Privacy Policy

1. Data Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Kevin Guggermaier
Murecker Straße 27/3
8472 Straß in Steiermark
Austria
info@zoomy.at

You can find further details about the operator in the Imprint.

2. General Information on Data Processing

We only process personal data to the extent necessary and, depending on the case, rely on the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), a legitimate interest (Art. 6(1)(f) GDPR), or consent you have given (Art. 6(1)(a) GDPR). Your data is deleted as soon as the respective processing purpose no longer applies and no statutory retention obligations prevent this.

3. Registration and User Account

A user account is required to use certain features (e.g. creating a business listing). In doing so, we process your email address, your password (stored only in encrypted/hashed form), and, where applicable, your name. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). This data is deleted as soon as you delete your account.

4. Business Listings

If you create a listing for your business, we process the information you provide - including business name, description, contact details (email, phone, website, social media links), address, opening hours, and uploaded images. This information is displayed publicly on the platform, as ZOOMY serves as a directory. The legal basis is the performance of a contract (Art. 6(1)(b) GDPR).

5. Maps and Location Lookup (OpenStreetMap)

For maps and for converting addresses into coordinates (geocoding) we use services of the OpenStreetMap Foundation (OSMF):

• Map on business pages: the map is loaded directly from openstreetmap.org. For technical reasons, your IP address and browser information are transmitted to the OSMF servers.
• Address and place search: when you enter a business address or search for a place or postcode on the search page, your browser calls the Nominatim interface directly. The address or search term you entered and your IP address are transmitted.
• Assignment to a municipality: to assign businesses to the right municipality, our server transmits the coordinates of the business address to Nominatim. No data about you is transmitted.

Further information: OpenStreetMap Foundation Privacy Policy.

6. Hosting and Cookies

User accounts, business data, and images are stored and managed via Supabase (Supabase Inc.). The database is hosted within the EU (Ireland region, eu-west-1). A data processing agreement is in place with Supabase.

The website itself is hosted by Website hosting provider .

We use a purely technically necessary cookie to store your language preference (German/English). This cookie is required for the operation of the website and does not require separate consent pursuant to § 165(3) of the Austrian Telecommunications Act (TKG 2021). We currently do not use any analytics, tracking, or marketing cookies.

7. Your Rights

Within the scope of the statutory requirements, you have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection to processing (Art. 21 GDPR). To exercise these rights, an informal message to the email address given above is sufficient.

You also have the right to lodge a complaint with the Austrian data protection authority:
Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, Austria, www.dsb.gv.at.