.zone processes, why, and what rights you have. We keep it short because we collect little: we do not run advertising, we do not sell data, and basic analytics on this site works without cookies.
1. Who is responsible
Loistava Holding UG (haftungsbeschränkt), Asternring 9, 15732 Schulzendorf, Germany, operating as ConceptZone, is the controller under the EU General Data Protection Regulation (GDPR). Contact for anything in this policy: contact@concept.zone. Full company details are in the Impressum.
2. Visiting the website
When you open a page, your browser sends technical data that every web server receives: IP address, date and time, the page requested, referrer, browser and operating system. We use it only to deliver the site, keep it secure and find errors (Art. 6(1)(f) GDPR — our legitimate interest in a working, secure website).
- Hosting: Netlify, Inc., San Francisco, USA. Netlify may process this data in the USA; transfers rely on the EU Standard Contractual Clauses and Netlify's data processing agreement.
- Content delivery and protection: Cloudflare, Inc. sits in front of the site to deliver it quickly and block attacks. Cloudflare is certified under the EU–US Data Privacy Framework.
Fonts and images are served from our own domain. No font, image or script is loaded from Google or another third party when you read a page, apart from the chat described in section 4.
3. Analytics — PostHog
We measure how the site is used with PostHog, hosted in the EU (Frankfurt) by PostHog, Inc. Requests go through our own domain (/relay-czn) to PostHog's EU servers.
- Without your consent we count page views and visitors anonymously. Nothing is stored on or read from your device, so no cookie banner choice is needed for this part. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in understanding which pages are useful.
- Only if you click “Accept” in the cookie banner, PostHog may set cookies to recognise you across visits and record anonymised session replays (text you type into form fields is masked). Legal basis: your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw it at any time by deleting the
conceptzone_consentcookie, which shows the banner again. - “Decline” turns analytics off completely.
4. Chat
Every page has a chat button. It is our own software, served from cc.concept.zone and running on servers operated by Hetzner Online GmbH in Helsinki, Finland. If you write to us there, we store your messages, the page you wrote from and — if you give it — your email address so we can reply. Nothing is stored in your browser until you open the chat; after that, a random identifier is kept in your browser's local storage so the conversation continues on your next visit. Legal basis: Art. 6(1)(b) GDPR (answering your request, including steps before a contract) and Art. 6(1)(f) GDPR.
5. Booking a call and email
“Book a call” opens a Google Calendar booking page operated by Google Ireland Limited; Google's privacy policy applies there and the data you enter (name, email, time) reaches us through it. Email to us is handled by Google Workspace (Google Ireland Limited). We use what you send to answer you and, if we work together, to prepare and carry out the contract. Legal basis: Art. 6(1)(b) GDPR. Google may process data in the USA; it is certified under the EU–US Data Privacy Framework.
6. Cookies and storage
conceptzone_consent— stores your choice in the cookie banner (“granted” or “denied”), 1 year. Necessary.- PostHog cookies — only after “Accept” (see section 3).
- Chat identifier in local storage — only after you open the chat (see section 4).
7. How long we keep data
Server logs are kept for a short period by our hosting providers for security purposes. Chat messages and emails are kept as long as needed to answer you and follow up, and are then deleted, unless commercial or tax law requires us to keep them longer (for example six years for business correspondence under § 257 HGB, ten years for accounting records). Analytics data is kept in PostHog for as long as it is useful for improving the site.
8. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict its processing, to data portability, and to object to processing based on our legitimate interest (Art. 15–21 GDPR). Where processing rests on your consent, you can withdraw it at any time with effect for the future. Write to contact@concept.zone.
You can also complain to a data protection authority. The authority responsible for us is the Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany.
9. No automated decisions
We do not make decisions about you based solely on automated processing, and we do not use your data for profiling or advertising.
10. Changes
We update this policy when the site or the services we use change. The date at the top shows the current version.