Privacy Policy

FIRST SEEN 2026-07-29 · VERSION 20260729_rev01 · COMPARED WITH 20260504_rev01

Full text changes — 20260504_rev01 to 20260729_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

1Protecting your privacy and personal data is very important to us. We therefore only use your personal data within the scope of legal regulations, in particular the General Data Protection Regulation ("GDPR") and the German Federal Data Protection Act ("BDSG"). With this privacy policy, we would like to inform you - regardless of whether you set up a DeepL account, use our DeepL Pro subscriptions, our various apps or visit our website - about the nature, scope and purposes of the collection, use and processing of your personal data by DeepL SE.
1###### Table of contents
22
3- [1\. Data controller / Contact / Data Protection Officer]()
4- [2\. Scope of Data Protection]()
5- [3\. Texts, Translations and Improvements - DeepL Translator / Write (free version)]()
6- [4\. Texts and Improvements - DeepL Translator Pro / DeepL API Pro / DeepL Write Pro]()
7- [5\. DeepL Voice]()
8- [6\. Creating a DeepL account and Signing up for a DeepL Pro Subscription]()
9 - [6.1 Creating a DeepL account]()
10 - [6.2 Signing up for DeepL Pro]()
11 - [6.3 Processors involved in the DeepL Pro checkout process]()
12 - [6.4 Processing of usage data]()
13 - [6.5 Processing of the Submitted Texts and Translations / Improvements]()
14- [7\. Translation of Documents]()
15 - [7.1 Translation of Documents with DeepL Translator and DeepL Pro]()
16 - [7.2 Temporary Storage of Metadata when Translating Documents]()
17- [8\. Automatic Collection of Data via Website Access]()
18- [9\. Use of Cookies and other Technologies on deepl.com]()
19 - [9.1 Use of Cookies, Web Storage and other Technologies on deepl.com]()
20- [Necessary]()
21- [Performance]()
22- [Functional]()
23- [Marketing]()
24- [10\. Analysis of User Behaviour]()
25- [11\. DeepL Apps]()
26- [12\. DeepL API Free]()
27- [13\. Connecting with our Customer Team, including via our ChatBot]()
28 - [13.1 Recording of dialer and Zoom calls]()
29 - [13.2 Sales and Support Requests]()
30 - [13.3 Privacy Requests]()
31- [14\. DeepL Newsletter]()
32 - [14.1 Product Newsletter]()
33 - [14.2 Marketing Newsletter and other marketing communication]()
34 - [14.3 Email Service Provider HubSpot]()
35- [15\. User research and surveys]()
36 - [15.1 User surveys]()
37 - [15.2 Customer Surveys]()
38 - [15.3 Typeform]()
39 - [15.4 Qualtrics]()
40 - [15.5 Hotjar]()
41 - [15.6 UserTesting]()
42 - [15.7 Ethnio]()
43- [16\. DeepL's Social Media Pages]()
44- [17\. DeepL Bridges (DeepL Community Platform)]()
45 - [17.1 Registration]()
46 - [17.2 Information published on Platform]()
47 - [17.3 Notifications]()
48 - [17.4 Content moderation]()
49 - [17.5 Cookies]()
50 - [17.6 Legal basis]()
51 - [17.7 Account Deletion and Data Retention]()
52 - [17.8 Bettermode as Processor]()
53- [18\. Webinars]()
54- [19\. Job Applications]()
55- [20\. Data Security]()
56- [20\. Your Rights]()
57- [22\. Special provisions for users from South Korea]()
58 - [22.1 Contact and DeepL Chief Privacy Office (CPO)]()
59 - [22.2 Additional information for usage of DeepL's free service]()
60 - [22.3 Data Deletion and Retention Periods]()
61 - [22.4 Data Security and Pseudonymisation]()
62 - [22.5 Rights of Data Subject and Legal Representative]()
63 - [22.6 Children's Privacy]()
64 - [22.7 Overseas Transfer and Delegation of Personal Data Processing]()
65- [23\. Changes to the Privacy Policy]()
66
67Protecting your privacy and personal data is very important to us. We therefore only use your personal data within the scope of legal regulations, in particular the General Data Protection Regulation ("GDPR") and the German Federal Data Protection Act ("BDSG"). With this privacy policy, we would like to inform you - regardless of whether you set up a DeepL account, use our DeepL Pro subscriptions, our various apps or visit our website - about the nature, scope and purposes of the collection, use and processing of your personal data by DeepL.
68
369## 1\. Data controller / Contact / Data Protection Officer
470
5The data controller responsible for data processing pursuant to the GDPR, BDSG, other data protection laws applicable in the member states of the European Union, and other regulations relating to data protection is:
71Where we reference DeepL in this privacy notice we refer to the company in the group that acts as controller of, and is responsible for processing your personal data.
672
7DeepL SE Maarweg 165 50825 Cologne Germany
73The DeepL group is made up of different legal entities, which are:
874
975If you have any questions or concerns about privacy, please contact privacy(at)deepl.com. For the conclusion of a data processing agreement pursuant to Art. 28 GDPR (see in detail section [4]() and [5]()) and for general questions about our products, please contact sales(at)deepl.com. Further information on the data processing when contacting DeepL can be found in section [13]().
1076
1177DeepL's external corporate Data Protection Officer, Dr. Christian Lenz, can be contacted at the following address: dhpg IT-Services GmbH, Bunsenstr. 10a, 51647 Gummersbach, via email to datenschutz(at)dhpg.de, or by telephone on +49 2261 8195 0.
1278
1379## 2\. Scope of Data Protection
53119Please note that the creation of a DeepL account is a prerequisite for signing up for and using a DeepL Pro subscription (see section [6.2]()), but creating a DeepL account does not oblige you to purchase a paid subscription. Even if you do not sign up for a DeepL Pro subscription after creating the account, the DeepL account remains available and you can use it. You can delete your DeepL account at any time within the account settings or by sending an e-mail with your request to support(at)deepl.com.
54120
55121If you use your business email address for creating an account with DeepL, we may share this email address with the holder of the company email domain associated with your email address. We will only do this, if the company has legitimate reasons to ask for this data e.g., is interested in purchasing DeepL Pro licenses for the whole company and has confirmed to us that email addresses under their company email domain may only be used for business purposes and may not be used for private purposes. In some cases, sharing of data may also include sharing of usage data associated with your account to allow the company to assess their specific need on DeepL Pro licenses. The sharing of this data is in DeepL's legitimate interest to best support our customers in the acquisition, roll-out and adoption of our paid services, Art. 6 para. 1 sentence 1 lit. f) GDPR.
56122
57123If your company uses Single Sign-On (SSO) to log in to DeepL, there is no need for a separate registration with DeepL. When you log in via Single Sign-On your company transmits your email address as well as your first and last name directly to us. We also process this data on the basis of Art. 6 para. 1 sentence 1 lit. b) GDPR.
58124
125If your organization uses DeepL through another AI tool (e.g. ChatGPT, Claude, or Cursor) using DeepL's MCP integration, DeepL receives your user ID and your organization's name to authenticate your access. We process this to perform our contractual obligations with your organization. Your content sent for translation is only used for the translation and is not stored by DeepL.
126
59127### 6.2 Signing up for DeepL Pro
60128
61129If, after creating a DeepL account, you sign up for a DeepL Pro subscription, additionally the following personal data will be collected and processed for the purposes of concluding and fulfilling the contract (Art. 6 para. 1 sentence 1 lit. b) GDPR):
62130
63131- First name, surname, and where applicable, company name
64132- Address
211279### 13.1 Recording of dialer and Zoom calls
212280
213281Our customer team is conducting dialer and Zoom calls with prospects and customers to provide them with general information about DeepL's services and to advise them according to their needs. In order to continue to provide excellent customer service and to continuously improve it, we may record and transcribe the dialer and zoom calls with prospects and customers in certain countries with their consent, using the Salesloft platform provided by Salesloft, Inc., 1180 West Peachtree St NW Suite 2400, Atlanta, GA 30309. We have concluded a data processing agreement with Salesloft and Salesloft is therefore only allowed to process the data according to our instructions and not for its own purposes.
214282
215283Recordings of the calls, including transcriptions of these, are used for internal training and coaching as well as for documentation purposes. At the beginning of each dialer call, an automated message will inform the called party that the call is being recorded. If you do not wish to participate in a recorded call, you can end the call at any time. For Zoom calls, the Zoom invitation will inform you that the call is being recorded and that you can opt out when you join the call.
216284
217All recorded calls, including transcriptions, will be securely stored for a period of two years from the date of the call. After this period, the recordings will be automatically deleted from our systems. You also have the rights mentioned in section 20.
285All recorded calls, including transcriptions, will be securely stored for a period of two years from the date of the call. After this period, the recordings will be automatically deleted from our systems. You also have the rights mentioned in section 21.
218286
219287### 13.2 Sales and Support Requests
220288
221289If you would like to send us a sales enquiry in order to receive further information about our products and subscription plans or to start contract negotiations, you are welcome to use our sales contact forms. In addition to your email address, you are required to provide your name and telephone number; all other information is optional. For the provision of our contact forms, we use the HubSpot service (see section 14).
222290
223291We also use the Customer Relationship Management System (CRM) of Salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 München, Deutschland ("Salesforce CRM") to manage our customer database, which includes our existing and potential customers, and to organize sales and communication processes. Furthermore, Salesforce CRM enables us to analyse our customer-related processes. We have concluded a data processing agreement with Salesforce and Salesforce is therefore only allowed to process the data according to our instructions and not for its own purposes. The customer data is stored on servers in the EU.
297365The legal basis for the operation of our social media profiles and the insights function is our legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f) GDPR in using the pages as an information channel for our company. With regard to the insights function, we have a legitimate interest in understanding the visits and interactions with our page in order to be able to respond to them and to further improve our presence. Insofar as your consent given to the social network justifies the data processing within the framework of the respective social platform, processing is carried out on the basis of this consent.
298366
299367In addition, we use the LinkedIn image pixel to record and evaluate conversions from our LinkedIn advertising campaigns. Conversions mean whether a user is successfully led to our website via our LinkedIn advertising campaign. Furthermore, user interactions - i.e., individual steps taken by the user on our website - are to be recorded and tracked via conversions. The LinkedIn image pixel is embedded on certain pages of our website and provides feedback to LinkedIn if a conversion has taken place. In doing so, LinkedIn processes the user's IP address as well as the presence of a cookie set by LinkedIn, which provides conclusions about the conversion. The processing of your personal data is based on your consent (Art. 6 para. 1 sentence 1 lit. a) GDPR). The consent is given via the cookie settings. You can revoke your consent at any time with effect for the future by revoking the consent for the "Marketing" cookie category or deleting your browser cache.
300368
301369Please note that we together with the operator of the respective social network are jointly responsible for the data processing operations triggered when you visit our page. However, the operators of the social networks may also process your data for their own purposes, which are not depicted in this privacy policy. It is also possible that data collected about you will be transferred to third countries, in particular the USA. We have no influence on this data processing and refer to the privacy policies of the respective social networks e.g., for Facebook [here](https://www.facebook.com/policy.php), for Instagram [here](https://www.facebook.com/privacy/policy/), for Twitter [here](https://twitter.com/en/privacy), for LinkedIn [here](https://www.linkedin.com/legal/privacy-policy) and for Xing [here](https://privacy.xing.com/en/privacy-policy).
302370
303In principle, you can assert your rights (see section [20]() below) both against us and against the operator of the respective social platform. However, we would like to point out that despite the joint controllership, you can most effectively assert your rights with the operators of the social networks. If you need help, you can contact us.
371In principle, you can assert your rights (see section [21]() below) both against us and against the operator of the respective social platform. However, we would like to point out that despite the joint controllership, you can most effectively assert your rights with the operators of the social networks. If you need help, you can contact us.
304372
305373## 17\. DeepL Bridges (DeepL Community Platform)
306374
307375### 17.1 Registration
308376
309377If you choose to participate in the DeepL online community platform known as "DeepL Bridges" (the "Platform"), you must first have an existing DeepL account. You must use the credentials for your DeepL account to sign in to the Platform. We will use your first name and name as well as the email address used for the respective DeepL account for your Platform account.
373441- Right to erasure - Should you wish your personal data to be deleted, we will comply with your request as far as legally possible.
374442- Right to restriction of processing - Should you wish to restrict use, we will comply with your request as far as legally possible.
375443- Right to withdraw your consent - Should you wish to revoke any previously granted consent, we will comply with your request. Revocation does not affect the permissibility of the processing of your data up to now.
376444
377445**In addition, you can object to the further processing of your data if we process your data based on our legitimate interest (Art. 6 para. 1 sentence 1 lit. f), Art. 21 GDPR). If we process your data for the purpose of direct advertising, you have a general right to object. If we do not process your data for advertising purposes, the objection must be based on your particular situation.**
378446
379You also have the right to lodge a complaint regarding the processing of your personal data with a supervisory authority, such as the data protection supervisory authority responsible for us: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2 - 4, 40213 Düsseldorf, email: [poststelle(at)ldi.nrw.de](mailto:poststelle@ldi.nrw.de).
447UK residents can make a complaint to us via [privacy@deepl.com](mailto:privacy@deepl.com). We will acknowledge your complaint within 30 days and keep you informed throughout. You also have the right to complain to the regulator about the DeepL's processing activities and compliance under applicable data protection legislation. Where you are based in:
380448
381## 21\. Special provisions for users from South Korea
449- **Germany**, you can contact the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, at (i) Kavalleriestraße 2 - 4, 40213 Düsseldorf; or (ii) poststelle@ldi.nrw.de;
450- **Other EU member states**, you may contact your local supervisory authority - a full list of supervisory authorities in the EU can be found [here](https://www.edpb.europa.eu/about-edpb/about-edpb/members_en); or
451- **UK**, you can contact the Information Commissioner's Officer ("ICO") and you can make your complaint via the ICO's website [here](https://ico.org.uk/make-a-complaint/).
382452
383### 21.1 Contact and DeepL Chief Privacy Office (CPO)
453## 22\. Special provisions for users from South Korea
384454
455### 22.1 Contact and DeepL Chief Privacy Office (CPO)
456
385457If you have any specific questions or concerns about privacy and data protection in South Korea, also with regard to previous versions of this privacy policy, please contact the privacy team of DeepL at privacy(at)deepl.com.
386458
387### 21.2 Additional information for usage of DeepL's free service
459### 22.2 Additional information for usage of DeepL's free service
388460
389461In addition to section 3, please note that if you enter personal data when using DeepL Translator / Write in the free version contrary to the terms of use, this data may be checked by a human.
390462
391### 21.3 Data Deletion and Retention Periods
463### 22.3 Data Deletion and Retention Periods
392464
393465As described above, we will process your data for as long as is necessary for the stated purpose and if applicable, to the extent that you have consented to. Subsequently, we will delete your personal data without undue delay. We will permanently destroy any personal data saved in electronic format in a way that it cannot be restored and recovered. Personal information printed on paper will be destroyed by shredding thereof.
394466
395467However, as outlined above in section 6.2, DeepL is obliged to retain certain personal data of users as required by applicable laws. Relevant laws under Korean law include, in particular, the Act on the Consumer Protection in Electronic Commerce (Article 6) which provides for the retention of data on contract as well as withdrawals and revocations thereof for 5 years, data on the provision of services for 5 years and data on consumer complaints or consumer disputes for 3 years. The Protection of Communications Secrets Act provides in Article 15-2 to retain records of computer communication or internet log and trace data of access point for 3 months.
396468
397### 21.4 Data Security and Pseudonymisation
469### 22.4 Data Security and Pseudonymisation
398470
399In addition to the measures set out in section 19 of this privacy policy, under the Korean Personal Information Protection Act we take various technical, administrative and physical measures to ensure data security and the security of personal data. For example, we manage access rights to our systems that contain personal data as well as pseudonymized data in a traceable manner; we take various measures to prevent unauthorised access to personal and pseudonymized data, including maintaining a VPN network; we regularly train our employees in the handling of personal data, including pseudonymized data and data security. We regularly evaluate our data processing procedures and modify them as necessary. In addition, we work with strict physical access controls to e.g. our IT infrastructure and data storage systems as well as to documents that contain personal data.
471In addition to the measures set out in section 20 of this privacy policy, under the Korean Personal Information Protection Act we take various technical, administrative and physical measures to ensure data security and the security of personal data. For example, we manage access rights to our systems that contain personal data as well as pseudonymized data in a traceable manner; we take various measures to prevent unauthorised access to personal and pseudonymized data, including maintaining a VPN network; we regularly train our employees in the handling of personal data, including pseudonymized data and data security. We regularly evaluate our data processing procedures and modify them as necessary. In addition, we work with strict physical access controls to e.g. our IT infrastructure and data storage systems as well as to documents that contain personal data.
400472
401473As outlined above in section 9.2, we analyze pseudonymized data about our customers' use of DeepL Pro products to understand general usage habits and derive different target and user groups. Pseudonymized data is used only until the purpose of data analysis is fulfilled and is destroyed thereafter.
402474
403### 21.5 Rights of Data Subject and Legal Representative
475### 22.5 Rights of Data Subject and Legal Representative
404476
405As outlined above in section 19, you have the right to exercise your rights as a data subject by contacting us at privacy(at)deepl.com. DeepL Pro-customers can also reach out to support(at)deepl.com for assistance.
477As outlined above in section 20, you have the right to exercise your rights as a data subject by contacting us at privacy(at)deepl.com. DeepL Pro-customers can also reach out to support(at)deepl.com for assistance.
406478
407479You may exercise your rights through a legal representative or an authorized agent. In such cases, the legal representative or agent must present a signed power of attorney in writing to act on your behalf.
408480
409### 21.6 Children's Privacy
481### 22.6 Children's Privacy
410482
411483Our service is not intended for children under the age of 14, and DeepL does not knowingly collect personal data from children under the age of 14. If you have any reason to believe that a child under the age of 14 has provided personal data to DeepL through the service, please contact us at privacy(at)deepl.com. We will investigate any such notification and if appropriate, delete the personal data from our systems.
412484
413### 21.7 Overseas Transfer and Delegation of Personal Data Processing
485### 22.7 Overseas Transfer and Delegation of Personal Data Processing
414486
415487We may transfer personal data to the overseas delegatees listed below in order to provide services and enhance customer convenience. In order to deliver our services, we may store your personal data on DeepL servers located within the EEA and transfer it to the delegatees located abroad. The overseas transfer is conducted through telecommunication network from time to time as needed. The transferred data will be retained and used in accordance with our privacy policy's retention periods. This overseas transfer is essential for the provision of our services. Therefore, if you refuse the overseas transfer, it may restrict your access to our services.
416488
417489- Process payments: We forward the necessary payment data to our authorized payment service provider Stripe Payments Europe Ltd., Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland. Where necessary, Stripe will transfer the data to Stripe, Inc., located in the USA. You can contact the company through duo(at)stripe.com.
418490- Secure the use of website: Our website uses services of Cloudflare, Inc, 101 Townsend St, San Francisco, CA 94107, USA ("Cloudflare"). To protect our website, the data transfer between your browser and our servers is routed through Cloudflare's infrastructure in order to analyze whether it is an abusive attack. However, since your translation requests and other customer data are encrypted between your end device and the DeepL servers, Cloudflare does not have any access to this data, but only to meta-data (such as your IP address). You can contact the company through privacyquestions(at)cloudflare.com.
419491- Support enquires: If you send us a support enquiry, your request is forwarded to the ticket system of the provider Zendesk Inc. ("Zendesk"), 1019 Market Street, San Francisco, CA 94103, USA. We use Zendesk to process your enquiry and your further communication with us, we also use the service to manage our customer database. You can contact the company through privacy(at)zendesk.com.
425497- Conduct interviews: We use a service provided by UserTesting, Inc. 144 Townsend Street, San Francisco, CA 94107 USA to conduct interviews with you. UserTesting uses different subcontractors - such as Zoom - which are also partly located in third countries outside the EU. Therefore, in certain cases, there may be a transfer of your data to the USA. You can contact the company through [privacy@usertesting.com](mailto:privacy@usertesting.com).
426498- Host Webinars: We use a service provided by Zoom Video Communications, Inc. ("Zoom"), 55 Almaden Blvd. Suite 600, San Jose, CA 95113, USA, on whose platform the webinars are held. You can contact the company through [privacy@zoom.us](mailto:privacy@zoom.us).
427499- Job applications: In order to process your application data, it will be forwarded to the service provider Localyze UG (haftungsbeschränkt), Bäckerbreitergang 28, 20355 Hamburg, which carries out the Pre-Check on behalf of DeepL. You can contact the company through [bohoerdenmdelung@dataguard.de](mailto:bohoerdenmdelung@dataguard.de).
428500- Job applications: In order to process your application data, it will be forwarded to the service provider Recruitee B.V., Keizersgracht 313, 1016 EE Amsterdam, The Netherlands, which operates the application system. You can contact the company through [hello@recruitee.com](mailto:hello@recruitee.com).
429501- Job applications: In particular applications for developer positions, the applicant's name and email address may be forwarded to the service provider Codesse Ltd., FF28, Kao Hockham Building, Edinburgh Way, Harlow, Essex, CM20 2NQ, United Kingdom, which provides services regarding the provision and review of coding challenges during an application. You can contact the company through [rick@codesse.com](mailto:rick@codesse.com)
430502
431## 22\. Changes to the Privacy Policy
503## 23\. Changes to the Privacy Policy
432504
433505We reserve the right to amend this privacy policy. The current version of the privacy policy can be accessed at any time on our [website](https://www.deepl.com/en/privacy).