Dumpstera.org

Privacy Policy

Last updated: June 3, 2026

1. Controller

The controller for data processing within the meaning of the General Data Protection Regulation (GDPR) is:
Zepia UG (haftungsbeschränkt)
Tölzer Str. 5
81379 Munich
Germany
Email: info@dumpstera.org

2. General Information

We take the protection of your personal data seriously. This privacy policy informs you about the personal data we process in connection with the use of Dumpstera, for what purposes this is done, and what rights you have.

3. Types of Data Processed

Depending on how you use the platform, the following data may be processed:

Account data

  • Name
  • Email address
  • Login credentials
  • Authentication information
  • Workspace memberships

Workspace data

  • Company name
  • Company form
  • Billing and tax information
  • User roles
  • Team members

Invoice and document data

  • Uploaded invoices
  • Receipts
  • Vouchers
  • Credit notes
  • Document attachments
  • Information extracted from them

Communication data

  • Forwarded emails
  • Email subject
  • Email content
  • Sender information
  • Attachments

Usage data

  • Logins
  • Access events
  • Uploads
  • Exports
  • Record changes

Technical data

  • IP address
  • Browser information
  • Device information
  • Log data

4. Purposes of Processing

We process data in particular for the following purposes:

  • Providing the platform
  • Managing user accounts
  • Operating workspaces
  • Analyzing invoices and documents
  • Generating reports and statistics
  • Providing export functions
  • Fraud and abuse prevention
  • Error analysis and system improvement
  • Communicating with users

5. Processing of Invoices and Documents

Dumpstera processes documents that are uploaded or forwarded by email in order to extract structured information from them. The following may in particular be processed:

  • Invoice numbers
  • Invoice dates
  • Line items
  • Amounts
  • VAT information
  • Supplier and customer data

Processing takes place solely for the purpose of providing the functions requested by the user.

6. AI-Based Document Analysis

Artificial intelligence methods may be used to analyze documents. Documents can be evaluated automatically to identify information such as invoice numbers, amounts, VAT, categories and payment information. The results serve solely to support the user and do not replace professional review.

7. Email Processing

When users forward invoices to their personal Dumpstera address, we process sender address, recipient address, subject, message body and attachments. Processing takes place solely for the purpose of document recognition and assignment within the respective workspace.

8. Legal Bases

Processing is based in particular on:

Art. 6(1)(b) GDPR

Processing necessary for the performance of the user contract.

Art. 6(1)(f) GDPR

Processing based on legitimate interests, in particular security, error analysis, abuse prevention and improvement of the platform.

Art. 6(1)(c) GDPR

Insofar as statutory retention obligations exist.

9. Retention Period

Personal data is stored only for as long as is necessary for the respective purposes. Users can delete or export their data using the available functions. Statutory retention obligations remain unaffected.

10. Recipients of Data

We may use external service providers to provide our services. These may in particular include:

  • Hosting providers
  • Database providers
  • Email service providers
  • AI service providers
  • Cloud storage providers

These service providers are selected carefully and, where required, engaged on the basis of a data processing agreement.

11. International Data Transfers

Where service providers outside the European Union are used, this is only done in compliance with the statutory requirements of the GDPR. In particular, EU Standard Contractual Clauses may be used.

12. Security

We take appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access or disclosure. These include in particular:

  • Access restrictions
  • Encryption
  • Role-based permissions
  • Security logging

13. Rights of Data Subjects

You have in particular the following rights:

  • Access
  • Rectification
  • Erasure
  • Restriction of processing
  • Data portability
  • Objection to processing

You also have the right to lodge a complaint with a data protection supervisory authority.

14. Deletion of User Account

Users can request deletion of their account. After deletion, personal data is erased unless statutory retention obligations apply.

15. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy if this becomes necessary due to technical, legal or organizational changes. The current version is available within the platform at any time.

16. Contact

For privacy-related questions you can contact us at any time:
Zepia UG (haftungsbeschränkt)
Tölzer Str. 5
81379 Munich
Germany
Email: info@dumpstera.org