Privacy policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

2. Hosting and Server Log Files

This website runs on a cloud server operated by us at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, located in the Nuremberg data centre (Germany). We have concluded a data processing agreement with Hetzner pursuant to Art. 28 GDPR.

When you visit this website, our server automatically stores the following information in server log files:

• IP address, in shortened form only (for IPv4 addresses the last byte is removed, for IPv6 addresses only the first 48 bits are stored)
• Date and time of the request
• Requested page or file and HTTP status code
• Amount of data transferred
• Referrer URL (the previously visited page)
• Browser type, version and operating system

This data is processed to ensure the secure and stable operation of the website. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the technically error-free and secure provision of the website). The log files are deleted automatically after 7 days. If a technical error occurs, the server's error log may contain the full IP address; it is also deleted after 7 days.

3. Contact Form and Email

If you send us an inquiry via the contact form, your details (name, business email address, phone number, company, position, industry, quantity, timeline, budget and your message) are transmitted in encrypted form to our server and from there sent as an email via Microsoft 365 to our mailbox info@staidium.org. The same applies if you email us directly.

For sending and storing emails we use Microsoft 365, provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. We have concluded a data processing agreement with Microsoft pursuant to Art. 28 GDPR. Processing in the United States cannot be ruled out; it is based on the EU-U.S. Data Privacy Framework, under which Microsoft Corporation is certified, and on the EU Standard Contractual Clauses.

We process this data in order to handle your inquiry and prepare an offer. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures), otherwise Art. 6 (1) (f) GDPR (legitimate interest in responding to inquiries). We do not share this data with third parties unless we are legally obliged to do so. The data is deleted once your inquiry has been fully processed, unless statutory retention obligations apply.

4. Cookies, Analytics and Third-Party Content

This website does not use cookies, does not use any analytics or tracking services and does not load content from third parties. Fonts and images are delivered from our own server.

5. Data Retention

Personal data is stored only for as long as necessary for the respective purpose or as required by statutory retention obligations.

6. Your Rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to withdraw any consent given with effect for the future (Art. 7 (3) GDPR)

To exercise your rights, please contact info@staidium.org.

Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.

Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

Last updated: October 2026