Back to easycaredits Deutsch

Privacy policy

This is a translation for convenience. The German version is legally binding.

1. Controller

Schmitko OHG
Heilig-Brünnle-Straße 50
72461 Albstadt
Germany

Email: info@schmitko.com, phone: +49 151 23892373

2. Overview

You do not need an account to order. We use no tracking or analytics tools. We only set a cookie if you sign in to “My videos” (see 4). We use your photos only to create your video and to check a possible complaint. We delete them together with the video 30 days after completion.

3. Visiting the website

When you visit the website, the server processes technically necessary data such as IP address, time and the page requested, in order to deliver the website and protect it against misuse. The legal basis is Art. 6(1)(f) GDPR. The website and server are operated for us by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in data centres in Germany. The web server does not keep an access log with IP addresses. The technical log of the service on the server is deleted after 14 days. To protect against misuse, for example to limit too many orders in a short time, the application stores IP addresses only as a checksum (hash) from which the address cannot be recovered.

4. Browser storage and cookie

The website remembers your language choice in your browser's storage (localStorage). This information only leaves your device as a language code in requests to our server, so that responses arrive in your language.

If you sign in to “My videos” via the link in our email, we set the cookie ee_sitzung. It keeps you signed in, cannot be read by scripts on the page (HttpOnly) and expires after 30 days. If you order without signing in, you get no cookie. The cookie is technically necessary so that you can access your videos; no consent is required for it (Section 25(2) no. 2 TDDDG). The legal basis for the processing is Art. 6(1)(b) GDPR.

5. Creating the video

To create the video, we process the uploaded photos, the assigned views and the style, length and language of your order. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR).

To create the video, the photos are transmitted to the AI service ModelArk of BytePlus Pte. Ltd., Singapore, which acts as our processor. Processing takes place in data centres in Southeast Asia, i.e. outside the European Union. There is no adequacy decision of the European Commission for Singapore or Malaysia. The transfer is therefore based on the European Commission's standard contractual clauses (Implementing Decision (EU) 2021/914, Module 2: controller to processor), which form part of BytePlus's data processing agreement (Art. 46(2)(c) GDPR). We will send you a copy of the clauses on request to info@schmitko.com.

We keep the photos and the finished video for 30 days after completion and then delete them. We need the photos during this time to be able to check a complaint, for example if the video shows a clearly different vehicle (Art. 6(1)(b) GDPR). We do not use them for anything else, in particular not for training AI models. We store the finished video privately with Hetzner Online GmbH in Falkenstein (Germany). It can only be downloaded via personal links that are valid for 15 minutes each. It is available for download for 30 days. Please only upload photos in which no persons can be recognised.

6. Order and payment

For the order, we process your email address and the order data. Payment is handled by Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland; we do not receive your payment details. We retain invoice and accounting data for up to ten years due to statutory obligations (Art. 6(1)(c) GDPR).

7. Emails

We send the order confirmation, the download link and the sign-in link for “My videos” from easycaredits@schmitko.com via Microsoft 365 of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. The legal basis is Art. 6(1)(b) GDPR.

8. Order log

For each order, we store technical information such as style, length, timestamps, costs and the times of your consents. This serves as proof of the order and for billing (Art. 6(1)(b), (c) and (f) GDPR). The photos themselves are not included.

9. Processors

These service providers process data on our behalf and according to our instructions (Art. 28 GDPR):

Stripe and Microsoft may also process data in the USA. Both companies are certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission's adequacy decision (Art. 45 GDPR).

10. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. Please contact info@schmitko.com. You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

Last updated: 21 October 2026