Privacy policy

1. Controller

Trendform GmbH, Bergweg 9a, 82399 Raisting, Germany, represented by its managing director Daniel Pscheid. Email: hello@trendform-audio.com

We are not required to appoint a data protection officer. For privacy questions, please contact us at the address above.

2. Principles

We process as little personal data as possible. This website uses no analytics or advertising trackers and loads no fonts or scripts from third parties, except the payment provider Paddle during checkout (see section 5).

3. Hosting and server logs

The website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen. When you visit it, the server processes technically necessary data: IP address, date and time, requested address, referrer, browser and operating system. This serves secure operation and the prevention of abuse (Art. 6(1)(f) GDPR). Log files are deleted after 14 days at the latest. We have a data processing agreement with the host.

4. Cookies

We only use technically necessary cookies: a session cookie and a cookie protecting forms (CSRF). If you sign in to your account, a cookie keeps you signed in. The legal basis is § 25(2) no. 2 TDDDG and Art. 6(1)(b) and (f) GDPR. No consent is required.

5. Purchases through Paddle

Sales are handled by Paddle.com Market Limited, Judd House, 18-29 Mora Street, London EC1V 8BT, United Kingdom, acting as reseller. Paddle is independently responsible for payment data, invoicing and taxes. When you click “Buy”, the page loads Paddle’s checkout (cdn.paddle.com). Paddle processes your input and sets its own cookies for fraud prevention. Paddle’s privacy policy applies: paddle.com/legal/privacy.

After the purchase, Paddle sends us your name (if provided), email address, country, product, amount and transaction number. We use these to create your license and customer account (Art. 6(1)(b) GDPR). We keep order data for the statutory retention periods (up to 10 years, Art. 6(1)(c) GDPR).

6. Customer account and sign-in link

Your account consists of your email address, licenses and orders. There is no password: to sign in, we email you a time-limited link (Art. 6(1)(b) GDPR). You can ask us to delete your account at any time unless statutory retention obligations apply.

7. License activation in the plugin

When you activate a plugin with your license key, it transmits once and then every few weeks: the license key, a device ID derived from hardware characteristics that cannot be reversed, the computer name, operating system and plugin version, and, for technical reasons, the IP address. This enforces the agreed number of activations (Art. 6(1)(b) GDPR). We do not store the IP address permanently and only use it briefly to limit requests. Your account lists all activated computers and lets you free activations, which deletes the related device data.

Without a license key, the plugin runs as a trial and transmits no data. The update check only transmits the product and version.

8. Waiting list and newsletter

When you sign up, we email you as soon as a new plugin comes out and occasionally about updates and offers for our plugins. For this we store your email address, the product you chose, your language, the time of your confirmation and, if you arrived via a tagged link (e.g. with "?ref="), the tag of that link. This shows us which channels bring interested people. The tag is only kept in your session for the duration of your visit; there is no further tracking. We use double opt-in: we only write to you after you click the confirmation link (Art. 6(1)(a) GDPR).

We pass confirmed addresses with language, products and tag to our email service provider (see section 9), through which we send the emails. You can withdraw your consent at any time using the unsubscribe link in every email; your address is then deleted both by us and by the email service provider. Unconfirmed entries are deleted after 30 days.

9. Sending emails

To send license, sign-in and confirmation emails as well as emails to the waiting list, we use Brevo (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin) as a processor under a data processing agreement. Emails are sent from servers within the EU. The provider records whether an email was delivered, bounced or reported as spam, so that we notice delivery problems. It does not analyze opens or clicks for us: that only happens for recipients who have agreed to it, and we do not ask for that.

10. Support requests

If you write to us, we process your information to handle the request (Art. 6(1)(b) or (f) GDPR) and delete it once it is no longer needed.

11. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR), and the right to withdraw consent at any time with effect for the future. You may also lodge a complaint with a supervisory authority. Ours is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.