Privacy Policy

German Secure Tec Solutions GmbH Büchel 12–14 41460 Neuss Germany

Represented by Managing Director Mohammadreza Bagherzadeh.

Contact:

• Telephone: +49 2131 70 861861
• Email: info@germansts.de
• Website: https://germansts.de

For privacy-related enquiries, you may contact us at info@germansts.de.

Personal data means information relating to an identified or identifiable natural person. We process personal data only where necessary to operate the website, handle enquiries, take pre-contractual steps, perform contractual or legal obligations, or pursue legitimate interests.

germansts.de is provided on a virtual server operated by us. The server infrastructure is hosted by IONOS SE in Germany (European Economic Area). HTTP access is handled by an Nginx reverse proxy on the same host; the application listens on localhost only and is not exposed publicly.

When you access the website, the web server processes technically necessary connection data. This may include in particular IP address, date and time of the request, requested URL, HTTP status, volume of data transferred, referrer, and information about browser and operating system.

Purposes: secure website delivery, error diagnosis, protection against abuse, system stability and technical administration.

Legal basis: Article 6(1)(f) GDPR.

Our legitimate interest is the secure, stable and abuse-resistant operation of the website.

Nginx access and error log data are generally deleted or overwritten after 14 days (daily rotation, 14 generations retained), unless a security investigation or legal retention requires longer processing. systemd journal entries are retained under this server’s system-wide journal settings; no separate fixed calendar maximum is currently configured.

When you open the website, no analytics, marketing or profiling cookies are set without your consent. The only consent-requiring service is Google Analytics 4 (section 13); it is loaded solely if you choose “Accept analytics” in the consent banner. Without that consent, no connection to Google Analytics is established.

The language version follows from the URL path (/de or /en). A separate language cookie is not required and is not set.

Your decision in the consent banner (accept or decline) is stored as technically necessary information in your browser’s localStorage (keys gsts_analytics_consent and gsts_analytics_consent_version) so that the banner does not reappear on every page view. No personal identifier is stored and no connection to third parties is made. Legal basis: section 25(2) no. 2 TDDDG.

Via “Privacy settings” in the footer you can reopen the consent banner at any time to change your decision or withdraw consent you have given.

If you contact us by email, we process the information you send in order to handle and respond to your enquiry.

This may include in particular name, email address, company, contact details, message content, technical or project information, and attachments you send.

Inbound email to info@germansts.de is received via the mail infrastructure configured for the domain (currently an MX destination operated in the Strato / rzone environment).

• Article 6(1)(b) GDPR where the request relates to a contract or pre-contractual measures.
• Article 6(1)(f) GDPR for other business communication.
• Article 6(1)(c) GDPR where statutory retention obligations apply.

Our legitimate interest is the proper handling of business enquiries and communication.

A general contact form for business enquiries is available on the contact page. A separate cable-enquiry form for cable requirements, technical consultation and cable specifications is available via the localized cable-enquiry path. Where online submission is operationally enabled, the information you enter is processed to handle your enquiry and transmitted to us by email. If online submission is not enabled, form data are not accepted via the website; please use the published contact channels.

OWNER_ACCEPTED_RISK: No CAPTCHA provider is used for the online forms at this time. Technical abuse controls apply (including origin checks, honeypot, minimum completion time, schema validation and rate limiting). This is not a claim of bot-proof security.

Required fields are needed so that we can allocate and handle the enquiry. Optional fields may help us process the request.

Please do not submit special-category personal data or confidential access credentials through the forms.

LEGAL_REVIEW_REQUIRED: The field overview below describes the form fields provided on the website; it does not replace separate legal advice on retention periods or legal bases.

Depending on the form and what you enter, the following categories may be processed:

Required

• General contact form: name, email address, subject, message, acknowledgement of this Privacy Policy
• Cable enquiry form: the contact and requirement details marked as required on that form, plus acknowledgement of this Privacy Policy

Optional

• General contact form: company, telephone
• Cable enquiry form: further optional technical, project-related or contact details as shown on that form

• Article 6(1)(b) GDPR for contract-related or pre-contractual enquiries.
• Article 6(1)(f) GDPR for general commercial and technical enquiries.
• Article 6(1)(c) GDPR for applicable legal retention duties.

The form checkbox acknowledges this Privacy Policy and is not consent under Article 6(1)(a) GDPR as the sole legal basis for handling the enquiry.

To protect the contact form against automated or abusive submissions, technical connection data — in particular the IP address or a short-lived identifier derived from it — may be evaluated for a limited time.

The IP address is hashed for request-frequency limiting and held only in the application process memory. The clear-text IP is not permanently stored in application logs, and no lasting profiling takes place. Additional technical checks against automated input may be used.

Legal basis: Article 6(1)(f) GDPR.

Protecting the website, communication systems and our staff against spam, abuse and technical attacks.

Rate-limit data are processed briefly in memory (evaluation windows of 60 seconds and 60 minutes) and cease at the latest when the application process restarts.

We disclose personal data only where necessary to provide the website, handle your enquiry, fulfil contractual or legal obligations, or where another legal permission applies.

• Hosting / server infrastructure: IONOS SE (Germany)
• Email / domain infrastructure: Strato (rzone) for receiving email to info@germansts.de
• Internal IT administration by the controller
• SMTP delivery of form enquiries only where operationally configured and enabled
• Google Maps on the Contact page (see Google Maps section)
• Google Ireland Limited — Google Analytics 4, only after your consent (see section 13)

Hosting and inbound email are provided by operators processing in Germany or the EEA. TLS certificates are issued via Let’s Encrypt; this concerns domain validation and certificate management, not analysis of user behaviour. Opening the Contact page also establishes a connection to Google Maps; a transfer outside the EEA may occur (see Google Maps). If you have consented to Google Analytics, Google may transfer data to Google LLC in the USA (see section 13). LEGAL_REVIEW_REQUIRED.

Our website may contain links to external websites or social-media offerings. A connection to the respective provider is generally established only when you follow the link. The provider of the destination site is responsible for processing on that site. We do not use social-media plugins, tracking pixels or embedded social widgets that connect when a page is merely opened — except for the Google Maps map embedded on the Contact page (see Google Maps).

A Google Maps map is embedded on the Contact page. When the Contact page is opened, a connection to Google is established. In particular, your IP address, browser and device information, the page visited and other technically required connection data may be transmitted to Google. The map is not required to contact us; our address and other contact options are displayed independently.

LEGAL_REVIEW_REQUIRED — OWNER_APPROVED_AUTOLOAD. The precise legal basis and any third-country transfer assessment depend on Google’s service configuration and current contractual documents. GermanSTS does not fully control processing by Google. Before removing global noindex or opening the site to search engines, verify whether this embed behaviour requires a consent-management mechanism.

Fonts, logos and image files used on the website are, on the current technical footing, provided locally via our own website. Loading these assets therefore does not create an additional connection to an external font or image provider.

We use Google Analytics 4 on this website (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to measure website usage statistically, for example page views, time on page, approximate region of origin, and browser and device type. Google Analytics is loaded only after you have chosen “Accept analytics” in the consent banner. Without your consent, no Google Analytics script is loaded, no connection to Google Analytics servers is established and no analytics cookies are set.

After your consent, Google Analytics sets cookies (_ga and _ga_ followed by an identifier; lifetime up to 2 years) and processes pseudonymous usage data, device and browser information, the pages visited, and your IP address for approximate location; according to Google, Google Analytics 4 does not log or store IP addresses. Advertising features are disabled: Google Signals and personalised advertising signals are switched off, and the consent signals ad_storage, ad_user_data and ad_personalization remain “denied”. We do not transmit names, email addresses, telephone numbers, company details or form contents to Google Analytics.

Legal basis: Article 6(1)(a) GDPR in conjunction with section 25(1) TDDDG (consent). You can withdraw your consent at any time with effect for the future by choosing “Decline” via “Privacy settings” in the footer. Existing Google Analytics cookies on this domain are then deleted and further data collection stops. The lawfulness of processing carried out before withdrawal remains unaffected.

In the context of Google Analytics, data may be transferred to Google LLC in the USA. LEGAL_REVIEW_REQUIRED: The statements on transfer safeguards (EU-US Data Privacy Framework / standard contractual clauses), the data-processing agreement with Google and the data-retention period configured in the Google Analytics property must be confirmed by the controller against Google’s current contractual documents and account settings.

We do not use any other web-analytics, marketing, tracking, retargeting or session-replay services. No advertising profiles relating to users are created.

We store personal data only for as long as necessary for the respective purpose. Data are then deleted unless statutory retention duties, the establishment or defence of legal claims, or documented security interests require further storage.

Providing personal data is generally neither a statutory nor a contractual requirement. Certain details are, however, required to handle a contact or cable enquiry. Without them we may be unable to process or technically assess the request.

There is no solely automated decision-making with legal or similarly significant effect and no profiling within the meaning of Article 22 GDPR.

Within the statutory framework you have in particular the following rights:

• Access (Article 15 GDPR)
• Rectification (Article 16 GDPR)
• Erasure (Article 17 GDPR)
• Restriction of processing (Article 18 GDPR)
• Data portability (Article 20 GDPR), where applicable
• Objection (Article 21 GDPR)
• Withdrawal of consent (Article 7(3) GDPR), where processing is based on consent
• Complaint with a supervisory authority (Article 77 GDPR)

Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right to object to that processing on grounds relating to your particular situation. To exercise your rights, a message to info@germansts.de is sufficient. We do not automatically demand unnecessary identity documents.

You have the right to lodge a complaint with a data-protection supervisory authority. The authority primarily competent for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen Kavalleriestraße 2–4 40213 Düsseldorf Germany Telephone: +49 211 38424-0 Website: https://www.ldi.nrw.de/

You may in principle also contact another supervisory authority competent under Article 77 GDPR.

We apply appropriate technical and organisational measures to protect personal data against loss, manipulation and unauthorised access. Website transmission is encrypted via TLS/HTTPS. Absolute security cannot be guaranteed.

We update this Privacy Policy when functions, service providers, legal requirements or processing activities change. The version published on this page applies. Last updated: September 2026.