Status: 2026. This statement informs you pursuant to the GDPR about the processing of personal data.
MHM Digitale Lösungen UG (haftungsbeschränkt)
Sonderfeld 56, 45277 Essen, Germany
E-Mail: support@demonai.de
A data protection officer is appointed: [Name and contact of the data protection officer, if required – e.g. E-Mail: support@demonai.de]. If none is appointed, please address data-protection questions to the controller above.
We process personal data only within the limits of the statutory provisions (GDPR, BDSG, TMG). The legal bases are in particular Art. 6 (1) lit. b GDPR (performance of contract), lit. a GDPR (consent) and lit. f GDPR (legitimate interest).
Upon registration we collect the data you provide (email address and password, the latter stored exclusively as a salted hash, never in plaintext). For order processing we process the data required for contract performance (account data, order content, billing data).
For paid orders we additionally store whether and when the age confirmation under §6b of the Terms of Service was given (a yes/no value and a timestamp), to be able to prove the conclusion of the contract in case of a dispute. The legal basis is Art. 6 (1) (b) GDPR (performance/evidence of a contract).
Our desktop software transmits a hardware ID (HWID) that pseudonymously identifies the device when activating a license. It is used exclusively to bind your license non-transferably to one device and to prevent abuse. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in license protection). No content of your computer is read, stored or transmitted.
Payments are processed exclusively via the payment service provider Stripe (Stripe Payments Europe, Ltd.). The payment data you enter (e.g. credit card data) is not stored by us but transmitted directly to Stripe. Stripe's privacy policy applies: https://stripe.com/de/privacy. We only store the payment status and the order assignment.
We use technically necessary cookies to operate the website (login session, CSRF protection). These cookies are required for operation (Art. 6 (1) lit. f GDPR) and do not require consent.
In addition, we use the following services – only with your consent:
Google Analytics 4: We use the web analytics service Google Analytics 4, provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (for users in the EEA/UK/CH). Its purpose is audience measurement and analysis of usage behavior on our website (e.g. pages visited, time spent, origin of visits). Google Analytics is loaded and becomes active only after you give your consent (legal basis: Art. 6 (1) lit. a GDPR). Until you consent, data collection is disabled by default (Google Consent Mode v2, default setting "analytics_storage: denied"). In the process, data may be transferred to Google servers in the USA. To our knowledge, Google LLC is certified under the EU-US Data Privacy Framework, on the basis of which the EU Commission has issued an adequacy decision for this data transfer; as a fallback and in addition, Google provides standard contractual clauses pursuant to Art. 46 (2) lit. c GDPR. According to Google, Google Analytics 4 does not permanently store full IP addresses; an IP address is used only briefly for coarse location determination and then discarded.
Consent management (CookieYes): To obtain, manage and document your cookie consent, we use the consent management service CookieYes. On your first visit to the website, a consent banner appears where you can accept or reject cookies and comparable technologies on an equal footing; your decision is stored locally in a technically necessary cookie (cookieyes-consent).
Withdrawal: You can withdraw your consent at any time with effect for the future via the cookie icon in the bottom-left corner of the page. Alternatively, you can generally prevent data collection by Google Analytics, e.g. via the Google opt-out browser add-on.
The web server may automatically process access data (IP address, date/time, page requested, referrer, browser). This data is used only to ensure operation and detect attacks and is generally deleted after a short period.
Promotional contact occurs only with your consent (Art. 6 (1) lit. a GDPR) and can be revoked at any time with effect for the future.
Disclosure of personal data to third parties occurs only insofar as this is necessary for contract performance (in particular payment processing via Stripe) or a legal obligation exists. Transfers to third countries occur within the safeguards provided by Stripe (standard contractual clauses).
If you have consented to Google Analytics 4, Google Ireland Limited (or affiliated Google companies in the USA) also receives access to the resulting pseudonymized usage data for the purpose of web analytics; see the information in Section 7 of this Policy.
We store personal data only as long as necessary for the stated purposes or as statutory retention periods (e.g. commercial and tax law) require. Thereafter the data is deleted or anonymized.
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object (Art. 21 GDPR). You may also lodge a complaint with a supervisory authority, e.g. the Landesbeauftragte für Datenschutz Nordrhein-Westfalen: www.ldi.nrw.de. To exercise your rights, contact the address above.
We may adapt this Privacy Policy to changed legal situations or functions. The current version is available on this page.