Privacy

The controller under the GDPR is Rechnungseingang / Steadseek. Contact: hello@steadseek.com (TODO-FOUNDER: full contact details).

This page informs you under Art. 13 GDPR about the processing of personal data.

Purposes: account & authentication (Art. 6(1)(b) GDPR); receipt, validation and archiving of inbound invoices (Art. 6(1)(b)+(f) GDPR / § 147 AO — you are the controller, we are processor under Art. 28).

Email ingestion via Mailgun (EU) — currently planned, not yet active.

Hosting in the EU; CDN delivery via Cloudflare (EU data centres, see Subprocessor page).

Analytics only with your consent (consent banner), where active.

Account data is stored only as long as the purpose requires; invoices per the retention periods you set (8/10 years, legally required).

You have the right to access, rectification, erasure (Art. 17), restriction, data portability (Art. 20) as well as objection and withdrawal of consent.

Right to lodge a complaint with a supervisory authority.

A Data Processing Agreement (DPA) can be concluded; contact see Imprint.