Privacy policy

1. Data protection at a glance

General information

Personal data is any information that can be used to identify you personally. In this privacy policy we inform you which data we collect, what we use it for and which rights you have with regard to your data.

Data collection on our website

  • The controller responsible for data collection is the operator of this website (see section 2).
  • We collect data that you actively provide to us, e.g. via our contact form.
  • Other data (technical data such as browser type, operating system, time stamp, etc.) is collected automatically by our IT systems when you visit our website.

What we use your data for

  • Part of the data is used to provide our website reliably and to avoid technical errors.
  • Other data may be used to analyse your user behaviour so that we can improve our online offering.

Your rights

  • You have the right to receive information free of charge at any time about the origin, recipients and purpose of your personal data stored by us.
  • You may request the correction, blocking or deletion of your data.
  • Under certain circumstances you have the right to restrict the processing of your data.
  • You also have the right to lodge a complaint with the competent data protection supervisory authority.

Analytics tools & third-party providers

  • We use analytics programs in conjunction with cookies to statistically evaluate your usage behaviour.
  • As a rule, this evaluation is anonymous, i.e. it cannot be traced directly back to you.
  • You can object to the analysis (see “Your right to object” below).

2. General information & mandatory disclosures

Controller

The controller responsible for data processing on this website is:
sth-systeme GmbH
Annenkamp 10, 48317 Drensteinfurt, Germany
Phone: +49 2508 305 9701
Email: info@sth-systeme.com

When we speak of the “controller” in this privacy policy, we mean the natural or legal person who decides on the purposes and means of processing your personal data.

Withdrawal of your consent

Many processing operations are based on your express consent (e.g. when submitting the contact form). You can withdraw this consent at any time by informal email to us: info@sth-systeme.com. The lawfulness of processing carried out before the withdrawal remains unaffected.

Right to object (Art. 21 GDPR)

  • If we process your data on the basis of legitimate interests pursuant to Art. 6(1)(e) or (f) GDPR, you may object at any time on grounds relating to your particular situation. This also applies to profiling insofar as it is related to such processing.
  • In the case of direct marketing, you have the right to object at any time to the processing of your personal data, including profiling insofar as it is linked to such direct marketing (Art. 21(2) GDPR).
  • If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing or the processing serves the establishment, exercise or defence of legal claims.

Right to lodge a complaint with the supervisory authority

If you believe that your data is not being processed (properly), you have the right to lodge a complaint with a data protection supervisory authority – in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

Right to data portability

If we process your personal data by automated means on the basis of your consent or to perform a contract, you have the right to receive this data in a commonly used, machine-readable format. Upon request, we can transmit the data directly to another controller, where technically feasible.

Security – encryption (SSL / TLS)

Our website uses SSL or TLS encryption. When it is active, you can recognise it by the address bar of your browser (“https://”) and a lock symbol. This protects the data you send to us (e.g. via the contact form) from access by third parties.

Information, correction, deletion, blocking

Within the framework of the statutory provisions, you can at any time:

  • request information about your personal data stored by us, including its origin, recipients and the purpose of processing
  • request the correction of inaccurate data
  • request the blocking or deletion of your data, insofar as no statutory retention obligations prevent this
  • request the restriction of processing (see section “Right to restriction of processing”)

Right to restriction of processing

You may request the restriction of the processing of your personal data, e.g.

  • if you contest the accuracy of the data, until we have verified its accuracy
  • if the processing is unlawful but you prefer restriction to deletion
  • if we no longer need your data but you need it for the establishment, exercise or defence of legal claims
  • if you have objected pursuant to Art. 21 GDPR and it has not yet been determined whose interests prevail
    Where processing is restricted, we may only process your data with your consent or for the establishment, exercise or defence of legal claims.

3. Data collection on our website

Cookies

  • We use cookies, i.e. small text files that are stored on your device.
  • Some cookies are so-called “session cookies” and are deleted automatically when you close your browser. Others remain stored until you delete them manually.
  • These cookies serve to make our website more user-friendly, efficient and secure.
  • If you set your browser to inform you about the setting of cookies, you can allow cookies on a case-by-case basis, disable them altogether or delete them when closing the browser. Please note: if you disable cookies, the functionality of our website may be limited.
  • For technically necessary cookies (e.g. for the functioning of the site) the legal basis is “legitimate interest” pursuant to Art. 6(1)(f) GDPR. For other cookies, e.g. for analysing your browsing behaviour, we inform you separately in this policy and, where applicable, obtain your consent.

Server log files

  • Our web server automatically stores information in so-called server log files when you access our website.
  • The following is stored, among other things: browser type, browser version, operating system, referrer URL, host name of the requesting computer, time of the request and your IP address.
  • We do not merge this data with other data sources.
  • The storage is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR: we wish to ensure the stability of our website and detect possible attacks at an early stage.

Contact form

  • If you contact us via the contact form, we store your details (e.g. name, email address, the message you entered) so that we can process your enquiry and ask follow-up questions if necessary.
  • We do not pass this data on to third parties without your express consent.
  • Processing is carried out exclusively on the basis of your consent (Art. 6(1)(a) GDPR).
  • You can withdraw this consent at any time by email to info@sth-systeme.com. The lawfulness of processing carried out before the withdrawal remains unaffected.
  • The data you enter via the form is stored by us until you ask us to delete it, withdraw your consent or the purpose of storage ceases to apply (e.g. after your enquiry has been dealt with). Statutory retention periods remain unaffected.

Inquiry list

If you send an enquiry about products via our inquiry list, we process the details you enter (e.g. name, email address, message and the products you enquire about) in order to handle your enquiry and send you an offer. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures). The data is deleted as soon as it is no longer required for processing and no statutory retention obligations apply.

Reviews on our website

If you submit a review via our review form, we store your details (name, email address, title, review text and star rating) as well as your IP address and the time of submission. We use the IP address to prevent misuse and multiple reviews. Your review is checked by us before publication. Your review and the name you entered are published; your email address and IP address are not published.

The legal basis is your consent (Art. 6(1)(a) GDPR) and our legitimate interest in preventing misuse (Art. 6(1)(f) GDPR). You can withdraw your consent at any time by email to info@sth-systeme.com and request the deletion of your review.

Comment function

  • If you comment on our site, we store not only your comment but also the time stamp, your email address and, where applicable, a user name chosen by you.
  • We also store your IP address. This is because we do not check comments before they are published – we need the IP address in order to be able to react to possible legal infringements (e.g. insults).
  • The legal basis for this is your consent (Art. 6(1)(a) GDPR).
  • You can withdraw your consent at any time by email to us. Comments already submitted and data stored up to that point remain legally valid unless they are deleted.

Customer and contract data

  • We collect, process and use personal data insofar as it is necessary for the establishment, content or amendment of a contractual relationship (so-called inventory data).
  • Legal basis: Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures).
  • Usage data (e.g. that you have used our website) is only stored if this is necessary to provide or bill you for the service.
  • After the end of the business relationship, we delete your data unless statutory retention obligations apply.

4. Social media

Facebook plugins (Like / Share / social plugins)

Functions of the social network Facebook may be integrated into our website. When you open a page with such a plugin, a connection to Facebook’s servers is established automatically. Your IP address, the page visited and other technical data, among other things, may be processed.

If you are logged in to your Facebook account at the same time, Facebook may assign your visit to your profile.

Use is based on our legitimate interest (Art. 6(1)(f) GDPR) in optimising our online presence and enabling interaction with users.

Provider:
Meta Platforms Inc.
1601 Willow Road
Menlo Park, CA 94025, USA
Privacy policy: https://www.facebook.com/privacy/explanation

Instagram

Functions of the Instagram service may be integrated into our website. When you open a page with embedded Instagram content (e.g. feed, buttons or graphics), a connection to Instagram servers is established and personal data such as your IP address and browser information may be transmitted.

If you are logged in to your Instagram account, Instagram may assign the visit to our website to your account.

Provider:
Meta Platforms Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour
Dublin 2, Ireland
Privacy policy: https://privacycenter.instagram.com/policy

YouTube (social media profile & widgets)

In addition to embedded videos, our YouTube profile may also be integrated via graphic elements or links. When such elements are loaded, data (e.g. IP address, browser data) is transmitted to YouTube/Google.

The legal basis is our legitimate interest in an attractive online presentation (Art. 6(1)(f) GDPR).

Provider:
Google LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043, USA
Privacy policy: https://policies.google.com/privacy

TikTok

Our website may contain content or links from the social network TikTok. When you open a page with embedded TikTok elements (e.g. videos or feeds), a connection to TikTok servers is established. Technical data, including your IP address, may be processed.

If you are logged in to TikTok, TikTok may assign the visit to our website to your user account.

Provider:
TikTok Technology Limited
10 Earlsfort Terrace
Dublin, D02 T380
Ireland
Privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy

LinkedIn

Functions of the social network LinkedIn may be integrated into our website (e.g. buttons, links or embedded posts). When such elements are accessed, a connection to LinkedIn’s servers is established. LinkedIn may collect your IP address, technical data and the subpage visited, among other things.

If you are logged in to your LinkedIn account, LinkedIn may assign the visit to our website to your user profile.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

Provider:
LinkedIn Ireland Unlimited Company
Wilton Place
Dublin 2
Ireland
Privacy policy: https://www.linkedin.com/legal/privacy-policy

5. Newsletter

Newsletter data

  • If you wish to subscribe to our newsletter, we need your email address and proof that you actually own it. Further data is only requested on a voluntary basis.
  • We use your email address exclusively for sending the newsletter and do not pass it on to third parties.
  • Processing is based on your consent (Art. 6(1)(a) GDPR).
  • You can withdraw your consent at any time, for example via the “unsubscribe” link in the newsletter. The lawfulness of processing carried out before the withdrawal remains unaffected.
  • After you unsubscribe from the newsletter, we delete your email address. Other data stored by us (e.g. from orders) remains unaffected.

6. Plugins & third-party tools

Google Fonts (stored locally)

We use Google Fonts exclusively locally on our own server.
No connection to Google servers is established, so no personal data is transmitted to Google.
Provider details:
Google LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043, USA
Privacy policy: https://policies.google.com/privacy

WordPress

Our website is based on the content management system WordPress. For technical reasons, WordPress may process log files and metadata (e.g. IP addresses in error messages or comments).
Provider:
Automattic Inc.
60 29th Street #343
San Francisco, CA 94110, USA
Privacy policy: https://automattic.com/privacy/

Wordfence Security

We use the security plugin Wordfence to protect our website from attacks and misuse. Wordfence processes IP addresses, browser information and access attempts and may transmit this data to the provider’s servers in order to analyse threats.
Provider:
Defiant Inc.
800 5th Ave, Suite 4100
Seattle, WA 98104, USA
Privacy policy: https://www.wordfence.com/privacy-policy/

Spam protection (Cloudflare Turnstile)

To protect our forms (e.g. contact and review forms) from automated input and spam, we use the Cloudflare Turnstile service. When a form is loaded and submitted, a connection to Cloudflare servers is established. Technical data such as your IP address, browser information and usage behaviour is processed in order to determine whether the input comes from a human. The data is not used for advertising purposes.

The legal basis is our legitimate interest in protecting our website from misuse and spam (Art. 6(1)(f) GDPR) and, insofar as information is stored on or retrieved from your device, Section 25(2) no. 2 TDDDG.

Provider:
Cloudflare, Inc.
101 Townsend St
San Francisco, CA 94107, USA
Privacy policy: https://www.cloudflare.com/privacypolicy/

Google reviews (Trustindex)

We display reviews from Google on our website. For this we use the plugin “Widgets for Google Reviews” by Trustindex. When the reviews are loaded, connections to servers of Trustindex and Google may be established. Your IP address is transmitted in the process, and information may be stored in or retrieved from your browser.

The content is only loaded if you have given your consent via our cookie banner (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw your consent at any time via the cookie settings.

Provider:
Trustindex Kft., Hungary
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4, Ireland
Google privacy policy: https://policies.google.com/privacy

Statistics (Burst Statistics)

To statistically evaluate the use of our website we use the plugin Burst Statistics in privacy mode. It works without cookies, respects the browser setting “Do Not Track” and stores the data exclusively on our own server. The data is not passed on to third parties. The legal basis is our legitimate interest in improving our offering (Art. 6(1)(f) GDPR).

Consent management (Complianz)

To manage your cookie consents we use the plugin Complianz. Your choice is stored in a cookie in your browser so that it is taken into account on later visits. Further details can be found in our cookie policy.

7. Changes to this privacy policy

We reserve the right to amend our privacy policy from time to time so that it always complies with current legal requirements or to implement changes to our services. The new privacy policy will then apply to your next visit. We therefore recommend that you check this page regularly.

Search
Scroll to Top