Last updated: 15 August 2026
Important before going live: This privacy notice is tailored to the technical functions built into Lingoli. The full identity/address of the controller, the actual hosting and email providers, and the concrete Matomo operating model must be checked and completed with your real business/provider information. Final legal review is recommended.
1. Controller
The controller under the GDPR is the operator of Lingoli.de. Full company and contact information is available in the Imprint. Privacy enquiries: info@lingoli.de.
2. Legal bases
Depending on the processing activity, we rely in particular on Art. 6(1)(b) GDPR (pre-contractual measures and performance of a contract), Art. 6(1)(c) GDPR (legal obligations), Art. 6(1)(f) GDPR (legitimate interests such as IT security and efficient business operations) or Art. 6(1)(a) GDPR (consent).
3. Hosting and server logs
When this website is accessed, the web server processes technically necessary connection data such as IP address, date/time, requested URL, referrer, browser/device information and HTTP status. This is used to deliver and secure the website and diagnose errors. Legal basis: Art. 6(1)(f) GDPR.
Hosting provider: [PLEASE ADD THE ACTUAL HOSTING PROVIDER, ADDRESS AND PROCESSING AGREEMENT DETAILS].
4. Consent manager and necessary storage
Lingoli uses its own consent manager. Your choice is stored in the necessary cookie lingoli_consent. A PHP session cookie (PHPSESSID) may also be used for security and form functions. Analytics is disabled by default.
If you consent to analytics, a random consent ID, timestamp, consent version and granted category are stored to demonstrate the consent. A refusal is stored only locally in the consent cookie and is not logged server-side with a consent ID. The server-side consent record is retained for no longer than the retention period configured in the consent manager. You can change or withdraw your choice at any time through “Cookie settings” in the footer.
5. Matomo analytics
If enabled by the administrator, we use Matomo for website statistics. The Matomo JavaScript code is only executed after you actively consent to the “Analytics” category. Without consent it is not loaded. Legal basis for consent-based processing is Art. 6(1)(a) GDPR; consent can be withdrawn at any time for the future.
Matomo hosting model: [PLEASE SPECIFY SELF-HOSTED OR MATOMO CLOUD AND ADD PROVIDER/TRANSFER DETAILS IF APPLICABLE].
6. Quote requests and document uploads
For a quote request we process name, email, telephone number, document/content type, source and target language, requested turnaround, delivery option, postal address where required, message and uploaded documents. This is necessary to review the request, calculate a quote and perform the contract. Legal basis: Art. 6(1)(b) GDPR.
Uploaded documents may contain special categories of personal data. Where Art. 9 GDPR applies and no other exception is available, we rely on explicit consent under Art. 9(2)(a) GDPR. Data concerning criminal convictions/offences under Art. 10 GDPR is processed only where a lawful basis for the specific case exists; otherwise the request may be declined.
7. Customer database and order management
Lingoli maintains an internal customer database using the email address as the unique customer identifier. Contact details, orders, quote/payment status, order values and required communication are combined for contract performance, customer service and auditability. Legal basis: Art. 6(1)(b) and, where appropriate, Art. 6(1)(f) GDPR.
Email is sent through the configured SMTP/email provider. [PLEASE ADD THE ACTUAL EMAIL PROVIDER AND PRIVACY INFORMATION].
8. Translators
After an order is released, suitable translators may receive a short description of the available job. Only the translator who accepts the job and authorised administrators receive access to the documents required for the translation. Translators and service providers are bound to confidentiality; where they act as processors, Art. 28 GDPR agreements are used.
9. Stripe payments
Stripe may be used for online payments. Payment data required for processing is provided to Stripe; full card details are generally processed directly by Stripe and are not stored in the Lingoli customer database. Lingoli stores payment status, amount and technical references required to allocate the payment. Further information: Stripe Privacy Policy. Legal basis: Art. 6(1)(b) GDPR and Art. 6(1)(c) GDPR for statutory retention.
10. Deutsche Post / INTERNETMARKE
If you select postal delivery, your delivery address is processed for shipping. Lingoli may use the Deutsche Post INTERNETMARKE API to create a registered-mail address/franking label. Required shipping/address data is transmitted to Deutsche Post AG. Legal basis: Art. 6(1)(b) GDPR. Further information: Deutsche Post Privacy.
11. Recipients and processors
Recipients may include hosting/IT providers, email providers, translators, payment providers, shipping providers, tax advisers and public authorities where legally required. Personal data is not disclosed for advertising purposes without a legal basis.
12. International transfers
Where a provider processes data outside the EEA, we apply the requirements of Arts. 44 et seq. GDPR, such as adequacy decisions, the EU-U.S. Data Privacy Framework for certified US organisations or EU Standard Contractual Clauses. The actual hosting, email and Matomo configuration must be checked before going live.
13. Retention
Personal data is retained only as long as required for the relevant purpose. Contract/payment/invoice data is retained according to statutory commercial and tax rules. Translation files and operational data are deleted or anonymised when no longer required for performance, warranties, legal defence or legal obligations.
Internal deletion periods: [PLEASE DEFINE CONCRETE PERIODS FOR NON-CONVERTED QUOTES, UPLOADS AND TRANSLATION FILES].
14. Security
We use technical and organisational measures. Documents and completed translations are stored outside the public web area and delivered with role-based access. Relevant workflow changes are logged. The site should be operated only via HTTPS.
15. Your rights
Subject to the legal requirements, you have rights of access, rectification, erasure, restriction, portability and objection (Arts. 15–21 GDPR). Consent can be withdrawn at any time for the future (Art. 7(3) GDPR). You also have the right to lodge a complaint with a competent supervisory authority (Art. 77 GDPR).
16. Automated decision-making
Lingoli does not use solely automated decision-making including profiling within the described order workflow.
17. Changes
We update this privacy notice when legal requirements, providers or technical functions change.