Privacy Information pursuant to Art. 13 GDPR

Last updated: 10 August 2025

Controller
The party responsible for processing personal data within this contractual relationship is:
Stephan Stapel Softwareberatung, Eichenkoppel 19, 22399 Hamburg,
Data processed
As part of license verification, the provider processes the following data:
- License key
- Hashed IP address
- Hashed user name
- Hashed domain
Purpose and legal basis for processing
Processing takes place solely for the purpose of license verification and to prevent misuse. The legal basis is Art. 6(1)(b) GDPR (performance of a contract).
Storage period
The data is only stored for as long as necessary to fulfil the contractual relationship, and is deleted afterwards unless statutory retention obligations apply.
Recipients of the data
The data is transmitted exclusively to the provider's own servers or to hosting service providers commissioned by the provider within the European Union, and is processed there. No transfer to third countries takes place.
Rights of the data subject
The customer has the right to
- request information about the data processed (Art. 15 GDPR),
- have inaccurate data corrected (Art. 16 GDPR),
- request erasure, provided no statutory retention obligations apply (Art. 17 GDPR),
- restrict processing (Art. 18 GDPR),
- object to processing, insofar as it is based on Art. 6(1)(f) GDPR (Art. 21 GDPR),
- receive the data in a structured, commonly used and machine-readable format (Art. 20 GDPR).
Right to lodge a complaint Data subjects have the right to lodge a complaint with a data protection supervisory authority. This is generally the authority responsible for the data subject's place of residence or business, or for the provider's registered office.
Obligation to provide data
Providing the data listed in paragraph 2 is required in order to use the software. Without this processing, license verification – and therefore use of the software – is not possible.