Privacy policy

1. Controller

The controller under the GDPR is Umut Ceylan, trading as ELSA Tools, Bielefelder Str. 87, 32051 Herford, Germany.

2. Website and server logs

When you visit elsa-tools.com, elsa-tools.de and related pages, we process technically necessary log data, including IP address, time and page requested. The purpose is operation, security and abuse prevention. The legal basis is Art. 6(1)(f) GDPR.

3. Contact form and email

We use contact-form and email data to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR.

4. ELSA software account

For registration, login and operation we process account, authentication, usage and workshop job data. The legal basis is Art. 6(1)(b) GDPR.

You are the controller for personal data of your workshop customers entered into ELSA. We process that data as a processor. A data processing agreement can be requested.

5. Payment via Paddle

Subscriptions are processed by Paddle. Paddle processes payment data independently as merchant of record. See Paddle’s privacy notice for details.

6. Hosting and processors

We use technical providers for hosting, delivery and the database, in particular Vercel and Supabase. We conclude processor contracts under Art. 28 GDPR.

7. Cookies

We use technically necessary cookies or similar storage for operation and language preference. Optional analytics cookies are set only with consent.

8. Retention

We keep personal data only as long as needed for the purpose or required by law. After the contract ends we delete or anonymise account data unless retention obligations apply.

9. Your rights

You have rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent. You may lodge a complaint with a supervisory authority, in particular the North Rhine-Westphalia data protection authority.

No automated decision-making including profiling under Art. 22 GDPR takes place.