Privacy Policy

Privacy Policy Summary (English)

This is a summary of our privacy practices. For the legally binding version, please refer to the German Datenschutzerklärung above.

1. Controller

SemanticFlow
Owner: Manfred Eppe
Schopbachweg 10c, 22527 Hamburg, Germany
Email: info@semanticflow.de
Phone: +49 176 21532311

2. Data We Collect

• Usage Data: IP addresses (shortened), access times, browser information
• Account Data: Email, name, billing information (if you register)
• Content Data: Files you upload for processing (automatically deleted after 24 months)

3. Legal Basis (GDPR)

• Art. 6(1)(b) GDPR - Contract performance
• Art. 6(1)(a) GDPR - Consent
• Art. 6(1)(f) GDPR - Legitimate interests

4. Data Recipients & International Transfers

• Clever Cloud SAS (Nantes, France) - EU-based hosting
• OpenAI (San Francisco, USA) - AI processing with EU-US Data Privacy Framework
• Stripe (Ireland/USA) - Payment processing

5. Storage Duration

• Uploaded content & results: up to 24 months
• Account data: 6-10 years (tax/commercial law requirements)
• Log files: 7-30 days

6. Your Rights

You have the right to:

• Access your personal data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure ("right to be forgotten", Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Lodge a complaint with a supervisory authority

7. Data Processing Agreement (DPA)

For processing of personal data, we have concluded Data Processing Agreements according to Art. 28 GDPR with our subprocessors (Clever Cloud, OpenAI, Stripe).

8. Security Measures

• TLS encryption for data transmission
• Access control and authentication
• Logging and monitoring
• Regular security updates

9. Cookies

We only use technically necessary cookies. No marketing or tracking cookies are used without your explicit consent.

10. Contact for Privacy Matters

For any questions regarding data protection:
Email: info@semanticflow.de
Phone: +49 176 21532311