Last updated: 3 September 2026
This policy explains how we handle personal data in connection with our software apps and this website. It is written with the EU GDPR as a strict baseline, which we apply to all customers regardless of where they live. Our consulting services are covered by a separate policy.
EAST-WEST IT Solutions, Andreas Mehner, Despota Stefana Lazarevica 2, 15000 Šabac, Serbia. Email: kontakt@EWITSolutions.com.
Our desktop applications run entirely on the user's computer. The files they process — their names, paths and contents — are handled locally and are never transmitted to us or to any third party.
This website uses no cookies. The language preference is stored in the browser's localStorage — a functional setting used only to remember the choice, not for tracking.
Our website is hosted by all-inkl.com (ALL-INKL.COM – Neue Medien Münnich, Germany) as a processor under Art. 28 GDPR. The hosting provider may process technical access data (such as IP address and request time) in server logs for the secure operation of the site.
For audience measurement we use Cloudflare Web Analytics, a service of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. The measurement works without cookies, stores nothing in the browser, does not work across devices and builds no user profiles; only aggregated information is evaluated, such as the page opened, the referring page, the time, the device type and the country of origin, none of which we store ourselves. The legal basis is our legitimate interest in a data-minimising analysis of usage (Art. 6(1)(f) GDPR), which may be objected to at any time; no consent under § 25 TDDDG is required, because no information is stored on or read from the terminal device. Cloudflare acts as a processor under Art. 28 GDPR; processing may take place in the United States and relies on the certification of Cloudflare, Inc. under the EU-US Data Privacy Framework, supplemented by standard contractual clauses. Details are set out in Cloudflare's privacy policy at cloudflare.com/privacypolicy.
Payments are handled by Lemon Squeezy, LLC as Merchant of Record. Lemon Squeezy is the legal seller, collects the data needed to process the payment (such as name, email and billing details) under its own privacy policy, and is the controller for that processing.
After a purchase, Lemon Squeezy reports the order to our server. The data transmitted is the name, the email address, an order number and the edition purchased. From this we generate the licence key and send it to the email address given at checkout. The name appears in the licence key so that it is recognisable as one's own. Name and email address are processed only for the duration of this step and are not stored afterwards.
The only item stored permanently is a checksum (SHA-256) of the order number. It prevents the same order from issuing a licence more than once and allows no conclusion about a person. Our operational log contains no personal data.
This processing runs on servers of ALL-INKL.COM – Neue Medien Münnich, Germany, acting for us as a processor under Art. 28 GDPR. The contract provides for processing in Germany only.
Notices about new versions and bug fixes are sent by Lemon Squeezy to its customers. We keep no mailing list of our own; Lemon Squeezy is the controller for those messages under its own privacy policy.
When someone contacts us by email, we process the data provided in order to respond to the enquiry.
We process data to perform a contract (Art. 6(1)(b) GDPR) — this covers issuing and sending the licence described in section 4 — and on the basis of our legitimate interests in operating and securing our services (Art. 6(1)(f) GDPR).
Order data is processed only for the duration of licence delivery (section 4); the only lasting item is the checksum of the order number. Contact data is kept only as long as necessary to deal with the enquiry and as required by statutory retention obligations.
There is a right to access, rectification, erasure or restriction of processing, a right to data portability and a right to object. A message to kontakt@EWITSolutions.com is enough to exercise them. There is also a right to lodge a complaint with a supervisory authority, for example the data-protection authority of one's country of residence.
We are based in Serbia, a country outside the EU/EEA for which the European Commission has not issued an adequacy decision. The order data, however, is processed on servers in Germany (section 4). Personal order data is not accessed from Serbia in normal operation; the operational log visible there contains no such data. Where transfers beyond this are required, we put appropriate safeguards under Chapter V GDPR in place.
For audience measurement (section 3) a transfer to the United States may take place. It relies on the certification of Cloudflare, Inc. under the EU-US Data Privacy Framework, supplemented by standard contractual clauses.
We may update this policy; the current version is always available on this page.