Privacy Policy

How EDI EXPLAINER collects, processes and protects personal data under the GDPR. This page is maintained by pörtner consulting and describes the practices of this application.

Last updated: 1 July 2026

Controller

pörtner consulting, Andreas Pörtner, MSc. BBA, Im Bruch 31, 56414 Hundsangen, Germany. E-mail: edi-explainer@poertner-consulting.eu, phone: 06435 / 5480251.

Data we process

  • Account data: e-mail address, name if provided, authentication identifiers and the sign-in method you chose.
  • Document data: the EDI, X12 or XML content you upload or paste, together with the analysis results derived from it.
  • Usage data: number of analyses per billing period, plan and quota state, and timestamps required for limits and billing.
  • Technical data: IP address, browser type and request logs generated when serving the application.

Purposes and legal bases

  • Performance of contract (Art. 6(1)(b) GDPR): providing accounts, running analyses, storing results and enforcing plan quotas.
  • Legitimate interests (Art. 6(1)(f) GDPR): platform security, abuse prevention, error diagnostics and service improvement.
  • Legal obligation (Art. 6(1)(c) GDPR): retention of commercial and tax-relevant records.
  • Consent (Art. 6(1)(a) GDPR): optional communications you explicitly opt into. Consent can be withdrawn at any time.

AI processing of documents

Structural validation runs deterministically on our own engine. For plain-language explanations, an extract of the document is sent to a large language model provider. Before transmission the content passes a masking step that replaces detected personal identifiers such as names, e-mail addresses, phone numbers, IBANs and tax identifiers. Documents processed through EDI EXPLAINER are not used to train models.

Processors and recipients

  • Cloud hosting, database, authentication and file storage provider operating within the EU where configured.
  • AI model gateway used solely to generate explanations for masked document extracts.
  • Payment provider for subscription billing, which receives only the data required to process a payment.

All processors act on our documented instructions under data processing agreements pursuant to Art. 28 GDPR. Where a transfer outside the EEA is unavoidable, it is based on the EU Standard Contractual Clauses.

Retention and deletion

  • Analyses and uploaded documents remain available until you delete them; deletion from your history removes the stored document and its findings.
  • Account data is deleted after account closure, subject to statutory retention periods.
  • Technical logs are kept for a short diagnostic window and then removed.

Your rights

  • Access, rectification, erasure and restriction of processing (Art. 15–18 GDPR).
  • Data portability (Art. 20 GDPR) and objection to processing based on legitimate interests (Art. 21 GDPR).
  • Withdrawal of consent with effect for the future and the right to lodge a complaint with a supervisory authority.

To exercise a right, write to edi-explainer@poertner-consulting.eu. We respond within one month.

Cookies and analytics

We set only cookies and local storage entries that are technically required, in particular for your session and your language preference. No advertising or cross-site tracking cookies are used.