Privacy Policy for CS Translation Find & Replace

1. Provider and contact

Central Solution GmbH, Otto-Flath-Strasse 25a, 24109 Melsdorf, Germany, represented by Managing Director Mazlum Eroglu.

For data protection inquiries and security reports, you can reach our contact person Mazlum Eroglu at [email protected] or by phone at +49 40 573087169.

2. Tasks and responsibility

The app is used to edit existing translations of product and other shop content including SEO texts. Such content is not personal data insofar as it does not relate to identified or identifiable natural persons.

Personal data may be processed in connection with login, operation and support, as well as when merchants have included such information in the edited texts. Insofar as we process personal content on behalf of a merchant according to their instructions, the merchant is the controller and Central Solution is the processor. A data processing agreement required for this purpose under Art. 28 GDPR must be distinguished from this privacy policy. For exclusively non-personal product data, such an agreement is not required under the GDPR.

Central Solution is responsible for its own contract administration, support communication and the security of our service. Legal bases are Art. 6(1)(b) GDPR for contracts with natural persons, Art. 6(1)(f) GDPR for communication with company contacts and our legitimate interests in a secure, reliable service, and Art. 6(1)(c) GDPR for legal obligations. Installing the app does not constitute blanket consent to other processing purposes.

3. What data we process

The data originates from the connected Shopify shop, your inputs and the use of the app:

The app processes existing translations of products, collections, pages and blog articles, including translated titles, descriptions and supported SEO fields. It does not create new translations and does not modify the original texts of the primary shop language. The aforementioned content data is subject to this privacy policy insofar as it contains personal information.

We do not request Shopify permissions to access customer, order or payment objects and do not store credit card data. Nevertheless, the free texts you edit may contain personal information. Please do not submit unnecessary sensitive data, passwords or access tokens, including in support.

Without the data required for authentication and processing, the respective function cannot be provided.

4. Recipients, service providers and international processing

We use the following services:

• Shopify: Authentication, access to the commissioned translations and subscription management. Shopify provides information about its own platform processing in its Privacy Policy.
• Railway Corporation: App hosting and backups. Regional storage does not exclude further international processing. Railway's Data Processing Agreement describes in particular processing in the USA as well as Standard Contractual Clauses and, for appropriately certified recipients, the EU-US Data Privacy Framework.
• Microsoft 365 / Exchange Online: Processing of support emails. The data location selected for our mailbox is Germany. This does not imply exclusively German processing, particularly for support and security services. Microsoft publishes its Data Protection Agreement.

For international transfers, the safeguards provided for in the respective data protection agreements apply, in particular EU Standard Contractual Clauses or a relevant adequacy decision. The EU-US Data Privacy Framework is only applicable for appropriately certified recipients and covered processing activities. Information on the applicable safeguards and a copy can be requested via our data protection contact.

Within Central Solution GmbH, operational access to hosting and the support mailbox is restricted to authorised support staff. Multi-factor authentication is set up for these access points. Data may also be disclosed to authorities where a legal obligation exists.

5. Retention and deletion

Personal data may only be retained for as long as is necessary for the respective purpose or a legal basis for further retention exists. The following criteria apply; use of the app does not justify unlimited retention:

• Search and job data: The decisive factors are the processing status, any error resolution still required and the provision of the reversal function within the usage relationship. Once these purposes cease to apply, there is generally a right to deletion, unless there are overriding legal reasons. Deletion removes the ability to reverse changes based on this app history.
• Shop assignment and usage entitlements: This data serves contract processing and quota checking. Uninstallation alone does not reset a free quota that has already been consumed. Mandatory deletion requests are handled separately.
• Deletion and security records: Required records are stored separately from complete translation texts for as long as they are needed for processing and documenting the operation or reconciling remaining backups.
• Support: The decisive factors are the processing and any necessary follow-up of the inquiry as well as, where applicable, statutory retention obligations or the establishment, exercise or defence of specific legal claims.
• Backups: Data may additionally exist in backups until the respective backup expires. Backups serve recovery purposes, not ongoing use. Before reusing restored data, deletions that have occurred in the meantime must be taken into account.
• Technical logs: For the regular hosting logs of the Railway Pro plan used, the provider states a retention of 30 days in its documentation. This concerns this log function, not every backup or other type of record across the board.

For information about the personal data stored for your shop and for deletion requests, please contact [email protected]. Uninstalling the app is not equivalent to the immediate removal of all logs, backups and documents that must be retained by law.

Statutory retention obligations only apply to the respective records covered: typically six years for commercial and business correspondence, eight years for accounting vouchers and ten years in particular for books and annual financial statements. The specific commencement of periods and statutory exceptions remain decisive. These periods do not apply across the board to translation texts or all support messages.

6. Your rights

Where the legal requirements are met, you have rights to access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. Any consent given may be withdrawn at any time with effect for the future.

Please contact [email protected]. If your inquiry concerns content in a merchant shop, the respective merchant is generally responsible; we support them within the scope of our tasks. To protect your data, we may require reasonable information for identity verification.

You may lodge a complaint with a data protection supervisory authority, in particular at your place of residence, place of work or the place of the alleged infringement. For our registered office, the Independent Centre for Data Protection Schleswig-Holstein has jurisdiction.

7. Changes

We update this statement when the processing or the legal framework changes. The date of the respective version can be found at the beginning of the statement.