Privacy Policy DeepL

Protecting your privacy and personal data is very important to us. We therefore only use your personal data within the scope of legal regulations, in particular the General Data Protection Regulation ("GDPR") and the German Federal Data Protection Act ("BDSG"). With this privacy policy, we would like to inform you - regardless of whether you set up a DeepL account, use our DeepL Pro subscriptions, our various apps or visit our website - about the nature, scope and purposes of the collection, use and processing of your personal data by DeepL SE.

1. Data controller / Contact / Data Protection Officer

The data controller responsible for data processing pursuant to the GDPR, BDSG, other data protection laws applicable in the member states of the European Union, and other regulations relating to data protection is:

DeepL SE Maarweg 165 50825 Cologne Germany

If you have any questions or concerns about privacy, please contact privacy(at)deepl.com. For the conclusion of a data processing agreement pursuant to Art. 28 GDPR (see in detail section 5) and for general questions about our products, please contact sales(at)deepl.com. Further information on the data processing when contacting DeepL can be found in section 13.

DeepL's external corporate Data Protection Officer, Dr. Christian Lenz, can be contacted at the following address: dhpg IT-Services GmbH, Bunsenstr. 10a, 51647 Gummersbach, via email to datenschutz(at)dhpg.de, or by telephone on +49 2261 8195 0.

2. Scope of Data Protection

Data protection applies to personal data as defined by the GDPR, i.e. all information relating to an identified or identifiable natural person. An identifiable natural person is deemed to be a natural person who can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier or to one or more specific attributes.

3. Texts, Translations and Improvements - DeepL Translator / Write (free version)

When using our free services, please only enter texts that you wish to transfer to our servers. The transmission of these texts is necessary in order for us to provide the translation or improvement and offer you our service. We process your texts, the documents you upload and their translations or improvements for a limited period of time to train and improve our neural networks and algorithms. This also applies to corrections you make to our translation or improvement suggestions. The corrections are forwarded to our servers to check them for accuracy and, if necessary, to update the translated or improved text according to your changes. If you use the glossary feature and enter certain pairs of terms there, this data is only stored locally and is not forwarded to our servers. Therefore, you cannot use your glossary entries in another browser or on another device.

Please note that according to its Terms and Conditions, you may not use DeepL Translator / Write for the translation or improvement of texts containing personal data of any kind.The translation or improvement of personal data is only possible as part of a DeepL Pro subscription (please see sections 4 and 5).

4. Texts and Improvements – DeepL Write Pro

When using our DeepL Write Pro subscription to improve texts, the texts or documents you submit will not be permanently stored and will only be kept temporarily to the extent necessary for the production and transmission of the improvement. After complete performance of the contractually agreed services all submitted texts or documents and their improvements will be deleted. When using DeepL Write Pro, your texts will not be used to improve the quality of our services. For further information on the processing of your data within a DeepL Pro subscription, please refer to section 6 of this privacy policy and our Terms and Conditions.

Please note that using DeepL Write Pro for the improvement of texts containing personal data of any kind is only permitted if there is a justification for this under data protection law. Therefore, our Ts&Cs provide for the conclusion of a data processing agreement (see section 8.1.3 ofDeepL Pro Terms and Conditions). To enter into such an agreement, please contact sales(at)deepl.com.

5. Texts and Translations - DeepL Pro

When using our DeepL Translator Pro or API Pro subscription to translate texts, the texts or documents you submit will not be permanently stored and will only be kept temporarily to the extent necessary for the production and transmission of the translation. After complete performance of the contractually agreed services all submitted texts or documents and their translations will be deleted. When using DeepL Translator Pro or API Pro, your texts will not be used to improve the quality of our services. For further information on the processing of your data within a DeepL Pro subscription, please refer to section 6 of this privacy policy and our DeepL Pro Terms and Conditions.

Please note that using DeepL Translator Pro or API Pro for the translation of texts containing personal data of any kind is only permitted if there is a justification for this under data protection law. Therefore, our Ts&Cs provide for the conclusion of a data processing agreement (see section 8.1.3 of DeepL Pro Terms and Conditions). To enter into such an agreement, please contact sales(at)deepl.com.

6. Creating a DeepL account and Signing up for a DeepL Pro Subscription

6.1 Creating a DeepL account 

You have the option of creating a DeepL account. You can use the DeepL Translator or DeepL Write via this account within the applicable DeepL Account Terms and Conditions (please see also section 3). To create the account, the following personal data will be stored:

  • E-mail address
  • Password
  • IP address

We process the email address and password on the basis of Art. 6 para. 1 sentence 1 lit. b) GDPR in order to perform the contract of use. Your IP address is processed in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR, as it is in our legitimate interests to match your IP address with IP addresses that have misused our service in the past for fraud prevention purposes.

Please note that the creation of a DeepL account is a prerequisite for signing up for and using a DeepL Pro subscription (see section 6.2), but creating a DeepL account does not oblige you to purchase a paid subscription. Even if you do not sign up for a DeepL Pro subscription after creating the account, the DeepL account remains available and you can use it. You can delete your DeepL account at any time by sending an e-mail with your request to support(at)deepl.com.

If your company uses Single Sign-On (SSO) to log in to DeepL, there is no need for a separate registration with DeepL. When you log in via Single Sign-On your company transmits your email address as well as your first and last name directly to us. We also process this data on the basis of Art. 6 para. 1 sentence 1 lit. b) GDPR.

6.2 Signing up for DeepL Pro

If, after creating a DeepL account, you sign up for a DeepL Pro subscription, additionally the following personal data will be collected and processed for the purposes of concluding and fulfilling the contract (Art. 6 para. 1 sentence 1 lit. b) GDPR):

  • First name, surname, and where applicable, company name
  • Address
  • Payment details
  • Tax numbers (where applicable)
  • Selected subscription option
  • Possibly other, additional data you provided during the registration process.

Your payment details will also be processed by us if you initially sign up for a DeepL Pro subscription with a free trial period. Despite the free trial period, the processing of your payment details is already necessary at the time of the formation of the contract within the meaning of Art. 6 para. 1 sentence 1 lit. b) GDPR, as a DeepL Pro subscription is in principle a paid subscription and we only in some cases allow our customers to test our products free of charge for a trial period. However, if no cancellation is made within the aforementioned trial period, the subscription will automatically continue to be subject to payment and the method of payment specified by you will be debited at the time stated in the booking process.

In order to process payments, we forward the necessary payment data to our authorized payment service provider Stripe Payments Europe Ltd., Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland. Where necessary, Stripe will transfer the data to Stripe, Inc., located in the USA. Further information on data protection at Stripe and compliance with the requirements of Art. 44 GDPR can be found here and here. We have concluded a data processing agreement with Stripe, which allows Stripe to process the data solely in accordance with our instructions and not for its own purposes.

In addition to the aforementioned data, we process further (usage-)data relevant for the provision and billing of our service, such as subscription ID, date and time of the subscription conclusion, billing period, successful payment processing, logins, number of translated or improved characters and documents, upgrades and downgrades. The processing and storage of the aforementioned data is necessary for the conclusion of the contract as well as its performance and is therefore justified according to Art. 6 para. 1 sentence 1 lit. b) GDPR. If you yourself are not a party to the contract, but DeepL Pro is provided to you, e.g. by your employer or an organization to which you belong, we justify the processing of the data mentioned in section 6.1 and the aforementioned usage data via Art. 6 para. 1 sentence 1 lit. f) GDPR, as this is necessary for the performance of the business relationship with our customers, i.e. your employer or your organization.

We store the data for the duration of the contract term and subsequently, if applicable, for the duration of statutory retention periods, insofar as these prescribe the retention for the respective types of data. We will delete your account if you wish to do so after canceling your subscription. Otherwise, we will maintain your account as DeepL account (see section 6.1) so that it is available to you in the event of a renewed subscription without you having to register again. This is in your as well as in our legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR.

In your account in the section “usage”, you can also view data about your usage behavior e.g., - depending on your subscription - the number of characters translated or improved in the past or the number of documents translated. If you have a consumption-based subscription, such as the DeepL API Pro, you can also view the monthly costs incurred. We justify this data processing via Art. 6 para. 1 sentence 1 lit. b) GDPR, insofar as it is necessary for the performance of the contract, in particular for billing purposes or for managing the number of documents still available for translation. Insofar as the processing goes beyond what is necessary for the performance of the contract, we base the processing on our legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR, as we seek to meet our customers' wish to visualize information on usage behavior in a transparent manner. The graphical representation of the development of consumption over the contract period is considered to be also in the interest of our customers.

If you yourself are not a party to the DeepL Pro subscription, but access to our products is provided to you by your employer or an organization to which you belong, it is possible that we share data about your usage behavior (e.g. last login date) with your employer or organization. Such data transfer only takes place insofar as this corresponds to our legitimate interests as well as the legitimate interests of our customers in receiving information about the use of the subscriptions they have paid for and your interests do not override in the individual case.

6.3 Processing of the Submitted Texts and Translations / Improvements

We process the texts you submit to DeepL Pro and their translations or improvements only temporarily, insofar as this is necessary for the creation and transmission of the translation or improvement. The processing is therefore justified by Art. 6 para. 1 sentence 1 lit. b) GDPR. Your texts and the translations or improvements will - within the framework of the contractual agreements and as stated in section 4 and 5 - not be stored permanently and will be deleted after the performance of the contractually owed service. The only exception is if you use the "saved translations" feature. In this case, texts selected by you, including translations, can be saved on DeepL servers and thus kept accessible at all times. When you use the “saved translations” feature in our apps, your texts and translations are stored locally.

If you use our glossary feature and store certain term pairs there, this data will be forwarded to our servers and stored for your account. If you want to use the glossary function as part of our service, the data processing that takes place in this context is necessary for the performance of our contract and is therefore also justified by Art. 6 para. 1 sentence 1 lit. b) GDPR.

7. Translation of Documents

7.1 Translation of Documents with DeepL Translator and DeepL Pro

You can translate documents in different file formats both with DeepL Pro (.docx, .pptx, .html, .pdf and .txt) as well as with DeepL Translator (.docx, .pptx and .pdf). When using document translation in DeepL Translator, section 3 of this privacy policy applies. If you translate documents of the file types mentioned above while you are logged in to your DeepL Pro account, the texts you submit will only be processed temporarily and will be deleted after the completion of the translation process, including the translations themselves (see also section 5 and 6.3 of this privacy policy). With both DeepL Pro and DeepL Translator, the translation of your documents will be provided exclusively by DeepL and processed on our infrastructure in the EEA.

7.2 Temporary Storage of Metadata when Translating Documents

Regardless of whether you use our paid or free service when translating documents, particularly the following data is stored for each translation process:

  • Status/progress of the translation process
  • Document file type
  • Selected language pair for translation
  • Estimates of time needed for the translation
  • References to the applied glossary (when using DeepL Pro)
  • Content of the applied glossary (when using the free translator)
  • Number of characters calculated
  • Errors that occurred during the translation process

This information is processed in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR based on our legitimate interest in improving the functionality of our products, as this makes it easier to identify any sources of error related to the translation process. The data is stored in a database that can only be accessed by selected employees and is automatically deleted after 14 days.

8. Automatic Collection of Data via Website Access

Regardless of whether you use our paid or free service, your device automatically transmits certain data for technical reasons when you access our website www.deepl.com. The following data that you may send us will be stored:

  • Date and time of access
  • Browser type and version
  • Operating system
  • URL of the website previously visited
  • Volume of data transmitted
  • Requested domain
  • Notification of successful data retrieval
  • Search term when using a web browser
  • Abbreviated/anonymized IP
  • Full IP address
  • Diagnostic information in the event of errors

Processing is carried out in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is stored for purely technical reasons. Website access data is used for error analysis, ensuring system security, logging access to DeepL Pro and for improving our translation or improvement services. Based on your IP address, we also use geolocation to determine the region from which you are visiting our website. We use this information to check whether we can offer you the DeepL Pro service in your region, which corresponds to our legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR. The storage of the full IP address for the users of the DeepL free version for a maximum period of 14 days is also justified by our legitimate interest in achieving the listed purposes, Art. 6 para. 1 sentence 1 lit. f) GDPR. The storage of IP addresses of users of the paid DeepL Pro subscription for the duration of the contract is justified by Art. 6 para. 1 sentence 1 lit. b) GDPR.

Our website also uses services of Cloudflare, Inc, 101 Townsend St, San Francisco, CA 94107, USA ("Cloudflare"), which operates a so-called Content Delivery Network (CDN). To protect our website, the data transfer between your browser and our servers is routed through Cloudflare's infrastructure in order to analyze whether it is an abusive attack. As part of this analysis, your data is transmitted to Cloudflare in encrypted form, if necessary also to Cloudflare servers in the USA. However, since your requests and other customer data are encrypted between your end device and the DeepL servers, Cloudflare does not have any access to this data, but only to meta-data (such as your IP address). Only static resources (such as graphics) are loaded directly from Cloudflare-servers. In addition, Cloudflare determines a so-called bot score immediately before the login to DeepL, which is based on the analysis of the metadata of the client (browser) used. The use of Cloudflare is in our legitimate interest to secure the use of our website and to prevent and defend harmful attacks from outside, Art. 6 para. 1 sentence 1 lit. f) GDPR. We have concluded a data processing agreement with Cloudflare and Cloudflare may therefore only process the data according to our instructions and not for its own purposes. You can find more information about Cloudflare's handling of personal data here.

9. Cookies and Web Storage on deepl.com and Analysis of User Behavior 

9.1 Use of Cookies and Web Storage on deepl.com

We use "cookies" and web storage objects to provide you with a variety of features and improve your user experience. Cookies and web storage objects are small text files that are temporarily stored on your computer via your browser.

If you do not want us to use cookies or web storage objects, you can change your browser settings accordingly. Please note that if you completely disable the use of cookies or web storage objects, the functionality and scope of the website may be impaired.

We specifically use cookies or web storage objects in the following categories:

  • Necessary: These cookies or web storage objects are necessary to ensure the functioning of our website and the formation as well as the performance of contracts. The cookies serve security purposes, the smooth navigation on our website, the provision of the most important functions of our products, the storage of your settings such as the display language of the website and the selected translation language as well as the handling of the checkout process for DeepL Pro. In addition, statistical data about the use of our website is collected. The collecting of data via the necessary cookies or web storage objects is justified according to § 25 para. 2 no. 2 TTDSG (“Telekommunikation-Telemedien-Datenschutz-Gesetz”: German Telecommunications and Telemedia Data Protection Act). The further processing of this data is either necessary in accordance with Art. 6 para. 1 sentence 1 lit. b) GDPR for performing the contract or justified due to our legitimate interest in presenting our products and our company in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR.
  • Performance: In order to continuously improve our website, we collect data for statistical and analytical purposes. We and our external service providers use these cookies or web storage objects with your explicit consent in accordance with § 25 para. 1 TTDSG. The further processing of this data is also based on your consent, Art. 6 para. 1 sentence 1 lit. a) GDPR.
  • Comfort: We use these cookies or web storage objects to make using our website more comfortable for you. For example, we remember which areas of the website you have already visited and help you to use the website in the best possible way. In accordance with § 25 para. 1 TTDSG and Art. 6 para. 1 sentence 1 lit. a) GDPR, we only use these cookies or web storage objects and process the data collected from them with your explicit consent. 

The table below lists the different types of cookies and web storage objects that may be used on our website. Cookies or web storage objects are stored until the specified expiration time or until you delete them in your browser or, if it is a session cookie, until the session has expired. You can withdraw your consent for the use of cookies or web storage objects in the categories “Performance” and “Comfort” in each of these categories directly in the table below.

With the exception of the third-party cookies from our payment service provider Stripe (see explanatory notes, section 6.2), the customer support software from Zendesk (see explanatory notes, section 13.1) and the marketing software from HubSpot (see explanatory notes, section 14) the information generated by cookies and web storage objects is transmitted to servers within the EU and stored exclusively there. Data is not passed on to third parties.

9.2 Analysis of User Behavior

In order to better understand how our products are used and to better tailor our products to the needs and desires of our customers, we analyze pseudonymized data about our customers' use of DeepL Pro products. The analysis allows us to understand general usage habits and derive different target and user groups. We can then address the identified user groups in a more specific way and, for example, point them to previously unused or unknown features of our products. In this way, we enable our customers to get to know and use all the features of their DeepL subscription and can thus improve the user experience of the DeepL products. This corresponds to our legitimate interests according to Art. 6 para. 1 p. 1 lit. f) GDPR. The data is processed exclusively on DeepL’s servers in the EEA, the data is not transferred to the USA. No transfer of the data to third parties takes place. In case that users visit the website https://developers.deepl.com which is hosted by GitBook we use the services of Conva Ventures Inc. (“Conva Ventures” the corporation behind Fathom Analytics) to get basic insights about how our API documentation is being used. For the analysis, no cookie is set, and the analysis will only rely on the IP address and user agent of the user which will be hashed first. These pseudo-anonymized hashes will be anonymized after 24 hours. The data will be processed on servers in the USA. We have concluded a data processing agreement with Conva Ventures and Conva Ventures only processes the data in accordance with our instructions and not for its own purposes. You can find more information about Conva Ventures’ handling of personal data here.

Overview of the cookies and web storage objects used by DeepL:

icon-lock Necessary

السياقالمعرّفالوصفالتكنولوجياانتهاء الصلاحيةالمالك
Site localizationالمعرّفilالوصف
Stores the interface language selected by the user.
التكنولوجياCookieانتهاء الصلاحية1 monthالمالكDeepL
Site localizationالمعرّفi18nextLngالوصف
Stores the interface language selected by the user.
التكنولوجياLocal Storageانتهاء الصلاحيةPersistent DataالمالكDeepL
Privacy SettingsالمعرّفprivacySettingsالوصف
Stores the user's cookie-banner decision. You can change the settings here.
التكنولوجياCookieانتهاء الصلاحية12 monthsالمالكDeepL
TranslatorالمعرّفLMTBIDالوصف
Used to guarantee the origin of a request to the translator and protect from malicious visitors. This ensures that the service is not compromised for the remaining visitors.
التكنولوجياCookieانتهاء الصلاحية6 monthsالمالكDeepL
TranslatorالمعرّفLMTالوصف
Stores settings made explicitly by the user. E.g. preferred translation language or entries in the glossary.
التكنولوجياLocal Storageانتهاء الصلاحية1 monthالمالكDeepL
WriteالمعرّفLMT_writeالوصف
Stores settings made explicitly by the user for the preferred language or language variant, in order to make them available when Write is used again as well as whether the user has already seen the Intro Guide. In addition, the specific use of the alternative pop-up is noted in order to show customers the relevant alternatives in the future. Stores if pop-up announcing DeepL Write was shown.
التكنولوجياLocal Storageانتهاء الصلاحية30 daysالمالكDeepL
WriteالمعرّفLMT_customizationالوصف
Stores if the reference to Write in the header menu was clicked.
التكنولوجياLocal Storageانتهاء الصلاحية30 daysالمالكDeepL
WriteالمعرّفLMT_preferredLangWeightsWriteالوصف
Stores the weighting of the languages used by the user to allow accurate language identification of the text entered.
التكنولوجياLocal Storageانتهاء الصلاحية30 daysالمالكDeepL
TranslatorالمعرّفproductRecommendationsالوصف
Used for feature onboarding and discovery on the translator.
التكنولوجياCookieانتهاء الصلاحية7 daysالمالكDeepL
TranslatorالمعرّفrecommendationFlagsالوصف
Used to store additional translator settings of the user.
التكنولوجياLocal Storageانتهاء الصلاحية6 monthالمالكDeepL
Discovery and OnboardingالمعرّفclickOnWordHint, LMT_MessageBox, onboardingData, showAppOnboarding, AppOnboardingInfo, apiOnboardingالوصف
Stores if the user has on-boarded with features to ensure that onboarding prompts are only displayed once.
التكنولوجياLocal Storageانتهاء الصلاحية1 to 6 monthsالمالكDeepL
Checkout ProcessالمعرّفFurther details about Stripe 3rd party cookies can be found under https://stripe.com/cookies-policy/legal.الوصف
Fraud detection and security for check-out and payments. This cookie is only set if you enter the checkout process or view your account payment information.
التكنولوجياCookie (3rd party)انتهاء الصلاحيةSession to 2 yearsالمالكThird Party - Stripe
Checkout ProcessالمعرّفuserCountryالوصف
Stores the user's selected country during the checkout process.
التكنولوجياLocal Storage / Cookieانتهاء الصلاحيةSessionالمالكDeepL
Checkout Processالمعرّفnewpro-checkoutالوصف
Stores the user's selected DeepL Pro plan during the checkout process.
التكنولوجياLocal Storageانتهاء الصلاحية7 daysالمالكDeepL
DeepL Pro-User Login/Sessionالمعرّفdl_sessionالوصف
Stores users login token to keep the user logged in on the site. Permanently stored when "remember me" is selected during the login, or expires after 30 minutes of inactivity if not.
التكنولوجياCookieانتهاء الصلاحية100 yearsالمالكDeepL
DeepL Pro-User Login/Sessionالمعرّفdl_logoutReasonالوصف
When you get logged out accidentally, we will help you with an error message. We use this cookie to deliver this message to you so you can prevent this problem in the future.
التكنولوجياCookieانتهاء الصلاحيةSessionالمالكDeepL
DeepL Pro-User Login/Sessionالمعرّفepالوصف
Ip-Based Enterprise Account login token. Checked once per session and deleted afterwards.
التكنولوجياLocal Storageانتهاء الصلاحيةSessionالمالكDeepL
DeepL Pro-User Login/Sessionالمعرّفuserالوصف
Stores the display name of logged-in users to display their name. Deleted if the user logs out.
التكنولوجياLocal Storageانتهاء الصلاحية7 daysالمالكDeepL
DeepL Pro-User Login/Sessionالمعرّفdl_authالوصف
Stores the “login state” of a user, the account type and sets a reminder for login. When user gets logged out accidentally, user will be helped with an error message.
التكنولوجياLocal Storageانتهاء الصلاحيةPersistent DataالمالكDeepL
Release processالمعرّفreleaseGroupsالوصف
Used for gradual, controlled releases to ensure stability, quality and performance of our service and infrastructure.
التكنولوجياCookieانتهاء الصلاحية1 monthالمالكDeepL
Release processالمعرّفdapGidالوصف
Used for controlled rollout of features for logged users.
التكنولوجياCookieانتهاء الصلاحية1 monthالمالكDeepL
Session IDالمعرّفdapSidالوصف
Session ID and timestamp. Automatically deleted after 30 minutes of inactivity.
التكنولوجياCookieانتهاء الصلاحيةSessionالمالكDeepL
App Usage Statistics - only for DeepL AppsالمعرّفappUsageStatsالوصف
Remembers when the user last used the app.
التكنولوجياLocal Storageانتهاء الصلاحيةPersistent DataالمالكDeepL
Sales Form Usage StatisticsالمعرّفsalesContactStatsالوصف
Remembers when the user submitted the form.
التكنولوجياLocal Storageانتهاء الصلاحيةPersistent DataالمالكDeepL
Document translationالمعرّفLMT_doctranslate_clientالوصف
Used to bind an ongoing document translation process to a user and protect the document translation feature from excessive use by individual users. This ensures that the service is not impacted for the remaining users.
التكنولوجياCookieانتهاء الصلاحية1 monthالمالكDeepL
Document translationالمعرّفLMT_text_translator_usage_free الوصف
Used to bind an ongoing text translation process to a user and protect the translation feature from excessive use by individual users. This ensures that the service is not impacted for the remaining users. 
التكنولوجياCookieانتهاء الصلاحية1 monthالمالكDeepL
SecurityالمعرّفdapUidالوصف
User identifier to ensure correct operation of our systems, including to identify malicious bots and measure performance.
التكنولوجياCookieانتهاء الصلاحية12 monthsالمالكDeepL
Securityالمعرّفdl_clearanceالوصف
Used to prevent misuse of our services by using the Cloudflare bot score.
التكنولوجياCookieانتهاء الصلاحية5 minutesالمالكDeepL
Securityالمعرّفdl_camellia_clientالوصف
Used to protect services from excessive use by individual users. This ensures that the service is not impacted for the remaining users.
التكنولوجياCookieانتهاء الصلاحية1 monthالمالكDeepL
Product Support/Zendeskالمعرّفzendeskالوصف
Third-party cookie used by our ZenDesk support tool. Necessary for the operation of the service (bot detection and session management).
التكنولوجياCookieانتهاء الصلاحية1 monthالمالكThird Party - Zendesk
Product Support/HubSpotالمعرّفhubspotالوصف
Third-party cookie used by our HubSpot sales tool. Used for session management and to prevent misuse.
التكنولوجياCookieانتهاء الصلاحية1 monthالمالكThird Party - HubSpot
User Featuresالمعرّفdl_featureSetالوصف
Stores the features which are available to the user depending on the account or subscription.
التكنولوجياLocal Storage انتهاء الصلاحيةPersistent DataالمالكDeepL
API documentation/GitBookالمعرّف__gitbook_cookie_grantedالوصف
Third-party cookie used by GitBook documentation platform. Necessary for the operation of the service (storage of user cookie preferences).
التكنولوجياCookieانتهاء الصلاحيةSessionالمالكThird Party – GitBook
API documentation/GitBookالمعرّف__sessionالوصف
Third-party cookie used by GitBook documentation platform. Used for session management.
التكنولوجياCookieانتهاء الصلاحية400 daysالمالكThird Party – GitBook
Speech-to-textالمعرّفspeechToTextConsentالوصف
Stores the consent of the Free and DeepL account users when using the speech-to-text feature.
التكنولوجياCookieانتهاء الصلاحية100 yearsالمالكDeepL
Securityالمعرّف__cf_bmالوصف
Used to prevent misuse of our services by using the Cloudflare bot score.
التكنولوجياCookieانتهاء الصلاحية30 minutes (after continuous inactivity of the user)المالكThird Party - Cloudflare
Allocation of assetsالمعرّفINGRESSCOOKIEالوصف
Used to provide the user with the correct version of the assets (Javascript, CSS, etc.) when deepl.com is updated.
التكنولوجياCookieانتهاء الصلاحيةsessionالمالكDeepL

Performance

السياقالمعرّفالوصفالتكنولوجياانتهاء الصلاحيةالمالك
Visit CountالمعرّفdapVnالوصف
Stores how many times the user has visited the site.
التكنولوجياCookieانتهاء الصلاحية12 monthsالمالكDeepL
Page viewsالمعرّفpvالوصف
Stores the page ID of the pages accessed by the user, including a timestamp indicating when this access was last made. Based on this, corresponding information is displayed to the user.
التكنولوجياLocal storageانتهاء الصلاحيةPersistent DataالمالكDeepL

Comfort

السياقالمعرّفالوصفالتكنولوجياانتهاء الصلاحيةالمالك
TranslatorالمعرّفuserRecommendationsالوصف
Used to  personalise the users experience. 
التكنولوجياCookieانتهاء الصلاحية7 daysالمالكDeepL
TranslatorالمعرّفrecommendationFlagsالوصف
Used to store additional translator settings of the user.
التكنولوجياLocal Storageانتهاء الصلاحية6 monthالمالكDeepL
Checkout ProcessالمعرّفLMT_resumeCheckoutالوصف
Used to store checkout details of the user to help users resume the checkout process.
التكنولوجياLocal Storageانتهاء الصلاحيةPersistent DataالمالكDeepL
Product informationالمعرّفapiDocsVisitedالوصف
Stores whether API documentation has been visited to help users select the correct package at checkout.
التكنولوجياLocal Storageانتهاء الصلاحيةPersistent DataالمالكDeepL

Marketing

السياقالمعرّفالوصفالتكنولوجياانتهاء الصلاحيةالمالك
Conversion Trackingالمعرّفالوصف
Records and evaluates conversions from DeepL’s LinkedIn advertising campaigns
التكنولوجياTracking Pixelانتهاء الصلاحيةPersistent DataالمالكLinkedIn

10. Speech-to-text function for web

For the web version of our DeepL Translator, we also offer a speech-to-text function, where the text to be translated can be dictated yourself. The recorded text is transcribed solely within DeepL's internal infrastructure.

When using DeepL Pro, the recordings and the transcriptions will not be permanently stored and will only be kept temporarily to the extent necessary for the production and transmission of the translation. After complete performance of the contractually agreed services the recordings, their transcriptions and the translations will be deleted. This does not apply when using the speech-to-text function as part of the free version of DeepL translator or the DeepL account, where the recordings, their transcriptions and the translations are stored and processed for a limited period of time to train and improve our neural networks and translation algorithms (please see also section 3 of this privacy policy). The user will be informed of this before using the speech-to-text function for the first time and asked to give their consent. The consent does not cover the recording of the voices of third parties, which means, you are not permitted to record the voices of third parties. You can withdraw the consent you have given at any time with effect for the future. You do this by deleting the corresponding cookie set by the consent. For further information and explanation of the withdrawal process, please click here.

11. DeepL التطبيقات

بالإضافة إلى خدمات الترجمة والتحسين على موقعنا الإلكتروني، نقدم أيضًا تطبيقات لأنظمة تشغيل ويندوز وماك أو إس ("تطبيقات سطح المكتب")، بالإضافة إلى تطبيقات لنظامي iOS وأندرويد ("تطبيقات الجوال")، والتي يمكنك من خلالها أيضًا ترجمة النصوص أو تحسينها.

يمكنك استخدام تطبيقات سطح المكتب في كل من الإصدار المجاني والإصدار DeepL Pro المدفوع. يتوفر تطبيق Android في الإصدار المجاني. إذا كنت تستخدم الإصدار المجاني من DeepL في التطبيقات، يسري القسم 3 من سياسة الخصوصية هذه؛ إذا كنت تستخدم الإصدار المدفوع DeepL Pro، تسري الأقسام من 4 إلى 6. نظرًا لأن تطبيقات سطح المكتب تستخدم نفس الواجهات لإنشاء الترجمات أو التحسينات مثل الخدمة المستندة إلى الويب، فإن القسمين 7و8 من سياسة الخصوصية هذه ينطبقان أيضًا على استخدام هذه التطبيقات.

عند ترجمة النصوص أو تحسينها باستخدام تطبيقاتنا، ولأسباب فنية - بغض النظر عما إذا كنت تستخدم خدمتنا المدفوعة أو المجانية - سيقوم جهازك تلقائيًا بنقل بيانات معينة. يتم تخزين البيانات التالية التي يمكنك إرسالها إلينا:

  • تاريخ ووقت الوصول
  • إصدار التطبيق
  • نظام التشغيل
  • حجم البيانات المرسلة
  • الإخطار باسترجاع البيانات بنجاح
  • عنوان IP مختصر/مختصر/مجهول الهوية
  • عنوان IP الكامل
  • معلومات التشخيص في حالة وجود أخطاء
  • نوع الجهاز المحمول (فقط لتطبيق iOS وAndroid)
  • اللغة المستخدمة
  • فرق المنطقة الزمنية عن توقيت غرينتش (بتوقيت غرينتش)
  • رمز حالة الوصول/رمز حالة HTTP

تستند معالجة هذه البيانات إلى مصلحتنا المشروعة في ضمان وتحسين استقرار خدماتنا ووظائفها، المادة الفقرة 6 من المادة 6. 1 الجملة 1 مضاءة 1 (و) من اللائحة العامة لحماية البيانات. يتم تخزين هذه البيانات لأسباب فنية فقط. تُستخدم البيانات المتعلقة بالوصول لتحليل الأخطاء، وضمان أمن النظام، وتسجيل الوصول إلى DeepL Pro وتحسين خدمات الترجمة أو التحسين التي نقدمها. يتم تخزين عنوان IP الكامل للمستخدمين الذين يستخدمون الإصدار المجاني من DeepL لمدة أقصاها 14 يومًا، وهو ما تبرره أيضًا مصلحتنا المشروعة في تحقيق الأغراض المذكورة، المادة. 6 الفقرة 6. 1 الجملة 1 مضاءة 1 (و) من اللائحة العامة لحماية البيانات. يتم تخزين عنوان IP الكامل لمستخدمي DeepL Pro طوال مدة العقد على أساس المادة. 6 الفقرة. 1 الجملة 1 مضاءة 1 ب) اللائحة العامة لحماية البيانات.

إذا كنت تستخدم تطبيقات الهاتف المحمول الخاصة بنا، فمن الممكن أيضًا قراءة النص الذي تم إدخاله والترجمة أو التحسين بصوت عالٍ أو إملاء النص المراد ترجمته أو تحسينه بنفسك. يتم استخدام خدمة الكلام المثبتة على جهازك لهذا الغرض. يُرجى ملاحظة أن هذا قد يؤدي إلى نقل المحتوى المدخل أو المنطوق إلى موفر خدمة الكلام التي يستخدمها جهازك، وربما إلى الولايات المتحدة الأمريكية أيضًا. DeepL ليس له أي تأثير على هذه المعالجة لبياناتك الصوتية والصوتية، وبالتالي تنطبق سياسة الخصوصية وشروط استخدام خدمة الكلام التي يستخدمها جهازك مثل تلك التي تقدمها Apple أو Google أو Samsung، وكذلك تلك الخاصة بخدمات الكلام الأخرى التي لا يمكن إدراجها بشكل شامل. 

نحن نستخدم ملفات تعريف الارتباط الضرورية وكائنات تخزين الويب في تطبيقات سطح المكتب لدينا كما هو موضح في القسم 9.

لا تُستخدم ملفات تعريف الارتباط في تطبيقاتنا للأجهزة المحمولة. ومع ذلك، يتم استخدام مُعرّف مستخدم فريد (لا يوجد مُعرّف مشترك بين الأجهزة)، مما يسمح لنا بتتبع، على سبيل المثال، إعدادات اللغة المصدر واللغة الهدف، وعدد الأحرف التي تمت ترجمتها أو تحسينها، وما إذا كان زر النسخ مستخدمًا، وإذا كان الأمر كذلك، كيف يتم استخدامه. تستند معالجة هذه البيانات إلى مصلحتنا المشروعة (المادة 6 الفقرة 1 الجملة 1 (و) من المادة 6 من اللائحة العامة لحماية البيانات) لفهم احتياجات مستخدمينا بشكل أفضل والقدرة على تكييف التطبيق وفقًا لمتطلبات العملاء.

12. DeepL API Free

In addition to the paid DeepL API Pro plan, we also offer a limited free version of our API (DeepL API Free). For further information, please see our DeepL Pro Terms and Conditions and section 3 on using the free version of DeepL.

In order to use DeepL API Free, it is necessary to create a DeepL account (please see section 6.1). If you select the API Free option during the checkout process, further data, as specified in section 6.2, will be collected. Although no costs are incurred when using DeepL API Free - subject to a (possible) upgrade - your payment data is collected in order to prevent improper use of API Free. Solely for this purpose, payment information is also passed on, in accordance with section 6.3, to the payment service provider we have commissioned, Stripe Payments Europe Ltd.

We process your data in order to perform the free-of-charge usage contract concluded between you and us on the basis of Art. 6 para. 1 sentence 1 lit. b) GDPR and on the basis of our legitimate interest in preventing misuse of the API Free, Art. 6 para. 1 sentence lit. f) GDPR.

13. Contacting our Sales or Support Team

You have the possibility to contact us via various contact forms on our website. You can also contact us directly by email.

13.1 Sales and Support Requests

If you would like to send us a sales enquiry in order to receive further information about our products and subscription plans or to start contract negotiations, you are welcome to use our sales contact form. In addition to your email address, you are required to provide your name and telephone number; all other information is optional. For the provision of our contact form, we use the HubSpot service (see section 14), where your request is pre-filtered and then forwarded to the ticket system of the provider Zendesk Inc. ("Zendesk"), 1019 Market Street, San Francisco, CA 94103, USA. We use Zendesk to process your enquiry and your further communication with us, we also use the service to manage our customer database. This may also involve the transfer of your contract data to the USA. We have entered into a data processing agreement with Zendesk and Zendesk may therefore only process the data in accordance with our instructions and not for its own purposes. Further information on the handling of personal data at Zendesk and on compliance with the requirements of Art. 44 GDPR can be found here and here. We also use the Customer Relationship Management System (CRM) of Salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 München, Deutschland (“Salesforce CRM”) to manage our customer database, which includes our existing and potential customers, and to organize sales and communication processes. Furthermore, Salesforce CRM enables us to analyse our customer-related processes. We have concluded a data processing agreement with Salesforce and Salesforce is therefore only allowed to process the data according to our instructions and not for its own purposes. The customer data is stored on servers in the EU.

If you contact our support team with questions about your contract and its implementation via our contact form, it is necessary to provide a valid email address so that we know who the inquiry comes from and can respond to it. We also use the aforementioned ticket system Zendesk to respond to your enquiry.

For both support and sales enquiries including any subsequent correspondence , Art. 6 para. 1 sentence 1 lit. b) GDPR serves as the legal basis for the processing of your personal data, as the processing is necessary for the initiation of the contract or the conclusion and performance of our contract. Art. 6 para. 1 sentence 1 lit. b) GDPR also provides justification for the processing of personal data that may be contained in documents sent to our Support team. We will store your data for the duration of our business relationship and subsequently for the duration of the legal retention periods where this is required. The processing of your personal data as part of our customer database and the analyses of our customer-related processes is based on Art. 6 para. 1 sentence 1 lit. f) GDPR, as this is in our legitimate interest.

If you have contacted our Support team via the contact form, it is possible that we will subsequently inquire by email about your satisfaction with our customer service. In this case, we will process your data on the basis of our legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR in order to determine customer satisfaction and to continuously improve our service.

13.2 Privacy Requests

You also have the option of contacting privacy(at)deepl.com with questions or concerns about data protection at DeepL. We process your data in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR on the basis of your voluntarily given consent. We also use the Zendesk ticket system to respond to privacy enquiries, so please also note the above explanations in this regard under section 13.1.

14. DeepL Newsletter

14.1 Product Newsletter

If you have signed up for a DeepL account, for DeepL Pro or DeepL API Free, we will occasionally send you emails with news on our products, such as the launch of new languages and new features as well as on related products and services. This will also include information and tips on how to get the most out of DeepL Pro. We are entitled to use the email address you provided when signing up for a DeepL account, for a DeepL Pro/DeepL Free API subscription in this way under the legal conditions of § 7 para. 3 of the German Act against Unfair Competition (UWG). Given our existing contractual relationship, it is also in our legitimate interest to inform you as set out above (Art. 6 para. 1 sentence 1 lit. f) GDPR). If you do not wish to receive such emails from us, you can object to the use of your email address for this purpose at any time by sending an email to support(at)deepl.com. Of course, each of our emails contain an unsubscribe link at the end. For sending the newsletter, we use a service provided by HubSpot, Inc. ("HubSpot"), for more information see 14.3.

14.2 Marketing Newsletter and other marketing communication

If you would like to receive more detailed information about our company, products, services and promotions, you can sign up for our marketing newsletter or you can agree to receiving marketing communication in certain other contexts. We may send you information, within the scope of your consent, about offers, special offers, promotions and marketing campaigns and other news from DeepL from time to time or get in touch with you to discuss specific products and services. The processing of your data is based on your consent (Art. 6 para. 1 sentence 1 lit. a) GDPR). You can withdraw your consent at any time with effect for the future by sending an email to support(at)deepl.com. Of course, our emails each contain an unsubscribe link at the end. We also use the HubSpot service to send the marketing emails, for more information please see 14.3.

Note to US Individuals: We may also send you marketing communications and newsletters and offers and promotions if you have agreed to send your information to DeepL, such as via Quora. In such a case, we rely on your agreement to send us your information as establishing a relationship with us and your consent to such marketing. You can withdraw your consent at any time with effect for the future by using the unsubscribe link at the end of our emails.

14.3 Email Service Provider HubSpot

For sending the newsletters and other marketing emails, we use a service provided by HubSpot, Inc. with headquarters at 25 First Street, 2nd Floor, Cambridge, MA 02141 USA. As part of this, your data may also be transferred to the USA. We have concluded a data processing agreement with HubSpot and therefore HubSpot may only process the data according to our instructions and not for its own purposes. You can find more information on HubSpot’s handling of personal data here and here.

We also statistically record, among other things via HubSpot, which emails you open and which links you click on in our emails (opening and click rates). This allows us to understand which content is of interest to our users and to optimize the newsletter and our email communication, which corresponds to our legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR.

15. User research and surveys

15.1 User surveys

Users are given the opportunity to participate in surveys via the web and app interface of our services. Participation in the surveys is voluntary and can be achieved, for example, via a pop-up found on the interface. The user may be redirected to a third party website (e.g. Qualtrics) to complete the survey.In order for us to properly analyse the survey results, we match your survey results with your product interaction that we collect when you use our DeepL products. This helps us to get better insights on how our users respond to our services, which help us to improve our DeepL product offering and services based on the collected survey information. Your personal data will not be collected or processed throughout the entire process. We won’t ask you to enter any personal data when taking part in the survey. Furthermore, to collect your product interaction data we don’t collect or process your IP-address. In order to obtain this data from you, we will assign you a user ID upon confirmation that you wish to participate in the survey. This user ID – in the form of a cookie – does not give away any personal data about the person behind the interaction data and is therefore anonymised.  

Your survey results and product interaction data (if any) will be stored and processed collectively by DeepL for up to 2 years.  

If personal data is nevertheless collected or processed in the aforementioned process - which we do not plan or assume from our side - we justify this via Art. 6 (1) sentence 1 lit. f) GDPR, as this represents the least intrusion into the rights of the user in contrast to an opt-in and corresponds to the principle of data minimisation. You may withdraw your consent for the cookie at any time with effect for the future by deleting your browser cache.

15.2 Customer Surveys

We want to encourage customers to share their experiences with using our products. DeepL may therefore reach out to you occasionally, via email or other communication channels, to ask about your experience and/or satisfaction with our products. Participation in these surveys is voluntary, and most surveys can be answered anonymously. However, in some instances you may be asked to provide your name and/or email address, either optionally or as a requirement for completing the survey. If you provide us with your email, we may contact you afterwards (e.g., to invite you to participate in research studies or to share your experience in a call with our team).

The processing of your data corresponds to our legitimate interests according to Art. 6 para. 1 sentence 1 lit. f) GDPR to improve our products and to further develop them according to our customer’s wishes. If you provide your name and/or email address in the survey, we justify the processing of your data via your consent pursuant to Art. 6 para. 1 sentence 1 lit. a) GDPR. You can revoke this consent at any time with effect for the future. 

15.3 Typeform

To conduct the customer satisfaction surveys, we use a service of Typeform SL, Carrer Bac de Roda, 163, local, 08018 Barcelona, Spain ("Typeform"), on whose platform the surveys are stored. Typeform uses different subcontractors, which are also partly located in third countries outside the EU. Therefore, in certain cases, there may be a transfer of your data to the USA. We have concluded a data processing agreement with Typeform and Typeform only processes the data in accordance with our instructions and not for its own purposes. You can find more information about Typeform's handling of personal data here.

15.4 Qualtrics

For the surveys we use a service of Qualtrics Ireland Limited, Costello House, 1 Clarendon Row, Dublin 2, DO2 TA43, Ireland ("Qualtrics"), on whose platform the surveys are stored. Access to the surveys is placed on the website by DeepL so that each user can freely decide whether to participate in the survey. Qualtrics uses different subcontractors, which are also partly located in third countries outside the EU. Therefore, in certain cases, there may be a transfer of your data to the USA. We have concluded a data processing agreement with Qualtrics and therefore Qualtrics may only process the data according to our instructions and not for its own purposes. Further information on the handling of personal data at Qualtrics can be found here and here.

15.5 Hotjar

Furthermore, we use a survey tool of Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta ("Hotjar"), on whose platform the surveys are stored. Hotjar uses different subcontractors, which are also partly located in third countries outside the EU.Therefore, in certain cases, there may be a transfer of your data to the USA. We have concluded a data processing agreement with Hotjar and Hotjar only processes the data in accordance with our instructions and not for its own purposes. You can find more information about Hotjar's handling of personal data here.

15.6 UserTesting

We also use a service provided by UserTesting, Inc. 144 Townsend Street, San Francisco, CA 94107 USA to conduct interviews with you. As a user (Contributor) of UserTesting, you can register for our interviews on UserTesting's platform. We also contact selected customers to make them aware of the interviews and invite them to attend. The interviews are recorded with images and sound and stored by us for two years on the UserTesting platform. We process your data on the basis of your given consent, Art. 6 para. 1 sentence 1 lit. a) GDPR. You can withdraw your consent at any time with effect for the future by sending an email to privacy(at)deepl.com. Please state the exact day and, if possible, the time of the interview. We have concluded a data processing agreement with UserTesting and UserTesting may only process the data according to our instructions and not for its own purposes. UserTesting uses different subcontractors - such as Zoom - which are also partly located in third countries outside the EU. Therefore, in certain cases, there may be a transfer of your data to the USA. Further information on the handling of personal data at UserTesting can be found here and here.

15.7 Ethnio

We use a service provided by Ehtnio Inc, 1909 Roselia Ave, Los Angeles CA 90027, USA, ("Ethnio") to store contact details of participants who signed up to our internal panel for the purpose of inviting them to participate in studies and to incentivize our research studies. Ethnio uses different subcontractors, which are also located in the USA. We have concluded a data processing agreement with Ethnio and Ethnio only processes the data in accordance with our instructions and not for its own purposes. You can find more information about Ethnio's handling of personal data here.

16. DeepL’s Social Media Pages

DeepL operates several social media profiles (also called “pages”) on various social networks e.g., Facebook, Instagram, Twitter, LinkedIn and Xing. There we regularly publish posts about our products, new product features as well as new job offers. If you interact with our pages or contact us via them and are a member of the respective social network, we may receive and process data that identify you. As operator of the pages, we also have the option of viewing anonymous statistics on the interaction of visitors with our pages (insight function). For this purpose, the operators of the social networks record your interactions with our pages using cookies and similar technologies. You can find more information on this kind of data processing by Facebook, Instagram and LinkedIn here, here and here.

The legal basis for the operation of our social media profiles and the insights function is our legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f) GDPR in using the pages as an information channel for our company. With regard to the insights function, we have a legitimate interest in understanding the visits and interactions with our page in order to be able to respond to them and to further improve our presence. Insofar as your consent given to the social network justifies the data processing within the framework of the respective social platform, processing is carried out on the basis of this consent.

In addition, we use the LinkedIn image pixel to record and evaluate conversions from our LinkedIn advertising campaigns. Conversions mean whether a user is successfully led to our website via our LinkedIn advertising campaign. Furthermore, user interactions - i.e., individual steps taken by the user on our website - are to be recorded and tracked via conversions. The LinkedIn image pixel is embedded on certain pages of our website and provides feedback to LinkedIn if a conversion has taken place. In doing so, LinkedIn processes the user’s IP address as well as the presence of a cookie set by LinkedIn, which provides conclusions about the conversion. The processing of your personal data is based on your consent (Art. 6 para. 1 sentence 1 lit. a) GDPR). The consent is given via the cookie settings. You can revoke your consent at any time with effect for the future by revoking the consent for the “Marketing” cookie category or deleting your browser cache.

Please note that we together with the operator of the respective social network are jointly responsible for the data processing operations triggered when you visit our page. However, the operators of the social networks may also process your data for their own purposes, which are not depicted in this privacy policy. It is also possible that data collected about you will be transferred to third countries, in particular the USA. We have no influence on this data processing and refer to the privacy policies of the respective social networks e.g., for Facebook here, for Instagram here, for Twitter here, for LinkedIn here and for Xing here.

In principle, you can assert your rights (see section 20 below) both against us and against the operator of the respective social platform. However, we would like to point out that despite the joint controllership, you can most effectively assert your rights with the operators of the social networks. If you need help, you can contact us.

17. Webinars

We offer webinars for our users and existing or prospective customers. The webinars are interactive events on the products we offer, conducted by our staff. External speakers may also be invited to the webinars. We point this out accordingly before registration.

We use a service provided by Zoom Video Communications, Inc. ("Zoom"), 55 Almaden Blvd. Suite 600, San Jose, CA 95113, USA, on whose platform the webinars are held. Registration for our webinars takes place via a corresponding landing page of Zoom. We have concluded a data processing agreement with Zoom and Zoom may only process personal data according to our instructions and not for its own purposes. We would like to point out that if you access Zoom's website, Zoom is responsible for the personal data processed through your use of the website. If you have entered into a contractual relationship with Zoom, we have no influence on the personal data collected and processed in this context as part of our webinars. Further information on the handling of personal data at Zoom - in particular also in relation to webinars - can be found here.

In the event of registration for a webinar on a landing page provided by Zoom, we collect and process all personal data that you provide when registering for one of our webinars (first and last name, email address, company (optional), position (optional)). We process your data to fulfil the free participation contract concluded between you and us on the basis of Art. 6 para. 1 sentence 1 lit. b) GDPR. We store your data on this basis for the duration of the existence of our contractual relationship, i.e. until the conclusion of the webinar, and subsequently for the duration of the statutory retention periods where this is required. If you have a DeepL account and it is possible for us to assign the webinar registration to this account, the processing of your personal data in the context of our customer database and the analyses of our customer-related processes until the end of the webinar is based on Art. 6 para. 1 sentence 1 lit. f) GDPR, as this is in our legitimate interest to record the demand for webinars and in this context to improve the services for our customers. After completion of the webinar, we note in our customer database under your account that you participated in the webinar. The name and e-mail address given during registration will not be noted and - if they do not match the details in the DeepL account created - will be deleted by us after the webinar has ended. Should personal data be processed at all in this note in the customer database beyond the webinar, we base this on Art. 6 para. 1 sentence 1 lit. f) GDPR, as this is in our legitimate interest to specifically identify whether customers understand our products in order to provide them with support more quickly in individual cases, or in order to provide certain customers with extended webinars and training.

When participating in a webinar and using Zoom, the following additional personal data is processed:

  • User information (This is data associated with the Zoom account and its authentication, e.g. first name, last name, display name, email address, password (unless Single Sign On (SSO) is used), profile picture, Zoom unique user ID);
  • Communication data (This is data that you independently enter, upload or share as part of the webinar and associated Zoom usage);
  • Meeting metadata and telemetry data (This technical data is, among other things, data relating to the use of the service, including when and how sessions were conducted (IP address, event logs, session information, etc.), as well as device and hardware information that Zoom needs to access in order for features such as camera, microphone, etc. to be operational in the context of participation).

Please note that it is also possible to participate in the webinar without having a Zoom account. In this case, the collection and processing of data is limited to the minimum necessary to be able to maintain the service for you. We have chosen settings so that the collection and processing of the communication content generally takes place on servers in the European Union. As Zoom is based in the USA, we cannot exclude the possibility that data processing (in particular meeting metadata) may also take place in the USA when using the service. A collection and processing of your data through the use of Zoom takes place on the basis of Art. 6 para. 1 sentence 1 lit. b) GDPR (participation contract). We store the data collected and processed by Zoom on our behalf for the duration of the Zoom webinar and subsequently for the duration of the statutory retention periods, if this is required. We have no influence on the duration of the data processed by Zoom under its own responsibility. Please contact Zoom directly for information in this regard.

Automated decision-making pursuant to Art. 22 GDPR does not take place.

Please note that we may record Zoom webinars and publish them afterwards on our website or social media channels. Participants will not be visible or identifiable in these recordings. As participants can only ask written questions, they will not appear visually in the recording. The answer to the participant's question will be part of the webinar recording. If, contrary to expectations, personal data of the participants is visible during the recording, it will be made unrecognisable before publication. The recording and storage of the webinar is based on Art. 6 para. 1 sentence 1 lit. f) GDPR, as these processing operations are in our legitimate interest to improve the quality of our webinars. When the webinars are published, no further processing of personal data will take place, as we will make them unrecognisable beforehand - if they can be viewed at all.

18. Job Applications

We offer you the opportunity to apply for a position at DeepL via our career page and the integrated career portal, or by email. This digital recruitment process means that in order to complete the application procedure, your application data (usually name, contact information, cover letter, resume, as well as other supporting documents and credentials) is collected and processed electronically. The personal data you provide will be used exclusively for processing your job application. Your data will only be shared with persons involved in the application process. If you submit your documents in German only, even though an English version of the documents was requested in the job advertisement, we reserve the right to translate your documents into English using DeepL’s PDF translation feature. The legal basis for the processing of your applicant data is Art. 6 para. 1 sentence 1 lit. b) GDPR in conjunction with Art. 88 para. 1 GDPR in conjunction with § 26 para. 1, 8 sentence 2 BDSG ("Bundesdatenschutzgesetz": German Federal Data Protection Act). If you apply for a freelance job at DeepL, the legal basis for the processing of your applicant data is Art. 6 para. 1 sentence 1 lit. b) GDPR.

Where necessary, we reserve the right to carry out a pre-check of the data provided by the applicant as part of the application process in relation to the applicant's work permit. The pre-check enables us to find out whether the applicant is eligible to obtain a work visa and at what time such a visa could be provided. In order to process your application data, it will be forwarded to the service provider Localyze UG (haftungsbeschränkt), Bäckerbreitergang 28, 20355 Hamburg, which carries out the Pre-Check on behalf of DeepL. We have concluded a data processing agreement with Localyze UG (haftungsbeschränkt) and therefore Localyze may only process the data according to our instructions and not for its own purposes. You can find more information about Localyze’s handling of personal data here. The processing of personal data in the context of the pre-check is necessary for the establishment of an employment relationship. Accordingly, we justify the data processing via Art. 6 para. 1 sentence 1 lit. b) GDPR in conjunction with Art. 88 para. 1 GDPR in conjunction with § 26 para. 1, 8 sentence 2 BDSG ("Bundesdatenschutzgesetz": German Federal Data Protection Act).

If a contract is concluded with you and a work visa is required, Localyze will take over the further coordination of obtaining the work visa. It is possible that Localyze will need to obtain further data from you in addition to the applicant data in order to be able to support you in the visa process (e.g., passport scan; health insurance confirmation). The processing of personal data by Localyze is necessary for the implementation of the employment relationship and is therefore covered by Art. 6 para. 1 sentence 1 lit. b) GDPR in conjunction with Art. 88 para. 1 GDPR in conjunction with § 26 para. 1, 8 sentence 2 BDSG ("Bundesdatenschutzgesetz": German Federal Data Protection Act).

If, following the recruitment process, an employment contract is concluded, we will store your personal data as part of your personnel file for the purpose of standard organizational and administrative procedures, in compliance with the more extensive legal obligations. In this case, the legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. b) GDPR in conjunction with Art. 88 para. 1 GDPR in conjunction with § 26 para. 1 BDSG ("Bundesdatenschutzgesetz": German Federal Data Protection Act). When working on a freelance basis for DeepL, we will store your personal data for the purpose of executing your contract with us. In this case, the legal basis for the processing of your data is Art. 6 paragraph 1 sentence 1 lit. b) GDPR.

In the event of a rejection on your part or ours, we will retain the data submitted to us for up to a maximum of six months following notification of the rejection. We will subsequently delete the data unless legal regulations require us to store the data for a longer period.

If you expressly agree to a longer storage period of your data e.g., for your inclusion in our internal applicant pool, the data will be further processed based on your consent in accordance with Art. 6. para. 1 sentence 1 lit. a) GDPR. Your data will then be stored in our pool of applicants for 1000 days. You can withdraw your consent at any time with effect for the future.

In order to process your application data, it will be forwarded to the service provider Recruitee B.V., Keizersgracht 313, 1016 EE Amsterdam, The Netherlands, which operates the application system. We have concluded a data processing agreement with Recruitee, which means that Recruitee may only process the data in accordance with our instructions and not for its own purposes. Further information on data protection at Recruitee can be found here.

In certain cases, in particular applications for developer positions, the applicant's name and email address may be forwarded to the service provider Codesse Ltd., FF28, Kao Hockham Building, Edinburgh Way, Harlow, Essex, CM20 2NQ, United Kingdom, which provides services regarding the provision and review of coding challenges during an application. We have concluded a data processing agreement with Codesse, which means that Codesse may only process the data in accordance with our instructions and not for its own purposes. Codesse may contact applicants during the application process via email regarding the performance of the coding challenges. Further information on data protection at Codesse can be found here.

19. Data Security

Your connections to our website and our apps are protected with encryption techniques in line with the current state of the art. The level of protection also depends on which encryption your Internet browser and/or mobile device supports. You can tell whether an individual page of our website is transmitted in encrypted form by looking at the closed key or lock symbol in the status bar of your browser. We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

20. Your Rights

The following rights are granted by European Union directives and regulations. If you wish to exercise any of the rights listed below, please contact us at the above address.

  • Right to confirmation and right of access - We will gladly confirm whether we are processing any of your personal data, which data we are processing, and for what purpose we are processing it.
  • Right to rectification - If any of the data we have stored is incorrect, we would certainly be happy to correct it.
  • Right to erasure - Should you wish your personal data to be deleted, we will comply with your request as far as legally possible.
  • Right to restriction of processing - Should you wish to restrict use, we will comply with your request as far as legally possible.
  • Right to withdraw your consent - Should you wish to revoke any previously granted consent, we will comply with your request. Revocation does not affect the permissibility of the processing of your data up to now.

In addition, you can object to the further processing of your data if we process your data based on our legitimate interest (Art. 6 para. 1 sentence 1 lit. f), Art. 21 GDPR). If we process your data for the purpose of direct advertising, you have a general right to object. If we do not process your data for advertising purposes, the objection must be based on your particular situation.

You also have the right to lodge a complaint regarding the processing of your personal data with a supervisory authority, such as the data protection supervisory authority responsible for us: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2 - 4, 40213 Düsseldorf, email: poststelle(at)ldi.nrw.de.

21. Special provisions for users from South Korea

21.1 Contact and DeepL Chief Privacy Office (CPO)

If you have any specific questions or concerns about privacy and data protection in South Korea, also with regard to previous versions of this privacy policy, please contact the privacy team of DeepL at privacy(at)deepl.com.

21.2 Additional information for usage of DeepL's free service

In addition to section 3, please note that if you enter personal data when using DeepL Translator / Write in the free version contrary to the terms of use, this data may be checked by a human.

21.3 Data Deletion and Retention Periods 

As described above, we will process your data for as long as is necessary for the stated purpose and if applicable, to the extent that you have consented to. Subsequently, we will delete your personal data without undue delay. We will permanently destroy any personal data saved in electronic format in a way that it cannot be restored and recovered. Personal information printed on paper will be destroyed by shredding thereof.

However, as outlined above in section 6.2, DeepL is obliged to retain certain personal data of users as required by applicable laws. Relevant laws under Korean law include, in particular, the Act on the Consumer Protection in Electronic Commerce (Article 6) which provides for the retention of data on contract as well as withdrawals and revocations thereof for 5 years, data on the provision of services for 5 years and data on consumer complaints or consumer disputes for 3 years. The Protection of Communications Secrets Act provides in Article 15-2 to retain records of computer communication or internet log and trace data of access point for 3 months.

21.4 Data Security and Pseudonymisation

In addition to the measures set out in section 19 of this privacy policy, under the Korean Personal Information Protection Act we take various technical, administrative and physical measures to ensure data security and the security of personal data. For example, we manage access rights to our systems that contain personal data as well as pseudonymized data in a traceable manner; we take various measures to prevent unauthorised access to personal and pseudonymized data, including maintaining a VPN network; we regularly train our employees in the handling of personal data, including pseudonymized data and data security. We regularly evaluate our data processing procedures and modify them as necessary. In addition, we work with strict physical access controls to e.g. our IT infrastructure and data storage systems as well as to documents that contain personal data. 

As outlined above in section 9.2, we analyze pseudonymized data about our customers' use of DeepL Pro products to understand general usage habits and derive different target and user groups. Pseudonymized data is used only until the purpose of data analysis is fulfilled and is destroyed thereafter.

21.5 Rights of Data Subject and Legal Representative

As outlined above in section 19, you have the right to exercise your rights as a data subject by contacting us at privacy(at)deepl.com. DeepL Pro-customers can also reach out to support(at)deepl.com for assistance.

You may exercise your rights through a legal representative or an authorized agent. In such cases, the legal representative or agent must present a signed power of attorney in writing to act on your behalf.

21.6 Children’s Privacy 

Our service is not intended for children under the age of 14, and DeepL does not knowingly collect personal data from children under the age of 14. If you have any reason to believe that a child under the age of 14 has provided personal data to DeepL through the service, please contact us at privacy(at)deepl.com. We will investigate any such notification and if appropriate, delete the personal data from our systems.

21.7 Overseas Transfer and Delegation of Personal Data Processing

We may transfer personal data to the overseas delegatees listed below in order to provide services and enhance customer convenience. In order to deliver our services, we may store your personal data on DeepL servers located within the EEA and transfer it to the delegatees located abroad. The overseas transfer is conducted through telecommunication network from time to time as needed. The transferred data will be retained and used in accordance with our privacy policy's retention periods. This overseas transfer is essential for the provision of our services. Therefore, if you refuse the overseas transfer, it may restrict your access to our services.

  • Process payments: We forward the necessary payment data to our authorized payment service provider Stripe Payments Europe Ltd., Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland. Where necessary, Stripe will transfer the data to Stripe, Inc., located in the USA. You can contact the company through duo(at)stripe.com.
  • Secure the use of website: Our website uses services of Cloudflare, Inc, 101 Townsend St, San Francisco, CA 94107, USA ("Cloudflare"). To protect our website, the data transfer between your browser and our servers is routed through Cloudflare's infrastructure in order to analyze whether it is an abusive attack. However, since your translation requests and other customer data are encrypted between your end device and the DeepL servers, Cloudflare does not have any access to this data, but only to meta-data (such as your IP address). You can contact the company through privacyquestions(at)cloudflare.com.
  • Support enquires: If you send us a support enquiry, your request. Is forwarded to the ticket system of the provider Zendesk Inc. ("Zendesk"), 1019 Market Street, San Francisco, CA 94103, USA. We use Zendesk to process your enquiry and your further communication with us, we also use the service to manage our customer database. You can contact the company through privacy(at)zendesk.com.
  • Manage customer database: We use the Customer Relationship Management System (CRM) of Salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 München, Deutschland (“Salesforce CRM”) to manage our customer database, which includes our existing and potential customers, and to organize sales and communication processes. You can contact the company through privacy(at)salesforce.com.
  • Send newsletters and other marketing emails: For sending the newsletters and other marketing emails, we use a service provided by HubSpot, Inc. with headquarters at 25 First Street, 2nd Floor, Cambridge, MA 02141 USA. As part of this, your data may also be transferred to the USA. You can contact the company through privacy(at)hubspot.com.
  • Conduct the customer satisfaction surveys: To conduct the customer satisfaction surveys, we use a service of Typeform SL, Carrer Bac de Roda, 163, local, 08018 Barcelona, Spain ("Typeform"), on whose platform the surveys are stored. Typeform uses different subcontractors, which are also partly located in third countries outside the EU. Therefore, in certain cases, there may be a transfer of your data to the USA. You can contact the company through GDPR(at)typeform.com.
  • Conduct surveys: For the surveys we use a service of Qualtrics Ireland Limited, Costello House, 1 Clarendon Row, Dublin 2, DO2 TA43, Ireland ("Qualtrics"), on whose platform the surveys are stored. Qualtrics uses different subcontractors, which are also partly located in third countries outside the EU. Therefore, in certain cases, there may be a transfer of your data to the USA. You can contact the company through [email protected].
  • Conduct surveys: We use a survey tool of Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta ("Hotjar"), on whose platform the surveys are stored. Hotjar uses different subcontractors, which are also partly located in third countries outside the EU.Therefore, in certain cases, there may be a transfer of your data to the USA. You can contact the company through [email protected]
  • Conduct interviews: We use a service provided by UserTesting, Inc. 144 Townsend Street, San Francisco, CA 94107 USA to conduct interviews with you. UserTes ting uses different subcontractors - such as Zoom - which are also partly located in third countries outside the EU. Therefore, in certain cases, there may be a transfer of your data to the USA. You can contact the company through [email protected].
  • Host Webinars: We use a service provided by Zoom Video Communications, Inc. ("Zoom"), 55 Almaden Blvd. Suite 600, San Jose, CA 95113, USA, on whose platform the webinars are held. You can contact the company through [email protected].
  • Job applications: In order to process your application data, it will be forwarded to the service provider Localyze UG (haftungsbeschränkt), Bäckerbreitergang 28, 20355 Hamburg, which carries out the Pre-Check on behalf of DeepL. You can contact the company through [email protected].
  • Job applications: In order to process your application data, it will be forwarded to the service provider Recruitee B.V., Keizersgracht 313, 1016 EE Amsterdam, The Netherlands, which operates the application system. You can contact the company through [email protected].
  • Job applications: In particular applications for developer positions, the applicant's name and email address may be forwarded to the service provider Codesse Ltd., FF28, Kao Hockham Building, Edinburgh Way, Harlow, Essex, CM20 2NQ, United Kingdom, which provides services regarding the provision and review of coding challenges during an application. You can contact the company through [email protected]

22. التغييرات على سياسة الخصوصية

نحتفظ بالحق في تعديل سياسة الخصوصية هذه. يمكن الوصول إلى النسخة الحالية من سياسة الخصوصية في أي وقت على موقعنا الإلكتروني.

آخر تحديث حزيران/يونيو 2024