Privacy Policy

Last updated: 24/09/2026

1. Data Controller

• Owner: Zakaria Enzo Mouedden
• Tax ID (NIF/NIE): Y1105561B
• Address: Fuengirola, Málaga (Spain)
• Contact email: info@zem.marketing

Hereinafter, “the Controller,” “the Agency,” or “we.”

2. What data do we collect and for what purpose?

a) Contact form / quote request

When you fill out our form, we collect: name, email, phone number (if provided), and the content of your message or project details.

Purpose: to respond to your request, prepare quotes, and manage the pre-contractual relationship.

Legal basis: consent of the data subject (Art. 6.1.a GDPR) and, where applicable, pre-contractual measures requested by the data subject (Art. 6.1.b GDPR).

Retention: for the duration of the business relationship and, after it ends, for the legal limitation periods for liability.

b) Analytics cookies and Meta Pixel

We use Google Analytics and Meta Pixel to analyze website usage and to measure/optimize our advertising campaigns on Facebook and Instagram.

Purpose: usage statistics, remarketing, and personalized advertising.

Legal basis: user consent, obtained through our cookie settings panel.

See our [Cookie Policy] for details on specific cookies, duration, and providers.

c) Billing and client data

If you hire our services, we process the data necessary for the contractual relationship: identification, tax, and billing data (name/company name, Tax ID, address, bank details for payment).

Purpose: contract management, invoicing, and compliance with tax and commercial obligations.

Legal basis: performance of a contract (Art. 6.1.b GDPR) and compliance with legal obligations (Art. 6.1.c GDPR).

Retention: for the duration of the contract and, afterward, for the periods required by tax and commercial law (generally 6 years under the Spanish Commercial Code, extendable by 4–5 additional years under tax regulations).

3. Data processing on behalf of clients (data processor role)

As part of providing our digital marketing services, we may access third-party accounts and platforms belonging to our clients (for example, Google Ads, Meta Ads, Google Analytics, or other tools), where we may process personal data of our clients’ end users.

In these cases, the Agency acts as a data processor, and the client acts as the data controller, in accordance with Article 28 of the GDPR. This processing is governed by the client’s instructions and by the corresponding data processing agreement signed between both parties, not by this Privacy Policy, which governs exclusively the processing of data of visitors and users of the zem.marketing website.

4. Recipients and international transfers

• Hosting: [Hostinger]
• Google Analytics / Meta Pixel: Google LLC and Meta Platforms, Inc. may transfer data to servers outside the European Economic Area (USA), under the European Commission’s Standard Contractual Clauses and other safeguards provided by these providers.
• Accounting/tax advisory firm: where applicable, for compliance with accounting and tax obligations.

We do not share your data with third parties except where legally required or with providers strictly necessary to provide the service.

5. Your rights

As a data subject, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data (“right to be forgotten”)
• Restrict processing
• Object to processing
• Data portability

You can exercise these rights by emailing info@zem.marketing, indicating the right you wish to exercise and attaching a copy of a document proving your identity.

You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD) — www.aepd.es.

6. Minors

The services offered on this website are not directed at minors under 14 years of age. We do not knowingly collect personal data from minors of this age.

7. Third-party links

This website may contain links to external sites. This Policy does not cover the data processing that such third parties may carry out.

8. Withdrawal of consent

You may withdraw your consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal. For cookies, via the settings panel; for everything else, by emailing info@zem.marketing.

9. Automated decisions and profiling

We do not make automated decisions that produce significant legal effects. Meta Pixel carries out basic advertising profiling for audience segmentation purposes, which you can object to by rejecting advertising cookies.

10. Security measures

We apply reasonable technical and organizational measures to protect your data against unauthorized access, loss, or alteration.

11. Changes to this policy

We may update this Policy to adapt it to legislative changes or changes in our services.