GDPR Compliance
Last updated: June 2026
ZeroGravity is committed to processing personal data in accordance with the General Data Protection Regulation (GDPR) and applicable national data protection laws. This page explains our approach to GDPR compliance and your rights as a data subject.
Who we are (Data Controller)
ZeroGravity acts as the Data Controller for personal data collected through zegravity.com. As controller, we determine the purposes and means of processing your personal data and are responsible for ensuring it is handled lawfully.
Lawful basis for processing
We process your personal data under the following lawful bases: • Contract: Processing necessary to provide our services to you. • Legitimate interests: Analytics and platform security improvements, balanced against your privacy rights. • Consent: Marketing communications (you may withdraw consent at any time). • Legal obligation: Compliance with applicable laws and regulations.
International data transfers
Where we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or we transfer to countries with an adequacy decision.
Data retention
We retain personal data only as long as necessary for the purposes set out in our Privacy Policy or as required by law. Account data is deleted within 90 days of account closure. Anonymised analytics data may be retained indefinitely.
Data breach notification
In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware. Where required, we will also notify you directly without undue delay.
Supervisory authority
If you are unsatisfied with our handling of your personal data, you have the right to lodge a complaint with your local data protection supervisory authority.
Your rights under GDPR
Right of access
You can request a copy of all personal data we hold about you.
Right to rectification
You can ask us to correct inaccurate or incomplete data.
Right to erasure
You can request deletion of your personal data ("right to be forgotten").
Right to restriction
You can ask us to pause processing of your data in certain circumstances.
Right to data portability
You can request your data in a structured, machine-readable format.
Right to object
You can object to processing based on legitimate interests or for direct marketing.
Rights related to automated decisions
You have the right not to be subject to solely automated decision-making that significantly affects you.
Exercise your rights
To exercise any of your GDPR rights, contact us at hello@zegravity.com. We will respond within 30 days. We may need to verify your identity before processing your request.
Submit a request