This policy explains how StegX GmbH processes personal data when you use the Securitixation website, send us an email or submit the enquiry form. It applies to this website only; a separately agreed engagement may involve additional notices.
Please do not send confidential transaction documents or sensitive personal or financial information through the website form.
01
Controller
StegX GmbH
Platz der Einheit 2
c/o Techquartier
60327 Frankfurt am Main
Germany
Email: team@stegx.finance
Telephone: +49 151 221 008 63
02
Data we process
When you visit the website
Our hosting and security providers may process technical connection data required to deliver and protect the website. This can include IP address, date and time, requested page, referring page, browser and device information, response status and security events.
When you submit an enquiry
We process the information you provide: your name, company or organisation, work email address, selected starting point and non-confidential opportunity overview. The form also records a technical start time and a hidden anti-spam field; these are used to detect automated misuse.
When you email us
We process your email address, message, technical email metadata and any information you choose to include so that we can respond and manage the correspondence.
We do not use this website to make solely automated decisions about you or to create marketing profiles.
03
Purposes and legal bases
Where processing relies on legitimate interests, we balance those interests against your rights and the context in which the data was provided. You may object as described below.
04
Recipients and international processing
Access within StegX GmbH is limited to people who need the information to operate the website, respond to the enquiry, assess a potential engagement or meet legal obligations. We may also disclose information to professional advisers, authorities or courts where this is necessary and legally permitted.
We use contracted categories of service providers for website hosting, security and email delivery. Form submissions are transmitted through Resend, a service of Plus Five Five, Inc., as our email-delivery processor and then delivered to the StegX team inbox.
Resend states that its primary processing operations take place in the United States. Its Data Processing Addendum incorporates the EU Standard Contractual Clauses and describes participation in the EU–U.S. Data Privacy Framework. See Resend’s GDPR information, Data Processing Addendum and subprocessor list.
If another provider processes personal data outside the European Economic Area, we use an applicable adequacy decision or appropriate safeguards such as the European Commission’s Standard Contractual Clauses, as required.
05
Retention
We keep enquiry and email correspondence only for as long as it is needed to respond, assess the potential engagement, manage reasonable follow-up and protect legal interests. We review inactive enquiries at least annually and delete or anonymise them when those purposes no longer apply.
Information may be retained for longer where a contract follows, where applicable law requires retention, or where it is necessary for the establishment, exercise or defence of legal claims. Technical access and security data is retained according to the limited operational and security cycles of the relevant provider. Processor copies are deleted or returned under the applicable processing agreement when the service relationship ends, subject to legal obligations.
06
Providing the data
Using the enquiry form is voluntary. The fields marked as required are needed so that we can identify the business context and respond. If you do not want to use the form, you can send a short, non-confidential email to team@stegx.finance. Please do not send sensitive data unless a secure channel and purpose have been agreed separately.
07
Your rights
Subject to the conditions in applicable law, you may request access to your personal data, correction, deletion, restriction of processing and data portability. You may object at any time to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation.
If processing is ever based on consent, you may withdraw that consent at any time for the future. Withdrawal does not affect processing that was lawful before withdrawal.
08
Privacy contact and complaints
To exercise a right or ask a privacy question, contact team@stegx.finance or write to StegX GmbH at the address above. We may need to verify your identity before acting on a request.
You also have the right to lodge a complaint with a supervisory authority. The authority responsible for private companies based in Hesse is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Wilhelmstraße 7
65185 Wiesbaden
Germany
Complaint information ↗
09
Updates
We may update this policy when the website, service providers or legal requirements change. The effective date at the top identifies the current version.