Privacy Policy

1. General information on data processing

We process personal data only insofar as this is necessary to provide our services. Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR (performance of a contract) or Art. 6 para. 1 lit. f GDPR (legitimate interests).

Personal data are deleted as soon as the purpose of storage no longer applies or you request deletion, provided there are no statutory retention obligations to the contrary.

2. Your rights as a data subject

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR) – You can request information about your processed data.
• Right to rectification (Art. 16 GDPR) – You can request the correction of inaccurate data.
• Right to erasure (Art. 17 GDPR) – You can request the deletion of your data.
• Restriction of processing (Art. 18 GDPR) – You can request the restriction of data processing.
• Data portability (Art. 20 GDPR) – You can receive your data in a commonly used format.
• Right to object (Art. 21 GDPR) – You can object to the processing of your data.

You also have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information.

3. Hosting and infrastructure

Our website is hosted with Cloudways (DigitalOcean). The server is located in Frankfurt am Main, Germany.

The hosting provider processes data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR.

4. SSL/TLS encryption

This website uses SSL/TLS encryption for security reasons. You can recognize an encrypted connection by the lock symbol in your browser's address bar and by the fact that the address line begins with "https://". All data you transmit to us are transmitted in encrypted form.

5. Server log files

The hosting provider automatically collects and stores information in so-called server log files, which your browser automatically transmits:

• Anonymized IP address (shortened)
• Date and time of access
• Page/file accessed
• HTTP status code
• Browser type and version
• Operating system used
• Referrer URL (previously visited page)

These data are evaluated solely to ensure trouble-free operation and to improve our offering. They are not merged with other data sources. Storage is based on Art. 6 para. 1 lit. f GDPR.

6. Fax transmission (Sinch)

For the technical transmission of faxes, we use the Sinch Fax service (Sinch AB, Stockholm, Sweden). When a fax job is initiated, the following data are transmitted to Sinch:

• The uploaded document
• The recipient fax number
• Your email address (for status notifications)

Sinch is a company based in the European Union (Sweden), so the GDPR applies directly. Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR (performance of a contract). A data processing agreement pursuant to Art. 28 GDPR has been concluded.

Your documents are automatically deleted after successful dispatch. We do not store documents longer than necessary to perform the order.

For more information, please refer to Sinch's privacy notice: https://www.sinch.com/legal/privacy-notice/

7. Payment processing (Stripe Managed Payments)

We use Stripe Managed Payments (Stripe, Inc., USA) for payment processing. In this context, Stripe acts as the Merchant of Record (registered merchant) and is the legal transaction partner for payment processing. Your payment data are transmitted directly to Stripe. We do not store credit card data on our servers.

Stripe processes your payment data, location data, and device information to perform the transaction, calculate taxes automatically, and prevent fraud. Processing is based on Art. 6 para. 1 lit. b GDPR (performance of a contract). Stripe is certified under the EU-U.S. Data Privacy Framework.

Further information can be found in Stripe's privacy policy: https://stripe.com/de/privacy

8. Web analytics (Matomo)

To analyze website usage, we use Matomo, an open-source software for web statistics. Matomo is operated on our own servers in Germany (self-hosted).

We use Matomo without cookies (cookieless tracking). Your IP address is anonymized so that it cannot be traced back to you. No personal data are transmitted to third parties.

The analysis is based on our legitimate interest in the statistical evaluation of user behavior to optimize our offering (Art. 6 para. 1 lit. f GDPR). Due to the cookieless and anonymized configuration, no consent is required.

9. Email communication

If you contact us by email, your details, including the contact information you provide, will be stored by us for the purpose of processing the inquiry and for possible follow-up questions.

Processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in answering your inquiry). Your data are deleted as soon as your inquiry has been conclusively processed, provided there are no statutory retention obligations.

Last updated: January 2026