Privacy Policy

ARCHIVED 2021-02-23, DATE APPROXIMATE · VERSION 20210223_rev01 · COMPARED WITH 20201205_rev01

Full text changes — 20201205_rev01 to 20210223_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

 The data controller responsible for data processing pursuant to the GDPR, BDSG, other data protection laws applicable in the member states of the European Union, and other regulations relating to data protection is:
 DeepL GmbH
 Maarweg 165
 Köln
+If you have any questions or concerns about privacy, please contact privacy(at)deepl.com.
+If you have any questions or concerns about privacy, please contact datenschutz(at)dhpg.de.
 In accordance with Art. 6 Para. 1 S. 1 lit. a) GDPR, data processing for the purpose of contacting us is based on your voluntary consent. To process inquiries sent to this e-mail address, we use a ticketing system provided by Zendesk Inc. ("Zendesk"), 989 Market Street 300, San Francisco, CA 94102, USA. During this process, your data may also be transferred to the USA. We have concluded an agreement with Zendesk on the processing of such information which specifies that Zendesk may only process the data in accordance with our instructions and not for its own purposes. For more information on how personal data is handled by Zendesk and how Zendesk complies with the requirements of Art. 44 GDPR (particularly after the EU-US Privacy Shield has been declared invalid), please click [here](https://www.zendesk.com/company/privacy-and-data-protection/).
+DeepL's corporate Data Protection Officer, Dr. Christian Lenz, can be contacted at the following address: dhpg IT-Services GmbH, Bunsenstr. 10a, 51647 Gummersbach, via e-mail to privacy(at)deepl.com, or by telephone on +49 2261 8195 0.
+DeepL's corporate Data Protection Officer, Dr. Christian Lenz, can be contacted at the following address: dhpg IT-Services GmbH, Bunsenstr. 10a, 51647 Gummersbach, via e-mail to datenschutz(at)dhpg.de, or by telephone on +49 2261 8195 0.
 ## 2\. Scope of data protection
 Data protection applies to personal data as defined by the GDPR, i.e. all information relating to an identified or identifiable natural person. An identifiable natural person is deemed to be a natural person who can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier or to one or more specific attributes.
 ## 3\. Texts and Translations - DeepL translator (free version)
 | Site localization | IDi18nextLng | DescriptionStores the interface language selected by the user. | TechnologyLocal Storage | ExpiryPersistent Data | OwnerDeepL |
 | Privacy Settings | IDprivacySettings | DescriptionStores the user's cookie-banner decision. You can change the settings here. | TechnologyCookie | Expiry12 months | OwnerDeepL |
 | Translator | IDLMTBID | DescriptionUsed to guarantee the origin of a request to the translator and protect from malicious visitors. This ensures that the service is not compromised for the remaining visitors. | TechnologyCookie | Expiry6 months | OwnerDeepL |
 | Translator | IDLMT | DescriptionStores settings made explicitly by the user. E.g. preferred translation language or entries in the glossary. | TechnologyLocal Storage | Expiry1 month | OwnerDeepL |
 | Discovery and Onboarding | IDclickOnWordHint, LMT\_MessageBox, onboardingData, showAppOnboarding, AppOnboardingInfo | DescriptionStores if the user has on-boarded with features to ensure that onboarding prompts are only displayed once. | TechnologyLocal Storage | Expiry1 to 6 months | OwnerDeepL |
 | Checkout Process | IDFurther details about Stripe 3rd party cookies can be found under [https://stripe.com/cookies-policy/legal](https://stripe.com/cookies-policy/legal). | DescriptionFraud detection and security for check-out and payments. This cookie is only set if you enter the checkout process or view your account payment information. | TechnologyCookie (3rd party) | ExpirySession to 2 years | OwnerStripe |
+| Checkout Process | IDuserCountry | DescriptionStores the user's selected country during the checkout process. | TechnologyLocal Storage | ExpirySession | OwnerDeepL |
+| Checkout Process | IDuserCountry | DescriptionStores the user's selected country during the checkout process. | TechnologyLocal Storage / Cookie | ExpirySession | OwnerDeepL |
 | Checkout Process | IDnewpro-checkout | DescriptionStores the user's selected DeepL Pro plan during the checkout process. | TechnologyLocal Storage | Expiry7 days | OwnerDeepL |
 | DeepL Pro-User Login/Session | IDdl\_session | DescriptionStores users login token to keep the user logged in on the site. Permanently stored when "remember me" is selected during the login, or expires after 30 minutes of inactivity if not. | TechnologyCookie | Expiry100 years | OwnerDeepL |
 | DeepL Pro-User Login/Session | IDdl\_logoutReason | DescriptionWhen you get logged out accidentally, we will help you with an error message. We use this cookie to deliver this message to you so you can prevent this problem in the future. | TechnologyCookie | ExpirySession | OwnerDeepL |
 | DeepL Pro-User Login/Session | IDep | DescriptionIp-Based Enterprise Account login token. Checked once per session and deleted afterwards. | TechnologyLocal Storage | ExpirySession | OwnerDeepL |
 | DeepL Pro-User Login/Session | IDuser | DescriptionStores the display name of logged-in users to display their name. Deleted if the user logs out. | TechnologyLocal Storage | Expiry7 days | OwnerDeepL |
+| Release process | IDreleaseGroupId, releaseGroupMemberships | DescriptionUsed for gradual, controlled releases to ensure stability, quality and performance of our service and infrastructure. | TechnologyLocal Storage | Expiry1 month | OwnerDeepL |
+| Session ID | IDdap.sid, dap.sid\_updated | DescriptionSession ID and timestamp. Automatically deleted after 30 minutes of inactivity. | TechnologySession Storage | ExpirySession | OwnerDeepL |
+| Release process | IDreleaseGroups | DescriptionUsed for gradual, controlled releases to ensure stability, quality and performance of our service and infrastructure. | TechnologyCookie | Expiry1 month | OwnerDeepL |
+| Session ID | IDdapSid | DescriptionSession ID and timestamp. Automatically deleted after 30 minutes of inactivity. | TechnologyCookie | ExpirySession | OwnerDeepL |
 | App Usage Statistics - only for DeepL Apps | IDappUsageStats | DescriptionRemembers when the user last used the app. | TechnologyLocal Storage | ExpiryPersistent Data | OwnerDeepL |
 ### Performance
 | Context | ID | Description | Technology | Expiry | Owner |
 | --- | --- | --- | --- | --- | --- |
 Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2 - 4, 40213 Düsseldorf, E-Mail: poststelle@ldi.nrw.de.
 ## 16\. Changes to the privacy policy
 We reserve the right to amend this privacy policy. The current version of the privacy policy can be accessed at any time on our [website](https://deepl.com/privacy.html).
+Last update: November 2020
+Last update: February 2021