Privacy notice

The controller responsible for processing personal data on this website is:

Email: andre@benchlane.com

There is no statutory obligation to appoint a data protection officer because the processing activities do not reach the threshold under Section 38 BDSG.

This website processes only the data required to provide the site and respond to enquiries. It sets no cookies, uses no analytics tools, loads no tracking pixels and includes no external scripts for behavioural measurement. External processing occurs only where technically necessary: hosting and delivery through Firebase Hosting (section 4) and delivery of the contact form through a Cloud Function and Resend (section 6).

Where consent is obtained for the processing of personal data, Article 6(1)(a) GDPR provides the legal basis.

Processing required for pre-contractual measures taken at your request, such as responding to an email enquiry, is based on Article 6(1)(b) GDPR.

Processing required to protect legitimate interests, such as maintaining secure hosting operations, is based on Article 6(1)(f) GDPR.

This site is provided through Firebase Hosting. The contractual processor is Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland (“Google”). When the site is accessed, technically necessary data is transmitted to Google so that the page can be delivered. This typically includes:

• IP address
• date and time of the request
• requested content (specific page)
• HTTP status code
• amount of data transferred
• referrer URL
• browser type and version
• operating system

Firebase Hosting delivers the static content through a global edge network; the contact function runs in Frankfurt am Main, Germany (europe-west3). The legal basis is Article 6(1)(f) GDPR, namely the legitimate interest in technically reliable delivery. A data processing agreement pursuant to Article 28 GDPR is in place with Google. Transfers to the United States are generally safeguarded by the EU-US Data Privacy Framework, supplemented by standard contractual clauses and a transfer impact assessment (TIA).

The fonts used on this site are delivered locally from the same server as the rest of the website. No connection is made to Google Fonts or other external font services, and no personal data is transferred to third parties when the fonts are loaded.

This site provides a contact form and direct mailto links. When you use the contact form, the data you enter is transmitted to a server component in the EU (Cloud Function, europe-west3, Frankfurt am Main) and delivered through Resend to my internal Google mailbox. The public address andre@benchlane.com is a Google alias forwarded to the same mailbox.

Data categories: name, email address, optional company name, approximate monthly document volume and the content of your message. The IP address of your device and the transmission timestamp are also processed for response delivery and abuse prevention.

Purpose: processing your enquiry and any subsequent correspondence. Legal basis: Article 6(1)(b) GDPR for pre-contractual measures and Article 6(1)(f) GDPR, the legitimate interest in handling enquiries, in all other cases.

Processor Resend: Plus Five Five, Inc. (brand “Resend”), 2261 Market Street #5039, San Francisco, CA 94114, USA. Resend delivers the message from the Cloud Function to my mailbox and stores delivery metadata for monitoring and abuse prevention within the retention and compliance periods set out in its DPA. A data processing agreement pursuant to Article 28 GDPR is in place. Transfers to the United States rely on the EU-US Data Privacy Framework, standard contractual clauses under Article 46(2)(c) GDPR and a transfer impact assessment.

Retention: your information remains in my mailbox while the enquiry is being processed or followed up. It is deleted after correspondence ends unless statutory retention obligations apply. Resend processes delivery metadata under its retention rules; all customer data is deleted no later than 90 days after termination of the Resend account (Resend DPA Exhibit A).

Abuse prevention (honeypot): the form contains a field invisible to human users that automated scripts commonly complete. If this field is filled, the enquiry is silently discarded and not delivered. This measure serves solely to prevent spam and abuse; user behaviour is not analysed.

Alternative mailto links: direct mailto links open your local email client. No data is transmitted to a server component of this site; the message is sent directly from your email application.

This marketing site sets no cookies and uses no analytics or tracking technologies. Your expressly selected language is stored only under the key “zollscanner.locale” in your browser's local storage so that the selection persists on your next visit. This access is necessary for the feature requested by you under Section 25(2)(2) TDDDG. No audience measurement or profiling takes place.

This site uses SSL or TLS encryption. An encrypted connection is indicated by “https://” in the browser’s address bar. Data transmitted to this site cannot therefore be read by third parties while in transit.

You have the right at any time to:

• access personal data stored about you (Article 15 GDPR)
• rectification of inaccurate data (Article 16 GDPR)
• erasure of your data (Article 17 GDPR)
• restriction of processing (Article 18 GDPR)
• data portability (Article 20 GDPR)
• object to processing (Article 21 GDPR)
• withdraw consent with future effect (Article 7(3) GDPR)

To exercise these rights, an informal email to andre@benchlane.com is sufficient.

You also have the right to lodge a complaint with a supervisory authority under Article 77 GDPR. The authority responsible for the controller is:

datenschutz.hessen.de

The data processing on this marketing site is separate from the production Zollscanner service. If you decide to use Zollscanner, the product’s separate privacy terms and data processing agreement apply and are provided during onboarding.

Account deletion in the product: deleting a Zollscanner account through “Delete account” immediately removes all uploaded documents, processing profiles and extraction caches. Licence master data — email address, monthly quota and organisation assignment — remains as provisioning metadata and is deleted or anonymised manually on explicit request. For an extended erasure request under Article 17 GDPR, contact andre@benchlane.com.

This marketing site itself does not use generative AI systems to create user-facing content. Zollscanner uses AI systems to extract and classify customs documents. These results are non-binding suggestions and require expert review before a customs declaration is submitted. The help assistant in the product app expressly identifies itself as AI during direct AI interaction; Article 50 of the EU AI Act applies to this from 2 August 2026.

This privacy notice is currently valid as of the date stated above. Changes to this site or to legal and regulatory requirements may make amendments necessary. The current privacy notice can always be accessed on this page.