Privacy Policy

Last updated: July 2026

1. Controller

Leo Touati, Röötberg 13a, 22397 Hamburg, Germany.
Email: webmaster@translate-pdf.eu

2. Overview

We process personal data only to the extent necessary to provide our PDF translation service and to handle payments. The legal bases are, in particular, Art. 6(1)(b) GDPR (performance of a contract), Art. 6(1)(c) GDPR (legal obligations) and Art. 6(1)(f) GDPR (legitimate interest).

3. When visiting the website

When you visit the website, the server automatically processes technical information (IP address, request time, user agent, requested URL). This processing serves secure operation and abuse prevention (Art. 6(1)(f) GDPR). Server logs are deleted after no more than 30 days.

4. Uploaded PDF documents

To perform the translation we process the PDF file you upload (legal basis: performance of a contract, Art. 6(1)(b) GDPR). The file is stored encrypted, passed to our AI processing layer for translation and automatically deleted after no more than 30 days. If you have created an account, the translation remains visible in your history until you delete it yourself.

Note: Please do not upload documents you are not authorized to process. You are responsible for the content of the documents you upload.

5. Account and sign-in

If you optionally create an account, we process your email address and a password of your choice (stored encrypted) to make your translation history available across devices (Art. 6(1)(b) GDPR). You can have your account deleted at any time via webmaster@translate-pdf.eu.

6. Payment processing (Stripe)

Payments are handled by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. We do not store any card or bank details ourselves. Stripe processes your payment data on its own responsibility. Details: https://stripe.com/privacy.

7. Processors and third-party services

• Supabase (Lovable Cloud): Hosting of the database and file storage within the EU (Frankfurt). Data processing agreement under Art. 28 GDPR.
• Cloudflare: CDN and DDoS protection for delivering the website.
• AI translation: For translation and layout reconstruction we use AI models (including OpenAI GPT and Google Gemini), accessed via an EU-based gateway. The transmission of your document content to these models is solely for translation; providers are contractually prohibited from using the content for training. When US services are involved, transfers rely on the EU Standard Contractual Clauses.
• ConvertAPI: Rendering of PDF pages for layout mode.

8. Cookies

We only use strictly necessary cookies (e.g. session cookies for your sign-in and language selection). These are permitted without consent (§ 25(2) TTDSG).

9. Retention periods

• Uploaded and translated documents: max. 30 days, then automatically deleted.
• Account data: until deleted by you.
• Invoice and payment data: 10 years under § 147 AO / § 257 HGB.
• Server logs: max. 30 days.

10. Your rights

You have the right at any time to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You also have the right to lodge a complaint with a supervisory authority (e.g. the competent authority in Hamburg, Germany).

11. Contact

For privacy questions please contact webmaster@translate-pdf.eu.