Privacy Policy

Who is responsible

SteadiParts GmbH, Buchenweg 10, 85232 Bergkirchen, Germany Managing Director: Leon Moralić Contact: info@steadihub.com

We have not appointed a data protection officer. Under § 38 BDSG this is only required from 20 people permanently processing personal data, or where a data protection impact assessment is mandatory. Neither applies at our size.

What we process, and why

• Account — email address, name, password (stored only as a hash), and the optional profile details you add yourself (picture, banner, country, location, systems, field of work, language). Needed to run your account. Legal basis: Art. 6(1)(b) GDPR (contract).
• Content you post — posts, comments, private messages and their attachments, uploaded images, videos and files, your garage (equipment list and rig photos). Stored so the forum works. Location data embedded in photos (EXIF/GPS) is removed when you upload them. Private message attachments are kept in a non-public storage area and are only shown to the people in the conversation. Art. 6(1)(b).
• Presence — the time you were last active, so other members can see who is online. Art. 6(1)(f) (legitimate interest in a usable community). You can object at any time.
• Follows and blocks — who you follow and who you have blocked. Art. 6(1)(b). Your block list is visible only to you.
• Reports — what you reported, why, and when. Needed for moderation and required by the app stores. When you report a private message, our moderators can read the message you reported and see who sent it — only the reported messages, not the rest of the conversation. Art. 6(1)(c) and (f).
• Notifications — if you allow push notifications in the app, we store a device token so we can reach your phone. The notification shows a title and a short hint, never the text of a private message. Notification emails about a new private message can contain a short excerpt of it (up to 140 characters); you can switch these emails off in your settings. Art. 6(1)(b).
• Archive conversations — if you are signed in, the questions you ask the archive are stored together with the answers and the sources shown with them, so that you can return to earlier conversations and so that follow-up questions understand what you were talking about. Your conversations are visible only to you and are deleted when you delete your account. Nothing is stored if you are not signed in. Art. 6(1)(b).
• “Here now” on the map — only if you switch it on yourself by tapping “Share now”; it is off by default. Purpose: other signed-in members can see that you are working nearby. Your device location is rounded on our server to about 1 km before it is stored, and only that rounded value is kept — one entry per person, no history. You choose how long it runs (8 hours, until 23:59 tomorrow, or one shoot week of 7 days at most). When that time is up the entry is deleted, not just hidden, within a few minutes; you can stop at any time with one tap, which deletes it immediately. Only signed-in members see it, never visitors who are not signed in. The app asks for location access only while you use it, never in the background. Art. 6(1)(a) GDPR (consent), which you can withdraw at any time by stopping.
• “Gear for rent” on the map — only if you mark an item in your garage as “For rent”; it is off by default. Signed-in members then see the item’s model and type and your base city on the map — never an exact location, never its price, value or notes. You arrange the exact place with the other member in a private message. It appears only if your base city is visible on the map, and you can switch it off at any time. Art. 6(1)(a) GDPR (consent).
• Company directory on the map — besides companies that put themselves on the map, we list manufacturers, dealers and service centres for camera stabilisers from public business information: name, city, country, website and the source we took it from. We never list a street address, phone number, e-mail address or a person. A company can claim or remove its listing by writing to info@steadihub.com. Art. 6(1)(f) GDPR (legitimate interest in a complete industry map).
• Payment and billing — only if you take a paid plan (Supporter or Company Profile). On the website, Stripe processes your payment method; in the app, Apple (App Store) or Google (Google Play) does. We never see your card details. We store the customer and subscription reference from Stripe, Apple or Google and which plan you are on, so the plan can be applied and cancelled. Invoices are kept for ten years as required by § 147 AO. Art. 6(1)(b) and (c).

Translation and the archive

When you press Translate, the text is translated by translation software that runs on our own server. We store the result so the same text does not have to be translated again. The text is not sent to any outside service. Legal basis: Art. 6(1)(f).

When you ask the archive, your question is answered on our own server from archived forum discussions. No AI service and no outside provider is involved, and your question is not sent anywhere else.

Posts from Facebook groups

Logged-in members can see selected posts from these Facebook groups in the SteadiHub feed: Steadicam operators group; ARRI SRH-3 / 360 / EVO USERS; The Steadicam Group; Arri Artemis Trinity.

• Source — posts, photos and comments (author name and profile picture, text, time and the link to the original) are read from these groups by a Facebook account of the operator of SteadiHub that is a member of each group. We never read anyone else’s Facebook session and never post anything on Facebook. Photos are stored without metadata in a non-public storage area.
• Selection — we only take posts published from 1 October 2026 by members (not by pages or as sponsored posts), with text, that are about the work of camera operators. Whether a post is about operating is checked by software that runs on a computer we operate ourselves; the text is not sent to any outside service. Posts the software cannot clearly assign are reviewed by a person before they appear. This check only decides whether a post appears in the feed. Posts that are not selected, including all posts offering or seeking gear to buy, sell or rent, are neither shown nor stored; we only keep their Facebook post number so that they are not read again.
• Purpose and legal basis — to show members of a group what is going on in it, next to the forum. Art. 6(1)(f) GDPR (legitimate interest in an industry community). Showing your own posts after you have connected your Facebook profile is based on your consent, Art. 6(1)(a), which you can withdraw in Settings at any time.
• Who sees what — the full post only to logged-in members whose connected Facebook profile we found in that group’s member list. All other logged-in members only see “New post in [group]”, without name, text or photos. Nothing is visible to visitors who are not logged in, to search engines or in link previews.
• Connecting your Facebook profile — with Facebook Login (Meta Platforms Ireland Ltd.) we receive your name and profile picture. Once a week we compare your name with the member lists of the groups; of those lists we keep only whether a connected SteadiHub member is in the group, everything else is discarded right after the comparison. If two members share a name, you can confirm your profile by sending us a code via Messenger. You can disconnect at any time in Settings; your membership data and code are then deleted. If you chose not to show your posts, a normalised form of your name per group (for example “leon moralic”) is kept after you disconnect or delete your account, only as a suppression list so that your posts and comments stay hidden. It is lifted when you connect again and turn on showing your posts.
• Storage period — until the post is deleted on Facebook (we check posts for 60 days after they appear) or removed here; it is then deleted together with its photos.
• Removal and objection — authors with a connected profile can remove their post or comment directly (“This is my post – remove it here”). Anyone else can write to info@steadihub.com with the link; we remove it within 48 hours. Removed posts are not fetched again.

Who else receives data

• Hetzner Online GmbH (Germany) — the server that runs SteadiHub, including the database, login and file storage, and our backups. The servers are located in Falkenstein, Germany (processor)
• Brevo (Sendinblue SAS, France) — sending emails: sign-up confirmation, password reset and the notification emails you have switched on (processor)
• Google (Firebase Cloud Messaging) and Apple (Apple Push Notification service) — delivering push notifications to the app, only if you allow them (processor)
• Stripe — payments on the website, only for paid plans
• Apple and Google — payments in the app (App Store, Google Play), only for paid plans
• Apple Distribution International Ltd. — only if you use “Sign in with Apple”: Apple confirms your email address (or a private relay address) and, the first time, your name to us
• Meta Platforms Ireland Ltd. — only if you use “Continue with Facebook” or connect your Facebook profile in Settings: Facebook confirms your name, email address and profile picture to us

Some of these are based in the USA. Transfers are covered by the EU Standard Contractual Clauses. We do not sell your data and we do not use it for personalised advertising.

The feed shows recommendation cards for camera gear, marked “Sponsor” (products from SteadiParts) or “Ad” (listings from the SteadiBay marketplace). Which card appears depends on the gear mentioned in the post next to it, not on your profile or your activity. No advertising network is involved and nothing about you is passed on.

How long we keep it

Account data for as long as your account exists. When you delete your account, your login, name, picture, follows, blocks, private conversations, garage, push devices and the files you uploaded (rig photos, message attachments) are removed. Posts and comments you wrote stay in their threads under “Deleted member”, together with the images in them, because removing them would tear holes in other people's conversations. Reports are kept for up to two years so repeat behaviour can be recognised.

Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection (Art. 15 to 21 GDPR). Write to info@steadihub.com. You can delete your account yourself — see Delete your account. You may also complain to a supervisory authority; for us that is the Bayerisches Landesamt für Datenschutzaufsicht, Ansbach.

Cookies

We set only what is needed to keep you signed in. No tracking cookies, no advertising cookies, no third-party analytics.