Privacy Notice for the Application 'CAD-HUB' of SSC-Services GmbH

Version 1.0, as of October 1, 2025

1. Data Controller

The controller for the processing of your personal data in the context of using the application 'CAD-HUB' is:

SSC-Services GmbH
Herrenberger Str. 56
71034 Böblingen, Germany
Email: cad-hub@ssc-services.de
Phone: +49 7031 4913120

Data Protection Officer:
Dr. Oliver Meyer-van Raay
Email: om@v-formation.gmbh

For inquiries or complaints regarding the processing of your data, please contact the Data Protection Coordinator of SSC-Services GmbH:
Email: datenschutz@ssc-services.de

2. Processed Personal Data

The following personal data is processed by us:

  • First name, last name
  • Company
  • Email address
  • Address
  • Tax identification number (for B2B verification)
  • Payment data (payment method, last four digits of card number)

3. Purpose of Processing

We process your personal data to provide the services you have commissioned within the framework of using the 'CAD-HUB' application. During use of the application, your data is processed in the following processes:

  • Creation and management of your user account
  • Processing of payment transactions
  • Storage and conversion of CAD data
  • Creation of invoices
  • Communication with you regarding service delivery, including sending notifications of successful conversions or answering questions.

4. Legal Basis for Processing

The processing of your personal data is based on contractual obligations pursuant to Art. 6 para. 1 b GDPR.

5. Third Parties and Data Disclosure

For payment processing, the service provider 'Stripe' (Stripe Payments Europe, Limited – Ireland) is used as a payment service provider. In case of payment by credit card or recurring services via SEPA direct debit, payment processing is handled by 'Stripe'. Further information can be found in Stripe's privacy policy:

Stripe Privacy Policy

Furthermore, data is passed on to service providers in the areas of banking, taxes & tax consulting, and – within the framework of legal requirements – to the tax authorities.

Stripe Payments Europe, Limited – Ireland generally stores and processes data in Europe. Due to the corporate structure, it cannot be ruled out that data is transferred to the USA.

6. Storage Duration and Deletion

Uploaded CAD data is automatically deleted after 2 weeks.

Your user data is stored until account deletion. You can delete your account at any time through the application.

Tax-relevant information and documents are stored for up to 10 years in accordance with tax regulations, deviating from the above.

7. Automated Decision-Making / Profiling

There is no automated decision-making or profiling pursuant to Art. 22 GDPR. The application performs file conversion. Data is processed only for performing the conversion and related tasks and obligations.

8. Security and Protective Measures

We implement technical and organizational measures to ensure the security of your data, including:

  • Encryption of data transmissions
  • Access restrictions
  • Regular audits

You can find our current certifications here

9. Cookies

We use cookies. Cookies do not cause any damage to your device and do not contain viruses. Cookies serve to make our offering more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit ends. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser on your next visit. You can configure your browser to inform you about the setting of cookies and to allow cookies only on a case-by-case basis, to reject cookies for certain cases or in general, and to activate the automatic deletion of cookies when the browser is closed.

When cookies are deactivated, the functionality of this website may be limited. Cookies that are required for the execution of the electronic communication process or for the provision of certain functions you have requested (e.g., shopping cart function) (technically necessary cookies) are stored on the basis of Art. 6 para. 1 lit. f GDPR.

When you visit our website, we inform users through a cookie banner (see section "Consent Management with Usercentrics (Cookiebot)") about the use of cookies (technically necessary cookies, preference cookies, statistics cookies, and marketing cookies) and have technically implemented the consent required under data protection law for setting cookies that require consent. Except for technically necessary cookies, consent must always be given in advance for cookies to be set on your device.

The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. User data collected through technically necessary cookies is not used to create user profiles. Statistics and preference cookies are used for the purpose of improving the quality of our website and its content based on your given consent. Through cookies, we learn how the website is used and can thus continuously optimize our offering.

10. Consent Management with Usercentrics (Cookiebot)

We use the services of cookiebot.com from the provider Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter "Cookiebot") on our website to provide our cookie banner. This enables us to obtain consent from website users for data processing and to manage it in compliance with data protection regulations.

When you access our website, a connection is established to Cookiebot's servers to obtain your consent and other declarations regarding cookie usage. Cookiebot then stores a cookie in your browser to assign the consents you have given or their revocation to you. The consent data (given consent and revocation of consent) is retained for one year. Within this period, no renewed consent is required, unless new systems are introduced or renewed consent is required due to legal or regulatory frameworks.

Cookiebot processes the following data:

  • IP address (the last three digits are set to '0')
  • additional information about the browser used and the browser version
  • date and time of consent
  • the URL of the accessed website
  • an anonymous, random, and encrypted key (ID)
  • your given consents or individual privacy settings.

The data collected in this way is stored until you request deletion, delete the Cookiebot cookie yourself, or the purpose for data storage no longer applies.

Cookiebot is a recipient of your personal data and acts as a data processor on our behalf. Processing takes place in the European Union. Cookiebot uses third-party providers, such as BunnyWay d.o.o (Slovenia), to operate geolocation.

Further information about objection and removal options regarding Cookiebot can be found at: Cookiebot Privacy Policy

11. Google Ads

We use Google Ads to draw attention to our offerings through advertisements. If you reach our website via a Google ad, Google Ads stores a cookie on your device. Through the Google Ads cookies stored on our website, we can receive information about the success of our advertising campaigns. These cookies are not intended to identify you personally. As a rule, the following analysis values are stored for this cookie: unique cookie ID, number of ad impressions per placement, last impression, and opt-out information.

The cookies set by Google enable Google to recognize your internet browser. Each Ads customer is assigned a different cookie, so that cookies cannot be tracked across the websites of other Ads customers. Through the integration of Google Ads, Google receives the information that you have accessed the relevant part of our website or clicked on one of our ads. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.

Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We ourselves do not independently collect personal data in the aforementioned advertising measures, but merely provide Google with the opportunity to collect data. We only receive statistical evaluations from Google that provide information about which ads were clicked, how often, and at what prices. We do not receive any further data from the use of advertising materials; in particular, we cannot identify users based on this information.

Legal basis and storage duration: The data processing associated with Google Ads is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. If you do not want cookies to be stored on your device by Google Ads, you can refuse or revoke your consent in our cookie banner. You can also deactivate the corresponding option in your browser's system settings. You can delete stored cookies in your browser's system settings at any time.

The data collected in connection with the use of Google Ads is stored until the respective purpose of processing no longer applies, or until you have objected to the storage of your data or revoked your consent.

Recipients of data and further information: The information is transmitted to and further processed on Google servers. We have concluded a data processing agreement with Google that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

Transfers to Google LLC based in the USA are possible. For this purpose, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission. We have also agreed standard contractual clauses with Google, the purpose of which is to ensure an adequate level of data protection in third countries.

Further legal information about Google Ads can be found at: Google Privacy Policy & Google Partner Sites

12. Data Subject Rights

You have the right to:

  • Information
  • Rectification
  • Erasure
  • Restriction of processing
  • Objection
  • Data portability

More detailed information about your rights as a data subject can be found in our privacy notice on the website: https://www.ssc-services.de/datenschutz/

You can exercise these rights at any time by emailing datenschutz@ssc-services.de .

13. Right to Complain and Supervisory Authority

In case of complaints, you can contact the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, whose contact details can be found here: Contact

14. Updates to this Privacy Notice

We reserve the right to update this privacy notice as needed. The version currently published on the platform applies.