Skip to content
patscenar.io by mtc.berlin

Privacy policy

As of October 20, 2026 This is a translation. The German version prevails.

Moving Targets Consulting GmbH, Arndtstraße 34, 10965 Berlin, GermanyEmail: backoffice@mtc.berlin

You can reach our data protection officer at ds-beauftragter@streit-online.de.

  • patscenar.io sets only the cookies it needs to work (sign-in, language, theme). There is no reach measurement and no tracking, so there is no cookie banner either.
  • We serve fonts and scripts ourselves; nothing is loaded from Google or other CDNs.
  • Our servers and database run at Hetzner in Germany.
  • For the AI draft of one report section, only numbers, multiple-choice answers and country codes go to Anthropic, outside the EU. Names, titles, notes and free text are not sent.

Consultations that the advisers of an organization (for example a patent information center) create in patscenar.io are processed by us on behalf of that organization (Art. 28 GDPR). The organization is the controller for this data, under a data processing agreement. Please direct questions about this data to the organization that advised you first.

We are the controller for user accounts, offer requests, contract and billing data, and for running the service. This policy covers that.

patscenar.io runs on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data center in Germany. The database (PostgreSQL) runs in the same infrastructure. Hetzner processes the data on our behalf (Art. 28 GDPR).

For every request the server processes the data it technically needs: IP address, date and time, the address requested, HTTP status code and browser identifier. Without this data the page cannot be delivered or protected against abuse. Legal basis: Art. 6 (1) (f) GDPR.

Our application logs contain no IP addresses, email addresses or content, only internal identifiers. To limit sign-in attempts, the sign-in system stores the IP address together with the address requested; these entries are deleted within two days at the latest. For other limits we store only a one-way keyed hash (HMAC) of the IP address or email address, also only briefly.

For an account we store name, email address, organization and role. You sign in with a link we email to you (valid for 15 minutes) or with a passkey. For a passkey we store only the public key; biometric data never leaves your device.

A session ends after 8 hours without activity and after 30 days at the latest. Legal basis: Art. 6 (1) (b) GDPR (terms of use) and (f) (secure operation).

Security-relevant events (sign-in, changes to members and roles, licenses, releasing and exporting reports, support access) are logged without content and deleted after 12 months.

Consultations and reports are stored in the database, separated by organization. They are deleted automatically 24 months after their last use. When an account is deleted, we remove the personal data of that account.

For one section of the strategy report, a draft text can be produced through the application programming interface (API) of Anthropic PBC. The processing takes place outside the EU.

Only calculated numbers, multiple-choice answers and country codes are sent. Names, titles, notes and other free text are not sent. Under its commercial terms, Anthropic does not use API data for training. If the service is unavailable, the report uses a fixed text template.

We are preparing a language model of our own, run by us, that will replace this service. Legal basis: Art. 6 (1) (b) and (f) GDPR.

We send sign-in links, invitations, confirmations and license notices through Resend (Resend, Inc.) in its EU region, from noreply@patscenar.io. Resend processes the email address and message on our behalf (Art. 28 GDPR).

Replies and requests to support@patscenar.io go to a Microsoft 365 mailbox. We process your details to answer your request (Art. 6 (1) (b) and (f) GDPR) and delete them when they are no longer needed and no retention obligation applies.

When you request an offer, we process the organization, your name, email address and message to answer the request, and email you a confirmation (Art. 6 (1) (b) GDPR).

We create offers and invoices with Lexware Office (Haufe-Lexware GmbH & Co. KG, Freiburg, Germany). Only the contact and billing data of the organization go there, never consultation content. We keep billing data for the periods required by commercial and tax law (§ 257 HGB, § 147 AO).

patscenar.io sets only cookies that are strictly necessary for the service you request (§ 25 (2) no. 2 TDDDG). No consent is needed for these, so there is no cookie banner.

  • Sign-in (names start with “__Host-ps.”): keeps your session, only after you sign in, 30 days at most.
  • ps.ml (over HTTPS: __Secure-ps.ml): the sign-in link, only on the sign-in confirmation page, 15 minutes.
  • better-auth.better-auth-passkey: only while you set up or sign in with a passkey, 5 minutes.
  • ps_locale: the language of the last page you opened, 1 year.
  • ps_theme: the light or dark theme, only if you choose one yourself, 1 year.

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future. Write to backoffice@mtc.berlin or to the postal address above.

You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR); ours is the Berlin Commissioner for Data Protection and Freedom of Information.

patscenar.io is only available over HTTPS (TLS).