Documentr

Privacy Policy

Below we explain how we process your personal data.

1. Controller

Lena Bühl (Einzelunternehmerin) Furtweg 50 71723 Großbottwar Email: hello@documentr.de

2. Hosting

This website is hosted on servers in Germany (Hetzner Online GmbH). We have a data processing agreement (DPA) in place with Hetzner. No data is transmitted to servers outside the EU. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reliable website provision).

3. Data Collected

When using our website, technically necessary data is automatically collected (IP address, browser type, operating system, access time, requested URL). This data is used exclusively to provide the website and to detect abuse. IP addresses are deleted after 7 days. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing and securing the website).

4. Cookies and Consent

Our website uses technically necessary cookies (e.g. storing your cookie preferences). These cookies are required for the operation of the website and cannot be disabled. Beyond this, we only use optional cookies and services with your explicit consent. You can revoke or modify your consent at any time via the "Cookie Settings" link in the website footer. Legal basis: § 25(2) TDDDG (technically necessary cookies) or § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR (consent for optional cookies).

5. Web Analytics (Umami)

We use Umami, a privacy-friendly web analytics tool that runs on our own servers in Germany. Umami does not use cookies and does not store personal data. IP addresses are not stored. Only aggregated, non-personally-identifiable data is collected (page views, session duration, referrers, device type). No data is shared with third parties. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in analyzing website usage).

6. Error Monitoring (Sentry)

For our web application (admin panel), we use Sentry (Functional Software, Inc.) to detect and resolve technical errors. When an error occurs, Sentry captures technical information such as error message, stack trace, browser version and operating system. Data processing takes place on servers in the EU (Frankfurt). We have a data processing agreement (DPA) in place with Sentry. IP addresses are not transmitted to Sentry (sendDefaultPii: false). Sentry is only loaded after you provide consent via our cookie banner. Legal basis: § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR (consent).

7. Payment Processing (Stripe)

To process payments, we use Stripe (Stripe, Inc., with European office in Ireland). During a payment transaction, the data required for payment processing (e.g. name, email, payment information) is transmitted directly to Stripe. Stripe processes your data according to its own privacy policy: https://stripe.com/privacy Legal basis: Art. 6(1)(b) GDPR (performance of contract).

8. Contact Form

When you use our contact form, your information (name, email, message) is transmitted to us by email and stored to process your inquiry. This data is not shared with third parties and is deleted after your inquiry has been handled, unless legal retention obligations apply. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in processing inquiries).

9. Your Rights

You have the following rights regarding your personal data: – Right of access (Art. 15 GDPR) – Right to rectification (Art. 16 GDPR) – Right to erasure (Art. 17 GDPR) – Right to restriction of processing (Art. 18 GDPR) – Right to data portability (Art. 20 GDPR) – Right to object (Art. 21 GDPR) To exercise your rights, contact hello@documentr.de. You also have the right to lodge a complaint with a supervisory authority regarding the processing of your personal data.

10. Currency

This privacy policy is currently valid as of June 2026. We reserve the right to update this privacy policy to ensure it always complies with current legal requirements or to reflect changes in our services.