Privacy Policy

1. General information on data processing

We process personal data only to the extent necessary to provide our services. Processing is based on Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(f) GDPR (legitimate interests).

Personal data is deleted as soon as the purpose of storage ceases to apply or you ask us to delete it, unless statutory retention obligations prevent this.

2. Your rights as a data subject

You have the following rights with regard to your personal data:

• Right of access (Article 15 GDPR) – You can request information about the data processed about you.
• Right to rectification (Article 16 GDPR) – You can request the rectification of inaccurate data.
• Right to erasure (Article 17 GDPR) – You can request the deletion of your data.
• Right to restriction of processing (Article 18 GDPR) – You can request restriction of processing.
• Right to data portability (Article 20 GDPR) – You can receive your data in a commonly used format.
• Right to object (Article 21 GDPR) – You can object to the processing of your data.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information.

3. Hosting and infrastructure

Our website is hosted with Cloudways (DigitalOcean). The server is located in Frankfurt am Main, Germany.

The hosting provider processes data on our behalf on the basis of a data processing agreement pursuant to Article 28 GDPR.

4. SSL/TLS encryption

This website uses SSL/TLS encryption for security reasons. You can recognise an encrypted connection by the lock symbol in your browser's address bar and by the address beginning with "https://". All data you transmit to us is transferred in encrypted form.

5. Server log files

The hosting provider automatically collects and stores information in so-called server log files that your browser automatically transmits:

• Anonymised IP address (shortened)
• Date and time of access
• Page/file accessed
• HTTP status code
• Browser type and version
• Operating system used
• Referrer URL (previously visited page)

This data is evaluated only to ensure trouble-free operation and to improve our offering. It is not merged with other data sources. Storage is based on Article 6(1)(f) GDPR.

6. Fax transmission (Sinch)

We use the Sinch Fax service (Sinch AB, Stockholm, Sweden) for the technical transmission of faxes. When a fax is submitted, the following data are transmitted to Sinch:

• The uploaded document
• The recipient fax number
• Your email address (for status notifications)

Sinch is a company established in the European Union (Sweden), so the GDPR applies directly. Processing is carried out on the basis of Art. 6(1)(b) GDPR (performance of a contract). A data processing agreement pursuant to Art. 28 GDPR has been concluded.

Your documents are automatically deleted after successful transmission. We do not store documents longer than necessary to fulfil the order.

For further information, please refer to Sinch's Privacy Notice: https://www.sinch.com/legal/privacy-notice/

7. Payment processing (Stripe Managed Payments)

We use Stripe Managed Payments (Stripe, Inc., USA) for payment processing. Stripe acts as the Merchant of Record and is the legal transaction partner for payment processing. Your payment data are transmitted directly to Stripe. We do not store credit card details on our servers.

Stripe processes your payment data, location data and device information for the execution of the transaction, automatic tax calculation and fraud prevention. Processing is carried out on the basis of Art. 6(1)(b) GDPR (performance of a contract). Stripe is certified under the EU-US Data Privacy Framework.

Further information can be found in Stripe's privacy policy: https://stripe.com/de/privacy

8. Web analytics (Matomo)

We use Matomo, an open-source web analytics software, to analyse website usage. Matomo is operated on our own servers in Germany (self-hosted).

We use Matomo without cookies (cookieless tracking). Your IP address is anonymised so that no conclusions can be drawn about you personally. No personal data is transmitted to third parties.

The analysis is based on our legitimate interest in the statistical evaluation of user behaviour for the purpose of optimising our offering (Article 6(1)(f) GDPR). Due to the cookieless and anonymised configuration, no consent is required.

9. Email communication

If you contact us by email, the information you provide, including the contact details you have given, is stored by us for the purpose of processing the enquiry and for possible follow-up questions.

Processing is based on Article 6(1)(f) GDPR (legitimate interest in replying to your enquiry). Your data is deleted as soon as your enquiry has been finally processed, unless statutory retention obligations apply.

Last updated: January 2026