Privacy Policy

Stand: April 2026

1. General

Formlane ("we", "our", "service") is a platform for assisting with German official forms and documents. We respect your privacy and are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and German law.

2. Data Controller

The data controller pursuant to Art. 4(7) GDPR is: Formlane GmbH Musterstraße 1, 10115 Berlin, Germany E-Mail: support@formlane.utax.top Competent data protection authority: Berlin Commissioner for Data Protection and Freedom of Information

3. Data We Collect

We collect the following categories of data: • Account data: name, email, password (hashed via bcrypt) • Profile: address, date of birth, nationality, contact information • Form data: information you enter to fill out documents • Usage data: access logs, IP address, browser, session time • Files: uploaded documents and images

4. Legal Basis for Processing

We process your data on the following legal bases: • Contract performance (Art. 6(1)(b) GDPR) — to provide the service • Consent (Art. 6(1)(a) GDPR) — when you give explicit consent • Legitimate interests (Art. 6(1)(f) GDPR) — for security and service improvement • Legal obligations (Art. 6(1)(c) GDPR) — as required by law

5. Data Storage

Data is stored on servers in Germany (EU). We use TLS encryption for data transmission and database-level encryption for storage. Retention periods: • Account data — until account deletion • Data protection complaints — Berlin Commissioner for Data Protection and Freedom of Information • Form data — until user deletion or account removal • Access logs — 90 days • Backups — 30 days

6. Your Rights

Under GDPR, you have the right to: • Access your data (Art. 15 GDPR) • Rectify inaccurate data (Art. 16 GDPR) • Erasure of data (Art. 17 GDPR) • Restrict processing (Art. 18 GDPR) • Data portability (Art. 20 GDPR) • Withdraw consent at any time • Lodge a complaint with a supervisory authority

7. Third-Party Data Sharing

We do not sell your personal data. Data may only be shared with: • Hosting providers (within the EU) • When legally required • With your explicit consent

8. Cookies

We use the minimum number of cookies necessary for the service: authentication session (JWT), language preferences. We do not use third-party tracking cookies.

9. Security

We apply technical and organisational measures for data protection in accordance with GDPR requirements: TLS 1.3 for data transmission, password hashing (bcrypt), database encryption, regular security updates, access monitoring.

10. Contact

For data protection inquiries: E-Mail: support@formlane.utax.top We will respond within 30 days in accordance with GDPR requirements.