Privacy policy

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data. happens when you visit this website. Personal data is all data with which you can be personally identified. For detailed information on the subject of data protection Please refer to our privacy policy listed below this text.

Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. Its contact details can be found in the imprint of this website.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This can be, for example data that you enter during registration or a purchase transaction.

Other data is collected automatically or with your consent by our IT systems when you visit the website. This is primarily technical data (e.g. Internet browser, operating system or time of the page view). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure that the website is provided without errors. Other Data can be used to analyze your user behavior. When you purchase products Your data is used for the fulfillment of the contract and invoicing.

What rights do you have with regard to your data?

You have the right at any time to request information free of charge about the origin, recipient and purpose of your personal data stored by us. You also have the right to request the rectification or to request the deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right to to request the restriction of the processing of your personal data under certain circumstances. You also have the right to lodge a complaint with the competent supervisory authority.

2. Responsible body

Responsible for data processing on this website is:

Markus Leprich
Ruprechtstrasse 26
46049 Oberhausen
Germany

Phone: +49 173 9046547
E-Mail: [email protected]

3. Data collection on this website

Cookies

Unsere Internetseiten verwenden so genannte „Cookies". Cookies sind kleine Datenpakete und richten auf do no damage to your end device. They are either temporarily stored for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain on your end device until you delete them yourself or they are automatically deleted by your web browser.

Cookies that are required to carry out the electronic communication process (necessary cookies) or to provision of certain functions requested by you are required on the basis of your consent. Art. 6 para. 1 lit. f GDPR stored. The website operator has a legitimate interest in the Storage of necessary cookies for the technically error-free and optimized provision of its services.

Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited („Google"), Gordon House, Barrow Street, Dublin 4, Irland. Google Analytics verwendet Cookies that enable your use of the website to be analyzed.

Google Analytics 4 uses IP anonymization by default, so that your IP address by Google within member states of the EU or in other signatory states to the Agreement on the European Economic Area is shortened.

Legal basis: Die Nutzung von Google Analytics erfolgt auf Grundlage Ihrer Consent pursuant to Art. 6 para. 1 lit. a GDPR. Google Analytics will only be used after your activated with your express consent via our cookie consent banner.

Revocation: Sie können Ihre Einwilligung jederzeit widerrufen, indem Sie über den Link „Cookie-Einstellungen" im Footer der Website Ihre Auswahl ändern.

Further information on the handling of user data by Google Analytics can be found in the Privacy policy of Google: https://policies.google.com/privacy

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, that your browser automatically transmits to us. These are

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

This data is not merged with other data sources. This data is collected on the basis of Art. 6 para. 1 lit. f GDPR.

Registration on this website

You can register on this website to use additional functions on the site. We use the data entered for this purpose only for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be must be provided in full. Otherwise we will reject the registration.

For important changes, such as to the scope of the offer or technically necessary changes, use We will use the e-mail address provided during registration to inform you in this way.

The data entered during registration is processed for the purpose of implementing the the user relationship established by the registration and, if applicable, for the initiation of further contracts (Art. 6 para. 1 lit. b GDPR).

The data collected during registration will be stored by us for as long as you remain on this website. are registered and are subsequently deleted. Statutory retention periods remain unaffected.

4. AI-supported image analysis

Description and scope of data processing

CreatorDesk offers AI-supported functions for image analysis, including automatic pre-selection (culling), the assignment of editing presets (Smart Preset Picker) and thematic sorting in collections (Smart Collection Builder). These functions are available via the dashboard and via the Lightroom Classic plugin.

Only reduced preview images (max. 512 × 512 pixels, JPEG format) are used for the analysis to the AI service. The original images do not leave your computer or our server. The preview images are only processed in the working memory for the duration of the analysis and not stored permanently - neither on our servers nor with the AI service provider.

Service provider used (processor)

For AI image analysis, we use the API from:

Anthropic, PBC
548 Market St, PMB 90375
San Francisco, CA 94104-5401
USA

Anthropic processes the transmitted image data exclusively for the provision of the analysis service. Use of the data for own purposes, in particular for the training of AI models, takes place according to Anthropic's terms and conditions.

Legal basis

The processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR (fulfillment of contract), as the AI image analysis is a contractually agreed component of the CreatorDesk packages booked.

Third country transfer

Data is transferred to Anthropic in the USA on the basis of standard contractual clauses (Standard Contractual Clauses, SCCs) pursuant to Art. 46 para. 2 lit. c GDPR. The supplementary data protection agreement (Data Processing Addendum) from Anthropic, which contains the SCCs, is part of our User Agreement with Anthropic.

Anthropic's DPA can be viewed here: https://www.anthropic.com/legal/data-processing-addendum

Data minimization and security

  • Only reduced preview images are transmitted (max. 512 × 512 pixels), not original files.
  • The transmission is encrypted via HTTPS/TLS.
  • Images are not stored after analysis - neither on our servers nor at Anthropic.
  • EXIF metadata (GPS coordinates, camera data) are removed before transmission.
  • In the Lightroom plugin, the preview images are generated from the local preview cache and deleted after the upload.

Objection and deactivation

The use of AI image analysis is voluntary. You can choose not to use the functions at any time, without this having any effect on other CreatorDesk functions. In the Lightroom plugin you will informed about the data transfer before each analysis and must actively start the analysis.

5. Payment service provider

PayPal

On this website we offer payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (im Folgenden „PayPal").

If you select payment via PayPal, the payment data you enter will be transmitted to PayPal. The transmission of your data to PayPal is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract).Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract).

Details can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

6. Canva integration

CreatorDesk offers an optional integration with the design service Canva (Canva Pty Ltd., 110 Kippax Street, Surry Hills NSW 2010, Australia). Activation takes place exclusively on the initiative of the user via the OAuth 2.0 authorization procedure.

What data is processed?

  • When connecting: Canva user ID, display name and email address of the linked Canva account - solely to identify the connection.
  • When importing or exporting: the design or media files actively selected by the user as well as associated metadata (title, dimensions). No data from other Canva users is transferred.
  • OAuth access and refresh tokens are symmetrically encrypted (Fernet, key derived from the Django SECRET_KEY) and stored in our database at Hetzner (Germany).

Purpose and legal basis

The processing serves exclusively to carry out the integration requested by the user. The legal basis is Art. 6 para. 1 lit. b GDPR (fulfillment of contract) and the consent given in accordance with Art. 6 para. 1 lit. a GDPR.

Data transfer to third countries

Canva is based in Australia. Data is transferred on the basis of the standard contractual clauses (SCC) pursuant to Art. 46 para. 2 lit. c GDPR. Canvas privacy policy: canva.com/policies/privacy-policy.

Revocation of consent

Die Verbindung kann jederzeit unter „Canva-Einstellungen" im CreatorDesk-Dashboard getrennt werden. Mit dem Trennen werden die gespeicherten Tokens gelöscht. Bereits in CreatorDesk importierte Dateien bleiben erhalten und können über die Medienverwaltung einzeln gelöscht werden.

7. Your rights

Information, correction, deletion

Within the framework of the applicable legal provisions, you have the right at any time to free-of-charge information about your stored personal data, its origin and recipients and the The purpose of the data processing and, if applicable, a right to rectification or erasure of this data. You can contact us at any time if you have further questions on the subject of personal data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data.

Right of objection

If the data processing is carried out on the basis of Art. 6 para. 1 lit. e or f GDPR, you have the following rights right to object, on grounds relating to your particular situation, at any time to the processing of your personal data. to object to the processing of your personal data.

Right to lodge a complaint with the supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for us is

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestr. 2-4
40213 Düsseldorf
www.ldi.nrw.de

Right to data portability

You have the right to access data that we process on the basis of your consent or in fulfillment of a contract. automatically, to itself or to a third party in a commonly used, machine-readable format. to be handed over.

8. Account deletion

You can delete your account at any time in your profile settings. This will delete all your personal data will be irrevocably deleted. Orders and invoices are processed in accordance with The data is stored for the statutory retention periods (usually 10 years).

9. Up-to-dateness and amendment of this privacy policy

This privacy policy is currently valid and is dated April 2026.

Due to the further development of our website and offers on it or due to changed legal requirements or regulatory requirements, it may become necessary to amend this privacy policy.

Back to the homepage