Privacy policy

In short: Eudigo sets no cookies, uses no tracking and loads no third-party content. The server stores access logs with a shortened IP address for no more than 14 days to keep the service running and to produce anonymous usage figures.

1. Controller

NEOSTRATUM Technologies GmbH
Dromersheimer Chaussee 24b
55411 Bingen am Rhein
Germany
Represented by the managing director Marten Jung
Email: kontakt@neostratum.de

2. Visiting the website and server logs

Whenever a page, chart or file is requested (including charts embedded on other websites and downloads under /data/), our server processes: date and time, requested address, HTTP status, amount of data transferred, response time, the previously visited page (referrer), browser and operating system (user agent) and the IP address. The IP address is shortened before it is stored (IPv4: last block, IPv6: everything after the first 48 bits), so it can no longer be linked to a connection. The same applies to the API (api.eudigo.eu) and the MCP server (mcp.eudigo.eu); search terms in the address (e.g. ?q=) appear in the log like any address, but we do not store the content of requests to the MCP server (such as an AI assistant’s question).

Purpose: delivering the website, security (defending against attacks and overload) and anonymous usage statistics (e.g. page views, downloads, referrers, visits by search engines and AI crawlers). The statistics are computed daily from the logs and contain aggregated figures only. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a secure, stable service and understanding which content is used. Logs are deleted after 14 days.

There are no cookies, no analytics or advertising scripts, no social media plugins and no content from third-party servers; fonts are served from our own server.

3. Hosting

The website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in its Nuremberg data centre. Hetzner processes data on our behalf under a data processing agreement (Art. 28 GDPR).

4. Contact by email

If you write to us, we process your address and message in order to reply (Art. 6(1)(b) or (f) GDPR). Emails are hosted on our behalf by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. We delete the correspondence once it is settled, unless statutory retention obligations apply.

5. Data from public registers

For the EUDI Index, from 24 December 2026 we retrieve the public registers of wallet-relying parties of the EU member states every day (Implementing Regulation (EU) 2025/848) and store the responses unchanged. The registers mainly contain information on companies and public bodies. For sole traders they may include personal data such as name, contact details, identifiers and the registered data requests; the postal address is not included in the public interfaces.

Purpose: aggregated analyses and a traceable history (e.g. number of registrations per country and sector, types of data requested). We do not publish individual entries containing personal data and never use contact details from the registers for marketing. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is independently informing the public about the roll-out of the EUDI Wallet. Raw data are not stored in a publicly accessible way. Daily snapshots are kept for 400 days; after that, one snapshot per month is retained as history. You may object to the processing of your data (Art. 21 GDPR).

6. Use of AI

For research, writing and updates we use Claude, a service of Anthropic PBC (USA). We send publicly available sources and our own texts, but no data about visitors to this website and no register entries containing personal data.

7. Newsletter and waitlist

The newsletter and waitlist are not yet active. Before they launch, we will describe here which data we process for them and which service we use.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) (Art. 21). Please contact us at the address above. You may also lodge a complaint with a data protection supervisory authority; the authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (LfDI), Postfach 30 40, 55020 Mainz, Germany.

Last updated: 12 October 2026