Privacy policy
Last updated: July 2026
1. Controller
gedonus GbR
Europa-Allee 136
60486 Frankfurt am Main
Germany
Jointly represented by Luis Reindlmeier, Stefan Dirk Cames and Tim Niklas Sassmannshausen. We are not required to appoint a data protection officer.
2. Hosting and server log files
This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA, acting as our processor under a data processing agreement.
When you open a page, your browser necessarily transmits data that our host records in server log files: your IP address, the requested URL, the date and time of the request, the referrer URL, and your browser and operating system. We use this only to deliver the site and keep it secure and stable. The legal basis is Art. 6(1)(f) GDPR — our legitimate interest in operating a functioning, secure website. We do not merge this data with other sources and we do not use it to identify you.
3. Booking a demo (Cal.com)
There is no contact form on this site. The only way to reach us through the site is to book a slot on the Request a demo page, which embeds a booking calendar from Cal.com. We use Cal.com’s European instance (app.cal.eu).
The embed is loaded only on that page, not on the rest of the site. When it loads, your IP address and browser information are transmitted to Cal.com so the calendar can be delivered. If you then book, you provide your name, your email address, your time zone and any note you choose to add; Cal.com processes this to create the appointment and send the confirmation, and passes it to us.
Cal.com acts as our processor under a data processing agreement. The legal basis is Art. 6(1)(b) GDPR — steps taken at your request prior to entering into a contract. Loading the embed itself is technically necessary to provide the booking function you asked for on that page.
4. Contact by email
If you email us, we process your address and the content of your message in order to answer it. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual steps, and otherwise Art. 6(1)(f) GDPR — our legitimate interest in responding to enquiries.
5. No tracking, no analytics, no cookies
This website does not use analytics, tracking pixels, advertising networks or profiling of any kind, and we do not set cookies for those purposes. Our web fonts are served from our own infrastructure, so no font request ever reaches a third party.
6. Transfers outside the EU/EEA
Vercel Inc. is based in the United States, so hosting involves a transfer of personal data (in particular your IP address, in server logs) to a third country. The transfer is safeguarded by the EU standard contractual clauses concluded with Vercel, and Vercel is additionally certified under the EU–U.S. Data Privacy Framework.
7. Retention
Server log files are retained only as long as necessary for security and operation and are then deleted or anonymised. Booking and email enquiries are retained for as long as necessary to handle your request and to meet any statutory retention obligations, and are then deleted.
8. Your rights
Under the GDPR you have the right to:
- access your personal data (Art. 15)
- have inaccurate data rectified (Art. 16)
- have your data erased (Art. 17)
- restrict processing (Art. 18)
- receive your data in a portable format (Art. 20)
- object to processing based on our legitimate interest, on grounds relating to your particular situation (Art. 21)
- withdraw any consent you have given, with effect for the future (Art. 7(3))
To exercise any of these, write to info@gedonus.com.
9. Right to lodge a complaint
You have the right to complain to a supervisory authority (Art. 77 GDPR). The authority responsible for us is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden, Germany
datenschutz.hessen.de
10. Automated decision-making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
11. Changes
We update this policy when the website changes. The date at the top reflects the current version.