Information on the processing of personal data according to Art. 13 GDPR.
The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
atori GmbH
Südring 17, 69514 Laudenbach, Germany
E-mail: info@atori.de
We are not legally required to appoint a data protection officer. For any questions regarding data protection, please contact us at the address above.
This website runs on atori GmbH's own infrastructure in Laudenbach, Germany; no external hosting provider is involved. When the pages are accessed, technically necessary access data is processed to deliver the content and to keep the site stable and secure. This includes in particular the IP address, time of access, the requested resource, HTTP status code, referrer and user agent.
The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in providing and securing the website). The data does not leave our systems.
Each time our pages are accessed, the access data listed in section 2 is written to server log files. They serve error analysis, defence against misuse and statistical evaluation of access. The raw logs are rotated daily and deleted no later than 30 days afterwards, unless there is evidence of misuse. From the log files we produce an aggregated access statistic with the tool GoAccess; IP addresses are truncated before storage (last octet removed), so individual connections cannot be identified. This statistic is kept for up to 180 days. The data is not combined with other data sources.
For consistent presentation, this site uses the typefaces Geist and Geist Mono. The font files are served from our own server; they are not loaded via Google Fonts or any comparable external service. No personal data is transmitted to third parties when the fonts load.
Purchases of our plugins are processed via the Paddle platform. The provider is Paddle.com Market Ltd., Judd House, 18-29 Mora Street, London EC1V 8BT, United Kingdom. Paddle acts as an independent merchant of record and is responsible for payment processing, invoicing and the remittance of any applicable sales taxes.
For every purchase we keep a purchase register with the Paddle transaction number, the purchase date, the e-mail address, the Paddle customer number, the plugins bought and the end of the twelve-month update term. We need this data to send you new versions during the term, to provide the permanent update link and to attach a renewal to the purchase. We keep it for the duration of the update term and a possible renewal, and beyond that only as far as commercial and tax retention duties require. Requests to the update link are logged without IP address (time, shortened key, plugin, version).
When you click a purchase button, you are redirected to the Paddle checkout page. No payment data (credit card numbers, account details) is collected or processed on our own website. The data you enter at Paddle is processed under Paddle's responsibility. We receive from Paddle only information about the successful completion and the master data required for delivery and invoicing (name, address, e-mail, VAT ID for B2B purchases).
The legal basis is Art. 6 para. 1 lit. b GDPR (performance of contract) and Art. 6 para. 1 lit. c GDPR (fulfilment of tax and commercial obligations). Details on data processing by Paddle can be found in their privacy policy at paddle.com/legal/privacy.
When you contact us by e-mail, your information (name, e-mail address, message content) is processed solely to handle your enquiry. The legal basis is Art. 6 para. 1 lit. b GDPR if the enquiry aims at a contract; otherwise Art. 6 para. 1 lit. f GDPR (legitimate interest in responding to the enquiry).
Data is deleted as soon as it is no longer required for the purpose, at the latest after the expiry of statutory retention periods.
To measure how our website is used we run Plausible Analytics – the self-hosted edition, on the same infrastructure as the website. No data is sent to a third party. Plausible works without cookies and without cross-site tracking: it records the page viewed, the referring page, browser and device type and the country derived from the IP address. IP address and user agent are used only transiently to count unique visits, hashed with a salt that changes daily; they are not stored and no user profile is created.
The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in a data-minimising measurement of reach). As no cookies are set and nothing is stored on or read from your device, no consent under § 25 TDDDG is required.
This website sets no cookies. Exempt are strictly necessary session cookies that may be set during the Paddle checkout – these are set by Paddle and are subject to the Paddle privacy policy.
Under the GDPR you have the following rights:
For enquiries and to exercise your rights, please contact info@atori.de.
We use TLS encryption (HTTPS) throughout for transmitting content. Payment processing at Paddle is carried out exclusively via encrypted connections. Within atori GmbH, only the persons required for processing have access to personal data.
We reserve the right to adapt this privacy policy where this is required due to legal changes or changes to our processing activities. The current version is always available on this page.
Last updated: October 2026