en

      Name and address of the controller

      We, STAGIL Corp. are the data controller within the meaning of the General Data Protection Regulation (DSGVO) and the German Data Protection Act (BDSG) as well as other data protection regulations, responsible for our website and the associated data processing. You will find complete information about our company in the imprint.

      USA

      STAGIL Corp.
      80 Pine Street
      New York, NY 10005
      E-mail address: info@stagil.com

      Germany:

      STAGILGmbH
      Walramstr.12
      65183 Wiesbaden
      E-Mail-Adresse: kontakt@stagil.de

      Data Protection Officer

      You can contact our data protection officer via the following contact details:

      USA:

      STAGIL Corp.
      -Data Protection-
      80 Pine Street
      New York, NY 10005
      E-Mail-Adresse: privacy@stagil.com

      Germany:

      STAGIL GmbH 
      -Data Policy-
      Walramstr. 12
      65183 Wiesbaden
      E-Mail-Adresse: privacy@stagil.com

      Data collection and general information

      1. 1. Description and scope of processing

      Our website collects a series of general data and information when a data subject or automated system accesses the website. This general data and information is stored in server log files.

      The data collected may include:

      • the types and versions of browser used
      • the operating system used by the accessing system
      • the Internet service provider of the access system
      • the Internet protocol address (IP address)
      • the date and time of access to the Internet site
      • the website from which an access system reaches our website (so-called "referrers").

      Legal basis for the processing

      Art. 6 para. 1 lit. f) GDPR serves as the legal basis for the temporary storage and processing of these data and log files (legitimate interests pursued by the controller).

      3. Purpose of processing

      When using this general data and information, we do not draw any conclusions about the data subject. Rather, this information is necessary to

      • correctly deliver the content of our website
      • optimize the content of our website
      • ensure the long-term viability of our computer systems and website technology, and
      • provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber-attack.

      Therefore, we statistically analyze anonymously collected data and information, with the aim of increasing the data protection and data security of our company and ensuring an optimal level of protection for the personal data we process. Anonymized data from server log files is stored separately from all personal data provided by the data subject.

      4. Duration of data storage

      The aforementioned data will be deleted as soon as they are no longer required for the purpose for which they were collected.

      In the case of data collection to provide the website, this is the case when the respective session has ended.

      In the case of storing the data in log files, the IP address of the data subject is deleted or alienated by us, so that an assignment of the calling customer is no longer possible and the data does not contain any personal reference.

      Contact by e-mail and customer service

      When website visitors fill out forms on our website, both content and metadata are processed.

      Categories of data processed:

      • Basic data (e.g., names, addresses).
      • Contact data (e.g., e-mail, phone numbers).
      • Content (e.g., text input, photos, videos).
      • Usage data (e.g., websites visited, links clicked, interest in content, access times).
      • Metadata / communication data (e.g., device information, IP addresses).
      • Interests: click paths and behavior on our website.

      Description and scope of processing

      You can contact us via our Service Desk and the e-mail addresses provided. In this case, the personal data of the sender, i.e. the data subject, transmitted with the request will be saved.

      2. Legal basis for processing

      Art. 6 para. 1 lit. f) GDPR serves as the legal basis for the processing of data transmitted in the course of contact (legitimate interests pursued by the data controller).

      In addition, Art. 6 para. 1 lit. b) GDPR serves as a legal basis, If the request is aimed at the conclusion of a contract (fulfillment of a contract).

      3. 3. Purpose of processing

      The processing of this personal data serves us only to process the contact.

      4. Duration of data storage

      The aforementioned data will be deleted as soon as they are no longer required for the purpose for which they were collected.

      In the case of personal data transmitted in the course of contact, this is the case when the respective conversation with the data subject has ended. The conversation ends when it can be deduced from the circumstances that the matter in question has been resolved.

      5. Right to object

      The data subject has the right to object to the processing of his or her data at any time. The objection should be sent to the following address privacy@stagil.com.

      In this case, all personal data stored during the contact will be deleted.

      Registration and login

      Description and scope of processing

      The data subject has the possibility to register on our website by indicating his or her personal data. Which personal data is transmitted to us is determined by the respective input mask used for registration. The personal data entered by the data subject is collected and stored exclusively for our internal use and for our own purposes, and is not passed on to third parties.

      When registering on our website, the following data will be collected and stored:

      • User name
      • Password
      • e-mail address
      • Personal name
      • an Internet Protocol address (IP address)
      • the date and time of registration

      When accessing one's registered account, the following data will be collected and stored:

      • User name
      • Password
      • an Internet Protocol address (IP address)
      • the date and time of registration

      Legal basis for the processing

      Art. 6 para. 1 lit. b) GDPR serves as a legal basis (fulfillment of a contract), since the registration and login area are necessary to fulfill contractual purposes or implement pre-contractual measures.

      3. 3. Purpose of processing

      Registration and login serve to provide our helpdesk support.

      4. Duration of data storage

      The above-mentioned data will be deleted as soon as they are no longer required for the purpose of their collection.

      This is the case during the registration process to fulfill contractual purposes or to implement pre-contractual measures, if the data is no longer required for the proper execution of the contract. Even after the conclusion of the contract, there may be a need to store personal data of the contracting party to fulfill contractual or legal obligations.

      5. Right to object

      A registered data subject is free to modify at any time the personal data specified during registration, or to delete them completely from the data file of the data controller. The request should be sent to the following email address: privacy@stagil.com

      General analysis with Google Analytics

      Description and scope of processing

      Our website uses Google Analytics, a web analytics service provided by Google Inc. It uses so-called "cookies", text files that are stored on the data subject's computer and explore the use of our website both in real time and over the long term. Among other things, it collects data about the website from which a data subject has arrived at a website (so-called "referrers"), which subpages of the website have been accessed or how often and for what period of time a subpage has been viewed. The information generated by the cookie about the behavior of the data subject is generally transmitted to and stored by Google on servers in the USA. However, as IPanonymization is activated on our website, Google must first truncate the IP address of the data subject in an EU or EEA country (only in case of technical interruption in Europe, for example, the IP address in the USA is truncated first).

      2. Legal basis for processing

      Art. 6 para. 1 lit. f) GDPR serves as the legal basis for the processing of this data (legitimate interests pursued by the controller).

      3. Purpose of processing

      Google will use this information on our behalf for the purpose of tracking your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. The statistics obtained help us to regularly improve the use of our website.

      4. Duration of data storage

      The above-mentioned data will be deleted as soon as they are no longer required for the purposes for which they were collected.

      5. Right to object

      The data subject may prevent the storage of cookies by selecting the appropriate settings in his or her browser. In addition, the data subject can prevent the collection of the data generated by the Google cookie (including the IP address of the data subject) by downloading and installing the browser plug-in available at the following link:

      https://tools.google.com/dlpage/gaoptout

      Other tools used on our website

      Google Tag Manager

      For the purpose of optimizing our website we use on the legal basis of Art. 6 para. 1 lit. f) GDPR (legitimate interests pursued by the controller) Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

      This allows us to manage the website tracking and analytics services described in this privacy statement in a single interface. In doing so, the data subject's browser automatically connects to Google's servers, where the data mentioned above under "Data collection and general information" is transferred from the browser to Google. We have no control over this data transfer and the further processing of data by Google.

      According to Google, the Tag Manager itself does not process any personal data of the data subject. Further information on this can be found in the Google Tag Managerusage policy. Further information on the purpose and scope of data collection and processing by Google, the data subject's rights and privacy settings can be found here.

      MyFonts counter

      On our website we use on the legal basis of Art. 6 para. 1 lit. f) GDPR (legitimate interests pursued by the controller) MyFonts Counter, a web analytics service of MyFonts Inc, 500 Unicorn Park Drive, Woburn, MA 01801, USA. ("MyFonts"). Under the terms of the license, page views are tracked by counting the number of visits to the website for statistical purposes and sending it to MyFonts. MyFonts only collects anonymous data. The data can be transmitted by activating JavaScript code in the browser of the data subject. More information about the MyFonts counter can be found in the MyFontsprivacy policy.

      To prevent the execution of JavaScript code from MyFonts as a whole, you can disable the use of JavaScript in the browser settings of the data subject or install a JavaScript blocker:

      www.noscript.net

      www.ghostery.com

      Matelso

      On our website we use on the legal basis of Art. 6 para. 1 lit. f) GDPR (legitimate interests pursued by the controller ) the call tracking technology of matelso GmbH, Heilbronnerstr. 150, 70191 Stuttgart ("Matelso"). Each telephone number listed on our website may be a "call tracking number", where the time, date, answer and duration of the call, as well as the telephone numbers of both parties, are recorded, stored and transmitted to Matelso and the called party for the purpose of determining the effectiveness of advertising. Further information can be found in Matelso's privacy statement.

      To prevent the execution of the JavaScript code of Matelso as a whole, you can disable the use of JavaScript in the browser settings of the interested party or install a JavaScript blocker:

      www.noscript.net

      www.ghostery.com

       

      CRM Platform HubSpot

      On our website we use HubSpot, a digital marketing tool provided by the US company HubSpot, Inc. headquartered at 25 First St 2nd Floor, Cambridge, MA, USA. The company has its European headquarters in Ireland with the address Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland.

      It is an integrated software solution covering various aspects of online marketing. HubSpot allows us, among other things, to manage existing and potential customers and customer contacts. With the help of HubSpot CRM, we can capture, organize and analyze customer interactions via email, social media or telephone through different channels. The personal data collected can be evaluated and used for communication with potential customers or for marketing activities (e.g. newsletter mailings). With HubSpot CRM, we can also capture and analyze the user behavior of our contacts on our website.

      HubSpot uses cookies, small text files that are stored locally in the cache of your web browser on your device, which allow us to analyze your use of the website. HubSpot analyzes the information collected (e.g., IP address, geographic location, browser type, length of visit, and pages visited) on our behalf so that we can generate reports about the visit and the pages visited.

      The information collected by HubSpot is stored on servers provided by HubSpot's service providers. The processing of personal data is contractually agreed to take place exclusively within the EU. However, we would like to point out that it cannot be completely ruled out that personal data may be transferred to the USA or may be accessed by US law enforcement authorities.

      In the case of the USA, there is an adequacy decision of the EU Commission under Art. 45 para. 1 GDPR relating to companies certified under the EU-US Data Privacy Framework. HubSpot, Inc. is certified under the EU-US Data Privacy Framework and is therefore committed to complying with the appropriate data protection rules, which can be found at the following link: www.dataprivacyframework.gov/s/participant-search. This means that any transfer of data to the USA is considered unobjectionable due to the current adequacy decision of the European Commission dated July 10, 2023.

      In the case of possible transfers to other third countries outside the EU and EEA for which there is no adequacy decision of the European Commission, the standard data protection clauses pursuant to Art. 46 para. 2 lit. c) GDPR. These clauses oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe. The data processing agreement, which corresponds to the standard contractual clauses, is available at https//legal.hubspot.com/dpa.

      Purpose and legal basis

      The collection and storage of data only occurs with explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. This consent can be revoked at any time with effect for the future.

      Duration of storage

      The data will be deleted as soon as they are no longer required for the purposes for which they were collected. The specific storage duration of the processed data is not influenced by us, but is determined by HubSpot, Inc. You will find more information in the HubSpot CDN privacy policy: https://legal.hubspot.com/de/privacy-policy.

      You can permanently object to the collection of data by HubSpot and the installation of cookies by preventing the storage of cookies through your browser settings. You can also object to the processing of your personal data at any time with effect for the future.

      For more information on data protection, please refer to HubSpot's privacy policy, HubSpot's information on the EU GDPR and information on the cookies used by HubSpot.

       

      Rights of the data subject

      If personal data of a user is processed, the user is a "data subject" within the meaning of the GDPR. The data subject has the following rights vis-à-vis us as the controller:

      • Right of confirmation
      • Right of rectification
      • Right to restriction of processing
      • Right to erasure (right to be forgotten)
      • Right of access
      • Right to data portability
      • Right to object
      • Right to withdraw consent
      • Right to complain to a supervisory authority