Privacy policy

This English version is a translation for your convenience; the German Datenschutzerklärung is legally binding.

This policy explains which personal data we process when you visit this website or use one of our forms, for what purpose and on which legal basis (General Data Protection Regulation, GDPR).

Controller

BAIOND Group AG
Fabrikstrasse 2
FL-9496 Balzers, Liechtenstein
Email: office@baiond.io

Please use this address for any question about data protection and to exercise your rights.

Hosting and server log files

This website runs at an external hosting provider acting on our behalf (processor under Art. 28 GDPR). When a page is requested, the server records technical data in log files: IP address, date and time, page requested, amount of data transferred, browser and operating system. This data serves the secure and stable operation of the website and error analysis only (Art. 6 (1) (f) GDPR) and is deleted after 14 days at the latest.

Cookies and local storage

This website sets no advertising or tracking cookies, so no cookie banner is needed.

If you choose a language with the language switcher, we remember that choice in a functional cookie named lang (lifetime one year). It contains only the language code, is used solely to greet you in your language on your next visit to the home page, and is never shared with third parties. Without that choice, the home page follows your browser's language setting; the setting is read, not stored.

Some display settings are kept in your browser's local storage (localStorage): the light or dark colour scheme and whether you closed the notice bar above the menu. These values never leave your device, are not transmitted to us and can be cleared in your browser settings at any time.

The cookie and the local-storage entries are strictly necessary for functions you explicitly request and therefore need no consent (§ 165 (3) TKG 2021; Art. 6 (1) (f) GDPR). When editors log in to the admin area, a technically necessary session cookie is set in addition; visitors of the website never receive it.

Reach measurement (own, cookie-less statistics)

To understand which pages are read, we count page views with our own, cookie-less statistics that run entirely on our server. No cookies are set, no data reaches third parties and no IP addresses are stored. Per page view we store only: time, page requested, the domain of the referring website (without path), a coarse device class (desktop, tablet, smartphone), a technical counting value and – if you arrive through a link from one of our campaigns – its campaign name (utm parameters, e.g. “linkedin / ad”). That value is a shortened, irreversible hash formed with a random value that changes daily; the previous day's random value is discarded, so visits can neither be linked across days nor attributed to a person. Known search-engine crawlers are not counted.

The legal basis is our legitimate interest in data-minimal reach measurement (Art. 6 (1) (f) GDPR). Statistics data is deleted after twelve months at the latest.

Consultation request (contact form)

When you send us a request through the form on the contact page, we process your details: name, email address, company, phone number (optional), the topic you chose and your message. We also store automatically which page you came from, the language and whether a topic was pre-selected, so we can route your request correctly. The request is stored in this website's administration on our server; we are notified of it by email (see "Email delivery").

We use these details only to answer your request and to discuss a possible project with you. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) and our legitimate interest in answering requests (Art. 6 (1) (f) GDPR). We keep the request for as long as needed to handle it and delete it afterwards, unless statutory retention obligations apply. To protect against automated submissions, the form checks an invisible field, the time taken to fill it in and the number of requests per hour; your IP address is kept only briefly for this and never stored with the request.

Download request (industry guide)

For our downloads we ask for your name, email address and the industry you are interested in; phone number and company are optional. We also store the page you sent the request from, the language, the file sent and the time of your consent. You receive the download by email as a personal, signed link valid for seven days; this confirms that the email address is yours. We are notified of the request by email.

By submitting the form you consent to us sending you the file and contacting you about baiond; you will not receive a newsletter. We use your phone number only if you provided it, and only for this contact. The legal basis is your consent (Art. 6 (1) (a) GDPR) and fulfilling your request (Art. 6 (1) (b) GDPR). You can withdraw your consent at any time with effect for the future by writing to office@baiond.io; we then delete your data unless statutory retention obligations apply. Without withdrawal, we delete the details once they are no longer needed for the contact.

Email delivery

Notifications about new requests and the emails carrying the download link are sent through Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France). Brevo processes the recipient address, subject and content of the email and technical delivery data on our behalf only; a data processing agreement under Art. 28 GDPR is in place. Processing takes place in the European Union.

Ask baiond

Ask baiond answers questions about baiond in plain language. To produce an answer, your question, the conversation so far and the page you are on are sent to a provider of a language model, currently OpenAI (OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, Ireland; processing also by OpenAI, L.L.C., USA, under the EU-US Data Privacy Framework or EU standard contractual clauses). The provider processes the data on our behalf and does not use it to train its models.

We store each conversation as a transcript (question, answer, page, language) without IP address and without any visitor identifier to improve the service and our content (Art. 6 (1) (f) GDPR) and delete it automatically after 180 days. Your IP address and cookies are not sent to the provider; to limit requests per visitor we use a hash that changes daily and cannot be reversed. Please do not enter personal or confidential data into Ask baiond. The answers are illustrative: the demo is not connected to live sensors.

Digital business cards

Under /team/… we provide a digital business card for members of our team (the target of the QR code on the printed card). It shows only details the team member has agreed to publish (Art. 6 (1) (a) GDPR). The contact file (vCard) for your address book is generated from the same details on request; no data about you is stored in the process. The business cards are not offered to search engines for indexing by default.

Fonts

All fonts (Atkinson Hyperlegible, Inter) are loaded from our own server. There is no connection to Google Fonts or any other external font provider.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent at any time with effect for the future (Art. 7 (3)). Please write to office@baiond.io.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority competent for us is the Datenschutzstelle Liechtenstein (Data Protection Authority), Städtle 38, 9490 Vaduz. You may also contact the authority of your place of residence or work, in Austria the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna.

Changes

We update this policy when our website, our services or the legal requirements change. The version published here applies.

Last updated: October 2026