Privacy

Controller

The controller for processing on etappe.ai is StoreData IP Ltd. Address and contact details are in the legal notice.

Delivery

The site is delivered through Cloudflare (Cloudflare, Inc.). Each request involves technically necessary data — IP address, time, requested address, browser identifier — to serve the page and protect it from attacks. The legal basis is Art. 6(1)(f) GDPR.

No cookies

The site sets no cookies. The language is part of the address (/de/ or /en/); if you open etappe.ai without one, you are forwarded according to your browser language. There is no tracking, no profiling and no advertising. Fonts and images are served from this server; no third-party content is loaded.

Counting page views

To see which pages are read and where visitors come from, the server counts every page view: the page requested, the language, the domain of the page you came from, campaign details from the link (utm parameters, referral code) and the country, derived from the IP address. We do not store the IP address itself, an identifier or browser data — individual visitors can neither be identified nor recognised again. Nothing is stored in your browser for this and no script is loaded.

Counting runs at Cloudflare (Workers Analytics Engine); Cloudflare deletes the values after three months. The legal basis is Art. 6(1)(f) GDPR — our interest is to improve the site and our advertising.

The application

If you use Etappe Flow or Etappe Book, we process the data in tickets, comments and documents on behalf of the respective customer. The data processing agreement applies.

Account and billing

When you register for Etappe, you give us your name, email address, company, address and VAT identification number. We process this data as controller to conclude and bill the contract (Art. 6(1)(b) GDPR) and to meet tax obligations (Art. 6(1)(c)).

If you arrived through a link with campaign details or from another site, the links on etappe.ai pass these details (source, medium, campaign, referral code) on to the registration. If you create a workspace, we store them there to see which channels lead to new customers (Art. 6(1)(f) GDPR).

If you arrived through an ad on Google or LinkedIn, the ad network adds a click identifier to the link (gclid, gbraid, wbraid or li_fat_id). The links on etappe.ai pass it on to the registration as well; etappe.ai itself neither counts nor stores it. If you create a workspace, we store the identifier there and delete it after 90 days.

With this identifier we report to the ad network that the click led to a workspace and whether it is used or paid for. We do not transmit your name, email address or any content. This shows us which ads lead to customers, so we do not pay for ads that bring nothing. Recipients are Google Ireland Limited and LinkedIn Ireland Unlimited Company; transfers to their parent companies in the USA are based on the EU-US Data Privacy Framework. The legal basis is Art. 6(1)(f) GDPR. You can object at any time; an email to the address in the legal notice is enough.

Billing and payment run through Stripe (Stripe Payments Europe, Ltd., Ireland). Stripe receives the company, address, email address, VAT identification number and payment details for this and checks the number with the competent register. We send emails through Mailgun in its EU region.

We keep invoices and accounting records for as long as tax law requires. Other account data is deleted when the contract ends and no retention period applies.

Your rights

You have the right to access, rectification, erasure, restriction of processing, objection and data portability. Write to the address in the legal notice. You can lodge a complaint with a data protection supervisory authority; in Cyprus, the Commissioner for Personal Data Protection.