Privacy Policy

Last updated: June 12, 2025

1. Introduction

This Privacy Policy explains how Example Company GmbH (“we”, “us”, “our”) collects and processes personal data when you visit vectorize.graphics (the “Site”) or use our image-to-vector conversion services.

2. Controller

The controller responsible for data processing within the meaning of Art. 4 (7) GDPR is:

Example Company GmbH
Example Street 1
12345 Sample City, Germany
Phone: +49 30 123 456 7
E-mail: privacy@vectorize.graphics

3. Categories of Data We Process

Server log data (IP address*, date/time, HTTP status, user-agent) – collected automatically when you access the Site.
Uploaded raster images (PNG, JPEG) – files that you choose to convert.
Analytics & cookie data – pseudonymous usage data from Google Analytics 4.
Communication data – contents of e-mails or messages you send us.

*IP addresses are stored in truncated form (last octet removed) and therefore cannot be linked back to a natural person.

4. Purposes & Legal Bases

Purpose	Legal basis (Art. 6 GDPR)
Provide and operate the Site, ensure system security, prevent abuse	Art. 6 (1)(f) – legitimate interest
Process your uploaded images and return vector files	Art. 6 (1)(b) – contract performance
Web analytics with Google Analytics 4	Art. 6 (1)(a) – consent via cookie banner
Handle inquiries via e-mail/contact form	Art. 6 (1)(f) – legitimate interest or (b) when related to an existing contract

5. Storage Duration

Raster images are deleted automatically within 24 hours after the vectorization job completes.
Server log files are kept for 14 days and then anonymised or deleted.
Google Analytics events are retained for 14 months.
Business correspondence is archived for the statutory retention period (up to 10 years) in accordance with German tax and commercial law.

6. Cookies & Google Analytics

We use Google Analytics 4 (“GA4”) to measure website usage. GA4 sets cookies and collects pseudonymous identifiers (e.g. Client-ID). IP addresses are anonymised before storage, and Google processes the data on our behalf under a Data Processing Agreement that incorporates the EU Standard Contractual Clauses plus Google’s adherence to the EU-US Data Privacy Framework.

You can withdraw consent at any time via our cookie settings link in the page footer.
Alternatively, install the Google Analytics opt-out browser add-on.

7. Recipients & International Transfers

Personal data may be processed by our hosting provider (Hetzner Online GmbH, Germany) and Google LLC (USA). Transfers to the USA are safeguarded by the Standard Contractual Clauses and Google’s certification under the EU-US DPF.

8. Your Rights

You have the following rights under the GDPR:

Access (Art. 15)
Rectification (Art. 16)
Erasure (Art. 17)
Restriction (Art. 18)
Data portability (Art. 20)
Objection (Art. 21)
Withdraw consent at any time (Art. 7 (3))
Lodge a complaint with a supervisory authority (Art. 77). Our competent authority is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

9. Security

All data in transit is protected via TLS 1.3. Server infrastructure is patched regularly, images are processed in isolated containers, and access to production systems is restricted to authorised personnel.

10. Contact

For privacy-related questions or to exercise your rights, please contact privacy@vectorize.graphics.

11. Changes to This Policy

We may update this Privacy Policy to reflect legal, technical or business developments. The current version is always available at /privacy.