Data Controller & Legal Framework
This document governs the processing of personal data carried out by ZINIT Estudio (hereinafter «ZINIT» or «the Studio»), with operational legal address in the city of Rosario, Province of Santa Fe, Argentine Republic, through its official domain zinit.com.ar and linked subdomains.
Our operations strictly adhere to Argentine National Law 25.326 on Personal Data Protection, Regulatory Decree 1558/2001, and leading international standards, including the European Union General Data Protection Regulation (GDPR 2016/679) for international clients and partners.
Engineering & Privacy Principles
In alignment with our "Quiet Luxury & Technical Precision" philosophy, we govern data under five inviolable axioms:
We collect only the information strictly required to quote, build, and maintain digital architectures. We store no superfluous metadata.
We never sell, rent, broker, or trade personal data or customer records with ad networks or third-party data brokers.
Our software architectures implement strict security headers (CSP, HSTS, X-Frame-Options) to shield every visitor from the initial handshake.
You hold absolute ownership over your records in our systems, with single-click unsubscription or full data export on request.
Categories of Processed Data
Depending on your interaction with our platform, we categorize data across three distinct levels:
A · Contact & Commercial Requests
Corporate name, business email, contact phone / WhatsApp, existing website URL, estimated budget, and brief specifications submitted through our forms or Waitlist.
B · Web Diagnostic Wizard Telemetry
Audited domain URL, public Core Web Vitals scores (LCP, INP, CLS), detected tech stack, and survey responses provided across the interactive ZINIT Diagnostic Wizard.
C · Technical Telemetry & Browser Ergonomics
Visual theme preference (dark/light), language preference (ES/EN), and anonymous rendering performance metrics (WebGL/Three.js) to guarantee 60fps frame stability.
Purposes & Legal Grounds
The processing of your personal data is conducted strictly under the following legitimate grounds:
- 1.Contractual & Pre-contractual Execution: Drafting formal bespoke proposals (V4 Engine), scheduling engineering sprints, conducting technical architecture reviews, and processing billing.
- 2.Explicit & Informed Consent: Sending our weekly editorial "Zinit Insights" and automated diagnostic audits via email.
- 3.Legitimate Technical Interest: Preventing malicious intrusions, mitigating scraping bots, and verifying frontend uptime through telemetry.
Security Standards & Encryption
ZINIT implements banking-grade cybersecurity protocols to prevent unauthorized access or accidental disclosures:
All web traffic is fortified with TLS 1.3 cipher suites featuring Perfect Forward Secrecy. Cloud data stores and cold backups leverage AES-256 symmetric encryption with automated key rotation.
Third-Party Processors & Transfers
To ensure high-availability edge delivery, we partner with industry-leading sub-processors certified under Standard Contractual Clauses (SCC) and SOC 2 Type II / ISO 27001:
| Proveedor | Función | Ubicación | Garantía |
|---|---|---|---|
| Vercel Inc. | Edge Hosting & Serverless Compute | Estados Unidos / Global Edge | SOC 2 Type II / SCC |
| Google Cloud / Workspace | Bases de datos relacionales & Webhooks | EE.UU. / UE | ISO 27001 / GDPR |
| Supabase Inc. | PostgreSQL Cloud Database | EE.UU. (AWS eu-central / us-east) | SOC 2 / HIPAA ready |
Vercel Inc.
SOC 2 Type IIFUNCIÓN: Edge Hosting & Serverless Compute
UBICACIÓN: Estados Unidos / Global Edge
Google Cloud / Workspace
ISO 27001 / GDPRFUNCIÓN: Bases de datos relacionales & Webhooks
UBICACIÓN: EE.UU. / Unión Europea
Supabase Inc.
SOC 2 / HIPAAFUNCIÓN: PostgreSQL Cloud Database
UBICACIÓN: EE.UU. (AWS eu-central / us-east)
Retention Periods & Safe Purge
Data is maintained only for the duration strictly necessary to fulfill the intended purpose:
- Waitlist leads & uncompleted quotes: Maximum 12 months from last interaction.
- Active clients & delivered projects: Duration of service agreement plus 5 years mandated by tax law.
- Newsletter subscribers: Until voluntary unsubscribe (instant single-click).
Your Data Rights (Access & Erasure)
In accordance with Articles 14–16 of Law 25.326 and Articles 15–22 of the GDPR, you hold the right to freely exercise:
To submit any formal request, email our compliance desk or trigger the pre-filled request generator:
Privacy Officer & Contact Channels
The Agency for Access to Public Information, as the Enforcement Organ of Argentine Law 25.326, possesses the authority to handle complaints regarding the enforcement of personal data protection.
MESA DE PRIVACIDAD & CUMPLIMIENTO ZINIT
ZINIT Estudio
Rosario, Santa Fe · República Argentina
Email Directo: estudio@zinit.com.ar
ZINIT Transparency Commitment
All terms, engineering covenants, and specifications detailed herein reflect our actual software operations. Engaging our studio implies mutual acceptance of these terms, formulated to ensure certainty and technical precision.