Privacy Policy

Last updated: 16 July 2026

1. Controller

David Wirfs (sole proprietorship — eBilanz Fabrik), Naumannstraße 1, 50735 Köln, email: hello@ebilanzfabrik.de. See the Imprint.

2. Principle — data minimization within statutory duties

eBilanz Fabrik processes as little data as possible — and as much as the engagement and the law require. The website uses no tracking cookies and relies solely on cookieless, privacy-friendly reach measurement (Pirsch, Emvi Software GmbH, Germany) — no cookies, no cross-device tracking, no personal profiles (see sections 3 and 4). Your financial data is processed solely to carry out your engagement — never profiled, never used for advertising, never sold. To perform the engagement and to meet statutory retention duties (§ 147 AO, GoBD) we store the complete engagement record (your details and confirmations) and the filing artifacts (XBRL e-Bilanz, Transferticket, invoice) — see sections 3 and 5. Your ELSTER certificate is never stored.

3. Data processed, purposes, legal bases

• Server log files (site access): technical data arising at the hosting provider (IP address, timestamp, file requested) for delivery + security of the site. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).
• Contact (email): your details to answer your enquiry. Legal basis: Art. 6(1)(b) GDPR, or (f) (legitimate interest in handling your enquiry efficiently).
• Support form (name, email, subject, message): your details are stored as a support case with its own case number, so that we can handle your request traceably and tell you where it stands. Storage is on our server at Hetzner Online GmbH (processor, located in Germany, Art. 28 GDPR agreement in place). Legal basis: Art. 6(1)(b) GDPR (initiation/performance of the contract), or (f) (legitimate interest in traceable support handling). We need your name, email address and message to handle your request and reply to you correctly and personally; providing a subject is optional. Retention: until your request is resolved, and beyond that for as long as follow-up questions on your case are to be expected. You can request deletion at any time (Art. 17 GDPR) — an informal email is enough. If the case belongs to a paid order, the statutory retention below applies.
• Carrying out your engagement (balance-sheet/P&L data, master data, tax number): the values you enter or confirm are converted into the XBRL format, technically validated and — after your approval — transmitted to the tax authority. The engagement record (your details, approval and confirmation records, payment references of the payment provider, transmission status) is stored to administer the engagement. Legal basis: Art. 6(1)(b) GDPR; where processing on behalf applies: a data-processing agreement under Art. 28 GDPR.
• Statutory retention: the business records belonging to your engagement — invoice, transmitted XBRL e-Bilanz, Transferticket and the complete engagement record (including company master data, tax number, the figures you confirmed and payment references) — are retained for 10 years. Legal basis: Art. 6(1)(c) GDPR in conjunction with § 147 AO, § 257 HGB (GoBD).
• Filing confirmation by email: after a successful transmission you receive a confirmation email with the Transferticket, your XBRL file and the invoice. Legal basis: Art. 6(1)(b) GDPR.
• Official ELSTER data-protection notices: transmission via the official ELSTER interface (ERiC) is additionally subject to the tax administration's data-protection notices — verbatim at ELSTER-Datenschutzhinweise (official German documents); you confirm having taken note at the start of the process.
• Deadline reminders for our own similar services (right to object): once you have placed a paid e-Bilanz order with us, we use the email address collected in that order — unless you object — to remind you of the deadline for your next e-Bilanz and to inform you about our own similar services. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in direct marketing to existing customers, Recital 47) in conjunction with § 7(3) UWG. You can object at any time — informally to hello@ebilanzfabrik.de or via the unsubscribe link in every such email; no costs arise other than transmission costs at base rates. We point out this right to object already when the address is collected during checkout. No consent is required or obtained for this (there is no opt-in checkbox).
• Necessity of provision: providing the engagement data (master data, tax number, balance-sheet/P&L figures, your ELSTER certificate for one-time use) is required to perform the contract — without it the e-Bilanz cannot be created or transmitted. There is no statutory obligation to provide it to us.
• Import of your figures (PDF, Excel, CSV or HTML — local): When you import your finished balance sheet / P&L, the file is read exclusively locally in your browser (e.g. via pdf.js) and never leaves your device. There is no AI extraction and no transfer to an AI service or any third party. The imported values land as an editable pre-fill in the form — you review and confirm every position yourself; alternatively you enter every value manually. The values you review and confirm are then transmitted to our server and stored as part of the engagement record (sections 3/5) — the source file itself never leaves your browser. Legal basis: Art. 6(1)(b) GDPR (performance of contract).
• Payment: handled via Stripe on a data path separate from the financial data; eBilanz Fabrik receives no full payment-instrument data. Legal basis: Art. 6(1)(b) GDPR.
• Reach measurement (web analytics): cookie-free, aggregated usage statistics (page views, source/campaign via UTM, approximate region) to improve our service. No cookies are set and no cross-device profiles are created. Your IP address is not stored: it is combined with your browser identifier (user agent), the site identifier, a secret key held by the provider and a rotating value to compute a session identifier, and is discarded thereafter. The rotating value is renewed at the start of each calendar month; the session identifier therefore stays the same within a calendar month — a repeat visit from the same IP address and the same browser is mapped to the same identifier during that period, after which a new one is formed. This is pseudonymisation (Art. 4(5) GDPR), not anonymisation: the secret key remains permanently with the provider, so the mapping could in principle be recomputed. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in data-minimising, cookie-free reach measurement). You may object to this processing at any time under Art. 21(1) GDPR (section 6); for retention see section 5.
• Storage in your browser (§ 25 TDDDG) — engagement handle and campaign source: we set no cookies, but we store two technically necessary values in your browser's storage: (1) an engagement handle (ebf_session_id, localStorage, stored for 30 days, deleted automatically thereafter) — the identifier of your ongoing e-Bilanz engagement. It lets you resume after a page reload and — if you open our support form — is attached automatically there, so we can link a support request to your engagement and reproduce your problem without a screenshot. This creates a link between your support request and your engagement record; legal basis: Art. 6(1)(b) GDPR (performance of the contract / pre-contractual steps). (2) the campaign source (ebf_utm, sessionStorage) — the UTM parameters you arrived with; they are attached to the payment reference at checkout and are deleted when you close the browser tab. Both are strictly necessary to provide the service you explicitly requested (§ 25(2) no. 2 TDDDG) and therefore require no consent; they contain no personal content (no names, no figures, no tax number) and are not transmitted to third parties. You can delete both at any time via your browser settings.

4. Recipients / processors

• Domain & DNS: Porkbun LLC, USA — domain registration and operation of the authoritative nameservers (DNS) for ebilanzfabrik.de. The website and all email have run exclusively on servers in Germany since 16 July 2026 (Hetzner, see below); website server logs (incl. visitor IP) no longer accrue at Porkbun. In authoritative name resolution Porkbun technically receives only the query of the requesting DNS resolver (typically the user's internet provider or a public resolver), not the IP address of website visitors; this does not normally establish a personal reference to our visitors. With respect to domain and DNS, Porkbun acts as an independent recipient (not a processor); the legal basis is Art. 6(1)(f) GDPR (legitimate interest in operating a reachable domain).
• Website & application hosting: Hetzner Online GmbH, Germany — operation of the website ebilanzfabrik.de (static hosting, incl. resulting server logs such as visitor IP) and the engagement application (app.ebilanzfabrik.de), plus productive storage of engagement data on servers in Germany; Art. 28 GDPR agreement, no third-country transfer.
• Email (receipt & delivery): Hetzner Online GmbH, Germany — operation of the hello@ebilanzfabrik.de mailbox and delivery of the filing confirmation (incl. the XBRL file and invoice as attachments) via servers in Germany; Art. 28 GDPR agreement, no third-country transfer.
• Payment: Stripe Payments Europe, Ltd. (Ireland) — as payment service provider for payment processing; technical processing also by Stripe, Inc./Stripe, LLC (USA). Payment runs on a data path separate from your financial-statement data; eBilanz Fabrik receives no full payment-instrument data (you pay directly with Stripe). For payment processing Stripe acts as an independent (separate) controller — not as a processor, because it determines the processing for its own purposes (including fraud prevention and its anti-money-laundering and regulatory duties as a payment institution); Stripe's own privacy notice applies in addition. Where personal data is transferred to the USA, Stripe (Stripe, LLC) is certified under the EU-US Data Privacy Framework (EU Commission adequacy decision); Standard Contractual Clauses (SCCs) apply in addition.
• Web analytics (DE): Pirsch (Emvi Software GmbH, Germany) — cookieless reach measurement; hosted exclusively in Germany, no third-country transfer. Art. 28 GDPR agreement.

For internal record-keeping and backup, the controller additionally keeps an access-protected archive copy of engagement data on its own systems. You can request a copy of the Standard Contractual Clauses (SCCs) for the relevant third-country recipient (Stripe as independent controller) via hello@ebilanzfabrik.de.

5. Retention period

Filing artifacts and invoice data plus the complete engagement record (invoice, XBRL e-Bilanz, Transferticket, your details and confirmations incl. payment references): 10 years (§ 147 AO, § 257 HGB / GoBD). Contact data: until handled, then per statutory periods. Reach measurement (section 3): the pseudonymous analytics data is deleted after 6 months (the analytics provider's retention period on the plan in use); the IP address itself is never stored at any point. Server logs: a short, operationally usual period. Your ELSTER certificate: never stored (used exclusively in memory for the one transmission).

6. Your rights

You have the right to access (Art. 15), rectification (16), erasure (17), restriction (18), data portability (20) and objection (21), plus a right to lodge a complaint with a supervisory authority (Art. 77). The right to erasure does not apply where processing is required to meet statutory retention duties (Art. 17(3)(b) GDPR); such data is restricted instead of erased for the duration of the retention period. Competent supervisory authority: the Data Protection Commissioner of North Rhine-Westphalia (LDI NRW), Düsseldorf. Contact: hello@ebilanzfabrik.de.