Privacy Policy

ARCHIVED 2023-07-24, DATE APPROXIMATE · VERSION 20230724_rev01 · COMPARED WITH 20230520_rev01

Full text changes — 20230520_rev01 to 20230724_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

 In order to process payments, we forward the necessary payment data to our authorized payment service provider Stripe Payments Europe Ltd., Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland. Where necessary, Stripe will transfer the data to Stripe, Inc., located in the USA. Further information on data protection at Stripe and compliance with the requirements of Art. 44 GDPR can be found [here](https://stripe.com/de/privacy) and [here](https://stripe.com/de/privacy-center/legal). We have concluded a data processing agreement with Stripe, which allows Stripe to process the data solely in accordance with our instructions and not for its own purposes.
 In addition to the aforementioned data, we process further (usage-)data relevant for the provision and billing of our service, such as subscription ID, date and time of the subscription conclusion, billing period, successful payment processing, log-ins, number of translated characters and documents, upgrades and downgrades. The processing and storage of the aforementioned data is necessary for the conclusion of the contract as well as its performance and is therefore justified according to Art. 6 para. 1 sentence 1 lit. b) GDPR. If you yourself are not a party to the contract, but DeepL Pro is provided to you, e.g. by your employer or an organization to which you belong, we justify the processing of the data mentioned in section 6.1 and the aforementioned usage data via Art. 6 para. 1 sentence 1 lit. f) GDPR, as this is necessary for the performance of the business relationship with our customers, i.e. your employer or your organization.
 We store the data for the duration of the contract term and subsequently, if applicable, for the duration of statutory retention periods, insofar as these prescribe the retention for the respective types of data. We will delete your account if you wish to do so after canceling your subscription. Otherwise, we will maintain your account as DeepL account (see section [6.1]()) so that it is available to you in the event of a renewed subscription without you having to register again. This is in your as well as in our legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR.
+In your account in the section "usage", you can also view data about your usage behavior e.g., - depending on your subscription - the number of characters translated in the past or the number of documents translated. If you have a consumption-based subscription, such as the DeepL API Pro, you can also view the monthly costs incurred. We justify this data processing via Art. 6 para. 1 sentence 1 lit. f) GDPR, insofar as it is necessary for the performance of the contract, in particular for billing purposes or for managing the number of documents still available for translation. Insofar as the processing goes beyond what is necessary for the performance of the contract, we base the processing on our legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR, as we seek to meet our customers' wish to visualize information on usage behavior in a transparent manner. The graphical representation of the development of consumption over the contract period is considered to be also in the interest of our customers.
+In your account in the section "usage", you can also view data about your usage behavior e.g., - depending on your subscription - the number of characters translated in the past or the number of documents translated. If you have a consumption-based subscription, such as the DeepL API Pro, you can also view the monthly costs incurred. We justify this data processing via Art. 6 para. 1 sentence 1 lit. b) GDPR, insofar as it is necessary for the performance of the contract, in particular for billing purposes or for managing the number of documents still available for translation. Insofar as the processing goes beyond what is necessary for the performance of the contract, we base the processing on our legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR, as we seek to meet our customers' wish to visualize information on usage behavior in a transparent manner. The graphical representation of the development of consumption over the contract period is considered to be also in the interest of our customers.
 If you yourself are not a party to the DeepL Pro subscription, but access to our products is provided to you by your employer or an organization to which you belong, it is possible that we share data about your usage behavior (e.g. last login date) with your employer or organization. Such data transfer only takes place insofar as this corresponds to our legitimate interests as well as the legitimate interests of our customers in receiving information about the use of the subscriptions they have paid for and your interests do not override in the individual case.
 ### 6.3. Processing of the Submitted Texts and Translations
 We process the texts you submit to DeepL Pro and their translations only temporarily, insofar as this is necessary for the creation and transmission of the translation. The processing is therefore justified by Art. 6 para. 1 sentence 1 lit. b) GDPR. Your texts and the translations will - within the framework of the contractual agreements and as stated in section [5]() - not be stored permanently and will be deleted after the performance of the contractually owed service. The only exception is if you use the "save translations" feature in our apps. In this case, texts selected by you, including translations, can be saved locally on the device used and thus kept accessible at all times.
 If you use our glossary feature and store certain term pairs there, this data will be forwarded to our servers and stored for your account. If you want to use the glossary function as part of our service, the data processing that takes place in this context is necessary for the performance of our contract and is therefore also justified by Art. 6 para. 1 sentence 1 lit. b) GDPR.
 ## 7\. Translation of Documents
 ### 7.1. Translation of Documents with DeepL Translator and DeepL Pro
+You can translate documents in different file formats (.docx, .pptx, .html, .pdf and .txt) both with DeepL Pro as well as with DeepL Translator. When using document translation in DeepL Translator, section [3]() of this privacy policy applies. If you translate documents of the file types mentioned above while you are logged in to your DeepL Pro account, the texts you submit will only be processed temporarily and will be deleted after the completion of the translation process, including the translations themselves (see also section [5]() and [6.3]() of this privacy policy).
+You can translate documents in different file formats both with DeepL Pro (.docx, .pptx, .html, .pdf and .txt) as well as with DeepL Translator (.docx, .pptx and .pdf). When using document translation in DeepL Translator, section [3]() of this privacy policy applies. If you translate documents of the file types mentioned above while you are logged in to your DeepL Pro account, the texts you submit will only be processed temporarily and will be deleted after the completion of the translation process, including the translations themselves (see also section [5]() and [6.3]() of this privacy policy). With both DeepL Pro and DeepL Translator, the translation of your documents will be provided exclusively by DeepL and processed on our infrastructure in the EEA.
 ### 7.2. Temporary Storage of Metadata when Translating Documents
 Regardless of whether you use our paid or free service when translating documents, particularly the following data is stored for each translation process:
 - Status/progress of the translation process
  | TechnologyLocal Storage | ExpirySession | OwnerDeepL |
 | DeepL Pro-User Login/Session | IDuser | Description
 Stores the display name of logged-in users to display their name. Deleted if the user logs out.
  | TechnologyLocal Storage | Expiry7 days | OwnerDeepL |
+| DeepL Pro-User Login/Session | IDrgReload | Description
+| DeepL Pro-User Login/Session | IDdl\_auth | Description
+Used to login a user. Deleted after the login has been completed.
+Stores the "login state" of a user, the account type and sets a reminder for login. When user gets logged out accidentally, user will be helped with an error message.
+ | TechnologyCookie | Expiry10 seconds | OwnerDeepL |
+ | TechnologyLocal Storage | ExpiryPersistent | OwnerDeepL |
 | Release process | IDreleaseGroups | Description
 Used for gradual, controlled releases to ensure stability, quality and performance of our service and infrastructure.
  | TechnologyCookie | Expiry1 month | OwnerDeepL |
 | Release process | IDdapGid | Description
  | TechnologyCookie | Expiry12 months | OwnerDeepL |
 | Security | IDdl\_clearance | Description
 Used to prevent misuse of our services by using the Cloudflare bot score.
  | TechnologyCookie | Expiry5 minutes | OwnerDeepL |
+| Security | IDdl\_camellia\_client | Description
+Used to protect services from excessive use by individual users. This ensures that the service is not impacted for the remaining users.
+ | TechnologyCookie | Expiry1 month | OwnerDeepL |
 | Product Support/Zendesk | IDzendesk | Description
 Third-party cookie used by our ZenDesk support tool. Necessary for the operation of the service (bot detection and session management).
  | TechnologyCookie | Expiry1 month | OwnerThird Party - Zendesk |
 | Product Support/HubSpot | IDhubspot | Description
 You also have the right to lodge a complaint regarding the processing of your personal data with a supervisory authority, such as the data protection supervisory authority responsible for us: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2 - 4, 40213 Düsseldorf, email: [poststelle(at)ldi.nrw.de](mailto:poststelle@ldi.nrw.de).
 ## 20\. Changes to the Privacy Policy
 We reserve the right to amend this privacy policy. The current version of the privacy policy can be accessed at any time on our [website](https://www.deepl.com/privacy).
+Last update: March 2023
+Last update: May 2023