Privacy policy
We take the protection of your personal data seriously. This policy explains what data the TWT Invoice portal processes, why, and what rights you have.
Controller
TWT- Tat Welle Tech GbRPlauener Straße 22, 38444 Wolfsburg
info@tatwelletech.com
What we process
Account data (name, email address, phone number if provided), the company and invoice data you enter, technical log data (IP address, timestamp, user agent) and an audit trail of actions performed in the portal.
Purpose and legal basis
Processing serves the performance of our contract with you (Art. 6 (1) (b) GDPR) and our legitimate interest in secure, traceable operation (Art. 6 (1) (f) GDPR). Invoice records are retained to satisfy statutory retention obligations (Art. 6 (1) (c) GDPR).
Cookies
The portal sets only technically necessary cookies: a session token, a refresh token, a remember-me flag, your active company and your colour-mode preference. No advertising, tracking or third-party analytics cookies are used.
Hosting and processors
The portal runs on our own servers in Germany. Document rendering, authentication and email delivery are handled by our own internal services. Uploaded receipts are processed by our own OCR system and are not sent to third-party cloud services. Card payments are processed by Stripe Payments Europe Ltd. as a processor; only the billing relationship is transmitted — never your invoices, documents or customer data.
Browser extension “TWT One Connector”
The browser extension “TWT One Connector” (Firefox, Opera) takes a parts supplier's basket into your TWT One. It reads only when you click its icon in the toolbar, and only the open page: the rows of the basket (article numbers, descriptions, quantities, prices) and the shop's name (host name). Password fields, your browsing history, other pages and their cookies are never read. On TWT One itself, before connecting, the extension only checks whether your sign-in cookie is present, so that you do not have to sign in a second time; its content is never used, stored or sent. What it reads is sent only to TWT One, encrypted (HTTPS), and stored there as a received basket of your company until you take it into a quotation or discard it. Its only purpose is the transfer into a quotation you asked for (Art. 6(1)(b) GDPR). Nothing is passed on to third parties or analysed for advertising. To stay signed in, the extension keeps an access key in your browser. It allows sending baskets and nothing else. You can disconnect it at any time under Profile → Connected browsers or in the extension; a key unused for 90 days expires.
Retention
Account data is kept for the life of the account. Invoice data is subject to the statutory eight-year retention period (§ 14b UStG, § 147 AO), counted from the end of the year in which the invoice was issued. Audit entries are retained to preserve the integrity of the trail.
Your rights
You have the right to information, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a supervisory authority. To exercise these rights, contact us using the details above.
This text is provided for information. Please have it reviewed by your legal adviser before relying on it.