Privacy Policy

The controller within the meaning of the GDPR is:

For privacy enquiries and to exercise your rights, please contact us at the email address above.

This notice covers visits to our company website, enquiries and demo bookings. Use of our software is covered by its own privacy notices and the applicable pilot and data protection agreements. Agreements do not replace statutory privacy rights.

Our website is hosted by:

We use the Azure Static Web Apps service. Microsoft serves the website through a worldwide server network and processes connection and access data. Processing in the United States is possible. Microsoft explains its own processing purposes, recipients and retention criteria in its privacy statement. See section 10 for international transfers.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in providing a fast, secure and reliable website).

When you access our website, Microsoft processes technical access data, in particular: IP address, date and time of access, requested URL, transferred data volume, HTTP status code, user agent (browser and operating system) and referrer URL (if transmitted).

We use technical access data to deliver the website, investigate errors and prevent attacks. Retention depends on the period required for operation and security; a specific incident may require longer retention for investigation or legal claims. For data Microsoft processes for its own purposes, the retention criteria in its linked privacy notice apply. We do not use these data to create advertising profiles.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in IT security and operational stability).

Our website uses a cookie to remember your language selection. This supports the display you request (Sec. 25 (2) No. 2 TDDDG); processing is based on Art. 6 (1) (f) GDPR. Section 9 covers the optional Google calendar.

We do not integrate marketing or analytics services. Cookies of the optional Google calendar become relevant only when you activate it; the website and email contact remain available without the calendar.

Font files are served with our website. Your browser does not connect to Google Fonts to load them.

If you contact us by email (e.g. via mailto links on our website), the information you provide (email address, name, message content and any other information you choose to share) is processed to handle your enquiry and related follow-up. We use Google Workspace for email and calendar services (Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland).

Legal basis: Art. 6 (1) (b) GDPR where you are or intend to become a contracting party yourself; for company representatives and other enquiries, Art. 6 (1) (f) GDPR (our interest in business communication and responding to your enquiry).

We retain enquiries and appointment data for as long as needed to handle them and any resulting business relationship. They are then deleted unless statutory retention duties or the establishment, exercise or defence of legal claims require further retention. Contacting us is voluntary; without the information needed to respond or arrange a meeting, we cannot handle your enquiry.

For booking demo appointments we embed the appointment scheduling feature of Google Calendar (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The booking calendar loads only after you actively start it with a click (two click solution); no data is transferred to Google before that. Loading the calendar already sends Google technical data such as your IP address and browser information and may allow Google to use cookies or access existing Google cookies. If you book a slot, Google processes the data you enter (name, email address and any further details) plus technically required data (e.g. IP address) to arrange the appointment. The booked slot is added to our calendar. A transfer to the United States cannot be ruled out; Google LLC is certified under the EU-U.S. Data Privacy Framework.

Legal basis: Loading the embedded calendar and related access to your device rely on your consent (Art. 6 (1) (a) GDPR, Sec. 25 (1) TDDDG). The legal bases and retention criteria in section 8 apply to handling your booking. You can withdraw consent for the future using “Disable calendar”. This does not undo earlier transfers; the calendar is initially disabled on each new page visit. You can also contact us by email.

These providers may use affiliates and subprocessors, including outside the EU/EEA. Transfers to the EU-U.S. Data Privacy Framework certified US companies Microsoft Corporation and Google LLC rely on the European Commission’s adequacy decision (Art. 45 GDPR). For further transfers, the providers provide in particular for EU Standard Contractual Clauses (Art. 46 GDPR). Details of the applicable safeguards are available through the provider notices below and on request from us. Authorities or advisers subject to professional confidentiality may also receive data where legal duties or legal claims require this.

Microsoft Privacy Statement · Google Privacy Policy · Google: data transfers

Subject to the statutory conditions, you have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21).

Objection and withdrawal: You may object to processing based on legitimate interests on grounds relating to your particular situation, and to direct marketing at any time. You may withdraw consent at any time for the future without affecting the lawfulness of earlier processing. Contact kontakt@floorstack.ai to exercise these rights.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

We do not carry out any automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

We may update this Privacy Policy from time to time to reflect changes in our website or applicable law. The latest version is always available at floorstack.ai/privacy.