Legal Basis
The processing of your data by Ratsch is based on Art. 6(1)(b) GDPR (contract performance) for the core functions of the app as well as Art. 6(1)(f) GDPR (legitimate interest) for technical operations.
Important for recordings: As a user, you are responsible for ensuring that all meeting participants have consented to the recording and AI processing. Ratsch reminds you of this obligation before each recording.
Data Processors (Art. 28 GDPR)
We work with the following service providers who are bound as data processors according to Art. 28 GDPR:
| Provider | Purpose | Location | Protection |
|---|---|---|---|
| Hetzner | Server hosting, database | Germany | EU |
| Microsoft Azure OpenAI | Speech recognition, text processing (GPT) | Sweden | EU DPA |
| Stripe | Payment processing (credit card, SEPA, billing) | EU (Ireland) / USA | EU SCCs PCI-DSS |
Azure OpenAI – Processing in the EU
For AI transcription, we use Microsoft Azure OpenAI with data center in Sweden (EU). There is no data transfer to the USA. Processing is secured by a Data Processing Agreement (DPA) according to Art. 28 GDPR.
Audio files are not stored after transcription. Ratsch does not store any raw audio data after processing.
Data Storage and Deletion
- Audio recordings: Deleted immediately after successful transcription. Optional local storage in the browser (IndexedDB) is exclusively on your device.
- Transcripts and protocols: Stored until you actively delete them or close your account.
- Account data (email, name): Until account cancellation, then deleted within 30 days.
- Payment data: Processed exclusively by Stripe. Ratsch does not store credit card or account data.
Your Rights
You have the right at any time to access, rectification, erasure, restriction, and data portability (Art. 15-20 GDPR). Requests to: info@ratsch.bz
Complaints should be directed to the Garante per la protezione dei dati personali (garanteprivacy.it).
Cookies
Ratsch uses only technically necessary cookies (session management, login status). No tracking cookies, no advertising cookies, no analytics without consent. A consent banner is therefore not required under GDPR.
Questions about privacy?
For specific questions about your data or this policy, contact us directly: info@ratsch.bz or via the contact form.