Privacy
1. Controller
MeSoftware, owner: M. E., Melchower Ring 2, 16344 Schorfheide, Germany, e-mail: info@mesoftwareshop.com. Full details are given in the imprint.
2. In brief
We only process the data we need to run the website, to handle your order and to check licences. We use no analytics and no marketing services. Fonts, scripts and style sheets come from our own server; viewing a page sends no data to third parties.
3. Visiting the website and server log files
With every request our server processes the IP address, date and time, the requested address, the status code, the amount of data transferred, the previously visited page and the browser identification. This is necessary to deliver the website, keep it secure and find errors (Art. 6 (1) (f) GDPR). We delete log files after 30 days at the latest.
The server is run by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, acting as our processor (Art. 28 GDPR).
4. Contact
If you write to us, we process your details to answer your enquiry (Art. 6 (1) (b) GDPR, for general enquiries (f)). We delete the message once the enquiry has been dealt with, unless we are obliged to keep it.
5. Customer account
For a customer account we store your name, e-mail address, postal address and your password as a hash. The account shows your orders, invoices and licences (Art. 6 (1) (b) GDPR). The data remains stored until you have the account deleted; documents we are obliged to keep remain until the retention period ends (section 13).
6. Order, invoice and licence
For an order we process your name, company, billing address, e-mail address, your VAT ID if applicable, the products ordered, the invoice and the issued licence with customer and licence number. This is necessary to perform the contract (Art. 6 (1) (b) GDPR); we keep invoices and accounting records because of legal obligations (Art. 6 (1) (c) GDPR).
7. Payment via Stripe
Payments are handled by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. At checkout you are redirected to Stripe and enter your payment details there; we do not receive them. We pass your e-mail address, the amount and the order number to Stripe (Art. 6 (1) (b) GDPR).
Stripe processes some data under its own responsibility, for example to prevent fraud and because of legal obligations, and also transfers data to Stripe, Inc., USA. This is based on the adequacy decision for the EU-US Data Privacy Framework and on standard contractual clauses. Details are given in Stripe's privacy policy.
8. Country at checkout (ipapi.is)
When you open the checkout we send your IP address to the ipapi.is service of Nikolai Tschacher, Berlin, Germany, to pre-select the country in the form (Art. 6 (1) (f) GDPR: legitimate interest in a simple ordering process). The service acts as our processor, handles the request in Germany only and, according to its own statement, does not store the IP address. We do not store the result either; you can change the country at any time.
9. Licence check
Software you bought from us contacts our licence server license.mesoftwareshop.com for activation and, depending on the licence, regularly for checking. It transmits the licence identifier, the signed licence document, a device identifier formed from hardware characteristics (hash value), the computer name, and the time and IP address of the request; during activation also the name and e-mail address of the person activating.
We process this data to perform the contract (Art. 6 (1) (b) GDPR) and to protect our software against misuse (Art. 6 (1) (f) GDPR). We store it for the term of the licence and until the limitation period ends. We receive no other data from your software and no data about your customers.
10. E-mails
We send order confirmations, licences, invoices and reminders that a licence is about to expire via our own mail server (Art. 6 (1) (b) GDPR). You only receive product information if you consented during activation and confirmed your consent via the link in our e-mail (Art. 6 (1) (a) GDPR). You can withdraw your consent at any time with effect for the future.
11. Cookies
We only set cookies that are technically necessary for the website (§ 25 (2) no. 2 TDDDG, Art. 6 (1) (f) GDPR). We therefore do not ask for consent.
| Cookie | Purpose | Duration |
|---|---|---|
meuc_lscart | Contents of the cart | 30 days |
.AspNetCore.Culture | Language of the page visited last | End of session |
.AspNetCore.Antiforgery.* | Protects forms against forgery | End of session |
| Login cookie | Sign-in to the customer account | Until you sign out |
12. Recipients
Data is only received by STRATO (section 3), Stripe (section 7) and ipapi.is (section 8), and by bodies we are legally obliged to inform, such as tax authorities.
13. Retention
We store personal data for as long as the purpose requires. After that the statutory retention periods apply: invoices and accounting records eight years, books of account and annual financial statements ten years, commercial and business letters six years (§ 147 AO, § 257 HGB). The period begins at the end of the calendar year.
14. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time (Art. 7 (3)). You can also lodge a complaint with a supervisory authority; the authority responsible for us is the Commissioner for Data Protection and Access to Files of Brandenburg (Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg), Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany.
15. Right to object
Where we process data on the basis of legitimate interests (Art. 6 (1) (f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then stop processing the data unless we can demonstrate compelling legitimate grounds or the processing serves to establish, exercise or defend legal claims.
16. Obligation to provide data, automated decisions
You can visit the website without providing any data. For an order and for issuing a licence, the details marked as mandatory in the form are required; without them we cannot conclude the contract. There is no automated decision-making, including profiling.