Status: 2026. This statement informs you pursuant to the GDPR about the processing of personal data.
MHM Digitale Lösungen UG (haftungsbeschränkt)
Sonderfeld 56, 45277 Essen, Germany
E-Mail: support@demonai.de
A data protection officer is appointed: [Name and contact of the data protection officer, if required – e.g. E-Mail: support@demonai.de]. If none is appointed, please address data-protection questions to the controller above.
We process personal data only within the limits of the statutory provisions (GDPR, BDSG, TMG). The legal bases are in particular Art. 6 (1) lit. b GDPR (performance of contract), lit. a GDPR (consent) and lit. f GDPR (legitimate interest).
Upon registration we collect the data you provide (email address and password, the latter stored exclusively as a salted hash, never in plaintext). For order processing we process the data required for contract performance (account data, order content, billing data).
Our desktop software transmits a hardware ID (HWID) that pseudonymously identifies the device when activating a license. It is used exclusively to bind your license non-transferably to one device and to prevent abuse. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in license protection). No content of your computer is read, stored or transmitted.
Payments are processed exclusively via the payment service provider Stripe (Stripe Payments Europe, Ltd.). The payment data you enter (e.g. credit card data) is not stored by us but transmitted directly to Stripe. Stripe's privacy policy applies: https://stripe.com/de/privacy. We only store the payment status and the order assignment.
We use technically necessary cookies to operate the website (login session, CSRF protection). These cookies are required for operation (Art. 6 (1) lit. f GDPR). Any further use (e.g. tracking, analytics, marketing) occurs only with your consent. You can manage or delete cookies at any time via your browser settings.
The web server may automatically process access data (IP address, date/time, page requested, referrer, browser). This data is used only to ensure operation and detect attacks and is generally deleted after a short period.
Promotional contact occurs only with your consent (Art. 6 (1) lit. a GDPR) and can be revoked at any time with effect for the future.
Disclosure of personal data to third parties occurs only insofar as this is necessary for contract performance (in particular payment processing via Stripe) or a legal obligation exists. Transfers to third countries occur within the safeguards provided by Stripe (standard contractual clauses).
We store personal data only as long as necessary for the stated purposes or as statutory retention periods (e.g. commercial and tax law) require. Thereafter the data is deleted or anonymized.
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object (Art. 21 GDPR). You may also lodge a complaint with a supervisory authority, e.g. the Landesbeauftragte für Datenschutz Nordrhein-Westfalen: www.ldi.nrw.de. To exercise your rights, contact the address above.
We may adapt this Privacy Policy to changed legal situations or functions. The current version is available on this page.