Privacy Policy
Version: 26 July 2026
1. Controller
The controller responsible for processing personal data on this website is:
BlueGreen Automation Limited, trading as ZEB Automation
Kandoy House
2 Fairview Strand
Dublin 3, D03 Y1E2
Ireland
Director: Jörg-Peter Zimmermann
Phone: +49 (0)30 621 26 67
Email: info@zeb-automation.de
2. German branch
BlueGreen Automation Limited
Obentrautstr. 35
10963 Berlin
Germany
Email: info@bluegreen24.de
Commercial register: Local Court (Amtsgericht) Charlottenburg, HRB 212052 B
Data subjects may contact BlueGreen Automation Limited using the details above with questions about the processing of their personal data or to exercise their rights.
3. Website access and hosting
When you access the website, technically necessary connection data is processed. This may include the IP address, date and time of access, requested URL, referrer URL, browser and operating-system information, device information, and status and error data. Processing is necessary to deliver the website, ensure its security and stability, and prevent misuse.
The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure and reliable operation of the website. Security and access logs are deleted when no longer required for these purposes, unless longer retention is necessary to investigate a security incident or comply with a legal obligation.
The website is provided through Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA (“Vercel”). Vercel processes data required for hosting, content delivery and security functions as a processor. Processing may take place in the United States and through subprocessors in other countries. Vercel relies in particular on the EU-US Data Privacy Framework and, where required, the European Commission’s Standard Contractual Clauses. Further information: Vercel Privacy Notice.
4. Vercel Web Analytics
We use Vercel Web Analytics to understand use of the website in aggregate and to improve its content and technical operation. The data processed may include a timestamp, requested page, referrer, shortened or filtered query parameters, approximate region, browser, operating system and device type.
According to Vercel, Vercel Web Analytics does not use cookies. Visitors are not permanently tracked across websites. An identifier generated from the connection request is discarded after 24 hours, and ZEB receives aggregate reports only.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are audience measurement and the user-oriented and technical improvement of the website. The recipient is Vercel; the information about international transfers in section 3 applies.
5. Shopping cart in your browser
The contents of the shopping cart are stored in your browser’s local storage (localStorage) under the key cart. Product information, prices and quantities are stored, but not the contact or address details entered during checkout. This storage allows the cart to be restored when you return to the website.
The legal basis for accessing local storage is section 25(2)(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Subsequent processing is based on Article 6(1)(b) GDPR or, for a contact person acting for a company, Article 6(1)(f) GDPR. Our legitimate interest is providing the cart function requested by the user. The application deletes the cart after a successful order. You can also remove it at any time through the cart function or by deleting website data in your browser.
6. Orders
When an order is placed, we process in particular:
- email address;
- company and the contact person’s first and last name;
- delivery address and, where applicable, a different billing address;
- VAT identification number;
- ordered products, quantities, prices, taxes and shipping costs;
- selected payment method; and
- voluntary order notes.
We process this data to review, accept and perform the order, communicate with the customer, deliver goods, issue invoices, process payments, and handle warranty and other contractual claims. The legal bases are Article 6(1)(b) GDPR where the data subject is a party to the contract and otherwise Article 6(1)(f) GDPR. Our legitimate interest is initiating and performing the contract with the company for which the contact person acts. Processing required by law, particularly tax and commercial retention, is based on Article 6(1)(c) GDPR.
Required details are identified in the form. Without them, we cannot review or perform the order. Voluntary order notes should not contain special categories of personal data within the meaning of Article 9 GDPR.
Order data is disclosed to shipping and logistics providers used for delivery and, where necessary, to banks, payment providers, tax and legal advisers, and public authorities. Recipients receive only the data required for their task.
Commercial and business correspondence is generally retained for six years and invoices and accounting records for eight years, in each case from the end of the relevant calendar year. Data needed to establish, exercise or defend claims may be retained until the applicable limitation period expires. It is then deleted or anonymised unless a further legal obligation applies.
7. VAT identification number validation
When a VAT identification number is supplied, we transmit the number and associated country code to the European Commission’s VAT Information Exchange System (VIES) to validate it. Validation is used to determine the correct tax treatment of an intra-Community supply.
The legal bases are Article 6(1)(b) and (c) GDPR. The validation result is retained with the order and tax records for the periods stated in section 6. Further information: European Commission privacy statement.
8. Contacting us
When you contact us through the form or by email, we process the information you provide. For the contact form, this includes in particular first name, last name, company, email address, subject and message. We use the data only to respond to the enquiry and communicate with you.
Where an enquiry concerns a contract with the data subject, the legal basis is Article 6(1)(b) GDPR. For company representatives and other enquiries, processing is based on Article 6(1)(f) GDPR; our legitimate interest is the proper handling of business enquiries. Article 6(1)(c) GDPR also applies where retention is required by law.
Enquiries are deleted after they have been fully dealt with where there is no statutory retention duty or overriding reason for further storage. Correspondence relevant to a contract or business transaction may be retained for the periods stated in section 6.
9. Email delivery
Order acknowledgements and contact enquiries are sent through the Exclusive Hosting email service. The service is operated by LiquidNet Ltd., 13 Craigleith, 7 Kersfield Road, Putney, London SW15 3HN, United Kingdom, and LiquidNet US LLC, 6750 North Andrews Ave, Suite 200, Fort Lauderdale, FL 33309, USA. Sender and recipient addresses, message content, sending time and technical delivery data are processed.
Processing is necessary to handle orders and enquiries and is based on the applicable legal bases stated in sections 6 and 8. According to the provider, the European Commission’s Standard Contractual Clauses are used for transfers to the United States. Further information: Exclusive Hosting Privacy Policy.
10. Recipients and international transfers
In addition to the recipients expressly identified above, data may be disclosed to IT and hosting providers, shipping companies, banks, payment providers, professional advisers and public authorities where necessary for the stated purposes or required by law.
For transfers outside the European Economic Area or the United Kingdom, we use an adequacy decision, Standard Contractual Clauses or another legally recognised safeguard where required. Information about the applicable safeguards may be requested using the contact details in section 1.
11. Data-subject rights
Subject to the applicable legal requirements, data subjects have in particular the right to:
- obtain access to their personal data (Article 15 GDPR);
- have inaccurate data rectified and incomplete data completed (Article 16 GDPR);
- request erasure of their data (Article 17 GDPR);
- obtain restriction of processing (Article 18 GDPR);
- receive or have transmitted data they provided in a structured, commonly used and machine-readable format (Article 20 GDPR);
- object, on grounds relating to their particular situation, to processing based on Article 6(1)(e) or (f) GDPR (Article 21 GDPR); and
- withdraw consent at any time with future effect (Article 7(3) GDPR).
To exercise your rights, contact BlueGreen Automation Limited using the details above.
You also have the right to lodge a complaint with a data-protection supervisory authority. In particular, you may contact the authority for your habitual residence, place of work or the place of the alleged infringement. The following authority can be contacted in relation to the German branch:
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Germany
www.datenschutz-berlin.de
12. Automated decisions
We do not carry out solely automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.
13. Updates to this Privacy Policy
We update this Privacy Policy when our processing activities or applicable law change. The current version is available on this website.