Privacy Policy

Responsible for data protection

Alexander Lutsyuk
Algoran / e-rechn.de
Dr. Alban Str. 24
19395 Plau am See
Deutschland / Germany
E-Mail: kontakt@algoran.de

Type, scope, and purpose of data processing

We process personal data of our users generally only to the extent necessary to provide a functional website, as well as our content and services. Personal data is processed in particular for contacting, creating offers, contract processing, or with the explicit consent of the users for other purposes.

Specific to e-rechn.de: Conversion of PDF invoices

When you use our service to convert PDF invoices into EU-compliant e-invoices, we process the following data:

  • Your email address: To send you the converted invoice.
  • The uploaded PDF file: To perform the conversion.

Important: Your invoice data is processed exclusively in the server's memory (RAM). The file is never permanently stored on a hard disk. Immediately after successful conversion and email delivery, all temporary data is irreversibly deleted. There is no permanent storage of your invoice data.

Legal bases for processing

The processing of personal data is carried out on the basis of:

  • Art. 6 Abs. 1 lit. a DSGVO (consent of the user)
  • Art. 6 Abs. 1 lit. b DSGVO (fulfillment of a contract or implementation of pre-contractual measures)
  • Art. 6 Abs. 1 lit. c DSGVO (fulfillment of a legal obligation)
  • Art. 6 Abs. 1 lit. f DSGVO (safeguarding our legitimate interests, e.g., to improve our offer, ensure IT security)

Recipients or categories of recipients of the data

Your personal data is processed within our sole proprietorship. Disclosure to third parties only occurs if it is necessary for contract fulfillment (e.g., payment service providers), we are legally obliged to do so, or you have given prior consent.

Transfer to third countries

A transfer of personal data to third countries outside the EU/EEA generally does not occur without your explicit consent or an appropriate guarantee (e.g., standard contractual clauses). All servers directly controlled by us are located in Germany.

Data retention period

Personal data is only stored for as long as necessary to achieve the respective processing purposes or as required by legal retention periods. After the purpose ceases to exist or the periods expire, the data is routinely deleted.

For invoice conversion: Immediate deletion after completion of processing (usually within minutes).

Data subject rights

You have the right to information, rectification, erasure, restriction of processing, data portability, and to object to the processing of your data. Please contact the contact address mentioned above to exercise these rights.

Right to lodge a complaint with a supervisory authority

According to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data is unlawful.

Information on cookies, tracking, and analysis tools

We use cookies on our website. Necessary cookies are technically required for the basic operation of the website. Voluntary cookies (e.g., for analysis, marketing) and the use of tracking and analysis tools only occur after your explicit consent.

Technical and organizational measures (TOMs)

We take appropriate technical and organizational security measures in accordance with Art. 32 GDPR to protect your personal data. Within the scope of our e-invoice services, we place particular emphasis on the security of the processed data:

  • Server location: All servers are located in Germany
  • Encryption: SSL/TLS (HTTPS) for all data transmissions
  • In-memory processing: No permanent storage on hard disks
  • Immediate deletion: Automatic removal of all temporary data after processing

Data Processing Agreement (DPA)

When you use our service, you act as the Data Controller and we act as the Data Processor. According to Art. 28 GDPR, a Data Processing Agreement (DPA) is required. You can find a standard DPA here.