Privacy Policy

1. Data controller

Artoption GmbH
Ludwig-Erhard-Str. 18
20459 Hamburg
Germany

Email: ad@bigpdf.com

2. Core technology: local browser processing

The central offering of zugpferd.io – the XRechnung and ZUGFeRD viewer – processes all uploaded XML files exclusively locally in your web browser using JavaScript.

• The XML file is never transmitted to our servers or any third-party servers.
• We have no technical access to the contents of the invoices you process.
• No invoice data (amounts, recipients, tax IDs, etc.) is stored anywhere.
• When you close the browser tab, all data is irreversibly gone – because it never reached our server.

Legal basis: since no personal data is processed, the GDPR does not apply to this part of the service.

3. Hosting & server logs

zugpferd.io is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus.

When you visit our website, the web server automatically records server log files containing:

• IP address of the requesting device (anonymised after 7 days)
• Date and time of access
• URL accessed
• Data volume transferred
• Referrer URL (previously visited page)
• Browser type and operating system (User-Agent)

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).
Retention: 14 days, then automatic deletion.

4. Google AdSense

We use Google AdSense (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to display advertisements.

Google AdSense uses cookies and web beacons to show users interest-based advertising. Data processed may include:

• IP address
• Browser type and operating system
• Pages visited and time spent
• Device identifiers (on mobile devices)
• Location data (if permitted)

Legal basis: Art. 6(1)(a) GDPR (consent). You will be asked for consent on your first visit via the cookie banner.

Opt-out: You can disable personalised ads at adssettings.google.com or install the browser plugin at tools.google.com/dlpage/gaoptout.

Third-country transfer: Google processes data including in the USA. Google LLC is certified under the EU-US Data Privacy Framework (Art. 45 GDPR).

5. Google Fonts

We use Google Fonts (Google Ireland Limited) to embed typefaces. When the page loads, your browser connects to Google's servers to download fonts, transmitting your IP address.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in consistent, readable presentation).

6. Cookies

We do not set any cookies ourselves. Google AdSense sets cookies for ad delivery and measurement. You can disable cookie storage in your browser settings. Note that this may affect the functionality of some parts of the website.

• Google AdSense: Cookies for ad delivery and measurement (duration: up to 13 months).
• Google Fonts: No persistent cookies; only a temporary connection to load typefaces.

7. Your rights

Under the GDPR you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR)

To exercise your rights, contact: ad@bigpdf.com

You also have the right to lodge a complaint with a supervisory authority. The competent authority for Artoption GmbH is the Hamburg Commissioner for Data Protection and Freedom of Information (datenschutz-hamburg.de).

8. Changes to this privacy policy

We reserve the right to update this privacy policy to reflect changes in law or in our service. The current version is always available on this page. Current version: January 2025.