Privacy notice

Controller and contact

DayOffMap is operated by ZENIT GROUP S.A.S., a Colombian Sociedad por Acciones Simplificada, NIT 902023036-6, registered with the Cámara de Comercio de Cali under mercantile registration No. 1273566-16. Registration date: 2026-01-08. Registered address: Carrera 7T No. 73-119, Cali, Valle del Cauca, Colombia. Contact: info@zenitgroup.com.co, +57 314 729 1775. Legal Representative: Emilssen Rodríguez Ballesteros.

For privacy requests or questions, contact info@zenitgroup.com.co. DayOffMap does not claim to have an appointed Data Protection Officer for this MVP.

What the MVP processes

• Site delivery: request, network, browser and device information that Cloudflare may process to deliver, secure and operate the site.
• Planner preferences: country, region, dates, workweek, leave budget, objective and related planning settings. These stay in browser memory or localStorage unless you choose to place them in a shared URL.
• Language preference: if you choose English or Swedish, localStorage key “dayoffmap.locale.v1” stores only that language code on this device so the interface can be restored after a reload. It is not used for advertising or analytics.
• Shared plans: encoded planner settings and dates in the query string. The MVP has no account and no server-side plan database.
• Email you send to us: your email address, message and any information you choose to include when using a mailto link.
• Static data releases: public holiday and source-lineage records. They are not intended to contain personal data.

What the MVP does not intentionally do

• It does not require an account or collect a name, profile or payment information for ordinary use.
• It does not request exact geolocation, create a behavioural profile, run GA4, or save plans on a DayOffMap server.
• Advertising, advertising measurement, nonessential analytics, a consent-management platform and their scripts are disabled in the initial configuration.

Purposes and legal basis

We use the information above to provide the requested pages and planner, retain your chosen settings on your device if you ask to save them, protect the service, respond to your email and meet applicable legal obligations. The legal basis depends on the visitor’s jurisdiction and the activity. Contract necessity, legitimate interests, consent and legal obligations are used only where the applicable law permits them.

Browser storage and shared URLs

DayOffMap currently uses two localStorage keys. “dayoffmap.locale.v1” stores only a selected interface-language code (English or Swedish) after you choose a language. “dayoffmap.planner.v1” is used only after you choose to save a plan and stores a version, planning settings and a saved-at timestamp. Both remain on your device, are not used for advertising or analytics, and can be removed with Clear saved browser data or your browser’s site-data controls.

Shared plans currently use URL query parameters, not a DayOffMap database. Do not put names, email addresses, employment details or other sensitive information in a shared URL. The site sends a strict-origin-when-cross-origin referrer policy, which is intended to limit full-URL referrer disclosure to cross-origin destinations; browser, recipient and intermediary handling may still expose a URL you deliberately share.

Recipients, transfers and retention

Cloudflare provides static-site delivery and service security. Email sent to the published mailbox is handled by the operator’s email system. Provider processing is governed by the operator’s configured services, access controls and applicable provider terms.

Because the operator, infrastructure and visitor may be in different countries, processing can involve international transfers. Safeguards required by applicable law govern those transfers.

Local planner data stays until you clear it or your browser clears it. A shared URL remains wherever you or a recipient save it. Operational security and email records are retained only as long as needed for their stated purpose or a legal obligation.

Analytics, advertising and consent

No nonessential analytics, advertising vendor or consent-management platform is enabled in this build. Cloudflare Web Analytics is not enabled by this repository. The current service therefore does not set an advertising-consent preference.

Your rights and requests

Depending on applicable law, you may have rights to ask for access, correction, deletion, restriction, objection, portability, information about processing, or withdrawal of consent. Colombian data subjects may also have rights to know, update and rectify personal data; request proof of authorization where relevant; be informed about use; submit complaints; revoke authorization or request deletion where permitted; and access personal data without charge, subject to applicable conditions.

Email info@zenitgroup.com.co with “Privacy request” and enough detail to identify the request. We may need to verify authority or identity proportionately and will respond within the timeframe required by applicable law.

Children

DayOffMap is a general-audience planning tool and is not directed to children. The account-free MVP does not ask for a birth date, create child profiles or intentionally collect personal data from children. A child should not send personal or sensitive information by email or put it in a shared planner URL.

If you believe a child provided personal data to the operator, email info@zenitgroup.com.co with enough detail to locate the message or record. The operator will assess and delete it where required. The applicable age threshold and any parental-authorisation duties remain part of the documented human legal review for each launch geography.

EEA, United Kingdom and Switzerland

Visitors in the EEA, United Kingdom or Switzerland may have the rights described above and a right to complain to their competent supervisory authority. DayOffMap does not claim that a Data Protection Officer or local representative has been appointed. Before the service is intentionally offered or monitored in those jurisdictions, qualified human review must determine territorial applicability, controller/processor roles, transfer safeguards and whether representative details must be published.

Until that assessment is completed, contact info@zenitgroup.com.co for a privacy request. This notice does not treat public web accessibility by itself as a legal conclusion about territorial scope.

United States state privacy assessment and choices

This build does not sell personal information, share it for cross-context behavioural advertising, run targeted advertising, intentionally process sensitive personal information, or offer financial incentives for personal data. Global Privacy Control does not need to disable an advertising or analytics integration because none is active.

State-law applicability depends on the operator’s actual activities, thresholds and launch geography and must be confirmed by qualified human review before production launch. Where an applicable U.S. state law grants access, correction, deletion, portability, opt-out, appeal or non-discrimination rights, requests may be sent to info@zenitgroup.com.co. Verified applicability, response method and appeal instructions must be added before claiming jurisdiction-specific compliance.

Security and updates

We use a static-first design intended to minimise collection, but no internet service can guarantee absolute security. Please do not send sensitive data by ordinary email. We may update this notice as the product or legal review evolves and will revise the effective date when appropriate.