Privacy Policy

1. Controller

createtranslate, Fürstenrieder Str. 233, 81377 München, Germany. Contact for privacy matters: support@createtranslate.com, +49 155 6009 3428.

2. Principles

We process personal data only in accordance with the GDPR and German data protection law. This notice describes what we collect, why, on what legal basis, for how long, and your rights.

3. Data we collect

• Contact details (name, email, phone, postal address) for quotes, orders and enquiries
• Order data (items, options, prices, payment method — no card data, see §6)
• Uploaded documents you send us for translation
• Technical data (IP address, browser type, timestamp) from normal site operation, and, only with your consent, analytics data via Google Analytics 4 (§8)

4. Purposes and legal bases

• Handling quotes and orders, contract performance — Art. 6(1)(b) GDPR
• Pre-contractual measures (e.g. preparing an estimate) — Art. 6(1)(b) GDPR
• Statutory obligations, e.g. German commercial/tax retention rules — Art. 6(1)(c) GDPR
• Fraud prevention, IT security, abuse protection — Art. 6(1)(f) GDPR (legitimate interest)
• Audience measurement via GA4 — Art. 6(1)(a) GDPR (consent), only once you've agreed in the cookie banner

5. Uploaded documents — lifecycle

Documents you send for translation are transferred encrypted (TLS) and stored on EU-based infrastructure. Only the linguists assigned to your project can access them. Documents are retained for up to 30 days after your order is complete, to resolve queries or produce extra copies, then deleted from active systems. You can request earlier deletion at any time via support@createtranslate.com. Invoicing records are retained separately for the periods German commercial/tax law requires (§147 AO / §257 HGB) and contain only the data those laws require — not your document content.

6. Payment data

For bank transfer, we process the details your bank provides to match your payment. Card details are not accepted, transmitted or stored on this site while it runs in its current test mode.

7. Recipients and processors

Data is shared, where necessary, with: our hosting provider, the linguist(s) assigned to your project, and, only with your consent, Google Ireland Limited for analytics (§8). Data processing agreements (Art. 28 GDPR) are in place with all processors.

8. Cookies and Google Analytics 4

This site uses technically necessary cookies without requiring consent. Google Analytics 4 loads only after you actively consent in the cookie banner; without consent, no analytics script loads and no analytics cookie is set. See our Cookie Policy for detail. Where analytics is enabled, data may transfer to Google LLC in the US; Google relies on the EU-U.S. Data Privacy Framework and/or EU Commission-approved standard contractual clauses.

9. Retention

Contact and order data is deleted once no longer needed for the purposes above and no statutory retention period applies. Uploaded documents: see §5. Server logs are deleted automatically after a short period unless needed to investigate a specific security incident.

10. Your rights

Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection (Art. 21) to processing based on legitimate interest. You can withdraw consent at any time with future effect. You may also lodge a complaint with a data protection supervisory authority, in particular the Bavarian State Office for Data Protection Supervision (BayLDA).

11. Security

We protect our site and systems with technical and organisational measures against loss, misuse and unauthorised access, including encrypted transfer (TLS) and access-limited storage.

12. Changes

We update this notice as the law, our services, or our data processing change. The current version is always available on this page.