Privacy Policy
How we collect, use and protect your personal data under the GDPR.
TO BE COMPLETED — This page is a scaffold. The wording below has not been reviewed by a lawyer and must be completed before Trusted Lingo is publicly reachable.
Controller
TO BE COMPLETED — Name and contact details of the data controller, and of the data protection officer if one is appointed.
What we collect
TO BE COMPLETED — Enumerate each category actually processed: account details, the documents uploaded for translation, order and payment records, support messages, and server/technical logs.
Legal basis and purpose
TO BE COMPLETED — Map each category to its Art. 6 GDPR basis — contract performance, legal obligation, legitimate interest or consent.
Processors and recipients
TO BE COMPLETED — List every processor with a data processing agreement in place — at minimum the hosting provider, the database and auth provider, the payment provider and the transactional email provider — and note any transfers outside the EEA together with their safeguards.
Retention
Uploaded documents are deleted 30 days after delivery.
TO BE COMPLETED — Confirm this against the actual deletion job, and state retention periods for order, invoice and account records (German tax law generally requires longer).
Your rights
TO BE COMPLETED — Access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and the right to complain to a supervisory authority — with the competent authority named.