Privacy notice

Updated: 08.09.2026

Controller and scope

The controller is Florian Peglow, trading as digitory, Oppelner Str. 20, 52525 Heinsberg, Germany. For privacy enquiries, contact hi@digitory.de. Further contact details are in our legal notice.

This notice covers the homepage digitory.cloud and invoice delivery through invoice.digitory.cloud. Customers receive invoices and related correction documents, including credit notes and cancellation invoices, for orders from all sales channels. No goods are ordered or paid for here. Separate processing by your marketplace, shop or email provider is also subject to their respective notices.

Data and its sources

We process names, billing and shipping addresses, business contacts, company details and VAT IDs where applicable, email addresses, order references, items, quantities, prices, and invoice, supply and payment details. These come from the information you provide when ordering, the sales channel used and our order records. For marketplace orders, we receive data through the order page and buyer information available for the sale. Business contact details may be provided by the company placing the order.

When you visit, your IP address, request time, requested resource and technical information sent by your browser are processed to deliver the website. Operational and error logs support troubleshooting and security. Normal web access logs do not contain complete invoice links, password values or invoice contents.

Purposes and legal bases

Invoice delivery and related communication are necessary to perform your purchase contract (Article 6(1)(b) GDPR). Issuing, correcting and retaining tax records fulfils legal obligations, in particular Sections 14, 14a and 14b of the German VAT Act and Sections 146 and 147 of the Fiscal Code (Article 6(1)(c) GDPR).

Secure delivery, prevention of unauthorised access, troubleshooting and documenting dispatch and availability rely on Article 6(1)(f) GDPR. Our legitimate interests are protecting confidential business information and providing a traceable invoice process. For contacts acting for a company, this interest also supports business communications.

For intra-Community supplies, VAT IDs are checked through the relevant tax verification services, including the European Commission’s VIES system and participating national tax authorities. The VAT IDs required for the query are transmitted, and the result, time and reference are retained for tax documentation. This check does not make an automated contractual decision. We do not make decisions within Article 22 GDPR or create advertising profiles.

Email and automatic access

If an email address is provided, we send a short English notification containing the invoice link. There are no PDF or XML attachments. The link may contain the password in its URL fragment and open access automatically. Anyone receiving the complete link can retrieve the associated invoices. Your email provider also processes the message, including this link. Share it only with authorised people.

When opened, the password is removed from the address bar and checked over HTTPS. This does not delete copies in emails or the clipboard. Without automatic access, enter the supplied password: the order number for Cardmarket orders, otherwise a random numeric code. The sender invoice@digitory.cloud is for notifications. Send replies and enquiries to hi@digitory.de.

Necessary cookies and access protection

After a successful check, the browser stores the necessary __Host-digitory_invoice cookie for up to 30 minutes. It authorises only the unlocked invoice group. The csrftoken session cookie protects forms against requests from other sites. These cookies are necessary for the service you expressly request (Section 25(2)(2) TDDDG); the related processing protects access under Article 6(1)(f) GDPR. There are no analytics or advertising cookies. Fonts, the PDF viewer and animation are served locally from our own server.

To limit password attempts, we process your IP address and store identifiers derived from it using a secret key, attempt counters and expiry times. Limits expire after 15 minutes or 24 hours. Expired counters are removed from the operational database daily, normally within 48 hours. Copies in encrypted backups are subject to the backup retention periods below. Separate records of a specific security incident may need further investigation.

Availability and dispatch records

We record access changes, the first and last requested download and the download count. These do not prove that a file was read or fully received. Dispatch records include the recipient address, status, times and technical message identifier. SMTP acceptance does not confirm delivery to an inbox. These records support traceability and troubleshooting, not advertising.

Recipients, hosting and backups

The web application and invoice sending run at 24fire GmbH in Germany. Our contact mailbox hi@digitory.de is hosted by Infomaniak Network SA in Switzerland. Incoming enquiries, including any enclosed or quoted invoice links, are processed there. We also store encrypted backups in Infomaniak’s kDrive in Switzerland. Private recovery keys are kept separately from this backup destination. Switzerland benefits from a European Commission adequacy decision under Article 45 GDPR. This covers the data protection basis for the international transfer and does not replace a data processing agreement.

Hosting and storage providers receive data within the services they perform. Other recipients may include people you expressly involve, your and our accountants or tax advisers involved in the transaction, and competent authorities where necessary or legally required. We do not sell customer data.

Retention

Technical operational and error logs in the server journal have a regular retention period of 30 days. Extracts needed to investigate a specific security incident are retained separately and only for as long as necessary.

Invoices are generally retained for eight years from the end of their year of issue (Section 14b of the German VAT Act). Different records may have different periods: business correspondence generally six years, and certain tax and organisational records ten years (Section 147 of the Fiscal Code). Ongoing proceedings, open tax assessment periods or the necessary establishment or defence of claims may require longer retention.

Access links remain active until revoked. Revocation ends access but does not erase an invoice subject to retention duties. Access status and aggregate download records remain associated with the invoice while access is provided. Their necessity and that of technical dispatch records are assessed separately from statutory invoice retention; they are deleted when no longer needed unless another retention duty applies. Support enquiries are deleted after resolution once no statutory duty or outstanding claim requires retention.

Backups support recovery after data loss. During normal backup operation, hourly database copies are retained for 48 hours; selected daily copies and daily system backups for up to 35 days. Separately backed-up original invoices and evidence subject to statutory retention follow their applicable legal periods. If a backup fails, the last usable copy is preserved until the issue is resolved. Backup and disposal errors are reported and addressed; they do not justify unlimited retention. Disposal, statutory retention and erasure are considered in recovery procedures. After a restore, previously required erasures must be applied again.

Your rights and providing data

Subject to the legal conditions, you have rights of access, rectification, erasure, restriction and portability. Where processing relies on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. Statutory retention duties may prevent erasure. Contact hi@digitory.de to exercise your rights. You may also complain to a data protection supervisory authority, including the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia.

Required invoice information is needed for the transaction or to meet statutory requirements. An email address is not mandatory for downloading; without one, we do not send an email notification. Without the necessary access and connection data, we cannot provide protected online access. For difficulties, contact hi@digitory.de for assistance and a suitable alternative delivery method.