Privacy Policy

1. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws and other data protection regulations is:

Szarvasy UG

Meisburgstraße 19

40789 Monheim am Rhein

Germany

Represented by the Managing Director: Stephan Szarvasy

Email: kontakt@dictate-expert.de

2. General Information on Data Processing

We process personal data of our website users only to the extent necessary for the provision of a functional website and our content and services. Personal data is only processed after obtaining the consent of the user, as a rule. An exception applies in cases where prior consent cannot be obtained for practical reasons and the processing of data is permitted by law.

Where we obtain the consent of the data subject for processing operations, Art. 6(1)(a) GDPR serves as the legal basis. For processing operations necessary for the performance of a contract, Art. 6(1)(b) GDPR serves as the legal basis. To fulfil a legal obligation, Art. 6(1)(c) GDPR applies. For the protection of legitimate interests, Art. 6(1)(f) GDPR applies.

3. Hosting

This website is hosted by the following provider:

IONOS SE

Elgendorfer Str. 57

56410 Montabaur

Germany

Phone: +49 (0) 721 170 5522

Email: info@ionos.de

Commercial register: Amtsgericht Montabaur, HRB 24498

VAT ID: DE815563912

The hosting provider is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR). A data processing agreement pursuant to Art. 28 GDPR has been concluded with IONOS SE.

4. Data Collection on This Website

a) Server Log Files

Our website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. As part of hosting services, the hosting provider automatically collects and processes information in so-called server log files each time the website is accessed. This includes in particular the browser type and version, the operating system used, the referrer URL, the hostname of the accessing computer, the date and time of the server request, and the IP address in anonymised form.

This data is processed for the purpose of technically providing the website, ensuring stability and security, and defending against and investigating misuse. The legal basis for processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and uninterrupted provision of our online offering. Server log files are retained by the hosting provider for a maximum of 8 weeks and then deleted, unless further retention is required for evidentiary purposes.

b) Cookies

Our website uses only technically necessary cookies. We do not use any tracking, analytics, or marketing cookies.

The following cookie is used: NEXT_LOCALE – Purpose: storing the selected language (DE/EN/ES/ZH) – Duration: 1 year – Provider: own service (technically necessary).

The NEXT_LOCALE cookie is technically necessary to retain your selected language preference. It contains no personal data and is not used for tracking purposes. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest consists in presenting the website in a user-friendly manner in the chosen language. Consent is not required for technically necessary cookies pursuant to § 25(2) No. 2 TTDSG.

You can configure your browser to notify you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or generally, and to activate the automatic deletion of cookies when closing the browser. Disabling cookies may restrict the functionality of this website.

c) Contact Form and Email Contact

If you send us enquiries via the contact form or by email, your details from the enquiry form, including the contact details you provided, will be stored for the purpose of processing the enquiry and in the event of follow-up questions. We do not share this data without your consent.

The data entered in the contact form (name, email address, message) is processed exclusively to respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

The data is deleted as soon as it is no longer required for the purpose for which it was collected, i.e. when the conversation with the user has ended and there are no statutory retention obligations.

d) Bug Reports and Support Requests

When you submit a support request via the "Report Bug" form, the voluntarily provided data (name, email address, device information, error description, and any file attachments) is used exclusively to process your request. The legal basis is Art. 6(1)(b) GDPR. Uploaded files and screenshots are stored only for the duration of processing.

5. Dictate-Expert App – Data Processing Information

Voice and audio recordings and the transcripts generated from them are processed by the Dictate-Expert app exclusively locally on your device. Transcription is carried out completely offline without an internet connection; no audio data or raw data is transmitted to external servers.

The further use of the generated transcript is solely your responsibility as the user. If you choose to forward a transcript by email, messenger, cloud service or any other means, or to store it externally, you are personally responsible for the services used and their data protection terms. In particular, when processing personal data or client/patient information, it is the user's responsibility to ensure that the chosen disclosure is compatible with applicable data protection requirements (in particular the GDPR and professional confidentiality obligations).

The app itself does not transmit any usage data, crash reports or analytics data to the manufacturer or third parties, unless expressly initiated by the user.

6. Embedded Videos (YouTube)

YouTube videos may be embedded on our website. We use exclusively the privacy-enhanced mode of YouTube (youtube-nocookie.com). By using YouTube in extended data protection mode, no cookies are set by YouTube before you actively play a video.

Once you play a video, data may be transmitted and cookies may be set by YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). We have no influence over this data processing. Further information can be found in YouTube's privacy policy: policies.google.com/privacy

The legal basis for embedding is Art. 6(1)(f) GDPR. Our legitimate interest consists in making multimedia content available to you to explain our products.

7. Your Rights as a Data Subject

You have the following rights with respect to personal data concerning you:

  • Right of access (Art. 15 GDPR): You have the right to obtain information about the personal data we process concerning you.
  • Right to rectification (Art. 16 GDPR): You have the right to request the immediate rectification of inaccurate personal data.
  • Right to erasure (Art. 17 GDPR): You have the right to request the erasure of your personal data if the legal requirements are met.
  • Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of the processing of your data.
  • Right to data portability (Art. 20 GDPR): You have the right to receive the data concerning you in a structured, commonly used format.
  • Right to object (Art. 21 GDPR): You have the right, on grounds relating to your particular situation, to object at any time to the processing of your data.
  • Right to withdraw consent (Art. 7(3) GDPR): You have the right to withdraw consent given at any time with effect for the future.

To exercise your rights, please contact us by email at: kontakt@dictate-expert.de

8. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of personal data concerning you infringes the GDPR (Art. 77 GDPR).

The supervisory authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)

(State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia)

Kavalleriestraße 2–4

40213 Düsseldorf, Germany

Phone: +49 (0) 211 38424-0

Email: poststelle@ldi.nrw.de

Website: www.ldi.nrw.de

9. Currency and Amendment of This Privacy Policy

This privacy policy is currently valid and dated April 2026. The further development of our website and app or changes in legal or regulatory requirements may necessitate amendments to this privacy policy. The current version of the privacy policy can be accessed on this website at any time.

Last updated: April 2026