Privacy notice

On this page

• 1. Controller
• 2. Summary
• 3. Website hosting (GitHub Pages) and server log files
• 4. No cookies, no third-party requests, one browser entry
• 5. Contact by email
• 6. Advertising
• 7. Operation for customers
• 8. Recipients and third countries
• 9. Your rights
• 10. Duty to provide data
• 11. Changes

This is a translation; the German version is binding. Read in German (Datenschutzerklärung)

1. Controller

Helm & Nagel GmbH, Rosenweg 5, 35614 Aßlar, Germany, represented by the managing directors Christopher Vincent Helm and Florian Michael Zyprian. Email: info@ocr-software.com. VAT ID: DE306902936. Amtsgericht Wetzlar HRB 7706.
Data protection officer: none appointed. In our assessment there is no duty under Section 38 (1) BDSG, because fewer than 20 people are regularly and permanently engaged in automated processing of personal data and no processing requires a data protection impact assessment. Send data protection questions to the email address above.

2. Summary

• We offer the hosted service and contracts with us only to businesses (Section 14 BGB), not to consumers. Private individuals may also download the package and use it privately.
• The website is static. It has no forms, sets no cookies, uses no trackers, no advertising or analytics services, and loads nothing from third parties (we serve the font with the page). The page is delivered through GitHub Pages (section 3).
• You download the software and run it on your own server. You do not send us your documents this way; we neither receive nor process them.
• If you write to us, we process the data in your email (section 5).

3. Website hosting (GitHub Pages) and server log files

The website is delivered through GitHub Pages. Provider: GitHub Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA.
When you open the website, GitHub processes technically necessary data, including your IP address. GitHub states that the IP address of a visitor to a GitHub Pages site is logged and stored for security purposes, whether or not the visitor is signed in to GitHub. The data is transferred to GitHub in the USA (section 8). We do not run a web server of our own for the website.
Purpose: delivering the page, security, troubleshooting. Legal basis: Art. 6 (1) (f) GDPR (interest in secure and stable delivery of the page).
Retention: determined by GitHub; we have no influence on it.
Source: docs.github.com/en/pages/getting-started-with-github-pages/what-is-github-pages (retrieved 2026-11-11), docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement (retrieved 2026-11-11).

4. No cookies, no third-party requests, one browser entry

The site sets no cookies. We serve the font (JetBrains Mono, SIL OFL 1.1) ourselves. There are no CDNs, maps, videos, social media buttons or web analytics.
One exception: in the gallery you can drag the width of the results bar. Your browser then stores this number in local storage (localStorage) so that the bar has the same width on your next visit. The entry stays in your browser, we do not read or send it, and it carries no identifier. It serves only the display you asked for; you can delete it at any time in your browser settings. We therefore consider a consent banner unnecessary (Section 25 (2) no. 2 TDDDG).

5. Contact by email

If you write to us (enquiries about operation for third parties, support, maintenance, or questions), we process the data you give: name, company, email address, message and anything else you tell us.
Purpose: answering your enquiry, preparing an offer, concluding and performing a contract.
Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures, contract), (f) (answering enquiries), (c) (retention duties).
Retention: enquiries without a contract 6 months after the last message. Accounting vouchers 8 years, commercial and business letters 6 years (Section 147 (3) AO, Section 257 (4) HGB).
The mailbox is run by the provider Zoho (data centre in the EU). Email without end-to-end encryption is not confidential.

6. Advertising

We send no newsletters and no advertising emails to people who have not asked. Advertising by electronic mail without prior express consent is also unlawful towards businesses (Section 7 (2) no. 2 UWG).

7. Operation for customers

If we run the software for a customer on a server, we are a processor under Art. 28 GDPR for the customer's documents and the customer is the controller. The terms are set in a data processing agreement that we conclude with the customer before operation starts. This operation is an offer on request and not part of the website.
The service we host at api.ocr-software.com processes on a server of Hetzner Online GmbH in the Helsinki data centre (Finland, EU).

8. Recipients and third countries

When you open the website, your IP address is transferred to GitHub in the USA (section 3). Contact data and documents do not leave the EU and the EEA.

9. Your rights

You have the rights of access (Art. 15), rectification (16), erasure (17), restriction (18) and data portability (20). Contact info@ocr-software.com.

Right to object (Art. 21 GDPR): On grounds relating to your particular situation you may object at any time to processing based on Art. 6 (1) (f) (paragraph 1). You may object to direct marketing at any time (paragraph 2).

We do not collect consent; a notice on withdrawal under Art. 13 (2) (c) GDPR is not needed as long as no consent is used.
Right to lodge a complaint with a supervisory authority (Art. 13 (2) (d) GDPR): our seat is Aßlar (Hesse); the competent authority is the Hessian Commissioner for Data Protection and Freedom of Information (Wiesbaden).

10. Duty to provide data

For an offer we need company name, address, email and, if applicable, VAT ID; without them there is no contract. Server log data arises technically.

11. Changes

We adapt this notice when the website or the law changes. The version currently published applies.