Privacy policy
Last updated: 8 September 2026
The German version is legally binding. This English text is provided for information. This notice explains how Umut Ceylan, trading as ELSA Tools, Bielefelder Str. 87, 32051 Herford, Germany, email webmaster@elsa-tools.de, phone +49 155 10467682, processes personal data.
1. Controller
The controller under the GDPR is Umut Ceylan, trading as ELSA Tools, Bielefelder Str. 87, 32051 Herford, Germany.
2. Website, login and server logs
When you visit app.elsa-tools.com we process technically necessary log data, including IP address, time and page requested, for operation, security and abuse prevention. The legal basis is Art. 6(1)(f) GDPR.
3. Software account
For registration, login and operation we process account, authentication, usage and workshop job data. The legal basis is Art. 6(1)(b) GDPR.
You are the controller for personal data of your workshop customers entered into ELSA. We process that data as a processor. A data processing agreement can be requested at /avv.
4. Payment via Paddle
Subscriptions are processed by Paddle. Paddle processes payment data independently as merchant of record.
5. Hosting
We use technical providers for hosting, delivery and the database, in particular Vercel and Supabase. We conclude processor contracts under Art. 28 GDPR.
6. Retention and rights
We keep personal data only as long as needed for the purpose or required by law.
You have rights of access, rectification, erasure, restriction, portability and objection. You may lodge a complaint with a supervisory authority, in particular the North Rhine-Westphalia data protection authority.
No automated decision-making including profiling under Art. 22 GDPR takes place.