Who is responsible
Spielzeugfabrik Penzing GmbH, Steinbachstraße 6, 85250 Altomünster, Germany, is responsible for the personal data described here. Contact support@dotapart.com for Dot Apart privacy requests. This notice covers Dot Apart website, account, licensing, subscription, and support services—not the separate Spielzeugfabrik shop.
Website, account, and support
We process business contact, company, address, tax, account, and communication details you provide, plus proportionate connection and security information such as IP address, requested resource, request time, and browser/device information. We use these data to provide and secure the service, administer access, answer requests, perform contracts, meet legal duties, and prevent abuse.
Legal bases
Where an individual is the contracting party, or asks us to take steps before entering a contract, processing necessary for that purpose is based on Article 6(1)(b) GDPR. We do not automatically treat Article 6(1)(b) as the basis for every employee or other contact acting for a company.
Company-contact administration, account and licensing administration, service security, and proportionate abuse prevention are based on Article 6(1)(f) GDPR. Our legitimate interests are operating a reliable business service, managing business relationships and entitlements, protecting accounts and infrastructure, and preventing misuse. Processing required for tax, accounting, and other legal obligations is based on Article 6(1)(c) GDPR. Where we ask for consent for an optional newsletter or other marketing, the basis is Article 6(1)(a) GDPR. Consent may be withdrawn for the future without affecting the lawfulness of processing carried out before withdrawal.
Optional website analytics
If you accept analytics, we use Google Analytics 4 (measurement ID G-H768CQ3MDT), provided by Google Ireland Limited, to understand use of our public website and improve its content. The Google tag is blocked until acceptance; rejection does not send a consent ping or other analytics data to Google through this installation. We do not instrument sign-in, registration, invitation, checkout or customer-account pages.
With consent, Google processes pseudonymous cookie identifiers, public-page and interaction information, browser and device information, and technical connection data. IP addresses are processed to derive approximate location; Google states that GA4 does not log or store individual IP addresses. Our page-view configuration excludes URL query strings and fragments, uses fixed public-page titles and reduces referrers to their origin. We do not configure customer names, email addresses, billing details, licence keys or account identifiers as analytics fields. Google signals, advertising consent and ad personalisation are disabled.
Consent is the legal basis under Article 6(1)(a) GDPR and, for optional device storage/access, section 25(1) TDDDG. You can withdraw consent at any time through Cookie settings, without affecting earlier lawful processing. The choice is valid for 180 days in this browser. Analytics cookies are configured to expire after 60 days without renewal on each page load. Google's account-level retention settings govern stored event data; aggregated reporting can be retained for longer. Withdrawing consent does not itself delete historical Google data.
Recipients can include Google Ireland Limited, Google LLC and their service providers. Processing may take place outside the EEA, including in the United States. Google's contractual transfer safeguards and processing terms are described in the Google data-processing terms. Read Google's Privacy Policy and its GA4 regional privacy information. Contact support to exercise the rights described below. See Cookie Information for browser controls and storage details.
Licensing and updates
Activation, validation, deactivation, and update requests process product and licence information, a stable hashed device fingerprint, workstation name, platform/version information, and technical connection information. A hashed fingerprint can remain personal data where it is linked to a user or device. Update checks may run automatically after successful licence validation; an update file is downloaded only when the operator accepts the offered release.
Desktop production data
Dot Apart Nest processes artwork locally by default and does not intentionally upload artwork, previews, nested PDFs, cut files, or saved job packages to our licensing or update service. Dot Apart Quote uses a local SQLite database by default and does not automatically upload artwork or quote data to our service. Customers can choose network shares, shared databases, hot folders, or cloud-synchronised locations; files and data placed there are also handled by that destination and its provider. Nest versions before 2.3.1 contain no optional diagnostic-report upload. Nest 2.3.1 and later may provide the optional, bounded support diagnostics described below; this does not change the default local processing of production data, and production files remain excluded. Information a user chooses to send to support by another channel is handled separately.
Optional Nest diagnostics
Diagnostics are off by default. Starting a diagnostic session requires a separate, clear and unticked consent choice in Nest. A session lasts for no more than 24 hours. The operator can stop it at any time; stopping immediately prevents further capture or transmission and clears unsent diagnostic data. Nest 2.3.1 uses manual per-report submission: enabling a session alone sends nothing, and the operator reviews and sends each report.
A report can contain the Nest and build version, operating-system version and architecture, dependency versions, allowlisted numeric or enumerated nesting and registration settings, neutral item numbers with technical dimensions and counts, recent structured operations, and structured error details limited to exception class and traceback module basename, function and line number. It can also contain an optional problem description entered by the operator. Reports are associated with the existing licensed workstation and customer so that authorised support staff can identify and investigate the request. Artwork, previews, documents, print or cut outputs, saved job packages, file names and full paths, job names, local user or host names, licence keys, access tokens, passwords, environment variables, traceback local variables, and prior raw logs are excluded. Existing licence credentials are used separately over HTTPS to authenticate a submission; they are not retained in the diagnostic report.
Reports are sent over HTTPS to the Dot Apart support service at license.dotapart.com only to investigate software problems and prepare fixes. This optional processing is based on consent under Article 6(1)(a) GDPR. Declining diagnostics does not affect a licence or access to Nest. Consent can be withdrawn for future processing without affecting processing already carried out lawfully.
Received reports are removed from the active diagnostic service after 30 days, or earlier following an accepted deletion request. Stopping a local session does not itself delete a report already received. A deletion request can be sent to support@dotapart.com with the report ID. Existing encrypted recovery copies follow the backup policy in the Retention section below and are not immediately changed by deletion from the active service. Subject to legal conditions, affected people may request access, correction, deletion, restriction and portability, withdraw consent for future processing, and complain to a competent supervisory authority, including BayLDA.
Subscriptions, payments, and invoices
We process billing details, selected products and quantities, subscription state, payment references, and invoice records. PayPal handles payment approval and payment processing; Lexware is used for invoicing. Their own privacy information also applies to processing they perform independently.
Infrastructure and recipients
STRATO services host the website, account, licensing infrastructure, and mailbox. Encrypted disaster-recovery copies are stored in private Backblaze EU Central buckets. Backup content and metadata are encrypted by our backup software before upload, server-side storage encryption is also enabled, and separate bucket-restricted application credentials are used for the primary and immutable repositories. Authorised personnel and service providers receive access only where required for operation, support, payment, accounting, recovery, security, or legal duties.
STRATO states that its data-processing agreement is automatically incorporated for contracts concluded on or after 18 July 2022 and can be concluded through the customer account for older contracts. Backblaze states that its data-processing addendum forms part of its Terms of Service and that its EEA/EU addendum incorporates Standard Contractual Clauses. These provider statements do not mean that all access or processing occurs exclusively in Germany or the EEA.
Retention
We retain account, licence, correspondence, security, and transaction information only for operational, contractual, evidential, or legal purposes. Accounting records follow applicable statutory retention periods. Primary recovery snapshots follow a multi-tier retention policy. A separate immutable recovery mirror protects current object versions with rolling compliance locks. Deletion from the active service therefore does not immediately remove the same data from existing recovery copies, and the current design does not establish a guaranteed maximum backup-deletion period. Retained snapshots may share encrypted data, and deletions must be reapplied if older data are restored.
Your rights
Subject to legal conditions, you may request access, correction, deletion, restriction, and portability, object to legitimate-interest processing, and withdraw consent for future processing. You may complain to a competent supervisory authority; in Bavaria, see BayLDA.
Newsletter choice is optional and separate from account access. See Cookie Information for browser storage.
Dot Apart Count
Count processes roll photographs and measurements on your device. The licensing service does not collect roll photos, previews, counting markers or local measurement history. Camera permission is used when you choose to take a photo. History contains local previews, measurements, estimates and save times. Delete individual entries or clear history in the History panel. Discarding the current photo does not delete saved previews; exports and shared copies require separate deletion.
For included access we use your authenticated business account and eligible paid Quote and Nest quantities, with one active phone or tablet per included licence. For standalone access, Google sign-in establishes your identity without requiring a desktop subscription. We verify Google's signed identity and associate a pseudonymous account reference with verified Google Play purchases, installation public keys, device allocation and expiring access grants. Google supplies identity and purchase information under its own privacy terms; we do not receive your card number in this flow.
Receipt tokens are encrypted and restricted. Credentials, raw receipts and private device keys are not public responses or support-report content. Standalone access permits one active phone or tablet per purchase, independently of desktop subscription expiry. Authenticated restore does not require another payment merely because Count was reinstalled. Transfer can wait for the previous signed offline grant to expire, up to 24 hours for standalone access. No perpetual cached offline authorisation is used.
We process these data to provide access and restore purchases, administer company access, secure the service and prevent duplicate or unauthorised use. The contract, legitimate-interest and legal-duty bases described above apply according to the relationship and purpose. Local history stays on the device until you remove it or app storage is deleted. Server access credentials expire; purchase records are retained as needed for the purchased right, recovery and proportionate legal or security evidence. Google and the infrastructure recipients described above receive the information necessary for their respective services.
Request Count account and data deletion without reinstalling the app, or contact support@dotapart.com. We verify the request and remove associated active Count data. Minimal restricted deletion/refund evidence, required business records and temporary lease holds can remain; backups follow the existing retention criteria and accepted deletions are reapplied on restore. Local photos and exported copies need local deletion. A Count deletion does not cancel your employer's other subscriptions, delete its invoices or request a Google refund. Your rights and complaint options above continue to apply.