Privacy policy
Status of the legal review: 2026-09-09.
This is a translation for convenience. The German version of these terms is the legally binding one and is available as German version.
Controller
Scutoria
Stefan Dallinger
Kleinpoppen
3902 Vitis
Österreich
Email: kontakt@scutoria.com
What data we process
When you visit the site
The server processes the connection data that is technically necessary (IP address, time, page requested) in order to deliver the site and to prevent misuse. We do not set tracking cookies and do not embed any third-party services on our pages; the typeface, too, is stored on our own server. Two cookies without personal data: one remembers your choice of language, one protects our forms against requests from other sites and ends with the browser session. We count page views and order steps without any personal reference.
When you buy
For the order we store your email address, the time of your consent to the Terms and Conditions and to the waiver of the right of withdrawal, the amount, any tax, the country of the billing address, a payment reference and the times your access is used. The legal basis is the performance of the contract. Retention in accordance with the tax retention periods (Austria: seven years, status to be verified).
Payment
Payment is handled by Stripe (Stripe Payments Europe, Ltd., Dublin, Ireland; status to be verified). Stripe receives your payment data, billing address and email address and issues the invoice. Stripe's privacy policy applies. We have a data processing agreement with Stripe. Status to be verified.
We send access and confirmation emails through the provider Brevo (Sendinblue GmbH, Berlin, Germany; status to be verified). For this purpose Brevo receives your email address and the content of the message. Data processing agreement: status to be verified.
Newsletter
If you subscribe to the newsletter, we store your email address, the time of your subscription, the page you subscribed from, and the time of your confirmation. We first send a confirmation email (double opt-in); without your confirmation we delete the address after three days. The legal basis is your consent. You can unsubscribe using the link in every message; we then delete the address entirely. We do not measure whether you opened a message or clicked a link.
Tools on this site
The free tools, such as the needs check, evaluate your entries only in order to display the result. Without an account we store neither your answers nor the result; all that is counted is that a run took place, with no link to a person. Only if you choose “Save result” in your account does the result stay there (see below).
Notification list
If you submit a notification request, we store your email address and send a confirmation email (double opt-in). Only after your confirmation do we use the address to send you a message once the guide is available. The legal basis is your consent. You can unsubscribe at any time using the link in every message; we then delete the address.
Account
If you create an account, we store your email address, the time of registration and of your last login. You log in with a link from your inbox; we store only checksums of the links and sessions, not the links themselves. A cookie keeps you logged in on your device for up to 30 days; logging out ends it immediately. The legal basis is performance of the contract or your request for the account. You can delete the account yourself at any time; we then delete everything stored with it.
Premium subscription
If you subscribe to Premium, we store the time of your consent to the terms and the withdrawal notice, the identifiers of your customer and subscription records at Stripe, the state of the subscription (active, cancelled, overdue, ended) and the end of the current term. Payment, invoices, payment method and cancellation run through Stripe and its customer portal (Stripe Payments Europe, Ltd., Dublin, Ireland; status to be verified); Stripe informs us of changes to the subscription. We send you an email at every change of state. The legal basis is performance of the contract. Payment data is retained for the statutory tax periods (Austria: seven years, status to be verified).
Saved results and premium tools
With Premium you can keep tool results in your account. We then store your cleaned answers, a one-word summary and the time, as well as what you enter yourself in the action plan, the evidence folder and the annual calendar (texts, dates, ticks). What you enter in the prompt builder does not leave your browser. These data serve only to display them in your account; we do not analyse them and do not pass them on. You can delete each entry individually, export everything as a file and delete everything with the account. After the subscription ends, the entries remain stored until you delete them or the account; they become visible again only with a running subscription. The legal basis is performance of the contract.
Hosting
The site runs on Render (Render Services, Inc., USA) with the server located in Frankfurt am Main, Germany. Render processes the connection data on our behalf. Data processing agreement and transfer to a third country: status to be verified.
Your rights
You have the right to access, rectification, erasure, restriction, data portability and objection, in so far as the statutory conditions are met, as well as the right to lodge a complaint with the data protection authority. Contact: kontakt@scutoria.com.