Last updated: July 17, 2026

1. Data Controller

The data controller within the meaning of data protection laws is:
Ametrus (pre-registration)
80331 Munich, Germany
Email: support@ametrus.com

2. Hosting and Infrastructure (AWS)

Our platform is fully hosted on Amazon Web Services (AWS) in the Frankfurt am Main region (eu-central-1). This ensures your data is processed within the European Union and subject to GDPR protection standards.

3. Identity and Access Management (AWS Cognito)

We use AWS Cognito for secure authentication and user account management. When you register, your login credentials (such as email address and password) are processed via AWS Cognito. This is necessary to provide secure account access in accordance with Art. 6 (1) (b) GDPR.

4. Processing of Financial Data and E-Invoices

Ametrus offers invoicing and banking services. When you use our services, we process invoice data (including ZUGFeRD/XRechnung formats), banking transactions, and customer details. This data is stored securely using encryption and strict tenant isolation (Row-Level Security). Processing occurs to fulfill the contractual purpose (Art. 6 (1) (b) GDPR). We only access banking data via authorized interfaces (e.g. PSD2 API).

5. Transactional Emails (AWS SES)

We use Amazon Simple Email Service (SES) to send invoices and system-relevant notifications. We send these emails on behalf of our users.

Objection (Opt-Out): Recipients can object to the processing of their email address for future emails at any time. An email to support@ametrus.com is sufficient. We maintain an internal suppression list to technically block future deliveries to unsubscribed addresses.

6. Your Rights (GDPR)

You have the right to request free information about your stored personal data, its origin, recipients, and the purpose of the data processing at any time. Furthermore, you have a right to request the correction, blocking, or deletion of this data. For this purpose, please contact us at support@ametrus.com.