Imprint | Privacy policy

I. Name and address of the controller

STI Line Ltd. t/a InContrast

Insight Centre, Grosvenor Road, Gillingham Business Park

Gillingham, Kent ME8 0SA

United Kingdom

Phone: +44 1634 377590

is the controller within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws.

General information on data processing

1. Scope of processing personal data

We only collect and use personal data from users of our website to the extent necessary to provide a functional website, our content, and our services.

As a matter of principle, the collection and use of our users' personal data only takes place with their consent. An exception to this principle applies in cases where the processing of data is permitted by law or where it is not possible to obtain prior consent for practical reasons.

2. Legal basis for the processing of personal data

The legal basis for the processing of personal data is generally derived from:

Art. 6 (1) (a) GDPR when obtaining the consent of the data subject.

Art. 6 (1) (b) GDPR for processing that serves to fulfill a contract to which the data subject is a party. This also includes processing operations that are necessary for the implementation of pre-contractual measures.

Art. 6 (1) (c) GDPR for processing that is necessary for compliance with a legal obligation.

Art. 6 (1) (d) GDPR for processing that is necessary to protect the vital interests of the data subject or another natural person.

Art. 6 (1) (f) GDPR, if processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights, and freedoms of the data subject do not override the former interest. In order to be able to base the processing of personal data on a legitimate interest, a review is carried out for each relevant process in consultation with the data protection officer, whereby the following three conditions must be met:

1) The controller responsible for processing the personal data or a third party has a legitimate interest in the data processing.

2) The processing is necessary to safeguard the legitimate interest.

3) The interests or fundamental rights and freedoms of the data subject requiring the protection of personal data do not override this interest.

3. Data deletion and storage period

The personal data of users will be deleted or blocked as soon as the purpose of storage no longer applies. Further storage may take place if this has been provided for by the European or national legislator in Union regulations, laws, or other provisions to which the controller is subject. The data will also be blocked or deleted when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

Use of our website, general information

4. Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the user's computer system. The following information may be collected:

Information about the browser type and version used, the user's operating system, the user's Internet service provider, the user's IP address, date and time of access, websites from which the user's system accesses our website, websites accessed by the user's system via our website

The data described is stored in our system's log files. This data is not stored together with other personal data of the user.

5. Purpose and legal basis for data processing

The temporary storage of the IP address by our system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

The data is stored in log files to ensure the functionality of the website. In addition, the data helps us to optimize the website and ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context.

The legal basis for the temporary storage of data and log files is Art. 6 (1) (f) GDPR.

The collection of your personal data for the provision of our website and the storage of the data in log files is essential for the operation of the website. Therefore, there is no possibility for the user to object.

6. Duration of storage

Your data will be deleted as soon as it is no longer required for the purpose for which it was collected. If your data is collected to ensure the provision of the website, the data will be deleted when the respective session is ended.

If your data is stored in log files, it will be deleted after seven days at the latest. Storage beyond this period is possible, in which case the IP addresses of users will be deleted or anonymized. It will then no longer be possible to assign the data to the client that accessed the site.

General information on the use of cookies

We use cookies on our website. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When you visit a website, a cookie may be stored on your operating system. This contains a characteristic string of characters that enables the browser to be uniquely identified when the website is visited again.

We use cookies to make our homepage more user-friendly. Some elements of our website require that the browser can be identified even after a page change.

GDPR:

When cookies are used, the following data is stored and transmitted:

Browser type and browser version Operating system used Referrer URL
Host name of the accessing computer Time of the server request
IP address

The legal basis for the processing of personal data using cookies is Art. 6 (1) (f) GDPR. The purpose of using technically necessary cookies is to simplify the use of our website.

We would like to point out that individual functions of our website can only be offered with the use of cookies.

We do not use user data collected by technically necessary cookies to create user profiles.

Cookies are stored on the user's computer and transmitted to our site by the user. As a user, you therefore have control over the use of cookies. You can restrict or deactivate the transmission of cookies by making changes to the settings of your Internet browser. Stored cookies can also be deleted there. Please note that you may no longer be able to use all the functions of our website if you deactivate cookies.

The legal basis for the processing of personal data using cookies for analysis and advertising purposes is Art. 6 (1) (a) GDPR, provided that the user has given their consent.

Cookie consent

Your rights / Rights of the data subject

Under the EU General Data Protection Regulation, you as the data subject have the following rights:

1. Right to information

You have the right to obtain information from us as the controller as to whether and which personal data concerning you is processed by us as well as further information in accordance with the legal requirements under Articles 13 and 14 of the GDPR.

You can assert your right to information at:

datenschutz@sti-group.com

2. Right to rectification

If the personal data we process concerning you is incorrect or incomplete, you have the right to request that we correct and/or complete it. The correction will be made without delay.

3. Right to restriction

You have the right to restrict the processing of personal data concerning you in accordance with the statutory provisions (Art. 18 GDPR).

4. Right to erasure

If the reasons set out in Art. 17 GDPR apply, you can request that the personal data concerning you be erased without delay.

Please note that the right to erasure does not apply if processing is necessary for one of the exceptions listed in Art. 17 (3).

5. Right to notification

If you have exercised your right to rectification, erasure, or restriction of processing, we are obliged to notify all recipients to whom your personal data has been disclosed of this rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. You also have the right to be informed about these recipients.

6. Right to data portability

Under the GDPR, you also have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format or to request that it be transferred to another controller.

7. Right to revoke the data protection consent declaration

You have the right to withdraw your declaration of consent under data protection law at any time. We would like to point out that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

8. Right to object

Furthermore, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) GDPR.

9. Automated decision-making in individual cases, including profiling

Under the EU General Data Protection Regulation, you also have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

10. Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work, or the place of the alleged infringement.

Minors under the age of 16

We would like to point out that legal guardians must supervise their children's online activities. Minors under the age of 16 should not transmit any personal data to us without the consent of their parents or legal guardians. We explicitly do not request personal data from minors under the age of 16, do not knowingly collect such data, and do not pass it on to third parties.

Newsletter

General

For information on the STI Group Newsletter, please visit: https://www.sti-group.com/data-protection-and-privacy-policy.html

Hosting

We host the content of our website with the following provider:

WIX

Our website is hosted by WIX (Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (hereinafter ‘WIX’)). For this purpose, we have concluded a contract for data processing (data processing agreement) with WIX. When you visit our website, WIX stores cookies on your browser and collects various log files, including your IP addresses, which are necessary for the display of the website and to ensure security.

WIX collects data that is stored on various servers worldwide. For details, see WIX's privacy policy: https://de.wix.com/about/privacy.

The use of WIX is based on Art. 6 (1) lit. f GDPR. We have a legitimate interest in ensuring that our website is displayed as reliably as possible. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR, insofar as the consent includes the storage of cookies or access to information on the user's end device (e.g., for device fingerprinting). Consent can be revoked at any time.

According to WIX, data transfers to countries outside the scope of the GDPR (third countries) are based on the standard contractual clauses of the EU Commission or comparable guarantees in accordance with Art. 46 GDPR. Details can be found here: https://de.wix.com/about/privacy-dpa-users.

Electronic contact

If you would like to contact us, a contact form is available on our homepage, which you can use to contact us electronically. The data entered in the input mask is transmitted to us and stored. This data includes:

Email address
First name
Last name
Telephone number
Company name
Industry
Projekt title
Categories of help
Your request or message

You can also contact us via the email address provided. In this case, the user's personal data transmitted with the email will be stored.

Your data will not be passed on to third parties in this context; the data will be used exclusively for the purpose of processing the communication.

The legal basis for processing the contact request and its handling is generally Art. 6 (1) (b) GDPR.

If further personal data is processed during the sending process, this is only to prevent misuse of the contact form and to ensure the security of our information technology systems.

Your data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. For personal data from the input mask of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

WIX analytics

Google Tag Manager

This website uses Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags via an interface. The tool itself (which implements the tags) does not use cookies and, for technical reasons, only collects your IP address. The tool triggers other tags, which in turn may set cookies and collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.

If we have obtained your consent, the legal basis for the use of Google Tag Manager is Art. 6 (1) (a) GDPR. Otherwise, the legal basis for the use of the technically necessary cookie is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

Further information can be found in the provider's terms of use at: https://www.google.com/intl/de/tagmanager/use-policy.html.

Google Web Fonts

We integrate the fonts ("Google Web Fonts") from the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, based on our legitimate interests pursuant to Art. 6 para. 1 s. 1 lit. f GDPR. The objective is to optimize and economically operate our homepage.

A direct connection to Google's servers is established when the page is accessed, and the user's IP address is transmitted.

We host the fonts from our own servers so that no data is transmitted to Google.

The privacy policy of the provider can be found at: https://www.google.com/policies/privacy.

Google Maps

We use Google Maps offer on our website. This allows us to show you interactive maps right on the website and allow you to conveniently use the map feature.

By visiting the website, Google receives the information that you have accessed the corresponding subpage for our website. In addition, the information referred to in Section IV of this statement will be transmitted to Google. This is done regardless of whether Google provides a user account that you are logged in to, or if there is no user account. When you're logged in to Google, your data will be assigned di-rectly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for advertising, market research and/or needs-based website design. This type of an evaluation is carried out (even for users who are not logged in) for the purpose of providing appropriate advertising and to inform other users of the

social network about your activities on our website. You have a right of objection to the formation of these user profiles, and you must contact Google to exercise this right.

Insofar as we obtain your consent, the legal basis for the use of the plug-in is your consent pursuant to Art. 6 para. 1 s. 1 lit. a GDPR. How the respective social media providers process your personal data can be found in the respective privacy policy. We are not the responsible party in the sense of the GDPR for the data processing of the social media providers.

When using Google Maps on our website, the provider Google Ireland Limited, Gor-don House, Barrow Street, Dublin 4, Irland, directly integrates the fonts ("Google Web Fonts"). The provider of Google Maps is responsible for this.

Please refer to the provider's privacy policy for more information on the purpose and scope of the data collection and processing by the plug-in provider. There you will also find details on your rights and settings options for protecting your privacy. https://www.google.com/policies/privacy.

Social Media

We currently use the following social media platforms:

Facebook

Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Irland

Opt-Out: https://www.facebook.com/settings?tab=ads

and http://www.youronlinechoices.com

Supplementary agreement Insights data: https://www.facebook.com/legal/terms/page_controller_addendum

Instagram

Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Irland

YouTube (Google)

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland

Opt-Out: https://adssettings.google.com/authenticated

LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland

Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out,

Social media presence

We maintain fan pages within social networks to communicate with customers, prospects and users who are active there and to inform them about our services.

We would like to point out that your personal data may be processed out-side the European Union, which may pose risks to you (e.g., in enforcing your rights under European/German law).

These users’ data is usually processed for market research and advertising purposes. Thus, for example, user profiles that are created based on the user’s behavior and interests. These profiles can be used to place advertisements that allegedly is within the users' interests. For these purposes, technologies such as cookies are used to observe the user’s behavior and to evaluate each user’s interests. Furthermore, data may also be stored in the usage profiles regardless of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).

Processing personal user data is based on our legitimate interests in effective communication with users in accordance with. Art. 6 para. s.1 lit. f. GDPR. If users give their consent over processing of their personal information by a social network (which is the case if they declare their agreement, for example, by ticking a check box or clicking on a button to consent), the legal basis for processing user info is Art. 6 para. s.1 lit. a GDPR.

You can obtain further information on the processing of your personal data as well as your objection options under the listed links of the respective provider. The assertion of information and other rights of the data subjects can also be made against the providers, then only those who have direct access to the data of the users and have the corresponding information. Of course, we are available to answer questions and provide support if you need assistance.

A supplementary agreement is concluded with some social media platforms when operating a fan page. According to this, data subject rights can usually be asserted both with the social media platform and with us. However, the primary responsibility under the GDPR for the processing of insights data lies with the social media platform and it fulfills all obligations under the GDPR regarding the processing of insights data. In this context, the social media platform provides the essence of the page insights supplement to the data subjects.

We, as the operator of the fan page, do not make any decisions regarding the processing of Insights data and all other information resulting from Art. 13 of the GDPR, such as the legal basis, the identity of the responsible party and the storage period of cookies on the user end devices.

AUDIO AND VIDEO CONFERENCES

We use online conference tools, among other things, to communicate with our customers. The specific tools we use are listed below. If you communicate with us via video or audio conference over the Internet, your personal data will be collected and processed by us and the provider of the respective conference tool. The following personal data is processed in this process:

Cloud recordings
Chat/instant messages
Voicemails
Uploaded photos and videos
Files
Whiteboards
Other information shared while using the service

Processing is based on voluntary consent in accordance with Art. 6 (1) (a) GDPR and Art. 7 GDPR.

Insofar as special categories of personal data are concerned (e.g., conclusions about ethnic origin, religion, health), processing is based on Art. 9 (2) (a) GDPR.

The recipients are as follows:

Microsoft Ireland Operations Limited (Office 365/Teams) as a processor pursuant to Art. 28 GDPR

Social media for planned publication: LinkedIn, YouTube, Instagram

In addition, we would have further recipients within the STI Group via the intranet.

Consent can be revoked in whole or in part at any time without giving reasons. In the event of withdrawal of consent, the recordings in question will no longer be used in new publications or otherwise republished for the aforementioned purposes. In addition, the video, image, and audio recordings in question will be removed from publications within two weeks of withdrawal, as far as possible and within the area of responsibility of STI - Gustav Stabernack GmbH.

The video, image, audio, and video recordings will be deleted from the servers promptly after receipt of the revocation, subject to statutory or legal retention obligations.

GoToMeeting

We use GoToMeeting. The provider is LogMeIn, Inc., 320 Summer Street Boston, MA 02210, USA. Details on data processing can be found in the GoToMeeting privacy policy:

www.logmeininc.com/de/legal/privacy.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:

logmeincdn.azureedge.net/legal/lmi-customer-dpa-2020v1-de.pdf.

We have concluded a Data Processing Agreement (DPA) with the above-mentioned provider. This is a contract required by data protection law, which ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

Microsoft Teams

We use Microsoft Teams. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Details on data processing can be found in the Microsoft Teams privacy policy: privacy.microsoft.com/en-us/privacystatement.

We have concluded a Data Processing Agreement (DPA) with the above-mentioned provider. This is a contract required by data protection law, which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.