Privacy Policy

Last updated: July 2026

This privacy policy applies to the website as well as to the web-based service ("Tool") of DACHDENKER. Website and Tool are connected; the Tool refers to these pages for imprint, privacy and terms.

1. Controller

2. Data collected and purposes of processing

User account

Access to the Tool is set up by the provider after prior agreement (no open self-registration). In doing so we process name, e-mail address and password (stored as a secure hash). This data is necessary to provide the service. Legal basis: Art. 6 (1) (b) GDPR.

Uploaded images and processing jobs

Images uploaded in the Tool are stored on our server and transmitted to the Google Gemini API for AI-assisted processing (see section 7). Processing jobs including the parameters used are stored in our database. The storage period depends on the chosen account type; after the period expires, images are deleted automatically. Legal basis: Art. 6 (1) (b) GDPR.

Insofar as the images uploaded by a roofing company contain personal data of its end customers (e.g. photos of inhabited buildings), we process these on behalf of the respective company. For this purpose we conclude, on request, a data processing agreement with the company in accordance with Art. 28 GDPR. The company remains responsible for the lawfulness of the collection (e.g. consent of the end customer).

Technical access data

When you access our website, your browser automatically transmits technical data (IP address, browser type, operating system, date/time, page accessed). This data is recorded in the server log of the hosting provider and deleted after 30 days at the latest. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in operational security).

Cookies and session data

We use the following technically necessary cookies:

• lang — stores your language setting (1 year)
• auth_token — for authentication after login in the Tool (30 days)

Legal basis: Art. 6 (1) (b) GDPR (auth_token) and Art. 6 (1) (f) GDPR (language cookie). No third-party tracking cookies are set.

3. Fonts

The fonts used on this website are delivered locally from our server. There is no connection to Google servers or other third parties; your IP address is not transmitted to third parties in order to load the fonts.

4. Storage period and deletion

If an account is deleted, all personal data (account details, images, processing jobs) is deleted immediately and completely. Excepted from this is data we are legally obliged to retain (e.g. tax record-keeping obligations).

5. Hosting

Website and Tool are hosted by:

All user data is stored on servers in Germany. A data processing agreement (DPA) in accordance with Art. 28 GDPR exists with the hosting provider. No transfer to third countries takes place within the scope of hosting; the image processing by Google described in section 7 remains unaffected by this.

6. E-mail delivery

For transactional e-mail delivery (e.g. confirmation and access e-mails) we use the SMTP service of our hosting provider all-inkl.com. No third-party e-mail service providers are used. Only the data required for delivery (e-mail address, name) is transmitted.

7. Google Gemini API

For AI-assisted image editing we use the Google Gemini API of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Uploaded images are transmitted to and processed by Google's infrastructure.

Google LLC is certified under the EU-US Data Privacy Framework. The transfer to the USA takes place on the basis of Art. 45 GDPR (adequacy decision) and, additionally, Art. 46 GDPR (standard contractual clauses). A data processing agreement exists with Google. Legal basis: Art. 6 (1) (b) GDPR.

8. Web analytics with Matomo

This website uses Matomo, an open-source web analytics software. Matomo is self-hosted — all analytics data remains on our server at all-inkl.com and is not passed on to third parties. Matomo is operated in cookieless mode.

Matomo records, among other things: anonymised IP address, pages accessed, time spent, browser and operating system type, country of origin. Identification of individual persons is not possible. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in anonymised usage analysis). You can object to the collection by activating the "Do Not Track" function in your browser; Matomo respects this setting.

9. Payment processing

Chargeable services are invoiced directly by the provider. For this purpose we process the data required for invoicing (name, address, e-mail address) and retain invoices within the scope of the statutory tax and commercial retention periods. Legal basis: Art. 6 (1) (b) GDPR (performance of contract) as well as Art. 6 (1) (c) GDPR (statutory retention obligations).

10. Your rights

With regard to your personal data you have the following rights:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interest (Art. 21 GDPR)

To exercise your rights, please contact: [contact e-mail to follow]

11. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: