Privacy Policy

Privacy Notice: Information about the processing of personal data by Ünsal Genc Software in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR).

1. Data Controller

The controller responsible for processing personal data in connection with our websites, software products and services is:

Ünsal Genc Software
Woltmershauser Str. 446
28197 Bremen
Germany

Email: hallo@redactwizard.de

2. Scope and General Principles

This Privacy Policy applies to our websites, software downloads, ordering and payment processes, customer area (“Vault”), license management, communications with us, provision of our software products and related services.

Our products and services are primarily intended for business customers and organizations, including companies, self-employed professionals, medical practices, law firms, public institutions, local authorities and government agencies.

Personal data may also be processed in a business context. This includes, for example, the contact details of business representatives, employees, license holders and other individuals working with an organization.

We process personal data only where necessary for the purposes described below, where we are legally required to do so, or where another legal basis under the GDPR permits the processing.

The specific data processed depends on which of our websites, products, features or services you use.

3. Website Hosting and Server Log Data

Our website is hosted on servers in Germany.

When you visit our website, the hosting provider may process technically necessary information. This includes, in particular:

IP address,
date and time of access,
pages and resources accessed,
browser and operating system information, and
technical server and connection data.

Processing this information is necessary to make the website available, ensure its stability, detect technical errors, and investigate misuse or attacks against our systems.

The processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website and the protection of our IT systems.

Server log data is retained only for as long as necessary for the relevant operational and security purposes and is then deleted unless another legal basis requires further storage.

4. Software Downloads and Cloudflare R2

We use Cloudflare R2 to store and distribute software installation files, such as EXE files.

When you download a file, your browser connects to Cloudflare's download infrastructure. Cloudflare may process your IP address, technical connection information and access data to the extent necessary to deliver the requested file and operate the service securely.

Our R2 storage is configured for the European Union jurisdiction. This statement refers to the jurisdiction configured for the relevant R2 storage. It does not automatically mean that all connection data, security metadata or other metadata is processed exclusively within the European Union.

Where personal data is transferred to countries outside the European Economic Area in connection with this service, we ensure that the requirements of Articles 44 et seq. GDPR are met. Depending on the specific transfer route, this may include European Commission adequacy decisions or appropriate safeguards such as the EU Standard Contractual Clauses.

Processing is based on Article 6(1)(b) GDPR insofar as it is necessary to provide a purchased product, and otherwise, in particular, on Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable distribution of our software.

Further information about Cloudflare's data processing is available at:
https://www.cloudflare.com/privacypolicy/

5. Local Processing by Our Desktop Software

Depending on the product and the features used, our desktop software is designed to process data locally on the user's computer.

Redactwizard

Redactwizard is designed as an offline desktop application. Documents processed exclusively locally are not routinely uploaded to our servers.

Where processing takes place entirely locally, we do not have access to the contents of the documents concerned. This applies in particular to personal data contained within those documents.

The processing may differ if users activate optional online features or third-party services. In such cases, data may be transmitted to the relevant service provider and processed in accordance with that provider's own privacy policy.

Use of such a service is triggered by the corresponding feature or action initiated by the user.

Other software products and optional features are subject to the technical characteristics and processing operations of the relevant product.

6. Pseudonymous License Identifier in Generated PDF Documents

When Redactwizard is used under a valid license, it may embed a pseudonymous license identifier in generated PDF documents.

This identifier is a cryptographic HMAC derived from the license key. It does not contain the license key itself and does not directly disclose the customer's identity. Where the identifier can be linked to a particular license, it constitutes pseudonymous data and not necessarily anonymous data.

The identifier is used for the following purposes:

license administration and assignment,
investigating suspected license abuse, and
determining whether a generated document can be associated with a particular license.

We do not use this identifier for advertising, behavioral tracking or profiling.

The identifier remains part of the generated PDF document unless the document is subsequently recreated or modified by software that removes or replaces the identifier.

If such a PDF document is shared with other individuals or organizations, the embedded identifier may also be disclosed to those recipients.

Processing is based on Article 6(1)(f) GDPR. Our legitimate interest is license administration, protection against unauthorized use and enforcement of our license terms.

7. Contact and Support

When you contact us by email, through a contact form or by another direct means, we process the information you provide to handle your inquiry.

This may include, in particular:

name and contact details,
email address,
company, organization or professional role, where provided,
information about the product you use, and
the content of your inquiry and related correspondence.

Processing is based on Article 6(1)(b) GDPR where it is necessary to take steps prior to entering into a contract or to perform a contract.

In other cases, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the proper handling of inquiries, communication with prospective and existing customers, and the provision of support.

Where statutory retention obligations apply, relevant correspondence may be stored for the legally required period.

8. Orders and Payment Processing

We use Stripe for payment processing, including Stripe Payment Links and, where used for the relevant order, Stripe Managed Payments.

When you place an order, the following data may be processed:

name and email address,
billing and, where applicable, company details,
payment and transaction information,
ordered products and order details, and
information relevant for tax purposes.

The specific data collected depends on the ordering and payment process used.

Depending on the service involved, Stripe may act as a processor or as an independent controller. Stripe Managed Payments may also involve a merchant-of-record service. According to Stripe's current information, Sold through Link, LLC is identified as the relevant legal entity providing this service. The service and entity actually used for the specific order are decisive.

We process the information necessary to handle the order, associate the order with a customer, provide the purchased product and manage the associated license as required.

The legal bases are Article 6(1)(b) GDPR for contractual performance and Article 6(1)(c) GDPR where statutory retention or documentation obligations apply.

Further information about Stripe's data processing is available at:
https://stripe.com/de/privacy

9. Order, Customer and License Data

We store the order and license information required for license administration, delivery of purchased products and customer support.

Depending on the product and order, this may include:

name and email address,
billing and company information,
purchased product and order date,
license keys or license-related identifiers,
information about license status and assignment, and
information required to handle support requests.

The data may be provided directly by you or transmitted to us through the relevant ordering or payment service.

We use this information only for the relevant processing purposes, particularly contract performance, license administration, product delivery, customer support and compliance with legal obligations.

Processing is based on Article 6(1)(b) GDPR, Article 6(1)(c) GDPR and, where applicable, Article 6(1)(f) GDPR. Our legitimate interest includes protecting against license abuse and safeguarding and enforcing our legitimate claims.

Data is disclosed only where necessary for these purposes, where we are legally required to do so, or where another legal basis permits the disclosure.

10. Customer Area (“Vault”), Cookies and Login Links

We currently do not use analytics, advertising or marketing tracking services on our website.

The customer area (“Vault”) uses a technically necessary session cookie for authentication and session management. This cookie enables access to the relevant account areas, associated orders and downloads, as well as support requests and messages.

The cookie is not used for advertising or behavioral tracking.

To sign in or restore access, we may send a time-limited authentication link (“magic link”) to the email address associated with the customer account.

Processing of the data required for these purposes is based on Article 6(1)(b) GDPR insofar as it is necessary to provide the customer area and otherwise on Article 6(1)(f) GDPR. Our legitimate interest is secure authentication and protection of customer accounts.

Technically necessary cookies are used only to the extent required to provide the function explicitly requested by the user.

11. Recipients of Personal Data and International Data Transfers

Personal data is disclosed only where necessary for the purposes described in this Privacy Policy or where disclosure is permitted or required by law.

Potential recipients include, in particular:

hosting and IT service providers,
Cloudflare as the provider of our download infrastructure,
Stripe and, where applicable, other payment service providers involved in the ordering process,
email and communication service providers, where applicable, and
tax advisers, public authorities or other entities where required by law.

Depending on their specific role, the relevant service providers process data as processors or as independent controllers.

Where personal data is transferred to recipients outside the European Economic Area, we comply with the requirements of Articles 44 et seq. GDPR. Depending on the recipient and transfer mechanism, this may include an applicable adequacy decision or appropriate safeguards such as the EU Standard Contractual Clauses.

Further information about the relevant data processing may be found in the privacy notices of the service providers linked in this document. Where legally required, information about the safeguards relied upon can be provided upon request.

12. Data Retention

We retain personal data only for as long as necessary for the relevant processing purpose.

The retention period depends, in particular, on the type of data, the purpose of processing, the duration of the business relationship, the support and license administration requirements, and any applicable statutory retention obligations.

Where statutory retention obligations apply, the relevant data is retained for the legally prescribed period. This applies in particular to applicable tax and commercial records.

Once the relevant purpose has been fulfilled and the applicable retention periods have expired, the data is deleted unless another legal basis requires further storage. Where deletion is not yet permitted, processing is restricted to the necessary extent.

13. Your Data Protection Rights

Subject to the applicable legal requirements, you have the following rights:

Right of access to your personal data under Article 15 GDPR,
Right to rectification of inaccurate or incomplete data under Article 16 GDPR,
Right to erasure of your personal data under Article 17 GDPR,
Right to restriction of processing under Article 18 GDPR,
Right to data portability under Article 20 GDPR,
Right to object to certain processing under Article 21 GDPR, and
Right to withdraw consent with future effect where processing is based on consent.

You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. Where personal data is processed for direct marketing, you have a separate right to object to that processing.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, please contact us using the contact details provided above.

14. Provision of Data and Automated Decision-Making

Providing personal data may be necessary to process an order, perform a contract, assign a license or handle a support request.

If the information required for a particular purpose is not provided, the relevant service may not be available or an order may not be processed in full.

When you simply visit our website, technically necessary connection data is processed automatically.

No decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR is made as part of the processing activities described in this Privacy Policy.

15. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration and other unlawful processing.

These measures include, in particular, encrypted transmission using TLS/SSL, appropriate access controls and limiting processing to data necessary for the relevant purpose.

We review our safeguards within the scope of our technical and organizational capabilities and adjust them where necessary.

16. Changes to This Privacy Policy

We may update this Privacy Policy where necessary due to changes in applicable law, our software products, our services or our technical and organizational processes.

The version published on our website at any given time is the applicable version.