Privacy Policy

For our websites, we apply the following principles:

We are committed to compliance with the legal regulations and always make every effort to apply the principles of data avoidance and data minimisation.

1.    Name and address of the controller and the data protection officer

a)    The controller

The controller as defined in the General Data Protection Regulation and other national data protection laws of the member states of the European Union as well as other regulations relating to data protection is:

STRATE Technologie für Abwasser GmbH

Im Kirchenfelde 9

31157 Sarstedt

Germany

Phone: +49 5066 988 0

Fax: +49 5066 988 225

Email: datenschutz.strate@dueker.de

Webseite: www.strate.com

b)    The data protection officer

You can contact the controller’s data protection officer here:

SiDIT GmbH, Langgasse 20, 97261 Güntersleben, Germany info@remove-this.sidit.de

2.    Terms used

We have formulated our privacy policy so that it is as clear and transparent as possible. If the use of certain terms is nevertheless unclear, you can find the definitions here.

3.    Legal basis for data processing

a)    Processing of personal data in accordance with the GDPR

We only process your personal data, such as your first and surname, your email address and IP address etc., when there is a legal basis for this. The following regulations in particular apply according to the General Data Protection Regulation:

·         Art. 6 (1) (a) GDPR: The data subject has given consent to the processing of his or her personal data for one or more specific purposes.

·         Art. 6 (1) (b) GDPR: Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

·         Art. 6 (1) (c) GDPR: Processing is necessary for compliance with a legal obligation to which the controller is subject.

·         Art. 6 (1) (d) GDPR: Processing is necessary in order to protect the vital interests of the data subject or of another natural person.

·         Art. 6 (1) (e) GDPR: Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

·         Art. 6 (1) (f) GDPR: Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

However, at the relevant places in this Privacy Policy, we again point out to you the legal basis for the processing of your personal data.

b)    Consent by the holder of parental responsibility according to Art. 8 (1) and (2) GDPR

The consent of a person who holds parental responsibility is required for all data processing associated with this website for a child below the age of 16 years.

The Privacy Policy gives you information on the individual data processing steps, their purposes and the data categories affected which require the consent of the data subject.

You can withdraw your consent at any time by sending a declaration of withdrawal in writing to the controller under the contact details given. Processing up to the time of the withdrawal remains legal. 

c)    Processing of information in accordance with Section 25, Subs. 1 TTDSG (German law on telecommunication and telemedia data protection)

We also process data in accordance with Section 25, Subs. 1 TTDSG, by saving information on your terminal equipment or accessing information which has already been saved on your terminal equipment. This information can be personal data or non-personal data, e.g. cookies, browser fingerprints, advertising IDs, MAC addresses and IMEI numbers. Terminal equipment is any equipment directly or indirectly connected to the interface of a public telecommunication network for the purposes of sending, processing or receiving messages, as stated in Section 2, Subs. 2, No. 6 TTDSG.

As a rule, we process this information based on your consent, in accordance with Section 25, Subs. 1 TTDSG.

If an exception is permitted according to Section 25, Subs. 2 Nos. 1 and 2 TTDSG, we do not require your consent. Such an exception is when we exclusively access or store the information for the purpose of transmitting a message via a public telecommunication network, or when this is essential in order that we can provide you with a telemedia service you have expressly requested. You can withdraw your consent at any time.

We will inform you that the withdrawal of your consent does not affect the legality of processing up to the time of the withdrawal.

4.    Transfer of personal data

The transfer of personal data is also processing in the sense of the above Section 3. At this point, we wish to inform you separately about data transfer to third parties. We take the protection of your personal data very seriously. This is why we are particularly careful when it comes to passing on your data to third parties.

We only pass on data to third parties if there is a valid legal basis for the processing. For example, we transfer personal data to individuals or companies that carry out processing on our behalf in accordance with Art. 28 GDPR. A processor is any person or company that processes personal data on our behalf – in particular under our instruction and supervision.

In accordance with the provisions of the GDPR, we conclude contracts with all our processors obliging them to comply with data protection regulations and therefore to comprehensively protect your data.

5.    Storage duration and erasure

We erase your personal data as soon as it is no longer necessary for the purposes for which it was collected or otherwise processed, and also when processing is not necessary for the exercise of the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.

6.    SSL or TLS encryption[1]

For reasons of security and for the protection of the transmission of confidential information, e.g. enquiries you send us as the website provider, we use SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser address line changes from “http://” to “https://” and from the lock icon in your browser line.

When SSL or TLS encryption is activated, the data you send us can not be read by third parties.

7.    Cookies[2]

We use cookies on our website. Cookies are small data packets which your browser creates automatically and which are saved to your terminal device when you visit our website. These cookies save information about the terminal device you use.

We distinguish between technically necessary cookies and “other” cookies. Technically necessary cookies are essential in order to provide you with a service you expressly request.

a)    Technically necessary cookies

We use technically necessary cookies to ensure a positive experience of our website. These can be session cookies (e.g. language and font preferences, shopping basket etc.), consent cookies, cookies that ensure server stability and security and similar types. The legal basis for the cookies results from Art. 6 (1) (f) GDPR, our legitimate interest in the error-free functioning of the website and our interest in providing our services to you in an optimal way.

b)    Other cookies

Other cookies include cookies for statistical purposes, analysis and marketing and retargeting purposes.

We use these cookies, after receiving your consent, in accordance with Art. 6 (1) (a) GDPR.

You can withdraw your consent to the use of cookies at any time.

We will inform you that the withdrawal of your consent does not affect the legality of processing up to the time of the withdrawal.

To exercise your right to withdrawal, you can either alter your cookie settings on our website, deactivate the use of cookies in your browser settings (which may, however, restrict the functionality of the online services) or in individual cases chose an opt-out for the specific service.

For the individual services dealt with in this Privacy Policy, we inform you of the legal basis on which your data is processed.

Changing cookie settings[3]

8.    Cookie banners

For the purpose of obtaining consent to the cookies we use, we use the cookie banner of the service provider name, address. This sets a consent cookie which enquires about users’ consent and processes the data. This consent cookie is technically necessary and we use it based on our legitimate interest according to Art. 6 (1) (f) GDPR and Section 25, Subs. 1 TTDSG.

9.    Collection and storage of personal data as well as nature and purpose of use

a)    External hosting

Our website is hosted by Mittwald CM Service GmbH & Co.KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany. For this reason, all personal data collected by our website is stored on our web host’s servers, unless an external service of a third party is used. The stored data can be the IP address, your email address, communication data and similar data. Below, we explain the individual functions and services. Here, you can find out what concrete personal data is processed in each case. If we use an external service provided by a third party, we state this in the description of the service or tool.

The host processes your data only on our instruction and as far as necessary to provide the services on our website. The host does not process the data for its own purposes. We have concluded an order processing contract[4] with the host.

b)    Visiting our website

When you open our website, the browser used on your terminal device automatically sends information to the server of our website. This information is stored temporarily in a logfile. The following data is collected and stored until automatic erasure without any action on your part:

• IP address of the computer

• Date and time of the access

• Name and URL of the file opened

•The website from which you gained access (referrer URL)

• Browser and possibly the operating system of your computer and the name of your access provider

We process this data for the following purposes:

• To guarantee a stable connection to the website

• To guarantee comfortable use of our website

• Analysis of the system security and stability

• Troubleshooting

• Other administrative purposes

Data which can be linked to your person, e.g. your IP address, is erased at the latest after 7 days. If we save the data beyond this period, it is anonymised so that it can no longer be linked to you.

The legal basis for this data processing is Art. 6 (1) (f) GDPR. Our legitimate interest results from the purposes of data collection listed above. We never use the data collected to gain information about your person.

c)    Use of GoAccess

d)    Use of Google Maps

Our website uses the Google Maps API. The use of Google Maps allows information about your use of this website (including your IP address) to be transferred to a server of Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) in the USA and to be stored there.

Google may transfer the information gained through Maps to third parties if this is legally required or if third parties process this data on behalf of Google. However, your data is never linked with other data held by Google. Nevertheless, we must inform you that technically it would be possible for Google to identify individual users based on the data.

We have no influence on whether Google processes your personal data and personal profiles for other purposes. If you wish to completely rule this out, you can disable Google Maps and prevent the data transfer to Google. To do this, simply disable JavaScript in your browser. Then no data is transferred, but you can no longer use the map information on our website.

You can find the Google privacy policy here. [https://www.google.com/policies/privacy/?hl=de]

Our use of Google Maps means that Google also dynamically loads Google Fonts without the website operator or user being able to actively influence this. [5]These web fonts are loaded by means of a server call, usually via a Google server in the USA. This means that the following information may be transferred to the server and saved by Google:

·         Name and version of the browser used

·         Website from which the request originated (referrer URL)

·         Operating system of your computer

·         Screen resolution of your computer

·         IP address of the requesting computer

·         Language settings of the browser and/or operating system the user uses

You can find more information in the privacy policy of Google, available here:

www.google.com/fonts#AboutPlace:about

www.google.com/policies/privacy/

With Google Maps, we allow you to precisely locate our premises and to better plan your visit to us. We use Google Maps on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.[6]

10.  Rights of the data subject

You have the following rights:

a)    Information

In accordance with Art. 15 GDPR, you have the right to obtain information about the personal data we process. This covers information about

·         the purposes of the processing

·         the categories of personal data concerned

·         the recipients or categories of recipient to whom your person data has been or will be disclosed

·         the planned storage period or at least the criteria used to determine this period

·         the existence of the right to rectification, erasure, restriction of processing or objection

·         the right to lodge a complaint with a supervisory authority

·         the source of the personal data if it is not collected by us

·         The existence of automated decision-making, including profiling and, if applicable, meaningful information about the details

b)    Rectification

In accordance with Art. 16 GDPR, you have the right to obtain without delay the rectification of inaccurate or incomplete personal data stored by us.

c)    Erasure

In accordance with Art. 17 GDPR, you have the right to obtain from us the erasure of your personal data without delay if further processing is not necessary due to one of the following reasons:

·         the personal data is still necessary for the purposes for which it was collected or otherwise processed

·         for exercising the right of freedom of expression and information

·         for compliance with a legal obligation which requires processing according to European Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller

·         for reasons of public interest in the area of public health in accordance with Art. 9 (2) (h) and (i) as well as Art. 9 (e) GDPR

·         for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 (1) GDPR in as far as the right referred to in paragraph a) is likely to render impossible or seriously impair the achievement of the objectives of that processing

·         for the establishment, exercise or defence of legal claims

d)    Restriction of processing

In accordance with Art. 18 GDPR, you can obtain restriction of processing of your personal data for one of the following reasons:

·         You contest the accuracy of your personal data.

·         The processing is unlawful and you oppose the erasure of the personal data.

·         We no longer need the personal data for the purposes of the processing, but you need the data for the establishment, exercise or defence of legal claims.

·         You object to processing in accordance with Art. 21 (1) GDPR.

e)    Notification

If you request the rectification or erasure of your personal data or the restriction of processing in accordance with Art. 16, Art. 17 or Art. 18 GDPR, we notify all recipients to whom we have disclosed your personal data, unless this proves impossible or involves disproportionate effort. You can request that we inform you about these recipients.

f)     Data portability

You have the right to receive your personal data which you have provided to us in a structured, commonly used and machine-readable format.

You also have the right to request the transfer of this data to a third party where the processing is carried out by automated means and is based on consent in accordance with Art. 6 (1) (a) or Art. 9 (2) (a) or a contract in accordance with Art. 6 (1) (b) GDPR.

g)    Withdrawal

In accordance with Art. 7 (3) GDPR, you have the right to withdraw your consent at any time. If you withdraw your consent, this does not affect the legality of the processing carried out before the withdrawal of consent. With effect for the future, we are no longer permitted to continue the data processing which was based on your withdrawn consent.

h)    Complaint

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes the GDPR.

i)      Objection

If your personal data is processed based on legitimate interests in accordance with Art. 6 (1) (f) GDPR, you have the right in accordance with Art. 21 GDPR to object to the processing of your personal data on grounds relating to your particular situation or if you object to direct marketing. You have a general right to object to direct marketing without disclosing your particular situation. If you would like to exercise your right to withdrawal or objection, simply send an email todatenschutz.strate@remove-this.dueker.de.

j)      Automated individual decision-making including profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

              i.        is necessary for entering into, or performance of, a contract between you and us

             ii.        under legal provisions is authorised by a European Union or Member State to which we are subject and where the legal provisions also lay down suitable measures to safeguard your rights and freedoms as well as your legitimate interests

            iii.        is based on your explicit consent

However, these decisions may not be based on special categories of personal data referred to in Art. 9 (1) GDPR, unless (a) or (g) of Art. 9 (2) GDPR applies and suitable measures to safeguard your rights and freedoms as well as your legitimate interests are in place.

In the cases referred to in Art. 22 (2) (a) and (c) GDPR, we take suitable measures to safeguard your rights and freedoms as well as your legitimate interests, at least the right to obtain human intervention on our part, to express your point of view and to contest the decision.

11.  Changes to the Privacy Policy

If we change our Privacy Policy, we announce this on our website.

Date: 05/09/23