Privacy

Last updated

This policy explains which personal data this website processes, why, and which rights you have. It does not cover the Stedia app: how the app handles workspace data is described under Security and privacy in the docs.

Who is responsible

Stedia
Innsbruck, Austria
info@stedia.ai

Visiting this site

Unless you accept in the cookie bar, a visit sets no cookies and sends no measurements. The site runs no ads or tracking pixels. Scripts, fonts and images come from this site's own address. When you send the demo form, the spam check fetches its script from Vercel through that address.

Our hosting provider Vercel delivers every page. To do that it processes your IP address, the page you open, the time, your browser's user agent and the page you came from. Vercel uses this only to deliver the site and protect it from attacks, and deletes these logs after 7 days.

Legal basis Art. 6(1)(f) GDPR. Our legitimate interest is a site that loads reliably and stays secure.

Load speed

Only if you accept in the cookie bar, Vercel Speed Insights measures how fast pages load for real visitors. It records the page, load times, browser, operating system, device type and country. It sets no cookie. The measurements go to this site's own address and from there to Vercel.

Legal basis Art. 6(1)(a) GDPR and § 165 (3) TKG 2021, your consent. You can withdraw it at any time under “Cookie settings” in the footer; measurements already sent stay lawful.

Visitor statistics

Only if you accept in the cookie bar, Vercel Web Analytics counts page views, so we can see which pages people read and where they came from. It records the page, the referring site, country, browser, operating system and device type. It sets no cookie and stores no IP address.

Instead of a cookie, Vercel tells visits apart by a hash of the request and discards it after 24 hours. The statistics we see contain no IP address and cannot be linked to a person. They go to this site's own address and from there to Vercel, and stay available to us for 12 months.

When you send the demo form, our server also counts that a request arrived, with the company size, industry and, if given, how you heard about us. This count reads nothing from your device. Your name, email address and message are not part of it.

Legal basis Page views: Art. 6(1)(a) GDPR and § 165 (3) TKG 2021, your consent, which you can withdraw at any time under “Cookie settings” in the footer. The count of demo requests: Art. 6(1)(f) GDPR, our legitimate interest in knowing which visitors ask for a demo.

Error reports

If a page fails on our server, the server sends an error report to Sentry: what went wrong, the page address, browser and operating system. If you accepted in the cookie bar, your browser reports its own errors too, and for about one page view in ten also load timings. Reports carry no IP address, no name and nothing you typed into the form.

Reports from your browser travel through this site's own address. Sentry stores them in its EU region in Frankfurt and deletes them after 90 days at the latest.

Legal basis Reports from our server: Art. 6(1)(f) GDPR, our legitimate interest in finding and fixing faults. Reports from your browser: Art. 6(1)(a) GDPR and § 165 (3) TKG 2021, your consent.

Demo requests

The demo form asks for your name, work email, company, company size and industry, plus how you heard about us and a message if you want to add them, and the language of the page so we can reply in it.

Our email provider Resend delivers the request to our team mailbox, which runs on Google Workspace. We use it only to answer you and arrange the call.

Without the required fields we cannot answer. How you heard about us and the message are optional. We delete the request once it is handled, at the latest 12 months after it arrives, unless it leads to a customer relationship.

Legal basis Art. 6(1)(b) GDPR, steps taken at your request before a contract.

Spam protection

When you send the form, Vercel BotID checks technical traits of your browser and the request to tell a person from a program. There is no puzzle to solve, and we use the result for nothing else. If BotID mistakes you for a program, the form shows our email address so you can write to us directly.

Legal basis Art. 6(1)(f) GDPR. Our legitimate interest is keeping automated spam out.

Cookies and storage

Two things can be stored on your device, each only when you ask for it:

  • lang, a cookie. Set when you open a link that picks a language, such as one ending in ?lang=de. It keeps that language for one year.
  • stedia-consent in your browser's local storage. Your answer in the cookie bar, so the bar does not ask again. It stays until you change it under “Cookie settings” or clear this site's data.

Both serve something you chose, so they need no consent (§ 165 (3) TKG 2021).

Service providers

These providers process data for us under a data processing agreement and only on our instructions.

ProviderPurposeBased in
Vercel Inc.Hosting, load speed, visitor statistics, spam protectionUSA
Functional Software Inc. (Sentry)Error reports, stored in the EUUSA
Resend Inc.Delivering demo requestsUSA
Google Ireland Ltd.Team mailbox (Google Workspace)Ireland

Vercel, Sentry and Resend are US companies, and Google may process data in the US. Where data reaches the US, the transfer rests on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.

Your rights

You can ask for access to your data, its correction or deletion, restricted processing, and a copy in a portable format. Where we rely on legitimate interest, you can object at any time. Write to info@stedia.ai.

You can also complain to a data protection authority. In Austria that is the Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, dsb.gv.at.

We make no automated decisions about you with legal or similarly significant effect.

Changes

We update this policy when the site changes. The date at the top shows the current version.