← Back to inspector

DOCX Inspector Privacy Notice

Controller

Tailored AI Services GmbH, Grelckstraße 27, 22529 Hamburg, Germany. Contact: info@tailoredaiservices.com

A Data Protection Officer is not appointed because the legal thresholds under Art. 37 GDPR and §38 BDSG are not met.

100% client-side processing: your document never leaves your device

The DOCX Inspector processes the file you select entirely inside your web browser. The file is not uploaded, not transmitted to us or any third party, and not stored on any server. The analysis and the downloadable HTML report are generated locally on your computer.

This is verified by an automated test that asserts zero network requests occur while a document is being processed.

Hosting and server logs

This page is served from Amazon Web Services (AWS) infrastructure in the European Union (region: eu-west-1, Ireland). Hosting and content delivery are provided by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg, acting as our processor on the basis of AWS's standard data processing terms (the AWS GDPR Data Processing Addendum, automatically incorporated into the AWS Service Terms).

When you load this page, your browser's technical request data is processed by the hosting provider for the purpose of delivering the page and ensuring its security and stability. This includes:

  • IP address (truncated where technically possible)
  • Date and time of the request
  • The page or asset requested
  • HTTP status code and response size
  • Referrer URL (if transmitted by your browser)
  • User-agent string

Legal basis: Art. 6(1)(f) GDPR, based on our legitimate interest in providing a secure, functioning, and stable service, and in understanding usage at an aggregate level to improve it.

Retention. We distinguish between three categories of log data:

  1. Hosting provider platform logs kept by Amazon Web Services for its own operational, security, and contractual purposes. Their retention is governed by AWS's standard practices and is outside our direct control.
  2. Access logs that we export into our own storage for the purpose of deriving usage statistics. Where we operate such an export, raw entries (including IP addresses) are retained for a maximum of 30 days and then deleted.
  3. Aggregate, anonymised usage statistics derived from the above, for example: total page views, approximate country or region of origin, referrer, request frequency, and time-of-day patterns. These contain no personal data and are retained indefinitely so that we can understand demand for the service and improve it over time.

No client-side analytics. All usage metrics, where derived, are produced server-side from standard request data. We do not use any client-side analytics, no tag managers, no tracking pixels, no fingerprinting, and no cookies (see also "No cookies, no client-side storage, no tracking" below).

Important: none of these logs ever contain the contents of any inspected document, because that content never reaches a server.

Third-country transfers

Although hosting takes place in the EU (Ireland), Amazon Web Services EMEA SARL is a subsidiary of Amazon Web Services, Inc. (United States). Where any transfer of personal data to the United States cannot be excluded at the infrastructure-operator level, such transfers are covered by:

  • The EU–U.S. Data Privacy Framework (adequacy decision of the European Commission, 10 July 2023), under which Amazon Web Services, Inc. is certified;
  • Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) as a fallback;
  • The supplementary measures set out in the AWS GDPR Data Processing Addendum.

No cookies, no client-side storage, no tracking

This tool:

  • sets no cookies;
  • writes nothing to localStorage, sessionStorage, IndexedDB, or any Service Worker storage;
  • uses no analytics, no tag managers, and no fingerprinting techniques;
  • loads no third-party scripts, fonts, pixels, or external CDN assets. Every script, style, and font is served same-origin as part of the tool itself.

Because no information is stored on, or read from, your terminal equipment beyond what is strictly necessary to provide the service you requested, no consent banner is required under §25(2) TDDDG.

Automated decision-making

No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place. The tool performs deterministic inspection of file contents and produces a descriptive report; no decision with legal or similarly significant effect is made about you.

Your rights

You have the following rights under the GDPR:

  • Right of access (Art. 15)
  • Right to rectification (Art. 16)
  • Right to erasure (Art. 17)
  • Right to restriction of processing (Art. 18)
  • Right to data portability (Art. 20)
  • Right to object (Art. 21)
  • Right to withdraw consent at any time, where processing is based on consent (Art. 7(3)). Note that this tool does not currently rely on consent as a legal basis.

To exercise any of these rights, contact us at info@tailoredaiservices.com or datenschutz@tailoredaiservices.com.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority competent for us is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI) Ludwig-Erhard-Straße 22, 7. OG, 20459 Hamburg, Germany https://datenschutz-hamburg.de

You may also lodge a complaint with the supervisory authority of your habitual residence or place of work.

Changes to this Privacy Notice

We will update this notice if the tool's data-handling characteristics change. The current version number and effective date are shown at the top of this document.

Last updated: 2026-06-03