Legal information about Presio.
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Presio UG (haftungsbeschränkt)
Hohenzollernstr. 7
80801 München, Germany
represented by Christoph Gerhardt
Email: info@presio.eu
We process our users' personal data, as a rule, only to the extent necessary to provide a functional website as well as our content and services. The legal bases are in particular:
Website (presio.eu): This website is provided via GitHub Pages, a service of GitHub Inc. (88 Colin P. Kelly Jr. Street, San Francisco, USA; a Microsoft group company). Delivery takes place via a worldwide network of servers (content delivery network), so data may also be processed on servers in the USA. GitHub is certified under the EU-US Data Privacy Framework (adequacy decision under Art. 45 GDPR); EU standard contractual clauses also apply. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure and fast delivery of the website).
App (app.presio.eu) and forms: The data of the app, the demo form and the page counter is processed and stored by Supabase in a data center within the European Union (EU). Data processing agreements in accordance with Art. 28 GDPR are in place with the service providers we use.
When you visit the website, your browser automatically sends information to GitHub's servers (see section 3), where it is temporarily stored in so-called log files. The following may be recorded:
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free delivery and security of our website. We ourselves have no access to these log files; GitHub stores them for the security of the service and deletes them according to its own retention periods.
Our website does not use any tracking or marketing cookies for its operation. The app stores technically necessary information (e.g. for login/session) locally on your device; this is required for operation (Art. 6 (1) (b) and (f) GDPR or § 25 (2) TDDDG).
To see which pages are opened and which buttons are used, we record only the following information for each page view and each click on a link or button:
No IP addresses, no full browser identifiers, no form entries and no cookies are stored. It is therefore not possible to attribute data to individuals or to recognise anyone across several visits. Storage takes place with our processor on servers in the European Union. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in designing our offering to meet demand).
If you reach our website via a link with a source marker or via a search engine, we carry this source forward as a short code (e.g. “google”) in the links within the website, so that it can be sent along if you later sign up for the test environment (see section 9). Nothing is stored on your device for this.
A user account is required to use Presio. As part of time tracking, we process the data required for this, in particular:
Processing takes place to perform the usage contract (Art. 6 (1) (b) GDPR) and to fulfil legal obligations (Art. 6 (1) (c) GDPR, e.g. working-time documentation).
Insofar as Presio is used by an employer for its employees, that employer is the controller under data protection law for the employee data processed in the app; the provider acts in this respect as a data processor (see section 10).
With your consent, we send push notifications to your device (e.g. reminders to clock out, notices about requests and decisions). For technical delivery, the push services of the respective platform are used: Apple Push Notification service (APNs) for iOS and Firebase Cloud Messaging (FCM, Google) for Android. A device token is processed for this purpose. The legal basis is Art. 6(1)(a) GDPR; you can withdraw your consent at any time in the settings or via your device's system settings.
If you contact us by email, we process the data you provide in order to handle your request. The legal basis is Art. 6 (1) (b) or (f) GDPR.
Demo form: If you request a personal demo on the "Live demo" page, we store your details (email address, name, optionally company, phone, number of employees, industry and message) together with the language of the page, the page you send from, the time, your IP address and the browser identifier (user agent). The IP address and browser identifier serve only to protect against abuse and automated requests. The details are stored in our database in the EU (Supabase, see section 3) and forwarded by email to our sales team (sent via Resend, Resend Inc., San Francisco, USA, on the basis of the EU standard contractual clauses). The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures at your request) and, for the IP address and browser identifier, Art. 6(1)(f) GDPR. We delete demo requests after 12 months unless they lead to a contract.
Free test environment: If you request a test environment in the app, we process your details (salutation, first and last name, email address, company name and, optionally, country, phone number and industry) together with the language, the time and your IP address. We also store how you found us: any source marker from the link (e.g. from an advert or a QR code), the referring website (e.g. a search engine) and the page of our website from which you clicked “Try it free”. We use this information to set up the test environment, to send you your login details by email (sent via Resend, see above) and to inform ourselves internally about the new sign-up. The IP address serves to protect against misuse and automated sign-ups; the source information serves to analyze the channels through which interested parties find us. The information is stored in our database in the EU (Supabase, see section 3). The legal basis is Art. 6(1)(b) GDPR (carrying out the trial use at your request) and, for the IP address and source information, Art. 6(1)(f) GDPR.
Website assistant (AI chat): On this website we offer an AI-powered chat assistant that answers questions about the Presio product. Your chat inputs are transmitted via an interface operated by us (Edge Function, data centre in the EU) to Anthropic PBC (San Francisco, USA) and processed there with the AI model Claude to generate the answer. Anthropic processes the content as a processor and does not use it to train its models. This involves a transfer of data to the USA; the legal basis is the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
We process the messages you enter and - to limit abuse and costs (rate limiting) - your IP address. Please do not enter any confidential data in the chat. The conversation history is not stored on the server; it remains only temporarily in your browser's session storage (sessionStorage) and is deleted when you close the tab. No cookies are set.
Contact requests and feature requests in the chat: If you request a demo, a quote or a call-back in the chat and provide your name, your company, your email address or phone number for this purpose, we store this information together with your message in order to contact you. It is forwarded by email to our sales team (sent via Resend, Resend Inc., San Francisco, USA, on the basis of the EU Standard Contractual Clauses) and transferred to our customer management system. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures at your request). If you express a wish for a feature in the chat, we store the request with the text of your message in order to develop Presio further (Art. 6(1)(f) GDPR). We delete contact requests after 12 months unless a contract results from them; for feature requests, we remove the message text after 24 months.
The legal basis for the chat itself is Art. 6(1)(f) GDPR (legitimate interest in simple product information); use of the chat is voluntary.
AI features in the app (shift planning): In Presio, an AI supports shift planning - it creates schedule suggestions, understands requests in free text and answers questions in the chat. For this, we use Mistral AI (Mistral AI, Paris, France) as a processor. Processing takes place in the European Union (EU); no transfer to the USA occurs for these AI functions.
Only the data required for the respective function is transmitted - as a rule just first names along with shift and duty master data, no complete personal data and no clock-time profiles. The AI produces suggestions only; the decision on the schedule and its publication rests with authorized persons within the business. The legal basis is Art. 6(1)(b) GDPR (performance of the usage agreement); a data processing agreement under Art. 28 GDPR is in place with the provider.
To provide our services, we use carefully selected service providers. Where required, data processing agreements under Art. 28 GDPR are in place with them:
Data is transferred to third countries only on the basis of appropriate safeguards (EU standard contractual clauses or an adequacy decision).
We store personal data only for as long as is necessary for the respective purposes or as prescribed by statutory retention periods (e.g. commercial and tax obligations). The data is subsequently deleted or anonymised.
Under the GDPR, you have the following rights:
To exercise your rights, an informal message to the email address mentioned above is sufficient.
How to delete your Presio account - in the app, by email or through your employer - is explained on the page Delete account.
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data (Art. 77 GDPR), in particular in the Member State of your residence, place of work or the place of the alleged infringement.
We take technical and organisational measures to protect your data against manipulation, loss and unauthorised access (including encrypted transmission via TLS, role-based access rights). This privacy policy is updated as needed to take account of changes in the legal situation or changes to our services.
Sign up, create your team, get started - try Presio free and with no obligation, no credit card needed.
Start your free trial