Privacy Notice
Last updated: 22 September 2026
1. Controller
Tobias Glück, trading as 8D Scan Pro, Bauerwiese 5, 30926 Seelze, Germany. Email: info@8dscanpro.com. The controller determines the purposes and means of processing personal data.
2. Personal data we process
We process account data (including name, email address and login data), uploaded 8D reports and knowledge documents, generated assessments and feedback, usage and log data, device and browser information, and IP addresses. Paddle processes payment, billing and subscription data when you make a purchase.
3. Purposes and legal bases
We use account data and uploaded content to provide, analyse and manage the service and perform our contract (Article 6(1)(b) GDPR). We process security, misuse and technical log data for our legitimate interest in operating a secure and reliable service (Article 6(1)(f) GDPR). Data required by law is processed to comply with legal obligations (Article 6(1)(c) GDPR). Optional processing requiring consent is based on Article 6(1)(a) GDPR.
4. AI-assisted processing
Uploaded report content is analysed automatically to produce scores, observations and improvement suggestions. Content may be transmitted to contracted AI and infrastructure providers for this purpose. Only upload data you are entitled to process and avoid unnecessary personal or particularly sensitive data.
5. Recipients and processors
Data may be shared with carefully selected providers for hosting, databases, file storage, AI processing, error analysis and support. Paddle.com is the Merchant of Record and processes data for product sales, payments, subscriptions, tax compliance and invoicing. We may also share data with legal and accounting advisers or authorities where required by law.
6. International transfers
Where recipients process data outside the EU or EEA, transfers rely on an adequacy decision or appropriate safeguards, particularly the European Commission’s Standard Contractual Clauses, with supplementary measures where required.
7. Retention
We generally keep account data, uploaded documents and assessments for the lifetime of the user account or while needed for their purpose. We then delete or anonymise them unless statutory retention, evidence or limitation periods apply. Security logs are retained only as long as needed for protection and troubleshooting.
8. Cookies and local storage
We use strictly necessary cookies or browser storage for login, sessions, security and language settings. Paddle may set its own necessary cookies when payment checkout opens. We do not use non-essential analytics or marketing cookies without prior consent. You can delete or block stored data in your browser, but this may limit essential functions.
9. Security
We use appropriate technical and organisational measures, including encrypted transmission, access controls, separated user areas and safeguards against unauthorised access. Absolute security of transmission or storage cannot be guaranteed.
10. Your rights
Subject to the GDPR, you may request access, rectification, erasure, restriction, portability and object to processing. You may withdraw consent at any time for the future. We generally respond within one month. You may also complain to a data protection authority, particularly the State Commissioner for Data Protection of Lower Saxony.
11. Contact and changes
Send privacy requests to info@8dscanpro.com. We may update this notice when the service, providers or legal requirements change. The version published on this page applies.