Privacy Policy

1. Overview

We take the protection of your personal data seriously. This privacy policy explains what data we process when you visit our website and contact us, on what legal basis, and which rights you have under the General Data Protection Regulation (GDPR).

2. Controller

The controller responsible for data processing on this website is:

StackVera Core GmbH
Westendstraße 193
80686 München
Email: hello@stackvera.io

3. Data processed when visiting the website

When you access our website, the hosting provider's servers automatically collect and store information in server log files that your browser transmits. This includes the browser type, operating system, referrer URL, IP address and the time of the request. This data is processed on the basis of our legitimate interest in the secure and stable operation of the website (Art. 6 (1) (f) GDPR).

Hosting provider: DigitalOcean LLC, 105 Edgeview Drive, Suite 425, Broomfield, CO 80021, USA. The servers we use are located in a data center in Frankfurt am Main, Germany, so your data is stored within the European Union. Because DigitalOcean is a US-based company, access from a third country cannot be entirely excluded. This is safeguarded by a data processing agreement that includes the EU standard contractual clauses (Art. 28 and Art. 46 GDPR).

4. Cookies

Our website uses only technically necessary cookies required for its operation. These include a session cookie that maintains your session, a CSRF token cookie set by our framework to protect requests against cross-site request forgery, and a "locale" cookie that stores your preferred language. Where these cookies involve the processing of personal data, we rely on our legitimate interests in securely operating the website and providing its essential functionality pursuant to Article 6(1)(f) GDPR. These cookies do not require consent because they are necessary to provide the website and its requested functionality. We do not use analytics, advertising, or other tracking cookies.

5. Web fonts

To present our content consistently, this website uses web fonts (Satoshi and Montserrat) that are hosted locally on our own server. When pages are loaded, no connection is established to third-party providers such as Google Fonts or Fontshare, and no personal data (such as your IP address) is transmitted to third parties for this purpose.

6. Contact form

When you submit our contact form, we process the name, company (optional), email address and message you provide in order to handle your enquiry. We also send you a confirmation email to the address you provide. The legal basis is the performance of pre-contractual measures and our legitimate interest in responding to requests (Art. 6 (1) (b) and (f) GDPR). We retain enquiries for as long as necessary to process them and to comply with statutory retention obligations.

7. CRM system

We also transfer enquiries from the contact form into our CRM system so that we can handle them in a traceable way and document the further course of contact. This involves your name, your email address, the content of your message and the company you provided. If the "company" field is empty and your email address belongs to a corporate domain, we create a company entry based on that domain; for addresses from known freemail providers we do not. The CRM system is provided by Attio Limited, 42 St John’s Square, 2nd Floor, London EC1M 4EA, United Kingdom. The legal basis is the performance of pre-contractual measures and our legitimate interest in handling enquiries in an orderly manner and in maintaining business contacts (Art. 6 (1) (b) and (f) GDPR). We have a data processing agreement with Attio pursuant to Art. 28 GDPR. The European Commission has adopted an adequacy decision for the United Kingdom. Where Attio uses sub-processors in other third countries, the transfer is safeguarded by the EU standard contractual clauses (Art. 46 GDPR).

8. Appointment booking

We offer the option to book an appointment via a link to Google Calendar (Google Ireland Limited). When you click the link, you are forwarded to Google, and any data you enter there (such as your name, email address and chosen time) is processed by Google to arrange the appointment. This may involve a transfer to third countries such as the USA. The legal basis is the performance of pre-contractual measures and our legitimate interest in offering simple appointment scheduling (Art. 6 (1) (b) and (f) GDPR). Please refer to Google's privacy policy for details.

9. Your rights

Under the GDPR you have the right to:

• access your personal data (Art. 15 GDPR);
• rectification of inaccurate data (Art. 16 GDPR);
• erasure of your data (Art. 17 GDPR);
• restriction of processing (Art. 18 GDPR);
• data portability (Art. 20 GDPR);
• object to processing (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement.

10. Contact for data protection enquiries

To exercise your rights or for any questions about data protection, contact us at hello@stackvera.io.