Privacy Policy

Patalyze GmbH (“Patalyze”) operates patalyze.com (the "Site"). This page informs the individual who accesses the Site (“Visitor”) how Patalyze's services collect, use and disclose personal information.

Patalyze only uses Visitor’s personal data within the scope of legal regulations, in particular the General Data Protection Regulation ("GDPR") and the German Federal Data Protection Act ("BDSG"). With this privacy policy, Patalyze informs Visitor - regardless of whether Visitor set up a user account, use Patalyze's Service or visit Patalyze's website - about the nature, scope and purposes of the collection, use and processing of personal data by Patalyze.

1. DATA CONTROLLER

The data controller responsible for data processing pursuant to the GDPR, BDSG, other data protection laws applicable in the member states of the European Union, and other regulations relating to data protection is:

Patalyze GmbH, Stadionstr. 6, 85716 Unterschleißheim, Germany

If Visitor has any questions or concerns about privacy, please contact info@patalyze.com. For the conclusion of a data processing agreement pursuant to Art. 28 GDPR and for general questions about Patalyze's Services, please contact info@patalyze.com. Further information on the data processing when contacting Patalyze can be found in section 9.

2. SCOPE OF DATA PROTECTION

Data protection applies to personal data as defined by the GDPR, i.e. all information relating to an identified or identifiable natural person. An identifiable natural person is deemed to be a natural person who can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier or to one or more specific attributes.

3. USING PATALYZE’S SERVICES

When Visitor is logged into a Patalyze account, Patalyze’s Terms and Conditions apply.

Please note that according to its Terms and Conditions, Visitor may not use Patalyze’s Service for processing personal data of any kind.

4. ACCOUNT

Visitor needs to create a Patalyze account for becoming a user of Patalyze (“User”). To create the account, the following personal data will be stored:

• E-mail address
• Password
• IP address
• Device identifiers
• Operating system
• Referrer URL
• First name, surname, and company name / organization name
• Company name
• Possibly other, additional data Visitor provided during the registration process

Patalyze processes the email address, password, first name, surname, company name, and possibly other, additional data Visitor provided during the registration process on the basis of Art. 6 para. 1 sentence 1 lit. b) GDPR to perform the contract of use. Visitor’s IP address, operating system, device identifiers, and referrer url are processed in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR, as it is in Patalyze's legitimate interests to match Visitor’s IP address, operating system, device identifiers, and referrer url with data from other Visitor’s that have misused Patalyze's service in the past for fraud prevention purposes.

Please note that the creation of a Patalyze account is a prerequisite for using Patalyze Services, but creating a Patalyze account does not oblige Visitor to purchase a paid offering. User can delete the Patalyze account at any time by sending an e-mail with such request to info@patalyze.com or deleting his account in on the account management page.

If Visitor uses Single Sign-On (SSO) to log in to Patalyze, there is no need for a separate registration with Patalyze. During the Single Sign-On, the Visitor allows Patalyze to store Visitor's email address, first and last name, profile picture, and unique identifier from the SSO provider. Patalyze processes this data on the basis of Art. 6 para. 1 sentence 1 lit. b) GDPR.

Upon purchase of any paid offerings, Patalyze additionally collects the following personal data in accordance with Art. 6 para. 1 sentence 1 lit. b) GDPR:

• E-mail address
• Name
• Address
• Payment details such as credit card information
• Tax information (if applicable)
• Possibly other, additional data User provided during the payment process.

To process payments, Patalyze forwards the necessary payment data to Patalyze’s authorized payment service provider Stripe Payments Europe Ltd., Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland (“Stripe”). Where necessary, Stripe will transfer the data to Stripe, Inc., located in the USA. Further information on data protection at Stripe and compliance with the requirements of Art. 44 GDPR can be found in the Stripe Privacy Policy and the Stripe Privacy Center. Patalyze has concluded a data processing agreement with Stripe, which allows Stripe to process the data solely in accordance with Patalyze’s instructions and not for its own purposes.

In addition to the aforementioned data, Patalyze processes further (usage-)data relevant for the provision and billing of Services, such as the number of successfully created claim charts. The processing and storage of the aforementioned data is necessary for the conclusion of the contract as well as its performance and is therefore justified according to Art. 6 para. 1 sentence 1 lit. b) GDPR. If User himself/herself is not a party to the contract, but Patalyze is provided to User, e.g. by employer or an Organization to which he/she belongs, Patalyze justifies the processing of the data mentioned in section 7.1 and the aforementioned usage data via Art. 6 para. 1 sentence 1 lit. f) GDPR, as this is necessary for the performance of the business relationship with Patalyze’s customers, i.e. User’s employer or User’s Organization.

Patalyze stores the data for the duration of the contract term and subsequently, if applicable, for the duration of statutory retention periods, insofar as these prescribe the retention for the respective types of data. Patalyze will delete User’s account if requested to do so. Otherwise, Patalyze will maintain User’s account so that it is available to Users in the event of a renewed use without the User having to register again. This is in User’s as well as in Patalyze's legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR.

In the account in the section “usage”, Users can also view data about usage behavior e.g. the Number of Documents, number of Credits consumed and the number of Credits purchased. Patalyze justifies this data processing via Art. 6 para. 1 sentence 1 lit. b) GDPR, insofar as it is necessary for the performance of the contract, in particular for billing purposes or for managing the number of Credits still available. Insofar as the processing goes beyond what is necessary for the performance of the contract, Patalyze bases the processing on Patalyze’s legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR, as Patalyze seeks to meet Users' wish to visualize information on usage behavior in a transparent manner. The graphical representation of the development of consumption over the contract period is considered to be also in the interest of Users.

If User’s access to Patalyze Services is provided by the User’s employer or an organization to which User belongs, it is possible that Patalyze shares data about User’s usage (e.g. Number of Credits consumed, Number of Documents, last login date) with User’s employer or organization on request. Providing this data corresponds to Patalyze’s legitimate interests as well as the legitimate interests of Organization in receiving information about the use of the Services Organization has paid for.

5. PROCESSING OF ORGANIZATION CONTENT

Patalyze processes the Input Users submit to Patalyze only temporarily, insofar as this is necessary for the provision of the Service. The processing is therefore justified by Art. 6 para. 1 sentence 1 lit. b) GDPR. Organization Content will - within the framework of the contractual agreements - not be stored permanently and will be deleted after the performance of the contractually owed service.

6. STORAGE OF DATA WHEN USING SERVICES

When using Patalyze’s Services, section 3 of this privacy policy applies. The following data is stored for each Database:

• Status/progress of the mapping process
• Product data
• Patent data
• Estimates of time needed for the mapping
• Number of Documents
• Errors that occurred during the mapping process

This information is processed in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR based on Patalyze's legitimate interest in improving the functionality of Patalyze's Services, as this makes it easier to identify any sources of error related to the translation process. The data is stored in a database that can only be accessed by selected employees and is automatically deleted after 14 days.

7. AUTOMATIC COLLECTION OF DATA VIA WEBSITE ACCESS

Regardless of whether visitors have an account registered with Patalyze, devices automatically transmit certain data for technical reasons when accessing Patalyze’s website patalyze.com. The following data that Visitor may send will be stored:

• Date and time of access
• Browser type and version
• Operating system
• URL of the website previously visited
• Volume of data transmitted
• Requested domain
• Notification of successful data retrieval
• Search term when using a web browser
• Abbreviated/anonymized IP
• Full IP address
• Diagnostic information in the event of errors

Processing is carried out in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR based on Patalyze's legitimate interest in improving the stability and functionality of Patalyze’s website. The data is stored for purely technical reasons. Website access data is used for error analysis, ensuring system security, logging access to Patalyze and for improving Patalyze’s Services. Based on visitor’s IP address, Patalyze uses geolocation to determine the region from which visitors are visiting Patalyze’s website. Patalyze uses this information to check whether Patalyze can offer Service in visitor’s region, which corresponds to Patalyze’s legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR.. The storage of IP addresses of Users for the duration of the contract is justified by Art. 6 para. 1 sentence 1 lit. b) GDPR.

Patalyze’s website also uses services of Cloudflare, Inc, 101 Townsend St, San Francisco, CA 94107, USA ("Cloudflare"), which operates a so-called Content Delivery Network (CDN). To protect Patalyze’s website, the data transfer between Visitor’s browser and Patalyze servers is routed through Cloudflare's infrastructure in order to analyze whether it is an abusive attack. As part of this analysis, visitor’s data is transmitted to Cloudflare in encrypted form, if necessary also to Cloudflare servers in the USA. However, since visitor/User requests and other customer data are encrypted between visitor’s/User’s end device and the Patalyze servers, Cloudflare does not have any access to this data, but only to meta-data (such as visitor’s/User’s IP address). Only static resources (such as graphics) are loaded directly from Cloudflare-servers. In addition, Cloudflare determines a so-called bot score immediately before the login to Patalyze, which is based on the analysis of the metadata of the client (browser) used. The use of Cloudflare is in Patalyze’s legitimate interest to secure the use of Patalyze's website and to prevent and defend harmful attacks from outside, Art. 6 para. 1 sentence 1 lit. f) GDPR. Patalyze has concluded a data processing agreement with Cloudflare and Cloudflare may therefore only process the data according to Patalyze's instructions and not for its own purposes. Visitor can find more information about Cloudflare's handling of personal data inCloudflare’s Privacy Policy.

8. USE OF COOKIES AND OTHER STORAGE TECHNOLOGIES

Patalyze uses cookies, web storage objects and other storage technologies to provide Visitor with a variety of features and improve Visitor’s experience. If Visitors do not want Patalyze to use such technologies, Visitors can change the browser settings accordingly. Please note that if Visitors completely disable the use of cookies, web storage objects and other technologies, the functionality and scope of the website may be impaired.

Patalyze specifically use cookies or web storage objects in the following categories:

• Necessary: These cookies or web storage objects are necessary for Patalyze's website to work properly, to enable smooth navigation and access Patalyze's most important functions. This includes essential security and accessibility features and preferences such as interface language as well as the handling of the checkout process for Patalyze. The collecting of data via the necessary cookies or web storage objects is justified according to § 25 para. 2 no. 2 TTDSG (“Telekommunikation-Telemedien-Datenschutz-Gesetz”: German Telecommunications and Telemedia Data Protection Act). The further processing of this data is either necessary in accordance with Art. 6 para. 1 sentence 1 lit. b) GDPR for performing the contract or justified due to Patalyze's legitimate interest in presenting Patalyze's Services and Patalyze in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR.
• Performance: These cookies or web storage objects measure how Patalyze’s site is used. Patalyze uses this information to improve its website and services. With these cookies Patalyze measures, for example, how often Visitor returns and which functions they use. Patalyze ant its external service providers use these cookies or web storage objects with Visitor’s explicit consent in accordance with § 25 para. 1 TTDSG. The further processing of this data is also based on Visitor'sconsent, Art. 6 para. 1 sentence 1 lit. a) GDPR.
• Functional: These cookies or web storage objects enable Patalyze to provide Visitor’s with enhanced functionality and personalization on Patalyze’s website. For example, Patalyze can personalize Visitor’s experience based on which pages Visitor visited. In accordance with § 25 para. 1 TTDSG and Art. 6 para. 1 sentence 1 lit. a) GDPR, Patalyze only uses these cookies or web storage objects and process the data collected from them with Visitor’s explicit consent.
• Marketing: These cookies and other technologies are used to deliver advertising more relevant to Visitor and Visitor’s interests. By selecting this category, Visitoryalso consents to Patalyze sending Visitor’s data to third parties outside the EU (e.g., Google), including the sharing of hashed email addresses. In accordance with § 25 para. 1 TTDSG and Art. 6 para. 1 sentence 1 lit. a) GDPR, Patalyze only uses these cookies, web storage objects and other technologies and process the data collected from them with Visitor’s explicit consent.

The table below lists the different types of technologies that may be used on Patalyze’s website. Cookies or web storage objects are stored until the specified expiration time or until Visitor delets them in Visitor’s browser or, if it is a session cookie, until the session has expired. Visitor can withdraw the consent given for the use of cookies, web storage objects and other technologies in the categories “Performance”, “Functional” and “Marketing” or manage Visitor’s settings at any time. Visitor can do this in the Cookie Banner by rejecting or accepting .

To better understand how Patalyze’s Services are used and to better tailor Patalyze’s Services to the needs and desires of Patalyze’s customers, Patalyze analyzes pseudonymized data about the customers' use of Patalyze Services. The analysis allows Patalyze to understand general usage habits and derive different target and user groups. Patalyze can then address the identified user groups in a more specific way and, for example, point them to previously unused or unknown features of Patalyze Services. In this way, Patalyze enables customers to get to know and use all the features of Patalyze and can thus improve the user experience of the Patalyze Services. This corresponds to Patalyze’s legitimate interests according to Art. 6 para. 1 p. 1 lit. f) GDPR.

9. CONTACTING PATALYZE’S SALES OR SUPPORT TEAM

Visitors have the possibility to contact Patalyze via various contact forms on Patalyze’s website. Visitors can also contact Patalyze directly by email via info@patalyze.com. Visitor can send support enquiries via patalyze.com/support and sales enquiries via patalyze.com/sales

For both support and sales enquiries including any subsequent correspondence , Art. 6 para. 1 sentence 1 lit. b) GDPR serves as the legal basis for the processing of Visitor's personal data, as the processing is necessary for the initiation of the contract or the conclusion and performance of Patalyze's contract. Art. 6 para. 1 sentence 1 lit. b) GDPR also provides justification for the processing of personal data that may be contained in documents sent to Visitor’s support team. Patalyze will store Visitor’s data for the duration of Patalyze's business relationship and subsequently for the duration of the legal retention periods where this is required. The processing of Visitor’s personal data as part of Patalyze’s customer database and the analyses of Patalyze’s customer-related processes is based on Art. 6 para. 1 sentence 1 lit. f) GDPR, as this is in Patalyze’s legitimate interest.

Visitor’s also have the option of contacting info@patalyze.com with questions or concerns about data protection at Patalyze. Patalyze processes Visitor’s data in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR on the basis of Visitor’s voluntarily given consent.

10. SERVICE PROVIDERS

Patalyze may share your personal information with the third-parties listed below for the purposes that are described in this Privacy Policy or otherwise with Visitors consent.

Patalyze only shares Visitors personal information with those of its employees, contractors, and affiliated organizations that (i) need to know that personal information in order to process it on Patalyze's behalf or to provide services available on the Site, and (ii) that have agreed not to disclose it to others

Patalyze engages a number of service providers or partners to manage or support certain aspects of its business operations on Visitors behalf. Patalyze uses the following service providers who will handle Visitors personal information:

• Attio – Customer Relationship Management
• Axiom – Log Storage
• Cloudflare – Cloud Data Hosting
• Dub.co – External Link Management
• Featurebase - Customer Support
• Google Cloud Platform – Cloud Data Hosting
• Google Workspace – Internal Collaboration Tools
• Hetzner – Cloud Data Hosting
• Microsoft Azure – Cloud Data Hosting
• Notion – Internal Collaboration Tools
• Posthog – Analytics
• Resend – Email Server
• Sentry – Error Tracking
• Vercel – Cloud Data Hosting

Patalyze service providers and partners are required by contract to safeguard any personal information they receive from Patalyze and are prohibited from using the personal information for any purpose other than to perform the services as instructed by Patalyze.

11. NEWSLETTER

Visitor can subscribe to the Patalyze Newsletter where Patalyze will occasionally send emails with news on Patalyze’s Services. Patalyze is entitled to use the email address Visitor provided when signing up for a Patalyze account in this way under the legal conditions of § 7 para. 3 of the German Act against Unfair Competition (UWG). Given the existing contractual relationship, it is also in Patalyze’s legitimate interest to inform Visitor as set out above (Art. 6 para. 1 sentence 1 lit. f) GDPR). If Visitor do not wish to receive such emails from Patalyze, Visitor can object to the use of his/her email address for this purpose at any time by sending an email to info@patalyze.com. All emails contain an unsubscribe link at the end.

Upon signing up to the Newsletter, Patalyze will forward Visitor’s email to Patalyze’s authorized service provider Plus Five Five, Inc., 2261 Market Street #5039 San Francisco, CA 94114 (“Resend”).

Patalyze may send Visitor information, within the scope of Visitor's consent, about offers, special offers, promotions and marketing campaigns and other news from time to time or get in touch with Visitor to discuss specific Services. The processing of Visitor’s data is based on Visitor’s consent (Art. 6 para. 1 sentence 1 lit. a) GDPR). Visitor can withdraw his/her consent at any time with effect for the future by sending an email to info@patalyze.com. Marketing emails each contain an unsubscribe link at the end.

12. SOCIAL MEDIA PAGES

Patalyze operates several social media profiles (“Social Media Profiles”) on various social networks e.g., LinkedIn. Patalyze regularly publish posts about its Services, new Service features as well as new job offers. If Visitor interact with Patalyze’s pages or contacts Patalyze via them and Visitor is a member of the respective social network, Patalyze may receive and process data that identify Visitor. As operator of the Social Media Pages, Patalyze also have the option of viewing anonymous statistics on the interaction of Visitor with Patalyze's pages (insight function). For this purpose, the operators of the social networks record Visitor’s interactions with Patalyze’s pages using cookies and similar technologies. Visitor can find more information on this kind of data processing on the LinkedIn Privacy Policy.

The legal basis for the operation of Social Media Profiles and the insights function is Patalyze’s legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f) GDPR in using the Social Media Pages as an information channel. With regard to the insights function, Patalyze has a legitimate interest in understanding the visits and interactions with Social Media Profiles in order to be able to respond to them and to further improve Patalyze's presence. Insofar as Visitor's consent given to the social network justifies the data processing within the framework of the respective social platform, processing is carried out on the basis of this consent.

Patalyze together with the operator of the respective social network are jointly responsible for the data processing operations triggered when Visitor accesses the Social Media Page. However, the operators of the social networks may also process Visitor's data for their own purposes, which are not depicted in this privacy policy. It is also possible that data collected about Visitor will be transferred to third countries, in particular the USA. Patalyze has no influence on this data processing and refers to the privacy policies of the respective social networks.

13. WEBINARS

Patalyze offers are video-based interactive events on the Services Patalyze offers (“Webinars”). Visitor and User can participate on the Webinars (“Participant”). Patalyze uses video conferencing services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), on whose platform the webinars are held. Patalyze has concluded a data processing agreement with Google and Google may only process personal data according to Patalyze's instructions and not for its own purposes.

Patalyze collects the following personal information from Participants before or during the Webinar:

• User information (First name, last name, display name, email address, profile picture);
• Communication data (Data that the Participant independently enters, uploads or shares as part of the webinar);
• Meeting metadata and telemetry data (This technical data is, among other things, data relating to the use of the service, including when and how sessions were conducted (IP address, event logs, session information, etc.), as well as device and hardware information that Zoom needs to access in order for features such as camera, microphone, etc. to be operational in the context of participation).

Patalyze may record webinars and publish them afterwards on the Site or Social Media Pages. Visitors will not be visible or identifiable in these recordings. As participants can only ask written questions, they will not appear visually in the recording. The answer to the participant's question will be part of the webinar recording. If, contrary to expectations, personal data of the participants is visible during the recording, it will be made unrecognisable before publication. The recording and storage of the webinar is based on Art. 6 para. 1 sentence 1 lit. f) GDPR, as these processing operations are in Patalyze's legitimate interest to improve the quality of Patalyze's webinars. When the webinars are published, no further processing of personal data will take place, as Patalyze will make them unrecognisable beforehand - if they can be viewed at all.

14. JOB APPLICATIONS

Patalyze offers Visitor the opportunity to apply for a position at Patalyze via Patalyze's career page and the integrated career portal, or by email. This digital recruitment process means that in order to complete the application procedure, Visitor's application data (usually name, contact information, cover letter, resume, as well as other supporting documents and credentials) is collected and processed electronically. The personal data Visitor provide will be used exclusively for processing Visitor's job application. Visitor's data will only be shared with persons involved in the application process. If Visitor submits Visitor's documents in German only, even though an English version of the documents was requested in the job advertisement, Patalyze reserves the right to translate Visitor's documents into English. The legal basis for the processing of Visitor's applicant data is Art. 6 para. 1 sentence 1 lit. b) GDPR in conjunction with Art. 88 para. 1 GDPR in conjunction with § 26 para. 1, 8 sentence 2 BDSG ("Bundesdatenschutzgesetz": German Federal Data Protection Act). If Visitor applies for a freelance job at Patalyze, the legal basis for the processing of Visitor's applicant data is Art. 6 para. 1 sentence 1 lit. b) GDPR.

If, following the recruitment process, an employment contract is concluded, Patalyze will store Visitor's personal data as part of Visitor's personnel file for the purpose of standard organizational and administrative procedures, in compliance with the more extensive legal obligations. In this case, the legal basis for the processing of Visitor's data is Art. 6 para. 1 sentence 1 lit. b) GDPR in conjunction with Art. 88 para. 1 GDPR in conjunction with § 26 para. 1 BDSG ("Bundesdatenschutzgesetz": German Federal Data Protection Act). When working on a freelance basis for Patalyze, Patalyze will store Visitor's personal data for the purpose of executing Visitor's contract with us. In this case, the legal basis for the processing of Visitor's data is Art. 6 paragraph 1 sentence 1 lit. b) GDPR.

In the event of a rejection on Visitor's part or ours, Patalyze will retain the data submitted to Patalyze for up to a maximum of six months following notification of the rejection. Patalyze will subsequently delete the data unless legal regulations require Patalyze to store the data for a longer period.

If Visitor expressly agrees to a longer storage period of Visitor's data e.g., for Visitor's inclusion in Patalyze's internal applicant pool, the data will be further processed based on Visitor's consent in accordance with Art. 6. para. 1 sentence 1 lit. a) GDPR. Visitor's data will then be stored in Patalyze's pool of applicants for 1000 days. Visitor can withdraw Visitor's consent at any time with effect for the future.

15. DATA SECURITY

Visitor's connections to Patalyze's website and Patalyze's apps are protected with encryption techniques in line with the current state of the art. The level of protection also depends on which encryption Visitor's Internet browser and/or mobile device supports. Visitor can tell whether an individual page of Patalyze's website is transmitted in encrypted form by looking at the closed key or lock symbol in the status bar of Visitor's browser. Patalyze also uses suitable technical and organizational security measures to protect Visitor's data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Patalyze's security measures are continuously improved in line with technological developments.

16. VISITOR’S RIGHTS

The following rights are granted by European Union directives and regulations. If Visitor wishes to exercise any of the rights listed below, Visitor can contact Patalyze at patalyze.com/support

• Right to confirmation and right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to withdraw Visitor's consent

In addition, Visitor can object to the further processing of Visitor's data if Patalyze processes Visitor's data based on Patalyze's legitimate interest (Art. 6 para. 1 sentence 1 lit. f), Art. 21 GDPR). If Patalyze processes Visitor’s data for the purpose of direct advertising, Visitor’s have a general right to object. If Patalyze does not process Visitor’s data for advertising purposes, the objection must be based on Visitor’s particular situation.

Visitor’s also have the right to lodge a complaint regarding the processing of Visitor's personal data with a supervisory authority, such as the data protection supervisory authority responsible for Patalyze: Landesbeauftragter für Datenschutz und Informationsfreiheit Bayern, Wagmüllerstraße 18, 80538 München, email: poststelle@datenschutz-bayern.de.

17. CHANGES TO THE PRIVACY POLICY

Patalyze reserves the right to amend this privacy policy. The current version of the privacy policy can be accessed at any time on Patalyze’s website.

Last updated October 6th 2025