Privacy policy
This translation is provided for convenience only. Only the German version is legally binding.
Controller
Surfaced GmbHGeschäftsführer: Leopold ZehethoferGesellschafter: TOE INVEST GmbHEuropaplatz 53100 St. PöltenÖsterreichEmail: kontakt@surfaced.at
What data we process
When filling out the contact or order forms, you send us your name, company name, website URL and email address. This data is used exclusively to process your request and is not passed on to third parties.
Legal basis
Processing is based on Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in answering requests).
Retention period
Contact requests are deleted after processing is complete, unless legal retention obligations apply.
Hosting
This website is hosted on servers of Vercel Inc. (USA). Vercel is certified under the EU-US Data Privacy Framework.
Email delivery
Form entries are sent as transactional emails via Resend (Resend Inc., USA). Resend processes name, company and email address solely to send the confirmation and notification email.
Payment processing
Purchases are handled via Stripe (Stripe Payments Europe, Ltd., Ireland). Payment data (card number, IBAN etc.) is processed exclusively by Stripe and does not reach our servers. Stripe is PCI-DSS certified.
Use of AI systems
No chatbot and no AI system processing your input runs on this website: form entries are sent to us by email, not to an AI model. For our services we use artificial intelligence deliberately: we ask AI systems (including ChatGPT/OpenAI, Perplexity, Google AI, Claude/Anthropic) test questions from our clients' markets and evaluate the answers. In doing so we process publicly available company information only, no personal data from contact requests. In addition, our own tool Surfaced Analytics measures which source — in particular which AI system — visitors arrive from; the analysis happens at source and company level and does not serve to identify individuals. No automated decision-making within the meaning of Art. 22 GDPR takes place: every assessment that reaches a client is reviewed by a human. Which AI systems we use and what for is documented in full in our AI policy (surfaced.at/en/ki-richtlinie).
Your rights
You have the right to access, rectification, erasure, restriction of processing and data portability. You also have the right to lodge a complaint with the Austrian data protection authority (dsb.gv.at).
Status: July 2026 · Surfaced · https://surfaced.at