Floorstack

Legal

Privacy Policy

Last updated: June 2026

01

Controller

The controller within the meaning of the GDPR is:

Floorstack GbR
Dachauer Str. 90
80335 München
Germany
Email: contact@floorstack.ai
02

Data Protection Officer

We are not legally required to appoint a Data Protection Officer (Sec. 38 BDSG). Please direct any data protection enquiries to the email address listed under section 1.

03

Scope

Floorstack operates a purely informational marketing website for a B2B SaaS product. We do not actively collect personal data from you unless you contact us on your own initiative. Any processing beyond this happens only within the limited operations described below.

04

Hosting and provision of the website

Our website is hosted by:

Vercel Inc.
340 S Lemon Ave #4133
Walnut, CA 91789, USA

Vercel processes the data technically required to provide the website on our behalf. We have entered into a Data Processing Addendum with Vercel under Art. 28 GDPR (Vercel Data Processing Addendum). Vercel is certified under the EU-U.S. Data Privacy Framework, which the European Commission recognises as providing an adequate level of data protection under Art. 45 GDPR for transfers to the United States. Server-side processing is primarily performed in the EU region Frankfurt (fra1). Static assets may be served globally through Vercel’s content delivery network.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in providing a fast, secure and reliable website).

05

Server log files

Each time our website is accessed, Vercel automatically records: IP address, date and time of access, requested URL, transferred data volume, HTTP status code, user agent (browser and operating system) and referrer URL (if transmitted).

These data are processed solely to ensure stable operation, to detect and mitigate attacks and to analyse errors. They are not merged with other data sources and not used to identify individuals beyond what is strictly necessary. Logs are retained for a maximum of 30 days and then automatically deleted or anonymised.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in IT security and operational stability).

06

Cookies and similar technologies

We use only strictly necessary cookies. No consent is required under Sec. 25 (2) No. 2 TTDSG.

NameProviderPurposeDuration
NEXT_LOCALEFloorstackStores the language chosen by the user.1 year
__vercel_*VercelEdge routing, security, load balancing.Session / 30 days

We do not use marketing, advertising or analytics cookies.

07

Fonts (next/font)

We use the next/font feature of the Next.js framework, which downloads font files at build time and serves them as static assets from our own origin. As a result, your browser does NOT establish any connection to Google or any other third-party font provider when visiting our website; in particular no IP addresses are transmitted to Google.

08

Contact by email

If you contact us by email (e.g. via mailto links on our website), the information you provide (email address, name, message content and any other information you choose to share) is processed solely to handle your enquiry and any related follow-up.

Legal basis: Art. 6 (1) (b) GDPR if your enquiry relates to a (prospective) contract, otherwise Art. 6 (1) (f) GDPR (legitimate interest in responding to enquiries).

Data are deleted as soon as they are no longer necessary, subject to any statutory retention obligations.

09

Processors and recipients

ProviderPurposeLocationSafeguards
Vercel Inc.Hosting, CDN, edgeUSADPA, EU-U.S. DPF

We do not share personal data with any other recipients. International transfers take place only to the provider listed above, under the safeguards described.

10

Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21).

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

11

Automated decision-making

We do not carry out any automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

12

Updates

We may update this Privacy Policy from time to time to reflect changes in our website or applicable law. The latest version is always available at floorstack.ai/privacy.