Zimun Zimun: Appointment Scheduling & Booking Service
Conçu pour Solutions Tarifs Docs Contact
Connexion

Information for contacted businesses

We approached you in person and handed you a short printed notice. This page is the detailed version referred to there: what we processed, why, for how long — and your rights (Art. 14 GDPR).

Translation. This page is provided for convenience only. The German version is the sole legally binding original: Informationen für kontaktierte Unternehmen (Deutsch).

Last updated: 2026-08-31

1. Who we are (controller)

Zimun Labs UG (haftungsbeschränkt)
Buchenteich 3
73773 Aichwald, Germany
Commercial register B of the local court (Amtsgericht) of Stuttgart, HRB 806662
Managing director: Svetlana Ponomarenko
Phone: +49 176 63030716 · Email: info@zimun.online

No data protection officer has been appointed (the threshold of § 38 BDSG is not met); the managing director is the contact person.

2. What this is about

Zimun is an appointment-booking platform. Before we approach a business in person, we internally prepare a non-binding draft — with the business's name, address, opening hours and service catalogue — so that in the conversation we can show a concrete result instead of an empty system. The draft is not public: no booking page is reachable, no appointments can be booked, and nothing appears in search engines. The draft only goes online if you take it over with your own account, review every entry — in particular every price — and explicitly activate it.

3. What data we process and where it comes from (Art. 14(2)(f) GDPR)

We process business-related catalogue and master data only: business name, address, opening hours, and services with duration and — where published — price. No reviews, no texts about persons, no photos. The data comes from publicly accessible sources, depending on the business:

  • your own website or your link page (e.g. Linktree),
  • your public profile on an industry or booking platform,
  • your public social media profile (viewed manually only),
  • your public business listing on Google (Google Places) — retrieved transiently only.

The concrete sources for your business are listed with their retrieval date on the printed notice we handed to you. You can also request them at any time at info@zimun.online.

4. Purpose and legal basis

The sole purpose of the processing is preparing and presenting the draft for your business. The legal basis is Art. 6(1)(f) GDPR — our legitimate interest in being able to show you a concrete, reviewed proposal. If you ask us in the conversation for the sign-up link (the email line on the printed notice), further processing rests on your request: Art. 6(1)(b) GDPR (pre-contractual measure). The consent given there covers only the email(s) for setting up your access — no newsletter — and can be withdrawn at any time.

5. Recipients

  • Anthropic (Claude): a processor of Zimun (Art. 28 GDPR), exclusively for the internal tool that turns the retrieved public details into structured catalogue data. The retrieved source is discarded after extraction. Where data is transferred to the USA in the process, this takes place on the basis of the data processing agreement together with the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) or an adequacy decision (EU-U.S. Data Privacy Framework, Art. 45 GDPR).
  • Google (Google Places): listing details (e.g. opening hours) are retrieved transiently only and not stored permanently; at most the listing identifier (Place ID) is kept.
  • Google Cloud (hosting): storage of the draft in the EU (Frankfurt am Main region), as a processor of Zimun.

There are no other recipients; data is not sold or shared for advertising purposes.

6. Storage periods

  • 30 days: if the notice is not handed over (in person or by letter) within 30 days of the first data collection, we delete the draft and the record automatically.
  • 60 days: after the conversation we keep the draft available for your decision for at most 60 days. If you do not take it over, it is deleted automatically.
  • On decline: immediately. If you decline in the conversation, we delete the draft and the record without delay. We then keep at most a minimal suppression note (email address, date and reason only), whose sole purpose is that we do not approach you again.
  • After take-over: if you take the draft over, the ordinary contract documents apply from that point — the privacy policy, the terms and conditions and the data processing agreement.

7. Your rights

You have the following rights against Zimun:

  • access (Art. 15 GDPR),
  • rectification (Art. 16 GDPR),
  • erasure (Art. 17 GDPR),
  • restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR).

An informal message to info@zimun.online is sufficient to exercise them.

Right to object (Art. 21 GDPR): you may object at any time, on grounds relating to your particular situation, to the processing of your data. An informal "please delete" is enough — in person, by phone, or by email to info@zimun.online. We will then delete the draft and your record without delay; at most the suppression note described in section 6 remains.

Right to complain (Art. 77 GDPR): you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for Zimun is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI Baden-Württemberg), Stuttgart, www.baden-wuerttemberg.datenschutz.de. You may also contact the supervisory authority of your habitual residence.

8. No obligation, no automated decision-making

You are not obliged to provide data or to act — if you do nothing, the draft is deleted automatically under the periods in section 6. No automated decision-making including profiling (Art. 22 GDPR) takes place.

The German version of this page governs; versions in other languages are non-binding translations provided for convenience.