Privacy policy

Controller

StableScore AI GbR

Schelklystr. 80, 69126 Heidelberg (Rohrbach), Deutschland

contact@stablescore.ai

Processing on this website

When you visit, the hosting provider processes technically necessary connection and log data to deliver the website securely. When you submit an analysis request, we process your contact, company and request details to respond.

Purposes and legal bases

Technical delivery and security of the website are based on our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). We process the details you enter in the request form to handle your request and to take pre-contractual steps (Art. 6(1)(b) GDPR). Spam protection for the form is based on our legitimate interest in preventing automated and abusive submissions (Art. 6(1)(f) GDPR). Optional usage analytics takes place only with your consent (Art. 6(1)(a) GDPR; Section 25(1) TDDDG); storing your cookie choice is strictly necessary (Section 25(2) no. 2 TDDDG).

Providing the details in the request form is neither a legal nor a contractual requirement. Without the required fields, however, we cannot handle your request. No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

Recipients and transfers

We use Web3Forms to deliver analysis requests. Your form details, including the time of consent, where applicable, information on the origin of the request, the version of this privacy policy and the selected solution or use case, are transferred to Web3Forms and forwarded to us by email.

To prevent spam, we load hCaptcha by Intuition Machines, Inc. (USA) once you start filling in the request form; hCaptcha is not loaded before that. hCaptcha checks whether an entry comes from a human and processes, among other things, the IP address, browser and device information and interaction data; cookies or similar technologies may be used for this purpose.

When these services are used, personal data may be transferred to third countries, in particular the USA. Such transfers take place only with a valid legal basis and appropriate safeguards (Art. 44 et seq. GDPR).

Origin of your request

Only if you have consented to usage analytics do we remember for the duration of the session which channel you came from (campaign parameters of the link address, entry page, name of the referring website) and transmit this information when you submit an analysis request. The purpose is to measure our marketing channels. The legal basis is your consent (Art. 6(1)(a) GDPR; Section 25(1) TDDDG), which you can withdraw at any time via "Cookie settings" in the footer. Without consent nothing is stored or transmitted.

The information is held in your browser's session storage: stablescore-attribution-v2 (channel details), stablescore-navigation-v1 (last internal link clicked, for usage analytics) and stablescore-journey-started-v1 (session marker). These are deleted at the end of the session or on withdrawal. On our side, the channel details transmitted to us are retained for as long as your other request data (see "Retention"); after a withdrawal we delete them on a short message to contact@stablescore.ai. Your selection in the optional field "How did you hear about us?" is part of your form details and is processed like them.

Retention

Request data is deleted once it is no longer needed and no statutory retention duty applies. Technical logs are retained only as long as required for security and operation.

Cookies and usage analytics

We store your cookie banner choice in your browser's local storage (stablescore-cookie-consent-v1). This storage is strictly necessary (Section 25(2) no. 2 TDDDG). Without your consent we do not set any other cookies for analytics purposes; for hCaptcha see "Recipients and transfers".

Only with your consent do we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to measure how our website is used (e.g. pages viewed, source of the visit, use of the request form). This processes device and browser information, an approximate location and randomly generated identifiers; form content, names and email addresses are not sent to Google; exceptions are the solution or use-case context chosen via the link and, when you submit a request, your selection for "How did you hear about us?" as a predefined category code (e.g. linkedin_post). Google signals and advertising features are disabled. The cookies _ga and _ga_4JQF6E4CE2 are set (up to 2 years). Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). Event data is deleted after 2 months. The legal basis is your consent (Art. 6(1)(a) GDPR; Section 25(1) TDDDG), which you can withdraw at any time via "Cookie settings" in the footer.

Your rights

Subject to the legal conditions, you have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

Right to object: Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21(1) GDPR). An informal message to contact@stablescore.ai is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI).

Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. hCaptcha is used to identify automated and abusive form submissions.