1. Data Controller
Alexander Mäding
c/o IP-Management #10676
Ludwig-Erhard-Str. 18
20459 Hamburg
Germany
Email: support@sendfaxfast.com
Phone: +49 156 79035805 (Mon–Fri, 9 am–7 pm CET)
2. Hosting
All-inkl.com / neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.
Servers and data are located exclusively in Germany (EU). Privacy policy: all-inkl.com/datenschutzinformationen
3. What We Collect
We process only the data necessary to provide the fax service:
- Recipient fax number – to deliver the fax
- Email address – for the delivery confirmation and receipt
- Uploaded document (PDF) – deleted immediately after successful delivery; automatically purged within 24 hours via a scheduled cleanup job regardless of transmission status
- Payment data – processed exclusively by Stripe; we never receive card or account details
- Transaction data (date, amount, fax number) – retained for statutory accounting obligations
4. Purpose of Processing
We process your data solely to provide the fax delivery service you requested.
5. Legal Basis
- Performance of contract (Art. 6(1)(b) GDPR): Processing the fax number and document to deliver the ordered service
- Legal obligation (Art. 6(1)(c) GDPR): Retention of invoice data for statutory accounting purposes (10 years)
- Legitimate interest (Art. 6(1)(f) GDPR): Sending the delivery confirmation by email
6. Processors and Third Parties
Telnyx LLC (Fax Carrier)
311 W Superior St, Suite 504, Chicago, IL 60654, USA.
Telnyx transmits the fax to the recipient number. Data transfers to the USA are covered by Standard Contractual Clauses (SCCs) and Telnyx participates in the EU-U.S. Data Privacy Framework (DPF). Privacy policy: telnyx.com/privacy-policy
Stripe Inc. (Payment Processing)
354 Oyster Point Blvd, South San Francisco, CA 94080, USA.
Stripe processes payment data in accordance with its own privacy standards (PCI-DSS). Data transfers to the USA are covered by Standard Contractual Clauses (SCCs). Privacy policy: stripe.com/privacy
All-inkl.com (Transactional Email)
neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.
Transactional emails (delivery confirmations, receipts) are sent via the SMTP service of our hosting provider. Servers are located in Germany (EU). No data transfer outside the EU. Privacy policy: all-inkl.com/datenschutzinformationen
All-inkl.com (Web Hosting)
neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.
Servers and data are located exclusively in Germany (EU). Privacy policy: all-inkl.com/datenschutzinformationen
7. Cookies and Browser Storage
Essential (no consent required, legal basis Art. 6(1)(b) and (f) GDPR, § 25(2) TDDDG):
- Session cookie: needed for the multi-step upload and payment process; deleted when you close your browser.
cookie-ok/cookie-consent(local storage): stores your cookie choice so the banner is not shown again.
Optional (only with your consent, legal basis Art. 6(1)(a) GDPR, § 25(1) TDDDG):
sfx_ref: stores the source of your visit (e.g. "Google US", "Reddit") for 30 days, so we can see which channels bring customers. It is linked to your order only to count sources. No profile, not shared with third parties.
You can change or withdraw your consent at any time via "Cookie Settings" in the footer.
8. Retention Periods
- Uploaded documents: Deleted immediately after successful transmission. All uploaded documents are automatically purged within 24 hours regardless of transmission status.
- Email address and fax number: Deleted after the order is complete and the confirmation has been sent
- Subscription data (email, Stripe customer ID, fax number, received faxes): Retained for the duration of the active subscription and deleted within 30 days after it ends, unless invoice retention requires otherwise
- Invoice / transaction data: Retained for 10 years as required by applicable law
9. Your Rights
Under GDPR, you have the following rights:
- Access (Art. 15 GDPR): Find out what data we hold about you
- Rectification (Art. 16 GDPR): Correction of inaccurate data
- Erasure (Art. 17 GDPR): Deletion of your data, unless a statutory retention obligation applies
- Restriction (Art. 18 GDPR): Restriction of processing
- Data portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format
- Objection (Art. 21 GDPR): Object to processing based on legitimate interest
- Complaint: Right to lodge a complaint with the competent supervisory authority
To exercise your rights, contact us at: support@sendfaxfast.com
10. Supervisory Authority
You have the right to lodge a complaint with the Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI), Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany, datenschutz-hamburg.de.
11. US/CA/AU/NZ Addenda
California Residents (CCPA)
California residents have the right to know what personal information we collect, the right to delete personal information, the right to opt-out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising these rights. To exercise your CCPA rights, contact: support@sendfaxfast.com
Australian Residents (Privacy Act 1988)
We handle personal information in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles. Australian residents may request access to or correction of their personal information by contacting us at support@sendfaxfast.com.
New Zealand Residents (Privacy Act 2020)
We handle personal information in accordance with the New Zealand Privacy Act 2020. New Zealand residents may request access to or correction of their personal information by contacting us at support@sendfaxfast.com.