kontakt kontakt

Data protection

a) Introduction

Protecting your data and information is a serious matter for us, and thus we adhere strictly to the applicable rules set forth in the data privacy laws. Personal data are only collected on this website to the extent that is technically and organizationally necessary. Your information is never disclosed or made available to third parties under any circumstances. The following statement provides you with an overview of how we guarantee the privacy of your personal data and what type of data are collected and for what purpose.

To ensure the security of your data during the transfer process, we also utilize state-of-the-art SSL/TLS encryption processes.

 

b) Controlling body

Name and address of controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of member states and other data protection regulations is the:

Sterman Technische Systeme GmbH

Im Tannwald 10
Industriegebiet Hagenmoos
D-78112 St. Georgen / Peterzell
Telefon: +49 77 25 914 88 30
Fax: +49 77 25 914 88 37
info(at)sterman.de
www.sterman.de

Represented by the managing directors:

Peter Sterman, Johannes Sterman, Martina Sterman

Data security officer
The data security officer of the controller is:

Alexander Sterman
alexander.sterman(at)sterman.de

The data subjects are entitled to contact our data security officer directly at any time with any questions they may have relating to privacy protection.

 

c) General information about data processing

Scope of personal data processing

We generally process the personal data of our users only insofar as this is necessary to provide a functional website as well as our contents and services. The personal data of our users are regularly processed only with the user’s consent. An exception applies in such cases when a prior consent cannot be obtained for factual reasons and the processing of the data is permitted by statutory provisions.

 

Legal basis for processing personal data

Insofar as we obtain the data subject's consent for the processing of personal data, Art. 6 Para. 1 (a) of the Eu’s General Data Protection Regulation (GDPR) serves as legal basis.

When processing personal data which is necessary for fulfilling a contract to which the data subject is a contractual party, Art. 6 Para. 1 (b) of GDPR serves as legal basis. This also applies to processing which is necessary for carrying out pre-contractual measures.

If personal data must be processed in order to fulfill a legal obligation to which our company is subject, Art. 6 Para. 1 (c) of GDPR serves as legal basis.

In the event that the vital interests of the data subject or another natural person makes the processing of personal data necessary, Art. 6 Para. 1 (d) of GDPR serves as legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the aforementioned interest, Art. 6 Abs. 1 (f) of GDPR serves as legal basis for processing.

 

Data deletion and storage period

The data subject's personal data will be deleted or blocked once the purpose of storage no longer applies. Storage may also take place if this has been provided for by the European or national legislature in EU regulations, laws or other regulations, to which the controller is subject. Data may also be blocked or deleted if a storage period prescribed by the cited standards elapses, unless there is a need for a further storage of the data for forming or fulfilling a contract.

 

d) Preparation of log files

Description and scope of data processing

Every time our website is accessed, our system automatically collects data and information about the computer system of the accessing computer.

In this case, the following data are collected:
- Type and version of internet browser
- The operating system used
- The user’s internet service provider
- Set resolution and color depth
- Referrer URL (the page that was previously accessed, if available)
- Host name / IP address of the accessing computer
- Date and time of server inquiry

Such data are not stored together with other personal data of the user.

 

Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 Para. 1 (f) of GDPR.

 

Purpose of data processing

The IP address is stored in log files in order to ensure the functionality of the website. We also use the data in order to optimize the website and safeguard the security of our information technology systems. The data are not evaluated for marketing purposes in this context.

To this end, our legitimate interest in data processing is based on Art. 6 Para. 1 (f) of GDPR.

 

Period of storage

If the data are stored in log files, this is the case after 90 days at the latest.

 

Options to object and request removal

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for operating the website. Consequently, there is no option for users to object to the collection of such data.

 

e) Contact form and e-mail contact

Description and scope of data processing

There is contact form on our website, which can be used to contact us electronically. If a user makes use of this option, the data entered in the input screen are transferred to us and stored. Such data include:

Mandatory information: full name, e-mail, phone number

Optional: Drawing or identification number, text field

During the form submission process, your consent to the processing of data is obtained and reference is made to this privacy policy.

Alternatively, users may also contact us by using the provided e-mail address. In such case, the user’s personal data transferred with the e-mail will be stored. Note that the confidentiality of e-mails or other electronic forms of online communication is generally not guaranteed. For that reason, we recommend using the postal system for sending confidential information.

In this context, no information is provided or disclosed to third parties. The data shall be used only for processing conversations.

 

Legal basis for data processing

In the event that the user has given his or her consent, the legal basis for processing data is Art. 6 Para. 1 (a) of GDPR

The processing of data that are transmitted when sending an e-mail is legally permitted under Art. 6 Para. 1 (f) of GDPR. If you sent us an e-mail with regard to the formation of a contract, Art. 6 Para. 1 (b) of GDPR represents an additional legal basis for processing of data.

 

Purpose of data processing

Personal data from the input screen are only processed by us for the purpose of contacting you. Contacting us via e-mail also establishes the necessary legitimate interest in the processing of personal data.

 

Period of storage

The data will be deleted as soon as they are no longer required for achieving the purpose for which they were collected. For personal data collected from the input screen of the contact form and any data sent via e-mail, this is the case when the respective conversation with the user has ended. The conversation ends when it can be determined from the circumstances that the respective situation has been clarified conclusively.

 

Options to object and request removal

The user has the opportunity to withdraw his or her consent to the processing of personal data at any time. If the user contacts us via e-mail, he or she can object to the storage of his or her personal data at any time. In such cases, conversations cannot be continued.

The user also has the opportunity to object to the storage of his or her personal data by mail.

All personal data that are stored while making contact are deleted in such cases.

f) Application form

Description and scope of data processing

There is an application form available on our website, which can be used to electronically send us application documents. If a user makes use of this option, the data entered in the input screen and the appended files are transferred to us and stored. Such data include:

Mandatory information: full name, e-mail, phone number

During the form submission process, your consent to the processing of data is obtained and reference is made to this privacy policy.

 

Legal basis for data processing

In the event that the user has given his or her consent, the legal basis for processing data is Art. 6 Para. 1 (a) of GDPR

The processing of data that are transmitted when sending an e-mail is legally permitted under Art. 6 Para. 1 (f) of GDPR. If you contacted us with regard to the formation of a contract, Art. 6 Para. 1 (b) of GDPR represents an additional legal basis for processing of data.

 

Purpose of data processing

Personal data from the input screen are only processed by us for the purpose of processing applications.

 

Period of storage

The data are stored in accordance with the legal requirements.

 

Options to object and request removal

The user has the opportunity to withdraw his or her consent to the processing of personal data at any time.

In such case, all personal data stored during the application process are deleted.

 

 

g) Callback form

Description and scope of data processing

Our website also has a form for requesting a callback. If a user makes use of this option, the data entered in the input screen are transferred to us and stored. Such data include:

Mandatory information: full name, e-mail, phone number

During the form submission process, your consent to the processing of data is obtained and reference is made to this privacy policy.

In this context, no information is provided or disclosed to third parties. The data shall be used only for processing conversations.

 

Legal basis for data processing

In the event that the user has given his or her consent, the legal basis for processing data is Art. 6 Para. 1 (a) of GDPR

If you contact with regard to the formation of a contract, Art. 6 Para. 1 (b) of GDPR represents an additional legal basis for processing of data.

 

Purpose of data processing

The data will be deleted as soon as they are no longer required for achieving the purpose for which they were collected. For personal data collected from the input screen, this is the case when the respective conversation with the user has ended. The conversation ends when it can be determined from the circumstances that the respective situation has been clarified conclusively.

 

Options to object and request removal

The user has the opportunity to withdraw his or her consent to the processing of personal data at any time. If the user contacts us via e-mail, he or she can object to the storage of his or her personal data at any time. In such cases, conversations cannot be continued.

The user also has the opportunity to object to the storage of his or her personal data by mail.

All personal data that are stored while making contact are deleted in such cases.

 

h) Disclosure of personal data to third parties

Website analysis with Google Analytics

This website uses Google Analytics, an online analytical service of Google Inc, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; „Google“). The use includes Universal Analytics. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus analyze a user’s activities across devices.

Google Analytics also uses cookies, which are text files that are stored on your computer, and which allow for analyzing your use of the website. The information generated by the cookie based on your use of this website is usually transmitted to a Google server in the US and stored there.

If the IP anonymization function is enabled on this website, your IP address will be abbreviated by Google beforehand within the member states of the European Union or other signatory states of European Economic Area Treaty. Only in exceptional cases will the full IP address be transmitted to a Google server in the US and abbreviated there. The IP address sent by your browser within the framework of Google Analytics is not compiled by Google with other data. Google will use this information on behalf of the operator of this website in order to evaluate your use of the website, to compile reports about website activities and offer the website operator other services linked with website use and Internet use. Our legitimate interest in data processing is based on these purposes.

The use of Google Analytics is legally permitted under Sect. 15 Para. 3 of TMG or Art. 6 Para. 1 (f) of GDPR. The data sent by us and linked with cookies, user IDs or advertising IDs are automatically deleted after 14 months. Data, which have been stored till the end of their retention period, are automatically deleted once a month.

For more detailed information regarding the terms of use and data privacy, please see https://www.google.com/analytics/terms/de.html or https://policies.google.com/?hl=de.

You may prevent the storage of cookies by selecting the appropriate settings of your browser software; please note, however, that if you do so, you may not be able to make full use of all features of this website. Furthermore, you may prevent the collection of the data (including your IP address) generated by the cookie that is related to your use of the website by Google, as well as the processing of this data by Google, by downloading and installing the “Google Analytics opt-out browser add-on“ (https://tools.google.com/dlpage/gaoptout?hl=de) provided by Google.

 

i) Deletion and administration of cookies

Depending on the browser used, you can manage the use of cookies. Below you will find support for common browsers.

 

Microsoft Explorer:

https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

 

Firefox:

https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

 

Google Chrome:

https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

 

Safari:

https://support.apple.com/kb/PH21411?locale=de_DE

 

Opera:

http://help.opera.com/Windows/10.20/de/cookies.html

 

j) Rights of the data subject

Right to information

You can ask the controller to confirm whether we process personal data relating to you.

If such a processing takes place, you can ask to be informed by the controller about the following information:

(1) the purposes, for which the personal data are processed;

(2) the categories of personal data that are processed;

(3) the recipients and/or categories of recipients, who have received or will receive personal data relating to you;

(4) the planned duration of storage of personal data relating to you or, if it is possible to provide specific details in this regard, the criteria for determining the period of storage;

(5) the existence of a right to correct or delete the personal data relating to the data subject, a right to restrict the processing of personal data by the controller or a right to object to such processing;

(6) the existence of a right to file a complaint with a supervisory authority:

(7) all available information about the origin of the data if the personal data are not collected from the data subject concerned;

(8) the existence of an automated decision-making including profiling in accordance with Art. 22 Para. 1 and 4 of GDPR and – at least in these cases – meaningful information on the logic involved as well as the scope and the desired effects of such processing for the data subject.

You are entitled to be informed about whether the personal data relating to you are transferred to a third country or an international organization. In this context, you can request to be informed about appropriate guarantees according to Art. 46 of GDPR in connection with the transmission.


Right to correction

You have the right to request correction and/or completion by the controller provided that the processed personal data relate to you and are incorrect or incomplete. The controller must make the correction immediately.

 

Right to restrict processing

Subject to the following conditions, you can request that the processing of personal data relating to you be restricted:

(1) if you contest the accuracy of the personal data relating to you, which enables to controller to check the accuracy of the personal data;

(2) the processing is unlawful and you refuse the deletion of the personal data and instead demand the limitation of the use of the personal data;

(3) the controller no longer needs the personal data for processing purposes, but you require such information to assert, exercise or defend any legal claims, or

(4) if you have objected to processing in accordance with Art. 21 Para. 1 of GDPR and it is not yet clear whether the controller’s legitimate reasons outweigh your reasons.

If the processing of your personal data was restricted, such data – apart from its storage – may only be processed with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interests of the European Union or a member state.

If the restriction of processing has been limited in accordance with the aforementioned requirements, you will be informed by the controller before the restriction is rescinded.
 

Right to deletion

Obligation to delete

You can request the controller to immediately delete personal data relating to you, and the controller is obligated to immediately delete such data if one of the following reasons applies:

(1) The personal data relating to you are no longer necessary for the purposes, for which they were collected or otherwise processed.

(2) You revoke your consent, on which processing was based in accordance with Art. 6 Para. 1 (a) of or Art. 9 Para. 2 (a) of GDPR, and there is no other legal basis for the processing.

(3) You object to the processing in accordance with Art. 21 Para. 1 of GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Art. 21 Para. 2 of GDPR.

(4) The personal data relating to you were processed unlawfully.

(5) The deletion of personal data relating to you is necessary for fulfilling a legal obligation under EU law or the law of member states, to which the controller is subject.

(6) The personal data relating to you were collected with regard to offered services of the information society in accordance with Art. 8 Para. 1 of GDPR.
 

Information to third parties

If the controller has made available or disclosed your personal data and if he is obligated to delete them in accordance with Art. 17 Para. 1 of GDPR, then the controller shall undertake appropriate measures, including those of a technical nature, while taking into account the available technology and implementation costs, in order to inform other controllers who are processing the disclosed personal data that you as data subject have requested them to delete all links to the personal data or copies or replications of the relevant personal data.
 

Exceptions

The right to deletion does not exist if the processing is necessary

(1) for exercising the right to freedom of speech and information;

(2) for fulfilling a legal obligation that requires the processing under EU law or the laws of member states, to which the controller is subject, or for fulfilling a duty that is in the interest of the general public or is part of exercising official authority, which was transferred to the controller;

(3) for reasons of public interest in the area of public health according to Art. 9 Para. 2 (h) and (i) and Art. 9 Para. 3 of GDPR;

(4) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes according to Art. 89 Para. 1 of GDPR, insofar as the right cited under “Right to deletion > Obligation to delete” presumably renders the fulfillment of the objectives of processing impossible or seriously impairs it, or

(5) for asserting, exercising or defending legal claims.
 


Right to information

If you have the right to correct, delete or restrict the processing of your data vis-a-vis the controller, the latter is obligated to inform every recipient to whom your personal data were or are being disclosed about this correction or deletion of data or restriction of processing, unless this proves to be impossible or involves a disproportionate expenditure.

You are entitled to be informed by the controller about such recipients.
 

Right to portability of personal data

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, standard and machine-readable format. You moreover has the right to transfer such personal data to another controller without any hindrance on part of the controller, who had received the personal data, provided that

(1) the processing is based on consent under Art. 6 Para. 1 (a) of GDPR or Art. 9 Para. 2 (a) of GDPR or a contract in accordance with Art. 6 Para. 1 (b) of GDPR and

(2) the processing is carried out with the aid of automated processes.

In exercising this right, you also have the right to have your personal data transmitted directly from one controller to another, insofar as this is technically feasible. This may not adversely affect freedoms and rights of other persons.

The right to portability of personal data does not apply to the processing of personal data, which are necessary for performing a task that is in the interest of the general public or in exercising official authority, which was transferred to the controller.
 


Right to object

You are entitled for reasons arising in connection with your particular situation to object at any time to the processing of personal data concerning you, which takes place on the basis of Art. 6 Para. 1 (e) or (f) of GDPR; this also applies to profiling based on these provisions.

The controller will no longer process the personal data relating to you, unless he is able to provide compelling legitimate grounds for such processing that outweigh your interests, rights and freedoms or the processing serves the assertion, exercising and defense of legal claims.

If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data relating to you for the purposes of such advertising; this also applies to profiling, provided that it is associated with such direct advertising.

If you object to processing carried out for direct advertising purposes, your personal data will no longer be processed for such purposes.

You moreover have the option of exercising your right to object in connection with the use of services of the information society using automated procedures subject to technical specifications, regardless of Directive 2002/58/EC.

 

Right of revoke the declaration of consent under data privacy laws

You have the right to revoke your declaration of consent under data privacy laws at any time. The revocation of consent does not affect the legality of data processing carried out on the basis of consent until revocation.
 

Automated decision in individual cases including profiling

You have the right not to be subjected to a decision based solely on automated processing – including profiling, which has a legal effect on you or similarly has a significant impact on you. This does not apply if the decision

(1) is necessary for forming or fulfilling an agreement between you and the controller,

(2) is admissible as a result of statutory provisions of the European Union or the member states, which the controller is subject to and these statutory provisions contain appropriate measures for safeguarding your rights and freedoms and your legitimate interests or

(3) is carried out with your express consent.

These decisions, however, may not be based on special categories of personal data according to Art. 9 Para. 1 of GDPR, unless Art. 9 Para. 2 (a) or (g) of GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

With regard to the cases cited in (1) and (3), the controller takes appropriate measures for safeguarding your rights and freedoms as well as your legitimate interests, which at least includes the right to obtain the involvement of a person on part of the controller, to present one’s own position and to contest the decision.

 
Right to file a complaint with a supervisory authority

If you are of the opinion that the processing of personal data concerning you violates the GDPR, you have the right to complain to a supervisory authority, in particular in the member state of your place of residence, your place of work or the location of the alleged infringement without prejudice to any other administrative or judicial remedy.

The supervisory authority, to whom the complaint was submitted, shall inform the complainant about the status and the results of the complaint, including the possibility of any judicial remedy in accordance with Art. 78 of GDPR.
 

k) Updating of privacy policy

This privacy policy shall be constantly adapted to the current functions, technologies and the applicable law. This will take place at irregular intervals. The privacy policy provided on the website applies.
 

 

l) Confidentiality Agreement

STERMAN sees itself as a close and reliable partner in development and process projects. Of course, more than 90% of our projects are subject to strict confidentiality regulations. We carefully observe these regulations. Last but not least, the strict confidentiality requirements are reason for the restrictive use of information and images relating to workpieces and end products on this homepage.

STERMAN Technische Systeme GmbH

Am Tannwald 10·Industriegebiet Hagenmoss

78112 St. Georgen / Peterzell