Data protection

This privacy statement explains how we process your personal data (hereinafter referred to as “data”).

1 Privacy statement

1.1 Data controller

In accordance with the provisions in the General Data Protection Regulation (GDPR), the data controller is:

Sto SE & Co. KGaA
Ehrenbachstr. 1
D- 79780 Stühlingen
Tel.: +49 77 44 57-0
Web: https://www.sto.de
E-Mail: infoservice@sto.com

1.2 Contact details for our data protection officer

Lorenzo Foglia
Ehrenbachstr. 1
D-79780 Stühlingen
datenschutzbeauftragter@sto.com

1.3 General information on data processing

We process data as part of our business and website activities. This includes disclosing data by transferring it to third parties and, where applicable, to non-member countries outside the European Union (hereinafter referred to as the “EU”) and the European Economic Area (hereinafter referred to as the “EEA”). In cases where we transfer data to parties or locations outside the EU or EEA, we identify this as outlined below.

1.4 Joint responsibility

We use dynamic content (hereinafter referred to as “content”) from third parties to optimise the appearance and content of our website. When you visit our website, a request is sent automatically to the corresponding content provider’s server via an interface. Certain log data (e.g. the user’s IP address) is transferred in this request. The dynamic content is then transferred to our website, where it is displayed.

2. Your rights as a data subject

2.1 Information and access

You can request information about/access to all personal data we are holding for you, free of charge and at any time.

2.2 Rectification, erasure, restriction of processing (blocking), objection

If you no longer agree to your personal data being stored or if your personal data is no longer correct, on receipt of a corresponding instruction from you, we will have your data erased or blocked or make the necessary corrections (insofar as this is possible under applicable law). The same applies if we are to restrict the processing of your data in the future. In particular, you have the right to object in cases where your data is necessary for the performance of a task in the public interest or our legitimate interest, including any profiling that is based on this. You also have the right to object in cases where data is processed for direct marketing purposes.

2.3 Your right to withdraw consent with effect for the future

You can withdraw consent with effect for the future at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

2.4 Data portability

If data is being processed on the basis of a contract or negotiations prior to entering into a contract, on the basis of consent, or using automated methods, you have the right to data portability. On request we will provide your data to you in a commonly used, structured, and machine-readable format so that you can transfer this data to another controller should you wish to do so.

2.5 Right to lodge a complaint

You also have the option to lodge a complaint with a supervisory authority in relation to your rights as a data subject.

2.6 Restrictions

The above rights do not apply to data where we are not able to identify the data subject (if the data has been anonymised for analysis purposes, for example). It may be possible for you to exercise your right to access/be informed, right to erasure, right to block, right to rectification, or transfer to another organisation in relation to this data if you provide us with additional information that will enable us to identify you.

3. Exercising your rights as a data subject

If you have any questions about the processing of your personal data or if you wish to exercise your right to access/be informed, right to rectification, right to block, right to object, or right to erasure, or should you wish to submit a request for your data to be transferred to another organisation, please contact datenschutzbeauftragter@sto.com.

4 Data processing

The specific items of data affected, purposes of processing, legal bases, recipients, and, where applicable, transfers to non-member countries are listed below: