Privacy Policy
Staiso LLC · staiso.com
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is Staiso LLC, 3833 Powerline Rd, Suite 201, Fort Lauderdale, FL 33309, USA, represented by Oliver Bothe (Managing Member). Contact for all privacy matters: [email protected].
Staiso LLC is a US-based company offering services in the German-speaking market; the GDPR applies pursuant to Art. 3(2) GDPR. The website itself is operated on servers located in Germany.
2. The essentials first
This website sets no cookies, uses no analytics or tracking services, embeds no third-party content and loads no fonts from external servers. All fonts are hosted locally on our server - in particular, no connection to Google Fonts is established. We process personal data only where technically necessary to operate the site, or where you provide it yourself via the contact form or by email.
3. Hosting
The website is operated on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (data centre located in Germany). When you visit the site, the server processes technically necessary data: IP address, date and time of access, page requested, browser type and version, and referrer URL (server logs).
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and stable operation of the website. Log data is stored only for as long as necessary for these purposes and is not merged with other data sources. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner Online GmbH.
4. Cloudflare (content delivery network and DNS)
We use Cloudflare, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare operates as a reverse proxy between your browser and our server, providing DNS, caching, TLS encryption and protection against attacks (e.g. DDoS). In doing so, Cloudflare processes technically necessary connection data, in particular your IP address and technical characteristics of the request.
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the security, stability and delivery speed of the website. A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare. Data may be transferred to the USA; Cloudflare is certified under the EU-U.S. Data Privacy Framework, supplemented by the EU Commission's Standard Contractual Clauses (Art. 46 GDPR). Further information: cloudflare.com/privacypolicy.
5. Contact form
If you use our contact form, we process the data you enter: name, email address, your message and optionally your company; in addition, the selected language version and the page from which you submitted the form are transmitted. This data is processed and stored exclusively on our own systems operated in Germany (self-hosted automation platform and database); it is not shared with third parties.
The legal basis is Art. 6(1)(b) GDPR (handling your enquiry or pre-contractual measures). We store the data for as long as necessary to handle your enquiry and any subsequent business relationship; statutory retention obligations remain unaffected.
6. Contact by email
If you contact us by email at [email protected], we process your email address and the content of your message in order to handle your enquiry (Art. 6(1)(b) GDPR). Deletion follows section 5 accordingly.
7. Local storage in your browser (no tracking)
The calculator offered on the homepage stores your inputs and the result exclusively in your own browser (localStorage/sessionStorage) so that the result can be shown again on a return visit and in the "Start the diagnosis" section. This data never leaves your browser, is not transmitted to us or to third parties, and contains no identifiers relating to you as a person. The storage is necessary for the function you requested (§ 25(2) no. 2 of the German TTDSG); you can delete it at any time via your browser's site-data settings.
8. Fonts and external content
All fonts (Archivo, IBM Plex Mono, Instrument Serif) are served locally from our own server. No Google Fonts are used and no connections to third-party font or script servers are established. The website embeds no external content (videos, maps, social media elements).
9. TLS encryption
For security reasons, this site uses TLS encryption (recognisable by "https://" and the lock symbol in your browser). Data you transmit to us - for instance via the contact form - cannot be read by third parties in transit.
10. Your rights
Under the GDPR you have the following rights:
- access to the personal data processed (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR).
An informal email to [email protected] is sufficient to exercise these rights. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for instance the authority of your habitual residence.
11. Currency of this policy
Version: 3 July 2026. This policy replaces all earlier versions. We will update it whenever the data processing on this website changes.