Privacy Policy | PDF CreateMate

Last Updated: April 3, 2025

We are pleased about your interest in our website. The protection of your privacy is very important to us. Below we inform you in detail about the handling of your data.

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Pinetco GmbH Clausewitzstr. 21 42389 Wuppertal

Email: contact@pdf-createmate.de

2. Data Protection Officer

If you have any questions about data protection, please contact us at: contact@pdf-createmate.de

3. Your Rights

You have the following rights regarding your personal data:

Right of Access: You have the right to request information about your personal data processed by us.
Right to Rectification: You have the right to request the correction of inaccurate personal data.
Right to Erasure: You have the right to request the deletion of your personal data.
Right to Restriction of Processing: You have the right to request the restriction of processing of your personal data.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object: You have the right to object to the processing of your personal data at any time.
Right to Withdraw Consent: If you have given consent, you have the right to withdraw it at any time.
Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority.

4. Right to Object in Special Cases

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

5. Data Collection on Our Website

5.1 Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address

This data is not merged with other data sources. The collection of this data is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of their website – for this purpose, the server log files must be recorded.

5.2 Cookies

Our website uses cookies. Cookies are small text files that are stored on your device and saved by your browser. They serve to make our offer more user-friendly, effective, and secure.

We use the following types of cookies:

Technically necessary cookies: These are essential for the operation of our website.
Functional cookies: These enable enhanced functionality and personalization.
Analytics cookies: These help us understand how visitors interact with our website.

You can set your browser to inform you about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser.

5.3 Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

The processing of this data is based on Article 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR) if this was requested.

6. Registration and Account

6.1 Registration

To use certain features of our Platform, you must register by providing your email address, name, and organization details. The legal basis for data processing is Article 6(1)(b) GDPR.

6.2 HubSpot Connection

Our Platform integrates with HubSpot. When you connect your HubSpot account, we access the following data:

Contact information
Company information
Deal information
Custom object data
File storage

This data is processed solely for the purpose of providing our document generation services. The legal basis is Article 6(1)(b) GDPR (contract performance).

7. Data Processing for Document Generation

7.1 Document Templates

When you upload document templates, these are stored on our servers for the purpose of providing our services. Templates may contain placeholders for HubSpot data.

7.2 Generated Documents

When documents are generated, data from your HubSpot account is used to populate the templates. Generated documents are stored temporarily and transferred to your HubSpot file manager.

8. Payment Processing

For payment processing, we use Stripe. When making a payment, your payment information is transmitted directly to Stripe and processed there. We do not store complete payment information on our servers.

Stripe Inc. 510 Townsend Street San Francisco, CA 94103, USA

9. Hosting

9.1 Amazon Web Services (AWS)

Our website and Platform are hosted on Amazon Web Services. The servers are located in the European Union.

Amazon Web Services, Inc. 410 Terry Avenue North, Seattle, WA 98109, United States

AWS Privacy Policy: https://aws.amazon.com/privacy/

10. Analytics

We use analytics services to understand how our Platform is used and to improve our services. Data collected includes:

Pages visited
Time spent on pages
Device and browser information
Geographic location (country level)

This data is anonymized and cannot be traced back to individual users.

11. Data Retention

We store your data only as long as necessary for the purposes for which it was collected or as required by law. After termination of your account, your data will be deleted within 30 days, unless longer retention is required by law.

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit (TLS/SSL)
Encryption of data at rest
Regular security audits
Access controls and authentication

13. International Data Transfers

If we transfer personal data to countries outside the European Economic Area, we ensure appropriate safeguards are in place, such as:

Standard Contractual Clauses approved by the European Commission
Adequacy decisions by the European Commission

14. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last Updated" date.

15. Contact

If you have any questions about this privacy policy, please contact us:

Pinetco GmbH Clausewitzstr. 21 42389 Wuppertal Email: contact@pdf-createmate.de

Status: April 3, 2025 - Version 2.0