Invoice AutopilotPrivacy policy
Draft: have it legally reviewed before publishing.This policy covers this website. The Invoice Autopilot Shopify app has its own privacy policy.
Controller
Robin Schmitt, Schmitt IT, Deutschhausplatz 1a, 55116 Mainz, Germany. Email: hello@invoice-autopilot.com
Cookies and tracking
The website itself sets no cookies, loads no external fonts and embeds no analytics or advertising services. To protect against bots and attacks, Cloudflare may set technically necessary security cookies (such as __cf_bm or cf_clearance) where the related protection features are active. They serve security only and are not used for analytics or advertising.
Hosting and server logs
The website is delivered by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you visit, Cloudflare processes technically necessary connection data such as IP address, time, requested page and browser identifier to deliver the site and protect it against attacks. The legal basis is my legitimate interest in secure and reliable operation (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; a data processing agreement is in place with Cloudflare. I have not enabled any logging of my own for this website and store no access data. According to Cloudflare, how long it keeps this connection data depends on the purpose of collection – here delivering the site and defending against attacks and abuse – and on legal retention duties (section 11 ofCloudflare's privacy policy). Cloudflare does not state a fixed period for this website.
Contact by email
If you email hello@invoice-autopilot.com, I process your details to answer your request (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer needed for that and no retention duty applies. Cloudflare receives the message and forwards it to my mailbox at Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google may process email data outside the EU, for example in the US, and bases such transfers among other things on the EU-US Data Privacy Framework; details are inGoogle's information on data transfers.
Your rights
You have the right of access, rectification, erasure and restriction of processing and, where the statutory conditions apply, to data portability (Art. 15 to 20 GDPR). You may object to processing based on my legitimate interest on grounds relating to your particular situation (Art. 21 GDPR). You may also lodge a complaint with a data protection supervisory authority.