Legal
Privacy Policy
Last updated: June 2026
Controller
The controller within the meaning of the GDPR is:
Floorstack GbRDachauer Str. 90
80335 München
Germany
Email: contact@floorstack.ai
Data Protection Officer
We are not legally required to appoint a Data Protection Officer (Sec. 38 BDSG). Please direct any data protection enquiries to the email address listed under section 1.
Scope
Floorstack operates a purely informational marketing website for a B2B SaaS product. We do not actively collect personal data from you unless you contact us on your own initiative. Any processing beyond this happens only within the limited operations described below.
Hosting and provision of the website
Our website is hosted by:
Vercel Inc.340 S Lemon Ave #4133
Walnut, CA 91789, USA
Vercel processes the data technically required to provide the website on our behalf. We have entered into a Data Processing Addendum with Vercel under Art. 28 GDPR (Vercel Data Processing Addendum). Vercel is certified under the EU-U.S. Data Privacy Framework, which the European Commission recognises as providing an adequate level of data protection under Art. 45 GDPR for transfers to the United States. Server-side processing is primarily performed in the EU region Frankfurt (fra1). Static assets may be served globally through Vercel’s content delivery network.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in providing a fast, secure and reliable website).
Server log files
Each time our website is accessed, Vercel automatically records: IP address, date and time of access, requested URL, transferred data volume, HTTP status code, user agent (browser and operating system) and referrer URL (if transmitted).
These data are processed solely to ensure stable operation, to detect and mitigate attacks and to analyse errors. They are not merged with other data sources and not used to identify individuals beyond what is strictly necessary. Logs are retained for a maximum of 30 days and then automatically deleted or anonymised.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in IT security and operational stability).
Cookies and similar technologies
We use only strictly necessary cookies. No consent is required under Sec. 25 (2) No. 2 TTDSG.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| NEXT_LOCALE | Floorstack | Stores the language chosen by the user. | 1 year |
| __vercel_* | Vercel | Edge routing, security, load balancing. | Session / 30 days |
We do not use marketing, advertising or analytics cookies.
Fonts (next/font)
We use the next/font feature of the Next.js framework, which downloads font files at build time and serves them as static assets from our own origin. As a result, your browser does NOT establish any connection to Google or any other third-party font provider when visiting our website; in particular no IP addresses are transmitted to Google.
Contact by email
If you contact us by email (e.g. via mailto links on our website), the information you provide (email address, name, message content and any other information you choose to share) is processed solely to handle your enquiry and any related follow-up.
Legal basis: Art. 6 (1) (b) GDPR if your enquiry relates to a (prospective) contract, otherwise Art. 6 (1) (f) GDPR (legitimate interest in responding to enquiries).
Data are deleted as soon as they are no longer necessary, subject to any statutory retention obligations.
Processors and recipients
| Provider | Purpose | Location | Safeguards |
|---|---|---|---|
| Vercel Inc. | Hosting, CDN, edge | USA | DPA, EU-U.S. DPF |
We do not share personal data with any other recipients. International transfers take place only to the provider listed above, under the safeguards described.
Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21).
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
Automated decision-making
We do not carry out any automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
Updates
We may update this Privacy Policy from time to time to reflect changes in our website or applicable law. The latest version is always available at floorstack.ai/privacy.