1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
STAIDIUM GmbH
Industriestr. 32F
53359 Rheinbach, Germany
Represented by the Managing Director Peter Lauterbach
Email: info@staidium.org
2. Hosting and Server Log Files
This website runs on a cloud server operated by us at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, located in the Nuremberg data centre (Germany). We have concluded a data processing agreement with Hetzner pursuant to Art. 28 GDPR.
When you visit this website, our server automatically stores the following information in server log files:
- IP address, in shortened form only (for IPv4 addresses the last byte is removed, for IPv6 addresses only the first 48 bits are stored)
- Date and time of the request
- Requested page or file and HTTP status code
- Amount of data transferred
- Referrer URL (the previously visited page)
- Browser type, version and operating system
This data is processed to ensure the secure and stable operation of the website. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the technically error-free and secure provision of the website). The log files are deleted automatically after 7 days. If a technical error occurs, the server's error log may contain the full IP address; it is also deleted after 7 days.
3. Contact Form and Email
If you contact us via the contact form, the information you provide (first name, last name, email address, message and, optionally, company and phone number; the message is optional when requesting a demo link) is transmitted in encrypted form to our server and from there sent as an email via Microsoft 365 to our mailbox info@staidium.org. The same mailbox receives your message if you email us directly. We do not share this data with third parties unless we are legally obliged to do so.
We process your email address and the information contained in your message in order to handle your request. If you request a demo link, we use your email address to reply to your request regarding our demo videos. Emails are sent, received and stored via Microsoft 365, provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, with whom we have concluded a data processing agreement pursuant to Art. 28 GDPR. Processing in the United States cannot be ruled out; it is based on the EU-U.S. Data Privacy Framework, under which Microsoft Corporation is certified, and on the EU Standard Contractual Clauses. Legal basis: Art. 6 (1) (b) GDPR if your request relates to a contract or pre-contractual measures, otherwise Art. 6 (1) (f) GDPR. The data is deleted once your request has been fully processed, unless statutory retention obligations apply.
4. Protected Partner Area
Some pages are only accessible to partners after signing in with a username and password. When you sign in, we set a technically necessary session cookie (staidium_securitas) that is deleted when you close your browser. To protect against misuse, failed sign-in attempts are logged together with your IP address in the server's error log, which is deleted after 7 days. Legal basis: § 25 (2) no. 2 TDDDG for the cookie and Art. 6 (1) (f) GDPR (legitimate interest in secure access protection).
5. Cookies, Analytics and Third-Party Content
Apart from the session cookie of the partner area, this website does not set any cookies, does not use any analytics or tracking services and does not load content from third parties. Images and fonts are delivered from our own server.
6. Links to Other Websites
This website links to other STAIDIUM websites, for example benarena.staidium.org and technologies.staidium.org. Data is only transmitted to the respective website when you click such a link; the privacy policy of that website then applies.
7. Your Rights
Under the GDPR, you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), as well as the right to withdraw any consent given with effect for the future (Art. 7 (3)). To exercise your rights, please contact info@staidium.org.
Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.
Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
Last updated: November 2026