Legal
Privacy Notice
Information on the processing of personal data pursuant to Art. 13, 14 of the EU Datenschutz-Grundverordnung (DSGVO / General Data Protection Regulation, GDPR). Last updated: July 2026.
01
Controller
The controller within the meaning of the GDPR (Datenschutz-Grundverordnung, DSGVO) and other applicable national data protection laws and other data-protection-related provisions is:
Legal Data Technology GmbH
Bornberg 94, 42109 Wuppertal
Represented by the Managing Director Tim Platner
Phone: +49 202 25625 001 · Email: info@legaldata.tech
02
General Information & Legal Bases
We process personal data only to the extent necessary to provide a functional website and our content and services. Processing regularly takes place on one of the following legal bases:
- Art. 6 Abs. 1 lit. a DSGVO — consent of the data subject.
- Art. 6 Abs. 1 lit. b DSGVO — performance of a contract or pre-contractual measures.
- Art. 6 Abs. 1 lit. c DSGVO — compliance with a legal obligation.
- Art. 6 Abs. 1 lit. f DSGVO — protection of legitimate interests, provided the data subject's interests do not override them.
03
Hosting & Server Log Files
Our website is hosted on servers in Germany. With every visit, our system automatically records data and information from the accessing system that is technically required to display the website to you and to ensure stability and security. This includes in particular:
- Browser type and version
- Operating system used
- Date and time of access
- Shortened/truncated IP address
- Referrer URL
- Volume of data transferred
The legal basis is Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest lies in the technically error-free presentation and security of the website. The log files are deleted after 7 days at the latest.
05
Reach Measurement with Matomo
To design and continuously optimize our website according to needs, we use the web analytics service Matomo (cloud variant). Matomo is configured on our end in a privacy-friendly way: only anonymized or pseudonymized usage statistics are collected (e.g. pages visited, time spent, approximate origin, browser and device type used), IP addresses are processed in truncated form, no tracking cookie for recognition across sessions is set, and there is no merging with other services or disclosure to third parties, in particular not for advertising purposes.
Since this means neither user-related profiles are created nor are individual persons re-identified across multiple websites, collection is permitted without prior consent. The legal basis is our legitimate interest in the needs-based design and optimization of our website (Art. 6 Abs. 1 lit. f DSGVO). We have a data processing agreement pursuant to Art. 28 DSGVO in place with the provider of the Matomo cloud service. You can object to this processing at any time, informally, via the right to object described in the "Your Rights" section (Art. 21 DSGVO), by writing to info@legaldata.tech.
06
Google Ads Conversion Tracking
Based on your consent (Art. 6 Abs. 1 lit. a DSGVO, § 25 Abs. 1 TDDDG), we use Google Ads conversion tracking, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). This allows us to measure whether users who reached our website via one of our ads carry out a specific action — specifically, booking a product demo. In doing so, cookies may be set and information (e.g. page visited, time, and where applicable a click identifier) may be transmitted to Google; a transfer to the USA is possible (safeguarded via the EU Standard Contractual Clauses and the EU-US Data Privacy Framework).
The tags are only loaded after you click "Accept all" in the cookie banner — without consent, no data whatsoever is transmitted to Google. Your consent is voluntary and can be revoked at any time with effect for the future: to do so, delete the website data in your browser (the banner will then appear again) or inform us of your revocation informally at info@legaldata.tech. Further information can be found in Google's privacy policy at policies.google.com/privacy.
07
Contacting Us & Forms
If you contact us by contact form, email or phone, we process the data you provide (e.g. name, company, email address, phone number, message) to handle your inquiry. The legal basis is Art. 6 Abs. 1 lit. b DSGVO for contract-related inquiries, and otherwise Art. 6 Abs. 1 lit. f DSGVO. The data is deleted as soon as it is no longer required for the purpose for which it was collected and no statutory retention obligations apply.
08
Demo Booking & Newsletter
To arrange a product demo, we process your contact and appointment details to carry out and follow up on the appointment (Art. 6 Abs. 1 lit. b DSGVO). For sending our newsletter, we use the double opt-in procedure: after signing up, you will receive a confirmation email. Sending takes place on the basis of your consent (Art. 6 Abs. 1 lit. a DSGVO), which you can revoke at any time via the unsubscribe link or by email.
09
Support Chat (AI Assistant)
On legaldata.tech we offer a support chat. An AI assistant answers questions about DEPLAW based on our documentation, checks uploaded files on request (for example workflows, forms, text templates or screenshots) and creates import files for workflows, text templates and forms. Requests the assistant cannot resolve can be sent to our support team as a ticket.
- Data processed: your messages, the assistant's answers, uploaded and generated files, timestamps, your ratings of answers and a hashed value of your IP address to limit abuse. For tickets also your email address, your name (optional), subject and message and, if you choose so, the conversation and files.
- Purpose and legal basis: answering your request and supporting our software (Art. 6(1)(b) GDPR where you are a customer or prospect; otherwise Art. 6(1)(f) GDPR, our legitimate interest in fast and efficient support). Limiting abuse is based on Art. 6(1)(f) GDPR.
- Please no personal data of third parties: do not enter client, case or other personal data in the chat and redact screenshots before uploading. In text files we automatically replace email addresses, IBANs and phone numbers before they are sent to the AI provider.
- Recipients: to generate the answers we transmit messages and files to Anthropic PBC (548 Market Street, San Francisco, CA 94104, USA) as a processor. The transfer to the USA is safeguarded by the EU Standard Contractual Clauses, which form part of the data processing agreement. Under the provider's contractual terms, the data is not used to train AI models. We send tickets by email via Brevo SAS (France) as a processor.
- Storage period: we delete conversations and files automatically 30 days after the last activity. You can delete a conversation or all your chat data yourself at any time in the chat. Shared links are valid for at most 30 days and can be revoked at any time. We keep tickets as long as needed for handling them and for statutory retention obligations.
- Cookie: so that you can find your conversation history again, we set a technically necessary cookie ("ldt_sb", lifetime 90 days) after your first message. The legal basis is Section 25(2) No. 2 TDDDG, as the cookie is required for the service you explicitly requested.
- Automated answers: the answers are generated by an AI and may be wrong. The assistant makes no decisions with legal effect within the meaning of Art. 22 GDPR.
10
Data Processing & Data Transfers
We use carefully selected service providers (e.g. for hosting, email and web analytics) on the basis of data processing agreements pursuant to Art. 28 DSGVO. A transfer to third countries outside the EU/EEA takes place only if an adequate level of data protection is ensured — for example through an adequacy decision by the EU Commission or EU Standard Contractual Clauses. Operation of the DEPLAW platform and hosting of this website take place exclusively in Germany. The exception is the support chat on this website (section 09), whose answers are generated by an AI provider in the USA.
11
Your Rights as a Data Subject
You have the following rights with respect to us regarding your personal data:
If processing is based on consent, you can revoke it at any time with effect for the future. An informal message to info@legaldata.tech is sufficient to exercise this right.
12
Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf.
13
Currency of this Privacy Notice
This privacy notice is current as of July 2026. Further development of our website and offerings, or changes to legal or regulatory requirements, may make it necessary to update it. The most current version can be accessed on this page at any time.
Contents
01 · Controller02 · General Information & Legal Bases03 · Hosting & Server Log Files04 · Cookies05 · Reach Measurement with Matomo06 · Google Ads Conversion Tracking07 · Contacting Us & Forms08 · Demo Booking & Newsletter09 · Support Chat (AI Assistant)10 · Data Processing & Data Transfers11 · Your Rights12 · Right to Complain13 · Currency