Privacy Policy

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Point Zero GmbH Speditionstr. 15A 40221 Düsseldorf Germany

Email: info@pointzero.tech
Phone: +49 162 7555786

Further information can be found in our Legal Notice.

We have not appointed a data protection officer because the statutory requirements for such an appointment do not apply.

For questions concerning data protection, please contact us at info@pointzero.tech.

This website is hosted by:

Vercel Inc. 440 N Barranca Avenue #4133 Covina, CA 91723 United States

When you access the website, Vercel processes the technical data transmitted by your browser or device. This may include:

• your IP address,
• the date and time of the request,
• the page or file requested,
• the HTTP status code and amount of data transferred,
• the referring URL, where transmitted,
• browser type, browser version, operating system and device type,
• technical request, diagnostic and security information.

This processing is necessary to deliver the website, maintain its stability and security, and identify and investigate technical faults and attacks.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, reliable and efficient operation of our website.

The Vercel Data Processing Addendum (opens in new tab) forms part of the agreement and applies where Vercel acts as our processor. To the extent that Vercel processes certain service-generated data as an independent controller, such processing is governed by the Vercel Privacy Notice (opens in new tab). Vercel processes and retains service-generated data such as runtime logs in accordance with its applicable contractual terms and privacy notice.

We use Vercel Web Analytics to understand, in aggregated form, how our website is used, which pages are visited and which technical environments visitors use to access the website.

The following data points may be processed:

• time of the page view,
• page, URL or route visited,
• filtered URL parameters,
• referrer,
• approximate location derived from the IP address,
• browser and browser version,
• operating system and version,
• device type,
• version of the analytics script.

Vercel Web Analytics does not use cookies and does not store persistent visitor identifiers in your browser. Visits are distinguished using a server-side hash generated from the incoming request. The hash is valid for one day only, cannot be used to recognize visitors across different websites or days, and is discarded after 24 hours. The IP address is not stored together with the analytics data. We only receive aggregated statistics.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in understanding the use of our website and improving its content, navigation and technical quality. We do not use analytics data for advertising, individual user profiles or automated decision-making.

Further information is available in the Vercel Web Analytics privacy documentation (opens in new tab).

The early-access section of this website offers a waitlist form. The form is not part of our website: it is provided by an external form service and embedded from that provider’s servers.

The form is only loaded when you actively click the “Load the early-access form” button. Until you do, no connection to the form provider is established and no data is transmitted to it. If you never click the button, no data whatsoever is sent to the form provider.

The provider of the form is:

Tally BV August Van Lokerenstraat 71 9050 Ghent Belgium

When you load the form, your browser establishes a connection to Tally and transmits the technical data required for that connection, including your IP address, browser type and version, operating system and device type. Loading and displaying the form necessarily requires this connection. In doing so, Tally also contacts its own service providers, including an error-monitoring service (Sentry) hosted in the United States, which receives the connection data described above.

If you submit the form, we process the information you enter:

• your email address (required),
• the type of work you deliver (required; a multiple-choice answer that may include free text if you select “Other”),
• your answer to the optional question about the hardest part of client handoffs (free text).

We process this data in order to:

• manage your registration for early access to Clientwrap,
• evaluate interest in Clientwrap and how it should be built,
• contact you about Clientwrap and about the start of early access.

The legal basis for processing your registration and contacting you about it is Article 6(1)(b) GDPR, as the processing is carried out at your request prior to entering into a contract. Insofar as we evaluate the responses in aggregate to assess demand and shape the product, the legal basis is Article 6(1)(f) GDPR; our legitimate interest lies in determining whether and how to build Clientwrap. Providing the data is voluntary; without an email address, however, we cannot place you on the waitlist or notify you.

Once the form has been loaded, Tally stores two entries in your browser’s local storage. They are set under Tally’s own domain (tally.so), not under our website, and Tally sets no cookies:

• FORM_SESSION_lbYdzB — an identifier for your current form session, so that your entries are not lost while you are filling the form in.
• RESPONDENT — an identifier that allows Tally to recognize you as the respondent of a form belonging to our Tally workspace.

These entries are set only after you have loaded the form, they remain until you clear your browser storage, and they serve a purely functional purpose: they are required to display and operate the form you have expressly requested. Storing and accessing them is therefore permitted under § 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG) without consent. They are not used for analytics, advertising or tracking. You can delete them at any time through your browser settings.

Tally acts as our processor for the responses submitted through the form. Response data is encrypted in transit and at rest and is stored within the European Union. We have not enabled any Tally feature that would transmit response data outside the European Union. Further information is available in the Tally Privacy Notice (opens in new tab) and in Tally’s information on the GDPR and its Data Processing Agreement (opens in new tab), which also lists Tally’s subprocessors.

You can also complete the form directly on Tally’s website instead of loading it here. In that case, your use of Tally’s website is governed by Tally’s own privacy notice.

This website does not provide a contact form. Our Legal Notice lists our email address and phone number. If you write to us, your message reaches us through your own email application and email provider; the website itself does not collect, transmit or store any message data.

We use Google Workspace to receive and process business emails. The provider responsible under our agreement is:

Google Cloud EMEA Limited 70 Sir John Rogerson's Quay Dublin 2 Ireland

If you contact us by email, the data processed may include your name, email address, message content, attachments and technical sending and delivery information. Google processes this data as a processor within Google Workspace. The Google Cloud Data Processing Addendum (opens in new tab) forms part of the agreement.

Where your enquiry relates to entering into or performing a contract, the legal basis is Article 6(1)(b) GDPR. For other enquiries, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in handling and responding to enquiries. If you contact us by phone, we process the information you provide and, where available, your phone number and the time of the call for the same purposes and on the same legal bases.

This website uses the Inter and Geist typefaces. The font files are bundled with the website when it is built and are delivered from our own domain together with the rest of the page.

Loading the fonts does not establish a connection to Google Fonts or any other external font provider.

This website does not use cookies. It stores no information in your browser’s local storage or session storage, and it does not use tracking pixels, fingerprinting, heat maps or advertising technologies. We do not embed social media plugins.

The only third-party content on this website is the waitlist form described in section 5. It is loaded exclusively after you click to load it, and no third-party connection is established before that. If you do not load the form, no data is stored on your device at all.

The functional entries that Tally stores under its own domain once you have loaded the form are listed in section 5. They are strictly necessary to provide the form you expressly requested.

Because we neither store nor access any non-essential information on your device, we do not ask you for consent and do not display a cookie banner.

Where necessary, personal data may be disclosed to the following recipients or categories of recipients:

• Vercel Inc. for hosting, technical delivery and web analytics,
• Tally BV and its subprocessors for the early-access waitlist form, if you choose to load and submit it,
• Google Cloud EMEA Limited and Google’s subprocessors for email communications,
• persons within our company who need access to handle the relevant matter,
• public authorities, courts, legal advisers, tax advisers or other bodies where disclosure is required by law or necessary to establish, exercise or defend legal claims.

We do not sell or rent personal data.

Vercel is based in the United States. Personal data may therefore be processed in the United States and in other countries in which Vercel or its subprocessors operate. Vercel is certified under the EU–US Data Privacy Framework. Where required, transfers are additionally protected by the European Commission’s Standard Contractual Clauses and the supplementary safeguards contained in the Vercel Data Processing Addendum (opens in new tab).

In connection with Google Workspace, data may also be processed by Google entities or subprocessors outside the European Economic Area. Such transfers are governed by the Google Cloud Data Processing Addendum (opens in new tab) and are based, as applicable, on an adequacy decision, applicable Standard Contractual Clauses or another legally recognized transfer mechanism.

Tally is based in Belgium and stores waitlist responses within the European Union. We have not enabled any Tally feature that would transfer response data to a third country. However, if you load the form, Tally transmits connection data to service providers of its own, including an error-monitoring service in the United States. This processing is carried out by Tally on the basis of its own agreements with those providers; details and the applicable safeguards are set out in the Tally Privacy Notice (opens in new tab)and in Tally’s subprocessor list (opens in new tab).

We retain personal data only for as long as necessary for the relevant purpose or as required by statutory retention obligations. The following criteria apply in particular:

• Server logs and other service-generated data are retained by Vercel in accordance with its applicable terms and configuration.
• The hash generated by Vercel Web Analytics to distinguish daily visitors is discarded after 24 hours.
• Waitlist registrations are retained only for as long as necessary to manage the Clientwrap early-access programme. If the project is discontinued or permanently abandoned, we delete the waitlist data within a reasonable period, unless legal retention obligations require otherwise. We also delete your registration earlier if you ask us to.
• Once a response is deleted, Tally permanently removes it from its backups within 90 days.
• Data from general enquiries is deleted once the enquiry has been fully handled and no further retention is necessary.
• Contractual or business-relevant communications may be retained for six, eight or ten years in accordance with applicable German commercial and tax-law requirements, depending on the nature and content of the records.

Statutory retention obligations remain unaffected.

Where the applicable statutory conditions are met, you have the following rights:

• right of access under Article 15 GDPR,
• right to rectification under Article 16 GDPR,
• right to erasure under Article 17 GDPR,
• right to restriction of processing under Article 18 GDPR,
• right to data portability under Article 20 GDPR,
• right to object to processing based on Article 6(1)(f) GDPR under Article 21 GDPR.

To exercise your rights, contact us at info@pointzero.tech. In particular, you can ask us at any time to remove you from the waitlist and delete your registration.

Under Article 77 GDPR, you also have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen Kavalleriestraße 2–4 40213 Düsseldorf Germany

Further information is available on the LDI NRW website (opens in new tab).

We do not use automated decision-making or profiling within the meaning of Article 22 GDPR on this website.

You are under no statutory or contractual obligation to provide personal data through this website.

However, certain technical data must be transmitted in order to deliver the website to your device. If you wish to join the early-access waitlist, we require your email address in order to notify you.

We update this Privacy Policy when changes to the website, the services used or the applicable legal requirements make this necessary.

The version currently published on this website applies. The date of the current version is shown at the beginning of this Privacy Policy.