SOMMON Office

Privacy policy

As of 15 November 2026. The controller is SOMMON UG (haftungsbeschränkt), Königsberger Ring 3, 27432 Bremervörde, Germany, hello@sommon.de.

This English version is provided for convenience. The German version (/datenschutz) is legally binding.

What data we process

  • Account: email address and password. The password is stored only as a hash.
  • Letter: name and address of sender and recipient, the document, page count, postage and delivery method.
  • Order: Deutsche Post order and tracking numbers, amount and timestamps.
  • Technical: IP address and time of access in the server logs, to prevent abuse.

We collect only what is needed to send letters. There is no advertising, no analytics service and no profiling of your use.

Purpose and legal basis

Performance of the contract for postage and dispatch (Art. 6(1)(b) GDPR). We keep order records because commercial and tax law require it (Art. 6(1)(c) GDPR).

Content of your documents

We do not analyse the content. Format and a clear address window are checked automatically. For automatic dispatch the document is printed and put into an envelope, under the secrecy of correspondence. If a document contains special categories of data, for example about health, you decide whether to send it through us.

Recipients of data

  • Deutsche Post AG: names and addresses for the postage, and for dispatch the letter itself.
  • The provider of your assistant receives the status, price and links of a letter from us. Its own privacy policy applies to its processing.
  • Stripe Payments Europe Ltd.: email address, amount and, for businesses, name, address and VAT ID for payment and invoice.
  • European Commission (VIES): the VAT ID of a business in another EU country, to confirm it.

Processing takes place on servers in Germany. We do not transfer data to countries outside the EU.

Retention

  • Document: 30 days after the last step. Drafts that were never ordered are then deleted completely.
  • Addresses of ordered letters: 120 days, so that the letter can be tracked.
  • Order records without names, addresses or content (amount, order and tracking number, checksum of the document): ten years.
  • Account: until you ask us to delete it.

Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object. You can delete a letter at any time through the assistant, and your account by writing to us. You may complain to any data protection authority; ours is the Landesbeauftragte für den Datenschutz Niedersachsen.