Legal Basis
The processing of your data by Ratsch is based on Art. 6(1)(b) GDPR (contract performance) for the core functions of the app as well as Art. 6(1)(f) GDPR (legitimate interest) for technical operations.
Important for recordings: As a user, you are responsible for ensuring that all meeting participants have consented to the recording and AI processing. Ratsch reminds you of this obligation before each recording.
Data Processors (Art. 28 GDPR)
We work with the following service providers who are bound as data processors according to Art. 28 GDPR:
| Provider | Purpose | Location | Protection |
|---|---|---|---|
| Hetzner | Server hosting, database, attachments | Germany | EU |
| Microsoft Azure OpenAI | Speech recognition, text processing (GPT) | Sweden | EU DPA |
| Stripe | Payment processing (credit card, SEPA, billing) | EU (Ireland) / USA | EU SCCs PCI-DSS |
| Fatture in Cloud / Contabilità in Cloud | Invoicing, accounting | Italy | EU |
| Hostinger | Domains, mailboxes (info@, support@) | EU | EU |
Azure OpenAI – Processing in the EU
For AI transcription, we use Microsoft Azure OpenAI with data center in Sweden (EU). There is no data transfer to the USA. Processing is secured by a Data Processing Agreement (DPA) according to Art. 28 GDPR.
Microsoft does not store the audio files after transcription. At Ratsch itself (Hetzner, Germany), the recording is automatically deleted 30 days after recording.
Data Storage and Deletion
- Audio recordings: Automatically deleted 30 days after recording, or earlier if you delete them yourself. Optional local storage in the browser (IndexedDB) is exclusively on your device.
- Transcripts and protocols: Stored until you actively delete them or close your account.
- Account data (email, name): Until account cancellation, then deleted within 30 days. Billing data is kept for 10 years for legal reasons.
- Payment data: Processed exclusively by Stripe. Ratsch does not store credit card or account data.
Your Rights
You have the right at any time to access, rectification, erasure, restriction, and data portability (Art. 15-20 GDPR). Requests to: info@ratsch.bz
Complaints should be directed to the Garante per la protezione dei dati personali (garanteprivacy.it).
Cookies
Ratsch uses no cookies. Technically necessary data (login, settings) is kept in your browser's local storage. No tracking, no advertising, no analytics. A consent banner is therefore not required.
Questions about privacy?
For specific questions about your data or this policy, contact us directly: info@ratsch.bz or via the contact form.