Privacy Policy

1. Controller

Toro Translations, Eichenweg 9, 22395 Hamburg-Wandsbek, Germany. Email: support@toro-translations.com — this is also our contact address for all privacy questions and data-subject requests.

2. Overview: what we process, and why

We process personal data to reply to enquiries, produce and deliver translations, process orders, and run this website. We do not sell personal data, and we do not use it for anything beyond the purposes stated here.

3. Your document confidentiality, in plain terms

This is the question we hear most, so we answer it directly rather than burying it in legal language: documents you send us — birth certificates, contracts, patient records, source files of any kind — are used only to produce your translation. They are stored only for as long as needed to complete and, where relevant, re-issue the order, and are then deleted. Ask us and we will tell you exactly when a specific document will be deleted. A non-disclosure agreement is available on request, free of charge, before you send us anything — this applies to individuals and businesses alike.

4. Legal bases for processing

• Quote requests and orders — Art. 6(1)(b) GDPR: processing necessary to respond to your enquiry or to perform a contract with you.
• Website analytics (Google Analytics 4) — Art. 6(1)(a) GDPR: consent only. GA4 is not loaded and no GA4 cookie is set until you actively opt in via the cookie banner. You can withdraw consent at any time using the "Cookie settings" link in the footer.
• Server/hosting log files — Art. 6(1)(f) GDPR: our legitimate interest in operating a secure, functioning website.

5. Hosting

This website is hosted on shared web hosting infrastructure located in the EU/EEA. Standard server log files (IP address, date/time, requested page, browser type) are created automatically by the hosting infrastructure to keep the site secure and operating correctly, and are not merged with any other data set.

6. Quote request and order forms

When you submit the quote form, the contact form, or place an order in our shop, we collect the fields you fill in — typically name, email, phone number (optional), customer type, service and language pair, a project description, and, for orders, a postal address where physical delivery is chosen. This data is submitted to us via a form-relay service and, as a fallback, may be sent by email. We use it solely to respond to your request or fulfil your order. We do not collect uploaded documents through this website — our quote form asks for a description of your project only; you are invited to reply to our confirmation email with your source documents attached, or send them directly to support@toro-translations.com, where they are handled under the same confidentiality commitment as §3.

7. Cookies and analytics

This site uses only strictly necessary storage by default (see our Cookie Policy for the full, named list, including our shopping-cart storage and your consent record). Google Analytics 4 (operated by Google Ireland Ltd.) is loaded only after you actively accept the "Analytics" category in the cookie banner. If accepted, GA4 data is transferred to Google under the EU Commission's Standard Contractual Clauses. You can withdraw this consent at any time.

8. Processors and third-country transfers

We use the following categories of processors: our web hosting provider (EU-based), our form submission relay (used to route enquiries and orders to our inbox), and, only if you consent, Google Ireland Ltd. for GA4 analytics. Where a transfer outside the EU/EEA occurs (e.g. to Google under the EU-US Data Privacy Framework or Standard Contractual Clauses), we rely on the relevant legal safeguard.

9. Retention

We keep enquiry and order data only as long as necessary to answer your request, complete your order, and meet our statutory retention obligations (German commercial and tax law requires certain business records to be kept for 6–10 years). Source documents you send us for translation are deleted once your order is complete and any statutory retention period for the resulting invoice has passed, unless you ask us to delete them sooner and no invoice-retention obligation applies.

10. Your rights

Under the GDPR you have the right to access, rectify, erase, or restrict the processing of your personal data, to receive your data in a portable format, and to object to processing based on our legitimate interest. Where processing is based on consent (e.g. GA4), you may withdraw that consent at any time with future effect. To exercise any of these rights, email support@toro-translations.com.

11. Right to complain

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany

12. Changes to this policy

We will update this page if our processing activities change, and will update the "Last updated" date accordingly.