Privacy Notice

Version: July 2026 · This website is a beta announcement page; we deliberately keep data processing minimal.

This notice is available in German and English. In case of discrepancies, the German version prevails.

1. Controller

Sixty One GmbH, Lange-Feld-Str. 77B, 30926 Seelze, Germany
Email: hello@charterfile.com

2. Waitlist (beta access)

If you sign up through the form, we process only your email address and the time of signup.

• Purpose: notifying you about the beta launch and granting access.
• Legal basis: consent (Art. 6(1)(a) GDPR), revocable at any time.
• Retention: until the beta launches or until you revoke; the list is then deleted.
• Sharing: none. No newsletter services, no tracking, no disclosure to third parties.

2a. Platform accounts (Charterfile app)

When you register for and use the Charterfile platform, we process:

• Account data: name, business email, password (stored as a hash only), company details including verification information (company register, website, AOC where applicable) — legal basis Art. 6(1)(b) GDPR (contract).
• Login security: one-time codes (OTP) sent by email, stored only as a hash with short validity; logging of security-relevant events — Art. 6(1)(f) GDPR (account security).
• Billing: payment processing via Stripe Payments Europe Ltd. (Ireland); we do not store card data — Art. 6(1)(b) GDPR.
• Support: contents of support tickets — Art. 6(1)(b) GDPR.
• Session token: on login, a session token is stored in your browser (localStorage). This storage is strictly necessary to provide the service (§ 25(2) no. 2 German TDDDG); it is not accessed for any other purpose.

Data that customers store about their own clients and passengers in the platform is processed by us as a processor under the Data Processing Agreement (DPA); the respective customer is the controller for that data.

Retention: account data for the contract term; after the contract ends, deletion within 30 days unless statutory retention obligations (e.g. § 147 AO, § 257 HGB) require otherwise.

3. Hosting & server logs

This website is hosted with Hetzner Online GmbH in a data centre in Germany. The hosting provider processes technically necessary server logs (IP address, time, page accessed) to provide and secure the service (Art. 6(1)(f) GDPR). Server logs are deleted after 14 days at the latest, unless they are needed longer to investigate a specific security incident.

4. No cookies, no tracking

This site sets no cookies, uses no analytics tools and loads no resources from third-party servers.

5. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and withdrawal of consent (Art. 15–21 GDPR). Contact hello@charterfile.com. You also have the right to lodge a complaint with a data protection supervisory authority.