Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

STAIDIUM Deutschland GmbH
Industriestraße 32F
53359 Rheinbach
Germany
Represented by the Managing Director Peter Lauterbach
Email: info@staidium.org

2. General information

The protection of your personal data is important to us. We process personal data in accordance with the GDPR and the applicable data protection laws.

Personal data is any information relating to an identified or identifiable natural person.

3. Hosting and server log files

This website is hosted on a cloud server operated by us at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, in the Nuremberg data centre (Germany). A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.

When you visit the website, our server automatically stores the following information in so-called server log files:

• IP address, truncated only (the last byte is removed from IPv4 addresses; only the first 48 bits of IPv6 addresses are stored)
• date and time of the request
• requested page or file and HTTP status code
• amount of data transferred
• referrer URL (the previously visited page)
• browser type, version and operating system

This data is processed to ensure the secure and stable operation of the website. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in providing the website securely and without technical errors. The log files are deleted automatically after 7 days.

If a technical error occurs during a request, the server’s error log may contain the full IP address. It is used solely for troubleshooting and is also deleted automatically after 7 days.

4. Contact form and email

If you send us a request via the “Book a consultation” form, we transmit your details (type of request, name, club, email address, role in the club, preferred date and message) to our server in encrypted form. From there they are sent as an email via Microsoft 365 to our mailbox benarena@staidium.org. The same mailbox receives your message if you write to this address directly.

We use Microsoft 365 from Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, to send and store emails. A data processing agreement pursuant to Art. 28 GDPR is in place with Microsoft. Processing in the USA cannot be ruled out; it takes place on the basis of the EU-U.S. Data Privacy Framework, under which Microsoft Corporation is certified, and the EU Standard Contractual Clauses.

We process this data to handle your request. It is not passed on to third parties unless we are legally obliged to do so. The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract or pre-contractual measures, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering requests).

The data is deleted as soon as your request has been fully dealt with, unless statutory retention obligations apply.

5. Appointment booking

In the “Book a consultation” form, we display available slots from our Microsoft 365 calendar. To do so, our server only queries Microsoft for the times at which the calendar is busy; the content of other appointments is neither retrieved nor displayed.

If you book an appointment, we enter it in our calendar together with your details (name, club, email address, role in the club, message and selected slot) and send you a calendar invitation to the email address you provided. For online appointments, a Microsoft Teams meeting is created in the process. The calendar, invitation and Teams meeting are processed via Microsoft 365; the information in section 4 applies with regard to the provider, the data processing agreement and possible processing in the USA. Microsoft’s privacy notices additionally apply to participation in the Teams meeting.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures at your request). We delete the appointment data as soon as it is no longer required to handle your request and no statutory retention obligations apply.

This website does not set any cookies for appointment booking and does not embed any content from Microsoft directly.

6. Cookies, analytics and external content

This website does not set cookies, does not use analytics or tracking services and does not load content from third parties (e.g. fonts, videos or maps). Images are delivered from our own server; the system font installed on your device is used as the font.

7. Links to other websites

In the footer we link to our website staidium.org, and in the image credits to Pexels and Unsplash. Data is only transferred to the respective website when you click such a link; their privacy policies then apply.

8. Storage period

We store personal data only for as long as is necessary for the respective purpose or as required by statutory retention obligations.

9. Your rights

Under the GDPR you have the following rights:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR); the lawfulness of processing carried out before the withdrawal remains unaffected

To exercise these rights, contact info@staidium.org.

Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.

Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

10. Last updated

October 2026