Privacy Policy

Last Updated: 17. November 2025

At Zeity, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our booking platform.

1. Data Controller

Moon Regents is the data controller responsible for your personal data. You can contact us at: Moon Regents 47805 Krefeld Germany Email: info@zeity.me

2. What Data We Collect

When you make a booking through our platform, we collect: • Full Name • Email Address • Phone Number (optional) • Appointment Date and Time • Service Type • Notes or Special Requests This data is necessary to process your appointment request and send you confirmation emails and reminders.

3. Legal Basis for Processing

We process your personal data based on GDPR Article 6(1)(b) - processing is necessary for the performance of a contract (your appointment booking). We may also process data based on your explicit consent for receiving appointment reminders.

4. How We Use Your Data

Your data is used exclusively for: • Processing and confirming your appointment • Sending appointment reminders and notifications • Communicating with you about your booking • Providing you with appointment details and updates We do not sell, rent, or share your data with third parties for marketing purposes.

5. Data Retention

Your appointment data is retained for 2 years from the appointment date to maintain booking history and handle disputes. After 2 years, your data is automatically deleted from our systems. You can request immediate deletion at any time by contacting us.

6. Cookies and Tracking

We use only essential cookies that are strictly necessary for the functioning of our service. These cookies are exempt from consent requirements under TTDSG §25 Abs. 2 (German Telecommunications and Telemedia Data Protection Act). Essential Cookies: • Session Management: Supabase authentication cookies enable you to stay logged into your account • Language Preference: Stores your selected language (English or German) for a better user experience • Cookie Consent: Remembers whether you have acknowledged this cookie notice These cookies are stored locally in your browser and contain no personal data beyond what is necessary for their specific purpose. We do NOT use: • Tracking cookies or pixels • Analytics tools (Google Analytics, Hotjar, etc.) • Advertising or retargeting cookies • Third-party cookies for marketing Your browsing activity is not monitored, tracked, or profiled. We collect no data about which pages you visit or how long you stay on them.

7. Third-Party Services

We use the following third-party services that may process your data: • Supabase: Cloud database and authentication provider (hosting your data) • Resend: Email service provider (sending confirmation and reminder emails) All third-party services are GDPR-compliant and process data only on our instruction.

8. Your Rights Under GDPR

You have the right to: • Access: Request a copy of your personal data • Rectification: Correct inaccurate data • Erasure: Request deletion of your data (right to be forgotten) • Portability: Receive your data in a structured format • Withdrawal of Consent: Stop receiving reminder emails • Objection: Object to certain processing activities To exercise these rights, contact us at info@zeity.me with your request. We will respond within 30 days.

9. Exercising Your GDPR Rights

Under GDPR, you have specific rights regarding your personal data. Here's how to exercise them: 🔍 Right of Access (Article 15) Request a copy of all your personal data in JSON format. Click "Request Data Export" in your account settings or send an email to support@zeity.me We will provide your data within 30 days. ✏️ Right to Rectification (Article 16) Correct or update your personal information. Edit your details anytime in your account settings. Changes are effective immediately. 🗑️ Right to Erasure / Right to be Forgotten (Article 17) Request permanent deletion of your personal data. Your personal information will be deleted after 7-day confirmation period. Some records may be kept for legal compliance (German tax law, dispute resolution). 📊 Right to Data Portability (Article 20) Receive your data in a structured, machine-readable format (JSON). Download your data export and import it into other services. ⛔ Right to Object (Article 21) Object to certain processing activities. Contact support@zeity.me to discuss your concerns. 🛑 Right to Restrict Processing (Article 18) Temporarily stop processing of your data while we resolve disputes. Contact support@zeity.me to request restrictions. ⚙️ Right to Withdraw Consent Withdraw consent for non-essential processing at any time. This does not affect the validity of processing before withdrawal. Automated Decision Making (Article 22) We do NOT use automated profiling or decision-making for users. All decisions affecting you involve human review. How to Exercise Your Rights • Dashboard: Use the "Your Data Rights" section in account settings • Email: Send requests to support@zeity.me with proof of identity • Response Time: 30 days (can be extended by 2 months for complex requests) • No Fee: Requests are free unless manifestly unfounded Data Protection Authority If you believe we have not handled your data appropriately, you have the right to lodge a complaint with your local data protection authority.

10. Data Security

Your data is protected by: • HTTPS encryption for all data in transit • Encrypted storage in Supabase's secure infrastructure • Access controls limited to authorized personnel only • Regular security audits and updates While we implement strong security measures, no method of transmission over the internet is 100% secure.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at: Email: info@zeity.me Address: 47805 Krefeld, Germany We take your privacy seriously and will respond to all inquiries promptly.

Privacy Policy