Privacy policy

The controller within the meaning of Art. 4(7) GDPR is Cexus. The controller's full contact details, including postal address and email address, are set out in the legal notice (Impressum) of this service.

When you register we store your email address and your password only as an argon2id hash. The password itself is never stored and cannot be read by us. The legal basis is performance of a contract under Art. 6(1)(b) GDPR.

After you sign in we create a session record on the server. It contains a hash of the session token, a hash of your IP address and the expiry time. We do not store the IP address in clear text. The hash exists so that a session takeover by someone else can be detected.

The session cookie is strictly necessary to operate the signed-in area and is therefore permitted without consent under section 25(2) no. 2 TDDDG. Signing in is technically impossible without it.

Your agreement to the privacy policy and the terms is stored as a versioned record with a timestamp, currently version 2026-09-v1. This makes it verifiable which wording you agreed to.

We set the NEXT_LOCALE cookie to remember your chosen language. It holds only a language code such as de, en or ro and no identifier of you as a person.

The quick check is anonymous. Your answers about children, ages and start of employment are used only for the calculation in your browser and are not stored by us.

We use no analytics tool, no advertising network and no profiling. There is no automated decision-making within the meaning of Art. 22 GDPR.

The service runs on servers located in Germany. No transfer to third countries takes place. For the letter-translation service (AI letter interpreter, Brief-Dolmetscher), submitted letters are analysed by a language model running on our own machine in Germany rather than by a third-party cloud AI service; here too, no transfer to a third country takes place. Documents you flag as health data are not processed automatically in this way.

When our staff access your case data or documents, that access is recorded. The log records which staff member accessed which case or document, what action was carried out, and when. The log contains only references of this kind – never the content of your documents or messages. It exists for accountability and for detecting misuse. Entries are deleted automatically after 12 months.

Session records are deleted when they expire or when you sign out. Account data and consent records are kept for as long as your account exists.

Self-service deletion inside the account is not available at present. We delete your account on request; please use the contact details given in the legal notice (Impressum). This section will be replaced once the deletion feature ships in the application.

You have the right to access, rectification, erasure, restriction of processing, data portability and withdrawal of consent you have given. Your right to access is served by a self-service data export: on the “My orders” page in the signed-in area you download a machine-readable JSON file with all the data we hold about you. The export covers your account data, your consent records, your cases with their status history and decisions, the metadata of your documents, your messages, reminders, fax transmissions and certified translation orders, as well as your payment events and SEPA mandates. It does not contain the file contents of your documents – those remain individually downloadable per document – or the internal logs of staff access. For rectification, erasure, restriction of processing and withdrawal of your consent, please use the contact details given in the legal notice (Impressum).

You may lodge a complaint with a data protection supervisory authority at any time, in particular the authority where you habitually reside.