Privacy Policy

Last updated: December 2025

Privacy Policy

1. An Overview of Data Protection

General Information

The following information provides a simple overview of what happens to your personal data when you visit our website vatgenius.cloud or any other website that redirects you to the vatgenius.cloud website.

Personal data is any data with which you can be personally identified.

Data Collection on Our Website

Who is responsible for data collection on this website? The data processing on this website is carried out by the website operator. You can find the contact details in the imprint of this website.

How do we collect your data?

  • Data you provide: This is data you communicate to us (e.g., via a contact form or during account registration).
  • Automated data: Other data is collected automatically by our IT systems when you visit the website (e.g., internet browser, operating system, or time of page access).

2. Controller (Responsible Party)

The party responsible for processing data on this website is:

MTHR GmbH, Salomon-Heine-Weg 42b, 20251 Hamburg, Germany

Email: info@vatgenius.tech

Phone: +49 151 44009322

3. Data Collection and Processing

Cloud Service Registration

When you register to use our cloud services, we collect:

  • Name and contact information.
  • Company details and VAT ID.
  • Billing and payment information.
  • Login credentials.

Legal basis: Art. 6(1)(b) GDPR (Performance of a contract).

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

Legal basis: Art. 6(1)(f) GDPR (Legitimate interest in a technical error-free presentation).

4. Cookies and Analytical Tools

We use "cookies" to make our website user-friendly. Some remain stored on your device until you delete them.

Necessary Cookies: Required for the basic functions of the cloud platform (e.g., staying logged in).

Analytical Cookies: We only use these with your explicit consent (Art. 6(1)(a) GDPR) to improve our service.

5. Data Security (SSL/TLS Encryption)

For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" in the browser line and the lock symbol.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right to access: You can ask for copies of your personal data.
  • Right to rectification: You can ask us to correct inaccurate information.
  • Right to erasure ("Right to be forgotten"): You can ask us to delete your data under certain conditions.
  • Right to restrict/object to processing: You can object to our processing of your data.
  • Right to data portability: You can request the transfer of your data to another organization.

To exercise these rights, please contact us at info@vatgenius.tech.

7. Third-Party Services

If we use third-party providers (e.g., hosting providers like AWS/Azure), we ensure that Data Processing Agreements (DPA) are in place to guarantee that your data is handled securely and in compliance with GDPR.

Right to Lodge a Complaint

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a competent supervisory authority.

8. Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provided there (e.g., name, email address, and company name), will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on this data without your consent.

Legal Basis: The processing of this data is based on Art. 6(1)(b) GDPR, if your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6(1)(f) GDPR) or on your agreement (Art. 6(1)(a) GDPR) if this has been requested.

Data Retention: The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after your inquiry has been processed). Mandatory statutory provisions—in particular retention periods—remain unaffected.