Shopping cart

Data Protection

Types of data processed:

• Inventory data (e.g., names, addresses).
• Contact data (e.g., email addresses, telephone numbers).
• Content data (e.g., text entries, photographs, videos).
• Contract data (e.g., subject matter of the contract, term, customer category).
• Payment data (e.g., bank details, payment history).
• Usage data (e.g., websites visited, interest in content, access times).
• Meta/communication data (e.g., device information, IP addresses).

Categories of persons affected by the processing:

• Customers / prospects / suppliers.
• Visitors and users of the online service.

In the following, we will refer to the affected persons collectively as “users”.

Purpose of processing:

• Provision of the online service, its content and functions.
• Performance of contractual services.
• Responding to contact requests and communicating with users.
• Security measures.

As of May 4, 2024

Relevant legal bases

Below, we explain the legal bases under the General Data Protection Regulation (GDPR) on which we process personal data. Please note that in addition to the GDPR, national data protection regulations may apply in your or our country of residence or establishment. If more specific legal bases apply in individual cases, we will inform you of these in the privacy policy.

Consent (Art. 6 para. 1 sentence 1 lit. a. GDPR)  – The data subject has given consent to the processing of his or her personal data for one or more specific purposes.

Contractual performance and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b. GDPR)  – The processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract.

Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR)  – Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

Changes and updates to the privacy policy

We ask that you regularly review the content of our privacy policy. We will update the privacy policy as soon as changes to our data processing activities make this necessary. We will inform you if any changes require action on your part (e.g., consent) or any other individual notification.

If we provide addresses and contact information for companies and organizations in this privacy policy, please note that the addresses may change over time, and we ask that you check the details before contacting them.

This privacy policy is currently valid and was last updated in May 2024.

Due to the ongoing development of our website and related services, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed and printed at any time on our website at www.stark1services.de/datenschutz.

Stark 1 Services,
Wildenbruchstr. 5,
12045 Berlin,
Germany

This extended privacy policy provides more detailed information on various aspects of data collection and processing, including newsletter registration, use of services and the specific rights you have under the GDPR.

§ 1 General Information and Mandatory Disclosures

(1) The protection of your personal data is of particular importance to us. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

(2) The controller responsible for data processing on this website is:

Stark 1 Services,
Wildenbruchstr. 5,
12045 Berlin
, Germany,
Phone: +49 157 33557088
, Email: info@stark1services.de

(3) The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (Art. 4 No. 7 GDPR).

§ 2 Collection and storage of personal data and the nature and purpose of its use

(1) When visiting the website

When you access our website www.stark1services.de, your browser automatically sends information to our website’s server. This information is temporarily stored in a log file. The following information is collected automatically and stored until it is automatically deleted:

The IP address of the requesting computer,
the date and time of access,
the name and URL of the retrieved file,
the website from which access was made (referrer URL),
the browser used, and, if applicable, the operating system of your computer and the name of your access provider.
We process this data for the following purposes:

Ensuring a smooth connection to the website,
guaranteeing comfortable use of our website,
evaluating system security and stability, and
for other administrative purposes.
The legal basis for data processing is Article 6(1)(f) GDPR. Our legitimate interest arises from the data collection purposes listed above. Under no circumstances do we use the collected data to draw conclusions about your identity.

(2) When using our contact form

For any questions, you can contact us using the form provided on our website. A valid email address is required so we know who is contacting us and can respond. Providing additional information is optional.

Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your freely given consent.

(3) When you subscribe to our newsletter

If you have expressly consented in accordance with Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR, we will use your email address to send you our newsletter regularly. Providing an email address is sufficient to receive the newsletter. You can unsubscribe at any time, for example, via a link at the end of each newsletter. Alternatively, you can also send your unsubscribe request to info@stark1services.de at any time.

(4) When using our services

When you use our services, we collect the following information:

Title, first name, last name,
a valid email address,
postal address,
telephone number (landline and/or mobile).
This data is collected,

To identify you as our customer;
to process your request and order appropriately;
for correspondence with you;
for invoicing;
for handling any liability claims and asserting any claims against you; and
for managing our customer data.
Data processing is carried out at your request and, according to Article 6 Paragraph 1 Sentence 1 Letter b GDPR, is necessary for the aforementioned purposes for the proper processing of the order and for the mutual fulfillment of obligations arising from the service contract.

Section 3 Disclosure of Data

Your personal data will not be transmitted to third parties for purposes other than those listed below.

We only share your personal data with third parties if:

You have given your explicit consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
the disclosure is necessary in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR for the establishment, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
in the event that there is a legal obligation to disclose the data in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR, and
this is legally permissible and necessary in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR for the performance of a contract with you.

§ 4 Rights of Data Subjects

You have the right:

In accordance with Article 15 of the GDPR, you have the right to request information about your personal data processed by us. In particular, you can request information about the purposes of the processing, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if they were not collected by us, and the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved;
in accordance with Article 16 of the GDPR, you have the right to request the immediate rectification of inaccurate personal data or the completion of incomplete personal data stored by us;
in accordance with Article 17 of the GDPR, you have the right to request the erasure of your personal data stored by us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
In accordance with Article 18 of the GDPR, you have the right to request the restriction of processing of your personal data if you contest the accuracy of the data, the processing is unlawful but you oppose its erasure, we no longer need the data but you require it for the establishment, exercise or defense of legal claims, or you have objected to processing pursuant to Article 21 of the GDPR;
in accordance with Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller;
in accordance with Article 7(3) of the GDPR, you have the right to withdraw your consent at any time. This means that we will no longer be permitted to process the data based on this consent in the future. You also have the right
to lodge a complaint with a supervisory authority pursuant to Article 77 of the GDPR. Generally, you can contact the supervisory authority of your habitual residence, your place of work, or our company’s registered office.

§ 5 Right of withdrawal

You have the right to withdraw your consent pursuant to Art. 7 para. 3 GDPR with effect for the future.

§ 6 Right to object

If your personal data is processed on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right to object to the processing of your personal data pursuant to Article 21 GDPR, provided there are grounds relating to your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without requiring you to specify a particular situation.

If you wish to exercise your right of withdrawal or objection, simply send an email to info@stark1services.de.

§ 7 Data security

During your visit to our website, we use the widely used SSL (Secure Socket Layer) protocol in conjunction with the highest level of encryption supported by your browser. This is typically 256-bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v3 technology instead. You can recognize whether an individual page of our website is transmitted in encrypted form by the closed padlock symbol in the lower status bar of your browser.

We also employ appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

Cookies and the right to object to direct marketing

We use temporary and permanent cookies, i.e., small files that are stored on users’ devices (for an explanation of the term and function, see the last section of this privacy policy). Some of these cookies are used for security purposes or are necessary for the operation of our online services (e.g., for displaying the website) or to save the user’s decision when confirming the cookie banner. In addition, we or our technology partners use cookies for audience measurement and marketing purposes, about which users are informed in the course of this privacy policy.

You can generally object to the use of cookies for online marketing purposes with many services, especially in the case of tracking, via the EU website  http://www.youronlinechoices.com/  . Furthermore, you can prevent the storage of cookies by disabling them in your browser settings. Please note that this may prevent you from using all the functions of this website.

Deletion of data

The data we process will be erased or its processing restricted in accordance with Articles 17 and 18 of the GDPR. Unless expressly stated otherwise in this privacy policy, the data stored by us will be erased as soon as it is no longer required for its intended purpose and there are no legal obligations to retain it. If the data is not erased because it is required for other legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.

According to legal requirements, records must be retained for 7 years in particular pursuant to Section 132 Paragraph 1 BAO (accounting records, receipts/invoices, accounts, vouchers, business papers, statements of income and expenses, etc.), for 22 years in connection with real estate and for 10 years for documents relating to electronically supplied services, telecommunications, broadcasting and television services provided to non-entrepreneurs in EU member states and for which the Mini One-Stop-Shop (MOSS) is used.

Provision of contractual services

We process inventory data (e.g., names, addresses, and contact details of users) and contract data (e.g., services used, names of contact persons, payment information) for the purpose of fulfilling our contractual obligations and providing services in accordance with Article 6 Paragraph 1 Letter b of the GDPR. Entries marked as mandatory in online forms are required for the conclusion of the contract.

Data is deleted after the expiry of statutory warranty periods and comparable obligations; the necessity of retaining the data is reviewed every three years; in the case of statutory archiving obligations, deletion occurs after their expiry (end of commercial (7 years) and tax (10 years) retention periods); information in the customer account remains until the account is deleted.

Contact

When you contact us (via contact form or email), the information you provide will be processed in accordance with Art. 6 para. 1 lit. b) GDPR for the purpose of processing and handling your contact request.

User data may be stored in our billing system.

We delete inquiries when they are no longer needed. We review the necessity of retaining inquiries every two years. In the case of statutory archiving obligations, deletion occurs after their expiry (end of the commercial (7 years) and tax-related (10 years) retention periods).

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

reCAPTCHA is used to verify whether data entry on our websites (e.g., in a contact form) is done by a human or an automated program. To do this, reCAPTCHA analyzes the website visitor’s behavior based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various pieces of information (e.g., IP address, the website visitor’s time spent on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analysis runs entirely in the background. Website visitors are not notified that an analysis is taking place.

Data processing is carried out on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its web services from abusive automated data scraping and spam.

Further information about Google reCAPTCHA and Google’s privacy policy can be found at the following links:  https://www.google.com/intl/de/policies/privacy/  and  https://www.google.com/recaptcha/intro/android.html .

Collection of access data and log files

Based on our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR, we collect data about every access to the server on which this service is located (so-called server log files). Access data includes IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred, website from which the request originated, browser, operating system and its interface, language and version of the browser software.

Log file information is stored for a maximum of 3 months for security reasons (e.g., to investigate misuse or fraud) and then deleted. Data that needs to be retained for evidentiary purposes is exempt from deletion until the respective incident has been fully resolved.

Google Analytics and Google Tag Manager

Our website uses features of the web analytics service Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA. This service uses cookies to analyze how users interact with the website. The information generated by these cookies is transmitted to and stored on Google’s servers.

We have concluded a corresponding data processing agreement with the provider.

Your IP address is recorded, but immediately pseudonymized. This allows only a rough localization.

The relationship with the web analytics provider is based on standard contractual clauses or an adequacy decision by the European Commission (e.g. in the case of the USA: “Privacy Shield”).

Data processing is carried out on the basis of the legal provisions of Section 96 Paragraph 3 TKG as well as Article 6 Paragraph 1 Letter a (consent) and/or f (legitimate interest) of the GDPR.

Our legitimate interest, as defined by the GDPR, is to improve our services and website. Because the privacy of our users is important to us, user data is pseudonymized.

User data will be stored for a period of 24 months.

Google Tag Manager

This website uses Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags through a single interface. The Tag Manager tool itself (which implements the tags) is a cookieless domain and does not collect any personally identifiable information. The tool triggers other tags, which may in turn collect data. Google Tag Manager does not access this data. If tracking has been disabled at the domain or cookie level, this setting will remain in effect for all tracking tags implemented with Google Tag Manager.

Objection to tracking

You can prevent the storage of cookies by adjusting your browser settings; however, please note that in this case you may not be able to fully utilize all the functions of this website. Furthermore, you can prevent Google from collecting and processing data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser add-on, or when using browsers on mobile devices, please click the link below to prevent Google Analytics from collecting data on this website in the future. This will place an opt-out cookie on your device. If you delete your cookies, you will need to click this link again.

Disable Google Analytics

Further information on terms of use and data protection can be found at  http://www.google.com/analytics/terms/de.html  and  https://support.google.com/analytics/answer/6004245?hl=de .

AdWords Conversion Tracking

Our website uses Google AdWords, including conversion tracking. Google Conversion Tracking is an analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). When you click on an ad placed by Google, a conversion tracking cookie is stored on your computer. This cookie is valid for 30 days. Until then, Google and our website can recognize that you clicked on the ad and were redirected to this page.

Each Google AdWords customer receives a different cookie; therefore, we receive a different one than other website operators. This information is used to generate statistics for Google AdWords customers. Google AdWords customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can personally identify users (i.e., you).

If you do not wish to participate in tracking, you can object to this use by preventing the installation of cookies through a corresponding setting in your browser software (either general deactivation or only cookies from the domain “googleleadservices.com”). You will then not be included in the conversion tracking statistics. Further information and Google’s privacy policy can be found at:  https://policies.google.com/technologies/ads?hl=de  and  https://policies.google.com/privacy?gl=de .

Google Maps

On our website, we use Google Maps (API) from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Maps is a web service for displaying interactive maps to visually represent geographic information. Using this service allows us to show you our location and makes it easier for you to find directions.

When you access any page on our website that includes a Google Maps map, information about your use of our website (such as your IP address) is transmitted to and stored on Google servers in the USA. This occurs regardless of whether you have a Google account and are logged in. If you are logged into Google, your data will be directly associated with your account. If you do not want this data to be associated with your Google profile, you must log out before activating the map. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them. This analysis is carried out, in particular, in accordance with Article 6 Paragraph 1 Letter f of the GDPR, based on Google’s legitimate interests in displaying personalized advertising, conducting market research, and/or designing its website to meet user needs. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact Google.

Google LLC, based in the USA, is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection applicable in the EU.

If you do not agree to the future transfer of your data to Google in connection with the use of Google Maps, you can also completely deactivate the Google Maps web service by disabling JavaScript in your browser. Google Maps, and therefore the map display on this website, will then be unavailable.

You can view Google’s Terms of Service at  http://www.google.de/intl/de/policies/terms/regional.html  , and the additional Terms of Service for Google Maps at  https://www.google.com/intl/de_US/help/terms_maps.html.  Detailed information on data protection in connection with the use of Google Maps can be found on Google’s website (“Google Privacy Policy”):  http://www.google.de/intl/de/policies/privacy/