Privacy Policy

1. Controller

Armen Sarkisian, Komitas 57, 0032 Yerevan, Armenien
E-Mail: gmbh@vitersoft.com

2. Hosting and server logs

The site is operated and delivered by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit it, Cloudflare processes technically necessary connection data such as IP address, time, requested address and browser identification to deliver the site securely (Art. 6 (1) (f) GDPR). Logs of the server functions (time, requested address, status code, error messages — no form content) are kept by Cloudflare for 3 days (free plan) or 7 days (paid plan). For transfers to the USA, Cloudflare states that it relies on its certification under the EU-U.S. Data Privacy Framework and additionally on the EU Standard Contractual Clauses.

3. Deadline checker

The deadline is calculated in your browser. Your input is not sent to us; it is only kept in your browser’s session storage for the duration of the session so that it survives a language switch.

4. Orders

For an order we process the company name, register number, financial year, size class, your name, your email address, optionally your phone number and notes, where applicable your accountant’s email address, and the uploaded file. The purpose is to perform the order, including filing with the Unternehmensregister (Art. 6 (1) (b) GDPR). To record your confirmation and to prevent abuse we store the time and a pseudonymised hash of your IP address (Art. 6 (1) (f) GDPR).

Data is stored with Supabase in a data centre in Frankfurt (EU). Files are kept in a private storage and are only reachable through time-limited links. For the filing we transmit the annual accounts and the company details to Bundesanzeiger Verlag GmbH, operator of the Publikations-Plattform and the Unternehmensregister.

Retention: we delete the file 30 days after sending you the filing confirmation, and 90 days after an unpaid order. Contact details are deleted 12 months after the order is completed (for possible questions from the Bundesamt für Justiz), or after 90 days for unpaid orders. Statutory retention duties for accounting records (in particular § 147 AO, § 257 HGB) remain unaffected.

5. Payment

Payment is made by invoice; we send you the payment details by email. For this we process the invoice details and the details of the incoming payment (payer, amount, date, reference) to perform the contract and to meet statutory retention duties (Art. 6 (1) (b) and (c) GDPR).

6. Sending emails

Order, confirmation and reminder emails are sent via the Brevo service. The contracting party is Sendinblue, a French simplified joint-stock company, 9-17 rue Salneuve, 75017 Paris, France, registered with the Paris Trade and Companies Register under number 498 019 298, as processor. The email address, the content of the email and any attachment are transmitted. Brevo uses sub-processors that may process data outside the EEA, including in the USA, Canada, Serbia and India; depending on the recipient the basis is the EU Standard Contractual Clauses, the EU-U.S. Data Privacy Framework or an adequacy decision of the European Commission. Brevo deletes or anonymises the data no later than 100 days after the end of the contract.

Our emails are plain text without images; their links lead directly to their target, not through a Brevo redirect. Brevo logs the sending and delivery of every email and keeps its content in its sending log.

7. Guide when the accounts are not ready

If you tell us that the accounts are not ready yet, we send a guide to the email address you provide, at your request (Art. 6 (1) (b) GDPR). We delete the email address after 90 days.

8. Deadline reminder

For the reminder we store your email address, the company name and the deadline. The reminder only becomes active after you confirm it via a link (double opt-in; Art. 6 (1) (a) GDPR). You can unsubscribe at any time via the link in the email. Unconfirmed requests are deleted after 7 days, sent or cancelled reminders after 30 days.

9. Analytics

We use Plausible Analytics (Plausible Insights OÜ, Estonia). Plausible sets no cookies and stores no personal data permanently; the IP address is only used briefly to create a daily rotating anonymous counter. The legal basis is our legitimate interest in privacy-friendly statistics (Art. 6 (1) (f) GDPR).

10. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and the right to withdraw consent with effect for the future (Art. 7 (3) GDPR). Please send requests, including deletion requests, to gmbh@vitersoft.com. You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular the authority of your habitual residence or place of work.

No automated decision-making, including profiling, takes place.