Privacy policy

OCR Europe website

Controller and scope

Norman Rath
Thomas-Müntzer-Str. 10
04207 Leipzig
Deutschland / Germany

Privacy contact: hello (at) ocr-europe (dot) com

This privacy policy explains how personal data are processed when you use the OCR Europe website. The data processed depend on the features you use and the permissions you grant. A permission granted in system settings does not automatically replace consent required under data protection law.

Service delivery and server logs

Requests for content, APIs or legal documents involve data such as your IP address, request time, resource, technical status and client information supplied by your device. This data is used to deliver the service, investigate faults and protect systems.

Our API and websites are hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The central API is provided at it0815.de. STRATO processes technical hosting data as a contracted service provider; processing agreement information: https://www.strato.de/agb/avv/ .

The legal basis for technically necessary delivery of requested services is Article 6(1)(b) GDPR where a corresponding user relationship exists; security and abuse detection are based on Article 6(1)(f) GDPR. Legitimate interests are reliable operation and protection of users and systems.

Retention: STRATO retains website visitors’ IP addresses for up to seven days to detect and prevent attacks. According to STRATO, access logs provided in its customer area contain anonymised IP addresses and are available for the preceding six weeks. STRATO provides error logs for the preceding five days; the direct display is limited to 100,000 entries. These periods concern STRATO hosting logs. Separate processing of app registrations, push delivery information and usage statistics is described in the relevant sections.

Website analytics and settings

We use self-hosted Matomo at it0815.de/adm/ext/matomo/ to compile website statistics. The integration disables analytics cookies and the JavaScript tracker respects the browser’s Do Not Track setting. It may process pages viewed and links clicked, access time, referring page, browser, operating system, device and screen information, and the IP address transmitted with the connection. A Matomo tracking pixel is included for browsers without JavaScript. Statistics help improve content, usability, technical performance and security. Data are not combined with names or email addresses and are not used for advertising or disclosure to advertising networks. The legal basis for this statistical processing is Article 6(1)(f) GDPR; our legitimate interest is improving and reliably operating the website. Analytics data are retained only as long as needed for these purposes and then deleted or anonymised. Further information about Matomo: https://matomo.org/privacy-policy/ .

External organiser, map, store and social media links lead to the respective website when opened. The provider’s privacy information applies there.

Non-essential storage or access on your device requires the applicable consent under section 25(1) TDDDG. Analytics involving personal data also require an appropriate GDPR legal basis. Merely using the website does not replace required consent.

Contact requests

When you contact us, we process your contact details and message to handle and respond to the request. The legal basis is Article 6(1)(b) GDPR for contractual enquiries, or Article 6(1)(f) GDPR based on the legitimate interest in responding to other enquiries.

Retention: Until the enquiry is resolved; longer only where statutory retention duties or the specific establishment, exercise or defence of legal claims require it. Please send health, location or other sensitive data only where necessary for the enquiry.

Service providers

STRATO GmbH processes the technical data required for hosting in Germany. Additional service providers are those identified for the relevant functions in this policy. The data transmitted to them depend on the platform and the functions used.

Your rights

Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction and data portability (Articles 15–20 GDPR). You can withdraw consent at any time for the future.

Objection: You may object to processing based on Article 6(1)(e) or (f) GDPR on grounds relating to your particular situation (Article 21 GDPR). You may object to direct marketing at any time.

Contact hello (at) ocr-europe (dot) com to exercise your rights. We cannot access or erase data stored only on your device without your involvement. Appropriate proof may be needed to identify server-side installation records.

You may complain to a supervisory authority, particularly where you live, work or believe an infringement occurred. The authority for the controller’s location is Sächsische Datenschutz- und Transparenzbeauftragte, https://www.datenschutz.sachsen.de/.

Where data are required for a requested feature, that feature cannot be provided, or may be limited, without them. No solely automated decision with legal or similarly significant effects is intended for the described app functions.

Updated: 2026-10-23 · Version 0bb611a31c94