Privacy & data protection.

Data controller

What data we process

When you visit the website

• IP address (truncated after 24 hours)
• Request timestamp
• Referrer and User-Agent

When you order a module

• Name, business email, phone number
• Billing details: company name, tax ID, billing address
• Payment token from Stripe — we never see card numbers
• SiteMinder OAuth token, stored encrypted at rest

During operation

• Reservation metadata read from your SiteMinder property under scope
• Aggregated usage statistics

Data subject rights

• Access (Art. 15)
• Rectification (Art. 16)
• Erasure (Art. 17)
• Restriction (Art. 18)
• Portability (Art. 20)
• Objection (Art. 21)
• Complaint to the competent supervisory authority

Supervisory authority

Note: Non-EU customers are protected under equivalent principles and the Montenegro Personal Data Protection Act.

Hosting and processors

• Primary: Hetzner Online GmbH — Frankfurt am Main
• Failover: OVHcloud SAS — Warsaw
• Payments: Stripe Payments Europe Ltd (Dublin)
• Email delivery: Mailjet SAS (Paris)

No transfer to third countries outside the EU/EEA. Standard Data Processing Agreement on request.

Data Protection Officer