Privacy Policy

Last updated: August 23, 2026

This website is intentionally light on data. No advertising cookies, no analytics, no third-party fonts. Below is a complete account of what happens with personal data when you visit simonziri.com, written to be read, not just filed.

1. Controller

Responsible for data processing on this website (see Imprint):

ZIRI GmbH
Germanenweg 49
71272 Renningen
Germany
E-mail: simon@simonziri.com

2. Hosting (Vercel)

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the site, Vercel processes technical connection data (IP address, date and time of access, requested URL, browser and operating system information) in server logs. This is technically necessary to deliver the website and to keep it secure.

Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in providing a secure, functioning website. Vercel may process data in the USA; transfers are safeguarded by the EU Standard Contractual Clauses and Vercel’s participation in the EU-U.S. Data Privacy Framework. Log data is automatically deleted by Vercel after a short retention period.

3. Contact form

When you use the contact form, we process the data you enter:

  • your work e-mail address (required)
  • your company website (optional)
  • your answers to the qualification questions and anything you write in the message field (optional)

We use this data exclusively to respond to your inquiry and to prepare a potential collaboration. Submissions are not stored on the web server — they are forwarded directly to our e-mail inbox and kept there for as long as the correspondence requires, at most until the statutory retention periods expire.

Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract, taken at your request) and your consent, Art. 6(1)(a) GDPR, which you give via the checkbox before sending. You can withdraw this consent at any time with effect for the future by e-mailing us. The form uses an invisible technical field to filter out automated spam; no captcha service and no third party is involved.

4. Embedded videos (YouTube)

Individual case study pages embed videos via YouTube’s privacy-enhanced player (youtube-nocookie.com), operated by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. In this mode YouTube does not set advertising cookies before you play a video; when the player loads, your IP address is nevertheless transmitted to Google. If you start playback, Google may process usage data under its own privacy policy.

Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in presenting our work; playback only happens on your initiative.

5. What this site does not do

  • No analytics or tracking tools (no Google Analytics, no pixels).
  • No advertising or marketing cookies.
  • No third-party fonts or CDNs — fonts are served from our own server.
  • No profiling, no automated decision-making.

Should we introduce such tools in the future (for example web analytics), we will update this policy beforehand and, where legally required, ask for your consent first.

6. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you (Art. 15),
  • rectification of inaccurate data (Art. 16),
  • erasure (Art. 17) and restriction of processing (Art. 18),
  • data portability (Art. 20),
  • object to processing based on legitimate interest (Art. 21),
  • withdraw any consent at any time with effect for the future (Art. 7(3)).

To exercise any of these rights, e-mail simon@simonziri.com. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence.

7. Changes to this policy

We update this policy whenever the website’s functionality changes in a way that affects personal data. The date above always reflects the current version.