Privacy

In short: no cookies, no tracking, no advertising. Your contacts stay on your PC. Here is everything in detail.

This is a translation for information only. Only the German version is legally binding. Deutsche Fassung

1. Controller

HMF-IT UG (haftungsbeschränkt), Parkstr. 31, 49080 Osnabrück
Email: hi@hmf-address.de · further details in the legal notice.

No data protection officer has been appointed, as there is no legal obligation to do so.

2. The key points at a glance

During a normal visit, this website sets no cookies, uses no analytics or tracking services and stores no server log files.
Fonts, images and scripts are on our own server. No data is transmitted to third parties when you visit. The only exception is the purchase page, which includes PayPal (section 6).
We only process personal data if you write to us or buy HMF Address.
The HMF Address program stores your contacts only on your PC. We have no access to them.

3. Hosting, no server log files

We run the server for this website ourselves (HMF-IT UG, Osnabrück). For a page to reach you, your browser must, for technical reasons, transmit your IP address to the server. It is only processed for the duration of the connection. The server does not store any access logs. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in delivering the website).

4. Local storage (mode, text size, motion)

If you choose light or dark yourself, a larger text size or “Reduce motion”, we save this choice in your browser’s local storage (localStorage: ha-theme, ha-size, ha-motion). These entries never leave your device and are used only for the display you have chosen. No consent is required for this (§ 25 Abs. 2 Nr. 2 TDDDG, German Telecommunications Digital Services Data Protection Act). You can delete them at any time in your browser settings.

5. Contact form and withdrawal

If you write to us using the form or by email, we process your details (email address, optionally your name, topic, message) in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR if it concerns a purchase or contract, otherwise Art. 6(1)(f) GDPR.

To protect against spam, we use an invisible form field and a time check. To limit mass requests, an irreversible hash of your IP address is stored for no more than one hour. We do not use external captcha services.

Messages are also stored in our password-protected administration area so that no enquiry gets lost. We delete them as soon as they have been dealt with and no retention obligations prevent this.

Withdrawal form: If you declare a withdrawal via “Withdraw from contract”, we process your name, email address, order details, optionally the purchase date and a note, and the time of receipt, and we send you a confirmation of receipt. The legal basis is Art. 6(1)(c) GDPR (legal obligation) and (b) (processing of the contract).

6. Purchase and payment with PayPal

Contracting party when you buy HMF Address is us, HMF-IT UG. For the order, we process: the chosen edition, price, order number, the time you agreed to immediate delivery, the licence key and the details we receive from PayPal (name, email address, country, transaction number). The legal basis is Art. 6(1)(b) GDPR (performance of a contract) and (c) (retention obligations under tax and commercial law, usually 8 to 10 years for invoices and accounting records).

Payment: Payment is handled by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. For this, we load PayPal’s payment buttons on the “Buy” page. For technical reasons, your IP address and device information are transmitted to PayPal; PayPal may use its own cookies or similar technologies to prevent fraud. The other pages of this website do not include PayPal. When you click a PayPal button, you enter your payment details directly with PayPal; we do not receive any bank or card details. PayPal processes this data under its own responsibility and, for certain payment methods (for example direct debit), may carry out a credit check. The legal basis is Art. 6(1)(b) GDPR and § 25 Abs. 2 Nr. 2 TDDDG (German Telecommunications Digital Services Data Protection Act). The PayPal privacy statement applies.

Emails: After your purchase, we send the order confirmation with invoice and licence key to the email address of your PayPal account.

7. Activating the licence

When activating, the program sends the licence key, a device identifier, the name of the PC and the program version to our server. The device identifier is an irreversible hash of the Windows installation ID; it cannot be used to draw conclusions about hardware or persons. For your order, we store which PCs the licence is activated on and when the program last checked in. About every 30 days, the program quietly checks whether the licence is still valid, for example after a refund. When you deactivate a PC, we delete the entry. The legal basis is Art. 6(1)(b) GDPR (performance of the licence agreement). The trial version transmits no data.

8. Downloads

When you download, we count how often each file is downloaded per day. We only store the number – no IP address, no cookie and nothing that could be linked to you.

9. Data protection in the HMF Address program

Your contacts are stored in a file on your PC, in the folder you choose. The program does not send them anywhere, has no advertising, no tracking and needs no user account. It only talks to our server when you activate the licence (section 7).
Actions with other programs: If you choose “Call”, “Email”, “WhatsApp”, “Route” or “Website”, HMF Address opens the matching program or your browser (for example WhatsApp Web or Google Maps) with the contact’s phone number, email address or postal address. From then on, the privacy policy of the respective provider applies.
QR code: The QR code is created on your PC. When scanned, the contact goes straight to your phone, without passing through a server.
Backups are created by the program in the data folder on your PC. If you use a cloud folder as your data folder, your cloud provider’s app syncs the file; its terms apply to that.

10. Administration area

For our own password-protected administration area, we set a technically necessary session cookie. Visitors to the website are not affected.

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). An informal email to hi@hmf-address.de is enough.

You can also lodge a complaint with a data protection supervisory authority, for example the one responsible for us: Die Landesbeauftragte für den Datenschutz Niedersachsen (State Commissioner for Data Protection of Lower Saxony), Prinzenstraße 5, 30159 Hannover, Germany.

12. Encryption

This website is encrypted throughout with TLS (HTTPS).

Last updated: 09/2026