Data protection

The controller for the processing described here is MTS MorphoLogic Translation Services GmbH, An der Ronne 138, D-50859 Köln, Deutschland — reachable at info@morphologic-translations.de or +49 2234 3898370. The Impressum carries the full details.

This website is delivered through the network of Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, United States), which acts as our hosting provider on our behalf. With every request, Cloudflare processes the IP address it came from, the time, the page requested, and the browser and operating system reported by your device. That is what makes it possible to serve the page and to fend off attacks or faults. The legal basis is our legitimate interest in operating the site securely (Art. 6(1)(f) GDPR). We have a data processing agreement with Cloudflare. As Cloudflare may also process data outside the EU, a transfer to the United States can take place; Cloudflare is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). The logs are kept only as long as they are useful for that, and are not combined with anything else or used to identify you.

We use Cloudflare Web Analytics to see which pages get read. It sets no cookie and stores nothing on your device. A small script reports the page you opened, the site you came from if there was one, and the country, browser and device type your request already carried; Cloudflare aggregates that into counts. No identifier follows you from page to page or from one visit to the next, and we cannot pick you out of what we see. The legal basis is our legitimate interest in knowing whether the site is read at all (Art. 6(1)(f) GDPR). Because nothing is written to or read from your device, this needs no consent banner (§ 25(1) TDDDG).

The contact form asks for your name and email address, and optionally your company, a subject and your message. We use them to answer you and for nothing else — no newsletter, no profiling, no passing them on for marketing. The legal basis is the handling of your inquiry, which is either a step toward a contract (Art. 6(1)(b) GDPR) or our legitimate interest in replying to you (Art. 6(1)(f) GDPR).

The message reaches us as email, delivered by our processor Resend (Resend, Inc., United States) under a data processing agreement. Sending runs through Resend's data center in the EU (Ireland); as Resend is a US company, access from the United States cannot be ruled out. Such a transfer is covered by the EU Standard Contractual Clauses agreed with Resend (Art. 46(2)(c) GDPR). We keep the correspondence for as long as the matter needs and as long as commercial law requires us to.

Before the form can be sent, Cloudflare Turnstile checks that the request comes from a person rather than a script. It is a privacy-preserving alternative to a CAPTCHA: it does not profile you across sites, and it reads signals your browser already sends rather than setting a tracking cookie — though if it cannot decide, it may ask you to confirm, and that check can set a short-lived cookie strictly necessary for it. Your request is also counted against a short time limit, so that no one can flood the form. The legal basis for both is our legitimate interest in keeping the form usable and free of abuse (Art. 6(1)(f) GDPR); Cloudflare acts as our processor.

This site sets no tracking cookies, which is why it does not ask you to consent to any. If you choose a color theme, that choice is saved in your browser’s local storage so the site can honor it on your next visit. It stays on your device, is not sent to us, and clearing your browser data removes it.

No advertising network, no profiling and no cross-site tracking run on this site. Its fonts are served from this domain rather than from a font network, and site search runs entirely in your browser against a static index. The videos, too, are served from this domain rather than from a video platform. The links to LinkedIn profiles on the About page are plain links: only when you click one do you leave our website, and LinkedIn then processes data under its own terms. There are no advertising, social-media or comment widgets embedded in the pages. Apart from the counting described above, and the bot check on the contact form, reading a page sends no request to a third party.

Under the GDPR you may ask us for access to the personal data we hold about you (Art. 15), for its correction (Art. 16) or erasure (Art. 17), for processing to be restricted (Art. 18), for the data in a portable form (Art. 20), and you may object to processing based on our legitimate interests (Art. 21). Writing to the address above is enough — no particular form is needed.

You also have the right to complain to a data protection supervisory authority. The one responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.

If what the site does changes — if it ever gains analytics, a newsletter or an embedded service — this statement is updated in the same breath, and the date below moves with it.