Data Protection
GDPR Compliance
Information about your rights under the General Data Protection Regulation (GDPR)
Last updated: December 2025
About GDPR Compliance
Zullu is committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation (GDPR). This page provides information about your rights and how we handle your personal data.
The GDPR is the European Union's comprehensive data protection law that applies to the processing of personal data of individuals residing in the EU, and to organizations processing such data regardless of where they are located.
Your Rights Under GDPR
You have the following rights regarding your personal data
Right of Access
You have the right to obtain confirmation as to whether your personal data is being processed and to request access to such data.
Right to Rectification
You have the right to correct inaccurate or incomplete personal data. We will update your information promptly upon request.
Right to Erasure
Under certain circumstances, you have the right to request the deletion of your personal data (the "right to be forgotten").
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object
You have the right to object to the processing of your personal data, including for direct marketing purposes.
Right to Restrict Processing
You have the right to restrict processing of your personal data while we verify its accuracy or assess your objection.
How to Request Access to Your Data
To request access to your personal data, please submit a written request to our Data Protection Officer with the following information:
- •Your full name and email address
- •A clear description of the personal data you wish to access
- •Proof of your identity (copy of ID or passport)
- •Any other relevant information to help us locate your records
What Happens Next
Upon receiving your request, we will:
- 1.Verify your identity to protect your privacy
- 2.Search for the personal data you've requested
- 3.Prepare the data in a clear and accessible format
- 4.Provide the information within 30 days of your request
In exceptional cases, we may extend the response period by two additional months if your request is complex.
Our Data Processing Principles
Zullu processes personal data in accordance with the following GDPR principles
Lawfulness, Fairness, and Transparency
We process data lawfully, fairly, and transparently with your knowledge and consent.
Purpose Limitation
We collect data for specified, explicit, and legitimate purposes only.
Data Minimization
We collect only the data necessary for our stated purposes.
Accuracy
We maintain accurate and up-to-date personal data and correct inaccuracies promptly.
Storage Limitation
We keep personal data only as long as necessary for our purposes.
Integrity and Confidentiality
We protect personal data with appropriate security measures.
Data Protection Officer (DPO)
Zullu has appointed a Data Protection Officer (DPO) who is responsible for ensuring compliance with GDPR requirements and addressing your privacy concerns.
Contact Our Data Protection Officer
Mailing Address
Data Protection Officer, Zullu, France
Response Time
We aim to respond within 5 business days
Submitting a Complaint
If you believe we have violated your GDPR rights, you have the right to lodge a complaint with your national data protection authority. Before filing a complaint with a supervisory authority, we encourage you to contact our Data Protection Officer first.
For France
CNIL (Commission Nationale de l'Informatique et des Libertés) - France's independent data protection authority
Website: www.cnil.fr - You can file a complaint through their online form
Additional Information
For all privacy and GDPR-related inquiries: