In short: This website uses no cookies, no tracking, no analytics and no third-party content. Access to the live test system is requested by e-mail only. Your request is processed with data minimisation in mind and is deleted automatically once the 24-hour access window has expired — no further action on your part is required. You can withdraw your request at any time by e-mail to security@zeusxtrust.com; it will then be deleted without delay. Beyond this, we collect and process no further data whatsoever.
Scope
This privacy policy applies to the website live.zeusxtrust.com (ZEUS X-Trust X1 live test access), including the sign-in page at /access/. The main site www.zeusxtrust.com is governed by the privacy policy published there.
1. Privacy at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website or request test access. Personal data is any data with which you can be personally identified. Detailed information is set out in the sections below.
Who is responsible for data processing on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the section “Information on the Responsible Party” in this privacy policy.
How do we collect your data?
On the one hand, your data is collected because you provide it to us — here exclusively through the e-mail with which you request test access. On the other hand, when the website is accessed, technical data (e.g. internet browser, operating system or time of page access) is generated at the hosting provider. The website itself does not collect any data from you.
What do we use your data for?
The technical data serves solely to ensure error-free provision of the website. No analysis of your user behaviour takes place. The data from your access request is processed exclusively to issue and support your personal test access.
What rights do you have regarding your data?
You have the right at any time to receive information free of charge about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. Furthermore, you have the right, under certain circumstances, to request the restriction of the processing of your personal data. In addition, you have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time regarding this and any other questions on the subject of data protection.
2. Access Request by E-mail
By e-mail only
Access to the live test system is granted only on personal request by e-mail to contact@zeusxtrust.com. There is no contact form, no self-service registration and no waiting list. No data is collected from you on this website itself.
Which data we process
Only what you tell us in your e-mail yourself: your e-mail address, your name or organisation where given, and the content of your message. We do not request any further details and do not enrich your request with data from other sources.
Purpose and legal basis
Processing serves solely to review your request, to issue your personal access code and password, and to communicate with you about your test session. The legal basis is Art. 6 para. 1 lit. b GDPR (implementation of pre-contractual measures at your request) and Art. 6 para. 1 lit. f GDPR (legitimate interest in handling enquiries addressed to us).
Data-minimised processing
Your request is handled with data minimisation in mind: only for as long, and only to the extent, required to issue and support your test access. There is no transfer to third parties, no use for advertising purposes, no profiling and no use as training data.
Automatic deletion after the 24 hours have expired
Once the 24-hour access window has expired, your request — including the associated correspondence and your access credentials — is deleted automatically, without any further action on your part being required. If no access is issued, or issued access is not used, the request is likewise deleted without further prompting. No archiving takes place.
Withdrawing your request
You can withdraw your request at any time and without giving reasons. An informal e-mail to security@zeusxtrust.com is sufficient. Your request and all data connected with it will then be deleted without delay; any test access already issued is revoked at the same time.
No further data collection
Beyond handling your request, we collect and process no further data about you whatsoever.
3. Test Access and Test Session
For the test session itself, the information in the short brief “Data, retention & privacy — GDPR notice” (Brief 02, available for download on the start page) applies. In summary:
- Access code and password are issued personally, stored only as a hash and shown in clear text exactly once.
- A second factor (authenticator app via QR code) is optional and your decision at first sign-in.
- The seat is bound to the IP address of your first sign-in. This prevents the access from being passed on; the address serves this purpose alone.
- No test content is stored during the session; sessions run in memory only. Configuration, operational logs and file transfers are blocked for test accounts.
- Once the 24-hour window has expired, the access record is deleted — not archived.
The legal basis is Art. 6 para. 1 lit. b GDPR. Please use throwaway passwords and throwaway files only during the test — never real credentials or real documents.
4. Visiting This Website
No cookies, no tracking
This website sets no cookies. No analytics, tracking or advertising tools are used — no Google Analytics and no comparable tool. No recording or evaluation of your usage behaviour takes place.
Local settings in your browser
Your choice of language (German/English) and colour scheme (light/dark) is stored exclusively locally in your browser (web storage) so that it is retained on your next visit. This information never leaves your device, is not transmitted to us and contains no personal data. The storage is strictly necessary for the function you have requested (§ 25 para. 2 no. 2 TDDDG). You can delete it at any time via your browser’s site data settings.
No third-party content
This website embeds no third-party content — no external fonts, scripts, videos or maps. All graphics, scripts and documents are delivered from this website or from www.zeusxtrust.com (same responsible party).
Downloads and external links
When you download the PDF documents offered, no data beyond what is technically required for delivery is collected. Links to external services (e.g. Zenodo, trauth-research.com) lead to websites of other providers; their respective privacy notices apply there.
5. Hosting
We host the content of this website with the following provider:
IONOS
The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (hereinafter IONOS). When you visit our website, IONOS collects various log files including your IP addresses. The privacy policy of IONOS can be found at https://www.ionos.de/datenschutzerklaerung.
IONOS is used on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the most reliable presentation possible of our website.
Data Processing Agreement
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required by data protection law, which guarantees that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
6. General Information and Mandatory Information
Data Protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
We would like to point out that data transmission over the internet (e.g. when communicating by e-mail) may have security gaps. Complete protection of data against access by third parties is not possible.
Information on the Responsible Party
The party responsible for data processing on this website is:
Stefan Trauth
Mathildenstraße 1b
80336 Munich, Germany
Phone: +49 151 59080088
Email: contact@zeusxtrust.com
Privacy and security matters concerning test access: security@zeusxtrust.com
The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).
Storage Duration
Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, deletion will take place after these reasons no longer apply.
General Information on the Legal Basis for Data Processing on This Website
If you have consented to data processing, we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, insofar as special categories of data pursuant to Art. 9 para. 1 GDPR are processed. In the case of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49 para. 1 lit. a GDPR. Consent can be revoked at any time. If your data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. Furthermore, we process your data if it is required to fulfil a legal obligation, on the basis of Art. 6 para. 1 lit. c GDPR. Data processing may also be carried out on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Information on the relevant legal basis in each individual case is provided in the respective sections of this privacy policy.
Recipients of Personal Data
We do not pass on personal data from access requests to third parties. A transfer takes place only if we are legally obliged to do so (e.g. to authorities on the basis of a legal order). For hosting we use a processor with whom a valid data processing agreement is in place (see section “Hosting”).
Revocation of Your Consent to Data Processing
Insofar as data processing is based on your consent, you can revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)
If data processing is carried out on the basis of Art. 6 para. 1 lit. e or f GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defence of legal claims (objection pursuant to Art. 21 para. 1 GDPR).
If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is associated with such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21 para. 2 GDPR). We do not engage in direct marketing.
Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work, or place of the alleged violation. This right to complain exists without prejudice to any other administrative or judicial remedy.
The supervisory authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
Phone: +49 981 180093-0
Email: poststelle@lda.bayern.de
Web: www.lda.bayern.de
Right to Data Portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.
Information, Correction, and Deletion
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of data processing and, if applicable, a right to correction or deletion of this data. You can contact us at any time regarding this and other questions on the subject of personal data.
Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data. You can contact us at any time to do so. The right to restriction of processing exists in the following cases:
- If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
- If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
- If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
- If you have lodged an objection pursuant to Art. 21 para. 1 GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data may – apart from being stored – only be processed with your consent or for the assertion, exercise, or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of an important public interest of the European Union or a member state.
SSL / TLS Encryption
For security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
7. Notice on the Use of Neural Networks and AI Systems
This website and all of its content were created with AI systems, including ChatGPT (OpenAI), Claude Opus and Claude Fable (Anthropic) and other third-party providers; research, validation and further development rest exclusively with Stefan Trauth (details in the Imprint).
All inquiries are processed using neural networks — both local and cloud-based models. Personal data is always anonymized before any processing. Your data is never used for training purposes. Data is stored only in justified exceptional cases, in consultation with you, and in accordance with the GDPR.
Neural networks are the core of our product and the way we work. We are therefore unable to process inquiries without their use — doing so would be compatible neither with our product nor with our processes. If you object to such processing, we respectfully refrain from further contact; such emails will be deleted in full within 24 hours without further processing.
Last updated: 1 September 2026