Data Protection Statement/Information according to Art 13 and 14 GDPR
Controller:
Stratum1 GmbH
Schubertstraße 6a, 8010 Graz
T: +43 (0) 676 38 34 217
E: office@stratum1.io
Last updated: December 2025
We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website/platform and use our services and informs you of your rights under data protection law.
Personal data means any information relating to an identified or identifiable natural person (e.g. name, email address, IP address).
Processing means any operation performed on personal data, such as collection, storage, use, or disclosure.
It is important that the personal data you provide to us is accurate and up to date. Please notify us if your personal data changes during your relationship with us.
This Privacy Policy should be read together with our Terms and Conditions. Please note that the use of cookies and similar technologies is addressed separately under the Cookies section below.
We process your personal data only where permitted by law. For the purposes outlined below, we may collect and process the following information about you when you visit our website/platform and use any of our services.
Data collected directly from you may be done through our website/platform, use of our services, over the phone, email, or in person when you meet our staff or representative, when you report any problem(s) to us or request any support from us, or when you complete any survey or questionnaire that we send to you.Data may be also collected by automated means using various technologies on our website/platform and/or products and services. Such technologies may lead to data being collected automatically by us.
The main purposes and legal bases are:
| Purpose/Activity | Data Categories | Legal Basis |
|---|---|---|
| Customer account, registration, onboarding, training, authentication, verification | Name, addresses, company, password, phone number | Performance of a contract, legal obligation |
| Creation of an avatar | Personal features, avatar changes | Performance of a contract Consent |
| Subscription of services, newsletter | Name, email address | Consent |
| Contact requests / support | Name, email address, request/concern, phone number | Consent, performance of a contract |
| Payment processing | Payment information, name, email address, (no) discount code used | Performance of a contract, legal obligation |
| Notice & action procedure regarding illegal content or suspicion of criminal offences | Name, email address, notice details | Legal obligation |
| Ensuring operation, functionality, security and optimisation, improving and developing of our services | IP address, browser/device data, server log files, location data, language | Legitimate interest |
| Use of metaverse/virtual spaces | Name, email, user settings, unique ID, online user, in-space location, last movement/disconnect) audio/video, voice chat, text chat, telemetry, recordings, location data, shared content, spaces owned, spaces entered, space visits, gates used, logins, session sum, session average, total visits/ sign ups per day/week/month, space creation date, space modification date, first time visits, space visitors, space privacy level (access settings), follower, messages recorded, messages played, AI commands, referrer, embedded content, usage information (storage, AI, products, uploaded files, bug report, flag inappropriate content | Performance of a contract, consent |
| Compliance with retention and documentation obligations | Various, depending on legal provisions | Legal obligation |
| Job Applications |
If we need to use your personal data for any other purposes, we will notify you and obtain your consent beforehand. You will be given the opportunity to withhold or withdraw your consent for the use of your personal data for these other purposes.
If you send us your application documents, we process your personal data contained therein as well as your CV and references for the purpose of personnel selection and recruitment. In the event of a rejection, we will delete your documents 7 months after sending you the rejection.
If you consent to be kept on file with us for the purpose of contacting you later, we will approach you with a separate request for the transmission of a consent. If you explicitly give us this consent, we will store your consent. If there is no further opportunity to fill a position with us within one year, we will delete all your applicant data one year after you have given us your consent.
We will not sell your personal data to third parties. We will keep your personal data confidential.
Within Stratum1 GmbH, only employees and departments who require access to your data for the above purposes will receive it.
We may also share your personal data with:
Some recipients may be located outside the EU/EEA. In such cases, we ensure an adequate level of protection (e.g., through EU adequacy decisions or EU Standard Contractual Clauses).
When using our services, certain personal data (e.g. profile, shared content, user generated content, social accounts, audio/video in virtual spaces, follower, bookmarked spaces, etc.) may be visible to other users.
We store personal data only as long as necessary to fulfil the stated purposes and comply with legal obligations (e.g. under the Austrian Civil Code and Austrian Business Code). We will cease to retain your personal data, or remove the means by which the data can be associated with you, as soon as it is reasonable to assume that such retention no longer serves the purpose for which the personal data was collected, and is no longer necessary for stated purposes.
If you withdraw consent or object to processing, your personal data will be deleted unless further retention is required by law or for the establishment, exercise, or defence of legal claims. Data may also be anonymised instead of deleted.
All information you provide to us is stored on our secure servers. We apply appropriate technical and organisational measures to protect your personal data from loss, misuse, and unauthorised access.Where we have given you (or where you have chosen) a password that enables you to access certain parts of the website/platform, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
We restrict access to personal information to our employees, service providers, agents, representatives, and contractors on a strictly need-to-know basis and ensure that those persons are subject to contractual confidentiality obligations.
Please note, however, that the transmission of information via the Internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to us. Any transmission is at your own risk. We recommend that you change your passwords often, use a combination of letters and numbers, and ensure that you use a secure browser.
Our website automatically collects and stores information in server log files, including:
This data is processed on the basis of our legitimate interest in system stability, security, and optimisation.
For security reasons, our platform uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the lock icon in your browser.
Under GDPR, you have the right to:
You may lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40-42, 1030 Wien, Tel: +43 1 52 152-0, E: dsb@dsb.gv.at).
We do not use automated decision-making, including profiling, under Art. 22 GDPR.
We reserve the right to update this Privacy Policy in line with legal, technical, or business changes.
Our website/platform uses cookies, which helps us to provide you with a good experience when you use our website/platform and also allows us to improve our websites and platform.
Cookies are small text files stored on your device. They may be session-based (deleted after closing your browser) or persistent (stored until deleted or expired).
You can configure your browser to reject cookies, although this may affect website functionality. Optional cookies may be only used by us if you have agreed to their use in advance. – this may affect the use of the platform.
We use:
Google Analytics (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland)
Google Analytics uses cookies to collect information such as IP address, browser details, pages visited, and date/time of access. We use this information to analyse website use and improve our services. IP addresses are anonymised before storage. Data may be transferred to the US, where Google is subject to additional safeguards (e.g., EU Standard Contractual Clauses). More information: Google Privacy Policy.
Our own analytics software
We also operate in-house analytics to monitor usage of our platform. All data is stored exclusively within the EU and processed in pseudonymised or anonymised form where possible.
Our website/platform may integrate social media buttons or plug-ins (e.g., X, LinkedIn, Instagram, Facebook, Playcanvas.com, OpenAI.com, ReadyPlayer.me). If you activate such a plug-in, your data may be transmitted to the respective network operator.
We have no influence on the scope or further use of data by these networks. Please review the privacy policies of the respective providers before using such features.
We operate the following social media sites: LinkedIn, YouTube, Instagram, TikTok, X. When you visit our social media presence, personal data, including the IP address of the respective provider, is processed and cookies are used for data collection. For detailed information on the specific data transmitted, please refer to the privacy policy of each service. There you will also find information about contact options and various privacy settings.
Data Protection Statement/Information according to Art 13 and 14 GDPR
Controller:
Stratum1 GmbH
Schubertstraße 6a, 8010 Graz
T: +43 (0) 676 38 34 217
E: office@stratum1.io
Last updated: 21.08.2025
We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website/platform and informs you of your rights under data protection law.
Personal data means any information relating to an identified or identifiable natural person (e.g. name, email address, IP address).
Processing means any operation performed on personal data, such as collection, storage, use, or disclosure.
It is important that the personal data you provide to us is accurate and up to date. Please notify us if your personal data changes during your relationship with us.
This Privacy Policy should be read together with our Terms and Conditions. Please note that the use of cookies and similar technologies is addressed separately under the Cookies section below.
We process your personal data only where permitted by law. The main purposes and legal bases are:
| Purpose/Activity | Data Categories | Legal Basis |
|---|---|---|
| Customer account, registration, onboarding, training, authentication, verification | Name, addresses, company, password, phone number | Performance of a contract, legal obligation |
| Creation of an avatar | Personal features | Performance of a contract |
| Subscription of services, newsletter | Name, email address | Consent |
| Contact requests / support | Name, email address, request/concern, phone number | Consent, performance of a contract |
| Payment processing | Payment information, name, email address | Performance of a contract, legal obligation |
| Notice & action procedure regarding illegal content or suspicion of criminal offences | Name, email address, notice details | Legal obligation |
| Ensuring operation, functionality, security and optimisation of our services | IP address, browser/device data, server log files, location data | Legitimate interest |
| Use of metaverse/virtual spaces | User settings, audio/video, telemetry, recordings, location data, shared content | Performance of a contract, consent |
| Compliance with retention and documentation obligations | Various, depending on legal provisions | Legal obligation |
Within Stratum1 GmbH, only employees and departments who require access to your data for the above purposes will receive it.
We may also share your personal data with:
Courts and public authorities,
Attorneys, tax advisers, auditors,
Banks and insurance companies,
IT service providers and other processors (bound by our instructions).
Some recipients may be located outside the EU/EEA. In such cases, we ensure an adequate level of protection (e.g., through EU adequacy decisions or EU Standard Contractual Clauses).
When using our services, certain personal data (e.g. profile, shared content, audio/video in virtual spaces) may be visible to other users.
We store personal data only as long as necessary to fulfil the stated purposes and comply with legal obligations (e.g. under the Austrian Civil Code and Austrian Business Code).
If you withdraw consent or object to processing, your personal data will be deleted unless further retention is required by law or for the establishment, exercise, or defence of legal claims. Data may also be anonymised instead of deleted.
We apply appropriate technical and organisational measures to protect your personal data from loss, misuse, and unauthorised access.
However, transmission of information over the internet may involve risks beyond our control. We cannot accept liability for data access caused by errors in transmission or unauthorised third-party access (e.g. hacker attacks).
Our website automatically collects and stores information in server log files, including:
IP address
Browser and language settings
Operating system
Referrer URL
Internet service provider
Date and time of access
This data is processed on the basis of our legitimate interest in system stability, security, and optimisation.
For security reasons, our platform uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the lock icon in your browser.
Under GDPR, you have the right to:
Access your personal data,
Rectify inaccurate data,
Erase personal data,
Restrict processing,
Object to processing,
Data portability,
Withdraw consent at any time.
You may lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40-42, 1030 Wien, Tel: +43 1 52 152-0, E: dsb@dsb.gv.at).
We do not use automated decision-making, including profiling, under Art. 22 GDPR.
We reserve the right to update this Privacy Policy in line with legal, technical, or business changes.
Cookies are small text files stored on your device. They may be session-based (deleted after closing your browser) or persistent (stored until deleted or expired).
Necessary cookies: Required for proper website operation.
Optional cookies: Used for analytics, performance, and marketing. These require your consent.
You can configure your browser to reject cookies, although this may affect website functionality.
We use:
Google Analytics (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland)
Google Analytics uses cookies to collect information such as IP address, browser details, pages visited, and date/time of access. We use this information to analyse website use and improve our services. IP addresses are anonymised before storage. Data may be transferred to the US, where Google is subject to additional safeguards (e.g., EU Standard Contractual Clauses). More information: Google Privacy Policy.
Our own analytics software
We also operate in-house analytics to monitor usage of our platform. All data is stored exclusively within the EU and processed in pseudonymised or anonymised form where possible.
Our website may integrate social media buttons or plug-ins (e.g., Twitter, LinkedIn, Instagram, Facebook, Playcanvas.com, OpenAI.com, ReadyPlayer.me). If you activate such a plug-in, your data may be transmitted to the respective network operator.
We have no influence on the scope or further use of data by these networks. Please review the privacy policies of the respective providers before using such features.
Careers | Imprint | Terms of Service
© 2025 Stratum1 GmbH – All rights reserved I Schubertstraße 6a I Graz/Austria