Legal
Privacy
What this site collects, on what legal basis, how long it is kept and who processes it on our behalf.
Draft — not reviewed by a lawyer, and not yet complete: some of the provider details are still missing. This notice disappears by itself once none of them are.
Controller
The controller for the processing described here, within the meaning of Art. 4 (7) GDPR, is: [FIRMIERUNG EINSCHLIESSLICH RECHTSFORM], Fahlenkampsweg 4b, 23562 Lübeck, Deutschland.
You can reach us at eike@swat.de.
We have not appointed a data protection officer. We are not required to: fewer than twenty people here are permanently engaged in automated processing, and processing personal data is not what this business does — it is what running a service for its customers involves.
What Caldera processes
Caldera shows you the autonomous agents that run for your workspace. Each agent reports to us by itself, over HTTPS: its state, its health, gauges, the panels it wants shown, its runs with cost and model, and its settings. We never call an agent and never reach into its machine.
The reports are meant to contain metadata, not the content of private data. What an agent reports is, however, up to the agent. Please set your agents up so that they report nothing that does not belong in a workspace.
We fetch a log only when an administrator asks for it and the agent hands it out. We keep it for 30 days.
Runs are kept, the newest 2000 per agent. Commands you give an agent are kept for 30 days. If you delete an agent, its runs and commands are deleted with it.
Hosting and server logs
This site is served from netcup GmbH, Emmy-Noether-Straße 10, D-76131 Karlsruhe, which processes personal data on our behalf under a data processing agreement pursuant to Art. 28 GDPR.
Every request is written to a log: the requesting IP address, the time, the page requested, the HTTP status, the amount of data sent, and the browser and operating system your device reports.
Legal basis and purpose. Art. 6(1)(f) GDPR. Our legitimate interest is operating the site securely and being able to investigate a fault or an attack afterwards. Without these entries an outage cannot be diagnosed and abuse cannot be traced.
How long. 7 Tage, after which the entries are deleted or the addresses in them shortened.
No cookies, no third parties
This site sets no cookies and loads nothing from third-party servers. Fonts are delivered from this site, not from a font service, so visiting these pages does not disclose your address to anybody else.
The one thing stored in your browser is which colour theme you chose. It never leaves your device and is not personal data in any sense that reaches us.
There is no analytics, no tracking pixel and no advertising network on any page here. That is also why you were not asked to consent to anything.
Recipients
What is written above still holds for this website: it loads nothing from third-party servers. The recipients below receive data out of Caldera itself — out of what happens in your account once you have signed up.
Operation and delivery. Everything you store in the service is held on servers we operate at netcup GmbH, Emmy-Noether-Straße 10, D-76131 Karlsruhe. For the messages the service sends we use netcup GmbH, Emmy-Noether-Straße 10, D-76131 Karlsruhe. Both process the data on our behalf, under a data processing agreement pursuant to Art. 28 GDPR. This applies to every use of the service and cannot be switched off: without servers and without mail there is no service.
There are no other recipients for the processing described here. We do not sell data, and we use neither analytics services nor advertising networks.
Your rights
You have the right to obtain confirmation of whether we process data about you and to receive a copy of it (Art. 15), to have inaccurate data corrected (Art. 16), to have data erased (Art. 17), to have processing restricted (Art. 18), and to receive the data you gave us in a machine-readable format (Art. 20).
Where we process on the basis of a legitimate interest, you have the right to object at any time on grounds relating to your particular situation (Art. 21). Where we process on the basis of your consent, you can withdraw it at any time, with effect for the future.
Write to eike@swat.de for any of these. We answer within a month; if a request is complicated enough to need longer, we will say so and why.
Complaints
You can complain to a supervisory authority about how we handle your data, without asking us first (Art. 77 GDPR). The one responsible for us is: [ZUSTÄNDIGE DATENSCHUTZ-AUFSICHTSBEHÖRDE]. You may also approach the authority where you live or work.