Privacy Policy

Last updated: January 2026

Introduction

Protecting your personal data is important to us. This privacy policy explains what data we collect, how we use it, and what rights you have.

1. Controller

The controller under the GDPR is:
Khalid Hajou
Nobelstr. 3-5
41189 Mönchengladbach
Email: datenschutz@zulago.de

2. Data processing

2.1 Form-related processing

When you submit an application, we process the data you provide to review and handle the order. This includes in particular:

• Personal data (name, address, date of birth, contact details)
• Vehicle data (e.g. HSN/TSN, VIN, plate, type of registration)
• Bank details if required (e.g. IBAN for SEPA)
• Uploaded documents (e.g. ID, registration certificates)

The data is used to process your registration order, communicate with you, and carry out payment and signature processes.

2.2 Non-form processing

When you visit our website, technically necessary data is processed (e.g. IP address, timestamp, user agent, referrer, requested resources) to deliver the site and ensure system security.

2.3 Recipients and service providers

We only share data where necessary to fulfill the contract, for example with registration authorities, payment providers (e.g. Stripe), signature providers (e.g. YouSign), and our hosting and database infrastructure.

2.4 Retention period

We store your data only as long as required for processing or as required by statutory retention periods. After that, data is deleted or anonymized.

3. Legal basis

Processing is carried out in accordance with Art. 6(1) GDPR:

• Art. 6(1)(b) GDPR (contract performance)
• Art. 6(1)(c) GDPR (legal obligations)
• Art. 6(1)(f) GDPR (legitimate interests, e.g. security)
• Art. 6(1)(a) GDPR (consent, where given)

4. Your rights

You have the right to access, rectification, deletion, restriction of processing, objection, and data portability. You can also withdraw any consent at any time. Please send requests to datenschutz@zulago.de.

5. Security measures

We use technical and organizational measures to protect your data, e.g. TLS encryption, access restrictions, role-based permissions, logging, and regular backups.

6. Hosting

This website is hosted on Vercel. Database and storage are provided by Supabase (EU region). Processing is based on data processing agreements.

Payment options

Shipping