What we process and why.

Controller

R&R Holding UG (haftungsbeschränkt), Emeranstraße 23, 85622 Feldkirchen, Germany. Email: privacy@staedy.com (alternate: mail@staedy.com).

We have not appointed a Data Protection Officer; this site processes no personal data beyond what is necessary to operate it.

When you visit staedy.com

• IP address. Recorded in our web-server access logs. Purpose: detect and prevent abuse; ensure availability. Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Retention: 30 days, then deleted.
• Web fonts. Loaded from fonts.bunny.net (BunnyWay d.o.o., Slovenia, EU). Bunny.net receives your IP address as a technical necessity of delivering the fonts. Legal basis: Art. 6(1)(f) GDPR.

What we do not use

• Cookies. The site sets zero cookies, first- or third-party.
• Analytics. No Google Analytics, Plausible, Fathom, or any equivalent.
• Tracking pixels, fingerprinting, or session recording.
• Newsletter signup or any data-collection form on this page.

Hosting

The site is hosted on a virtual server operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Server location: Falkenstein/Nuremberg, Germany. Hetzner privacy policy: hetzner.com/legal/privacy-policy.

Email correspondence and call booking

If you write to mail@staedy.com or book a call via cal.com/rouxdutoit, the content of that correspondence is processed to respond to your inquiry.

• Email. Received via our self-hosted mail server on the Hetzner VM in Germany. Replies are sent via Brevo (Sendinblue SAS, Paris, France) under their Data Processing Agreement. Retained as long as needed to respond and document the inquiry; typically deleted after 6 months unless it concerns an active customer relationship.
• Call booking. Cal.com is operated by Cal.com, Inc. (US). When you book, your name and email are transferred to the US under standard contractual clauses. Cal.com privacy policy: cal.com/privacy.

Your rights under GDPR

You have the right to:

• Access your personal data (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Object to processing based on legitimate interest (Art. 21)
• Withdraw consent at any time (Art. 7(3); no consent currently relied upon)
• Lodge a complaint with a supervisory authority (Art. 77). Competent authority for our establishment: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.

To exercise any of these rights, email privacy@staedy.com. We respond within one month.

Changes to this policy

We may update this policy as the product evolves or as regulators issue new guidance. Material changes will be noted by an updated revision date below.

Last updated

26 May 2026.