Privacy Policy (Datenschutzerklärung)

This privacy policy informs you about the nature, scope, and purpose of the processing of personal data on our website german-vat.com.

1. Controller

MajTax Steuerberatungsgesellschaft mbH
Hamburg, Germany
Email: info@german-vat.com

2. Data Collection on Our Website

Server Log Files

The provider of our pages automatically collects and stores information in server log files, which your browser transmits to us. This includes: browser type/version, operating system, referrer URL, hostname of the accessing computer, and time of the server request. This data cannot be assigned to specific individuals and is not merged with other data sources.

Cookies

Our website uses cookies. These are small text files stored on your device by your browser. Cookies do not cause damage and do not contain viruses. We use session cookies that are automatically deleted when you close your browser. These are necessary for the functionality of our platform (login, session management).

3. Registration & Account Data

When registering on our platform, we collect: email address, full name, company information, and tax-relevant data. This data is processed exclusively for the purpose of providing our tax advisory services. The legal basis is Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) GDPR (legal obligation for tax advisory services).

4. Data Storage & Security

Your data is stored securely using Supabase (PostgreSQL) with encryption at rest and in transit. Access to personal data is restricted to authorized personnel only. We implement technical and organizational measures to protect your data (encryption, access control, regular security audits).

5. Your Rights

Under the GDPR, you have the right to: access your personal data (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and the right to object (Art. 21). To exercise any of these rights, please contact us at info@german-vat.com.

6. Data Retention

We retain your data for as long as necessary to fulfill the purpose of processing, or as required by law. Tax-relevant documents are retained for 10 years in accordance with German tax law (§ 147 AO, § 257 HGB).

7. Third-Party Services

We use Supabase for database and authentication services. Supabase processes data in accordance with GDPR requirements. No data is shared with third parties for marketing purposes.

8. Changes to This Policy

We reserve the right to update this privacy policy to reflect changes in our practices or legal requirements. The current version is always available on this page.

Last updated: February 2026