Privacy policy
This is a translation of the German Datenschutzerklärung. In case of doubt, the German version applies.
As of 27 October 2026. This policy applies to the website umlagefix.com, the app at app.umlagefix.com and the apps for iPhone, iPad and Android.
1. Controller
Lichtlabor-Berlin, owner Norbert Winter, Hauptstraße 16–18, 10317 Berlin, Germany, email: info@umlagefix.com, phone +49 157 73950090.
2. Website
The website is delivered via Cloudflare, Inc. When you visit it, Cloudflare processes technically necessary data (IP address, time, page requested, browser details) in order to deliver the site securely and quickly (Art. 6 (1) (f) GDPR). Cloudflare may also process data in the USA; this is based on the EU-US Data Privacy Framework or standard contractual clauses.
We do not use analytics or advertising cookies and no tracking. Fonts are loaded from Google Fonts; this transmits your IP address to Google (Art. 6 (1) (f) GDPR). The chat on the website is an automatic assistant running in your browser: your entries are not transmitted to us or third parties unless you send us an email yourself.
3. Contact and orders by email
If you write to us or order by email, we process your details to handle the enquiry and to perform the contract (Art. 6 (1) (b) GDPR). Emails to @umlagefix.com are forwarded to our mailbox via Cloudflare Email Routing. We retain invoice data for the statutory periods (Art. 6 (1) (c) GDPR).
4. Online orders and payment processing via Stripe
If you order online, we process the payment via Stripe: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. You enter your payment details (card details or account details for SEPA direct debit), name, email address, billing address and, where applicable, your VAT ID directly on Stripe’s payment page; we do not receive full card or account details. The legal basis is the performance of the contract (Art. 6 (1) (b) GDPR) and our statutory retention obligations (Art. 6 (1) (c) GDPR).
Stripe also processes data under its own responsibility, for example for fraud prevention and to comply with legal obligations. Data may be transferred to the USA in the process; Stripe relies on the EU-US Data Privacy Framework and standard contractual clauses for this. More information: stripe.com/privacy. “Manage subscription” takes you to Stripe’s customer portal, where you can cancel your subscription and change your payment method and billing address.
5. The UmlageFix app
In the app, we process the data of the respective company (customer) on its behalf: employee logins (name, email, role), clients and properties, orders, jobs, tasks, photos and signatures. The company is responsible for this data; we act as processor (Art. 28 GDPR). A data processing agreement is concluded with each company.
Storage location: The data is stored with Supabase in a data centre in Frankfurt am Main (EU). Each company sees only its own data.
Location: Location data is only recorded while an order, a trip or a job is open. Only the start, destination and kilometres of a trip and the arrival and departure at the property are stored – no routes. Photos and location data are deleted after the retention periods set by the company.
AI order import: When a company imports an order PDF, the document is sent to the AI service of Anthropic PBC (USA) for analysis. We do not store the PDF; only the reviewed result is stored. The basis is the contract with the company and standard contractual clauses for the transfer to the USA. Please do not import documents containing unnecessary personal data.
AI texts: On request, an AI service drafts a report text from keywords; here too, only the keywords entered are transmitted.
App hosting: Cloudflare, Inc. (delivery of the app files).
6. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). Please contact info@umlagefix.com. You may also lodge a complaint with a data protection supervisory authority, e.g. the Berlin Commissioner for Data Protection and Freedom of Information.
7. Changes
We update this policy when the app or the legal situation changes. The version published here applies.