Legal
Privacy Policy
Updated on 11 September 2026
Controller
The controller responsible for processing personal data on this website is H2O Nodes GmbH, Schwedenplatz 5/22 (entrance Dominikanerbastei 21), 1010 Vienna, Austria. Company register FN 589130v, VAT ATU78794538. You can reach us at contact@h2o-nodes.com or +49 176 9782 1188. We have not appointed a data protection officer because we are not required to do so under Art. 37 GDPR.
What this notice covers
This privacy notice explains how we process personal data when you visit www.h2o-nodes.com, use the contact form, email us, or otherwise communicate with us about staking, infrastructure, or investment. It applies alongside our Imprint and Terms & Conditions. Processing is governed by the GDPR and the Austrian Data Protection Act (DSG).
Hosting
This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. Vercel processes technical data required to deliver the site — for example IP address, request time, requested URL, and browser type — on our behalf as a processor. Vercel is certified under the EU-US Data Privacy Framework. The legal basis is Art. 6(1)(f) GDPR: our legitimate interest in providing a secure, available website.
Server logs and security
Our host and, where needed to prevent abuse of the contact form, our application keep short-lived server logs and in-memory rate-limit records based on IP address. We use this only for security, debugging, and spam prevention. We do not use first-party analytics, advertising cookies, or tracking pixels. The legal basis is Art. 6(1)(f) GDPR.
Contact form
If you use the contact form, we process your name, email address, message, the topic you select, and optionally your company, together with the language of the page you submitted from. We use this solely to handle and reply to your enquiry. The legal basis is Art. 6(1)(b) GDPR (steps at your request prior to a contract) and, where the enquiry is not contractual, Art. 6(1)(f) GDPR (legitimate interest in answering business enquiries). Required fields are needed so we can respond; without them we cannot process the request.
Email delivery
We send form submissions by email using Resend, Inc. (United States) as a processor. The message is delivered to contact@h2o-nodes.com. Resend is used only to transmit the email. Transfers to the United States are based on the EU-US Data Privacy Framework and, where required, standard contractual clauses (Art. 46 GDPR). If you email us directly, we process that correspondence on the same legal bases.
Embedded content
The homepage embeds a 3D scene from Spline (my.spline.design). Loading that page causes your browser to request the embed from Spline, which may process your IP address and technical browser data under Spline’s own terms. We use the embed to present the site (Art. 6(1)(f) GDPR). You can block third-party content in your browser if you do not want this transfer.
Newsletter
The newsletter signup on this site opens your email client with a pre-filled message to us. We do not store newsletter addresses on the website itself. If you later receive a newsletter from us, that is based on your request by email.
Cookies
We do not set tracking cookies. Language is selected via the URL (/de/… for German). The host may set strictly technical cookies required to operate the site.
Recipients and transfers
Recipients are our hosting provider (Vercel), our email delivery provider (Resend), and — when the homepage embed loads — Spline. We do not sell personal data. Public blockchain networks may display validator and staking data; that on-chain information is not personal data we collect through this website.
Retention
Contact enquiries are kept as long as needed to handle the request and any follow-up, and thereafter only as long as statutory retention or limitation periods require — in particular under Austrian company and tax law, typically up to seven years where a business relationship exists. Server logs and rate-limit records are kept only as long as needed for security. We delete or anonymise data when the purpose has ended.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability, and to object to processing based on Art. 6(1)(f) GDPR. Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise these rights, email contact@h2o-nodes.com. You also have the right to lodge a complaint with a supervisory authority.
Supervisory authority
The competent supervisory authority for H2O Nodes GmbH is the Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, Austria, https://www.dsb.gv.at/.
Updates
We may update this privacy notice when our processing or legal requirements change. The current version is always published on this page. Last updated 11 September 2026.