Privacy Policy and Legal Information

Last updated: 29.10.2026

I. Privacy Policy

We are delighted that you have shown interest in our company. Data protection is a particularly high priority for the management of Stürmer Maschinen GmbH. This privacy policy informs you about the nature, scope and purpose of the processing of personal data on our website and about the rights to which you are entitled as a data subject.

Our website does not use cookies for analytics or advertising purposes and does not use any tracking or analytics services such as Google Analytics, Meta Pixel or Google Ads.

Terms used in this privacy policy, such as “personal data”, “processing”, “controller” or “processor”, are to be understood within the meaning of Art. 4 of the General Data Protection Regulation (GDPR).

1. Name and address of the controller

The controller for the purposes of the GDPR, other data protection laws applicable in the Member States of the European Union and other provisions related to data protection is:

Stürmer Maschinen GmbH
Dr.-Robert-Pfleger-Straße 26
96103 Hallstadt Germany

Managing Director: Kilian Stürmer
Phone: +49 (0) 951 96555-0
Email: info@stuermer-maschinen.de
‍Website: www.stuermer-maschinen.de

2. Contact details of the data protection officer

The data protection officer of the controller can be contacted at: datenschutz@stuermer-maschinen.de

Any data subject can contact our data protection officer directly at any time with any questions or suggestions regarding data protection.

3. Hosting and provision of the website

Our website is hosted by Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (“Webflow”). To deliver the website quickly and securely, Webflow uses content delivery networks (CDNs) provided by Fastly, Inc. (USA), Amazon Web Services, Inc. (Amazon CloudFront, USA) and Cloudflare, Inc. (USA). These networks are also used to deliver technically necessary program libraries (e.g. jQuery) as well as images and files of the website.

Each time our website is accessed, the following data is automatically recorded in so-called server log files:

  • IP address of the requesting device
  • date and time of access
  • page or file accessed
  • website from which access was made (referrer URL)
  • browser and operating system used
  • amount of data transferred and server status message

This data is required to deliver the website, ensure its stability and security, and defend against attacks. We do not combine this data with other data sources or draw any conclusions about the data subject.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, fast and reliable provision of our website. Insofar as information on your device is accessed in the process, this is done on the basis of Section 25(2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), as this is strictly necessary to provide the website you have requested.

We have concluded a data processing agreement (Data Processing Addendum) with Webflow in accordance with Art. 28 GDPR. Webflow and the CDN providers mentioned are certified under the EU-U.S. Data Privacy Framework. Data transfers to the USA are therefore covered by an adequacy decision of the European Commission (Art. 45 GDPR).

The server log files are stored by Webflow for [insert retention period] and then deleted. Further information can be found in Webflow's privacy policy: https://webflow.com/legal/eu-privacy-policy

4. Cookies

Our website itself does not set any cookies for analytics, marketing or advertising purposes. Insofar as technically necessary cookies or comparable technologies are used, they serve exclusively to provide the website and ensure its security (Section 25(2) No. 2 TDDDG, Art. 6(1)(f) GDPR). Consent is not required for this.

You can prevent cookies from being set at any time via your browser settings and delete cookies that have already been set.

5. Product catalogue (OXOMI)

On the “Product catalogue” page, we embed our product portal using the OXOMI service. The provider is scireum GmbH, Heilbronner Straße 156, 70191 Stuttgart, Germany.

When you access this page, a connection to the OXOMI servers is established. Technically necessary data such as your IP address, the date and time of access, browser information and the catalogue content accessed is transmitted to the provider. [Check: Does OXOMI set its own cookies or comparable technologies in the embedded portal? If so, describe here.]

The embedding serves to provide you with our product catalogue, including search and filter functions, directly on our website. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in an attractive and user-friendly presentation of our product range.

scireum GmbH processes the data on our behalf. We have concluded a data processing agreement with the provider in accordance with Art. 28 GDPR. Further information can be found in the privacy policy of scireum GmbH: https://www.scireum.de/scireum/datenschutz

6. Contact by email or phone

If you contact us by email or phone, we process the personal data you provide (e.g. name, email address, phone number and the content of your enquiry) solely for the purpose of handling your request.

The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

Your data will be deleted once your enquiry has been fully processed, provided there are no statutory retention obligations to the contrary. Your data will not be passed on to third parties.

7. Online forms (Wrike)

For enquiries via our website, we use forms provided by the Wrike service. This applies to the contact form, the dealer search and the form for reporting product safety issues. The provider is Wrike, Inc., 9171 Towne Centre Drive, Suite 200, San Diego, CA 92122, USA (“Wrike”).

When you use one of these forms, the data you enter is transmitted to and stored by Wrike. This includes the following information: [insert form fields, e.g. name, company, email address, phone number, message]. Mandatory fields are marked as such. In addition, your IP address and the date and time of submission are processed for technical reasons.

We use your information solely to process your enquiry and for any follow-up questions. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in handling enquiries effectively (Art. 6(1)(f) GDPR).

The data is stored in a Wrike data centre in the European Union (Amsterdam, Netherlands). [Check: Is the Stürmer account hosted in the EU data centre?] Access from the USA cannot be completely ruled out. Wrike is certified under the EU-U.S. Data Privacy Framework. We have concluded a data processing agreement with Wrike in accordance with Art. 28 GDPR.

Your data will be deleted once your enquiry has been fully processed, provided there are no statutory retention obligations to the contrary. Further information can be found in Wrike's privacy policy: https://www.wrike.com/security/privacy/

8. Links to external websites and social media

Our website contains links to external services, for example to our partner portal (mystuermer.com), our spare parts shop (stuermer-maschinen24.de), our career portal, Google Maps (route planning) and our profiles on Meta (Facebook, Instagram), YouTube, LinkedIn and New Work (XING, kununu). These are simple links, not embedded plugins. Merely visiting our website therefore does not transmit any data to these providers.

Only when you click on such a link will you be redirected to the respective provider's website. In the process, data such as your IP address, the date and time, and the address of our website are transmitted to the provider. If you are logged in there at the same time, the provider may be able to assign the visit to your user account. We have no influence on the nature, scope and purpose of data processing by these providers. The privacy policies of the respective providers apply.

9. Our social media profiles

Stürmer Maschinen GmbH maintains company profiles on Meta (Facebook, Instagram), YouTube, New Work (XING, kununu) and LinkedIn. We use these profiles to communicate with visitors and to inform them about our offers.

In addition to Stürmer Maschinen GmbH, the following are responsible for data processing on these platforms:

  • Meta (Facebook, Instagram): Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
  • YouTube: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
  • New Work (XING, kununu): New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany
  • LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

The platform operators may also process your data outside the European Union and for market research and advertising purposes, for example to create usage profiles. We only receive anonymised statistical evaluations from the platforms (e.g. page views, interactions), over whose generation we have no influence.

The legal basis for our processing is our legitimate interest in effective information and communication (Art. 6(1)(f) GDPR). If the platform asks you for consent, the legal basis is Art. 6(1)(a) GDPR.

As the platform operators have full access to your data, it is best to contact them directly to exercise your rights. Further information and opt-out options can be found here:

If you still need help, we will of course try to support you. Please contact info@stuermer-maschinen.de.

Please note: If you publish images, texts, videos or other content on our profiles, you may be assigning extensive rights of use to the respective platform. This could have legal consequences for you if you are not the author or rights holder yourself.

10. Job applications

You can apply to us via our career portal, by email or by post. The career portal is operated on our behalf by softgarden e-recruiting GmbH, Tauentzienstraße 14, 10789 Berlin, Germany. We have concluded a data processing agreement with softgarden in accordance with Art. 28 GDPR. Information on which data is collected in the portal can be found in the privacy notice displayed there before you submit your application.

We process the data you submit (e.g. name, contact details, application documents) solely for the purpose of carrying out the application process. The legal basis is Art. 6(1)(b) GDPR in conjunction with Section 26 BDSG (German Federal Data Protection Act).

If an employment contract is concluded, we store the data for the purpose of carrying out the employment relationship in compliance with the statutory provisions. Otherwise, we delete your application documents six months after notification of the rejection decision, unless other legitimate interests prevent this, such as a burden of proof in proceedings under the German General Equal Treatment Act (AGG).

11. Data security

We use technical and organisational security measures to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Data transmission to and from our website is encrypted via HTTPS (SSL/TLS).

Internet-based data transmissions may in principle have security gaps, so absolute protection cannot be guaranteed. For this reason, every data subject is free to transfer personal data to us via alternative means, e.g. by phone or post.

12. Recipients and transfers to third countries

Within our company, we ensure that only those persons receive your data who need it to fulfil contractual and legal obligations. In addition, we use the service providers named in this privacy policy as processors. The necessary contractual framework under data protection law has been concluded with all service providers.

Data is only passed on to other third parties if we are legally obliged to do so (e.g. to supervisory or law enforcement authorities) or if you have given your consent.

Data is only transferred to countries outside the European Union or the European Economic Area to the extent described in this privacy policy, in particular in connection with website hosting (Section 3) and the online forms (Section 7). In these cases, the transfer is based on the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework.

13. Duration of storage and erasure

We process and store personal data only for as long as is necessary to achieve the respective purpose or as provided for by statutory retention periods. If the storage purpose no longer applies or a statutory retention period expires, the personal data is routinely blocked or erased.

In addition, we may retain data if you have given us your permission to do so or if we require it as evidence in legal disputes within the statutory limitation periods. These can be up to thirty years; the regular limitation period is three years.

14. Obligation to provide personal data

The provision of personal data is partly required by law (e.g. tax regulations) or may result from contractual provisions. To conclude a contract, it may be necessary for you to provide us with personal data. If this data is not provided, the contract may not be concluded. Our employees will be happy to inform you on a case-by-case basis whether such an obligation exists and what the consequences of not providing the data would be.

15. Automated decision-making

As a conscientious company, we do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

16. Rights of the data subject

Under the GDPR, you have the following rights:

  • right of access (Art. 15 GDPR)
  • right to rectification (Art. 16 GDPR)
  • right to erasure (Art. 17 GDPR)
  • right to restriction of processing (Art. 18 GDPR)
  • right to data portability (Art. 20 GDPR)
  • right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR): Insofar as we process your data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation.

To exercise these rights or if you have any questions concerning data processing in our company, please contact: datenschutz@stuermer-maschinen.de

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (Bavarian State Office for Data Protection Supervision)Promenade 1891522 AnsbachGermanyEmail: poststelle@lda.bayern.dePhone: +49 (0) 981 180093-0

17. Changes to this privacy policy

We reserve the right to amend this privacy policy if our website, the services used or the legal requirements change. The version published on this page applies.

II. Information on the use of Microsoft Teams

1. Designation of the processing activity

With this information, we inform you about the processing of your personal data in the context of our project work, online meetings, video conferences and webinars (hereinafter “online meetings”) using the video conferencing solution Microsoft Teams.

2. Controller and data protection officer

The controller is Stürmer Maschinen GmbH (contact details see Part I, Section 1). You can reach our data protection officer at datenschutz@stuermer-maschinen.de.

Note: If you access the Microsoft Teams website, the provider of Microsoft Teams is responsible for data processing there. Accessing the website is only necessary to download the software. Alternatively, you can use Microsoft Teams via your browser.

3. Purpose of processing and data processed

We use Microsoft Teams to carry out project work and online meetings. Microsoft Teams is a service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland.

The following personal data is processed:

  • user details: e.g. display name, email address, profile information
  • meeting metadata: e.g. date, time, meeting ID, phone numbers, location
  • text, audio and video data: chat entries and, for the duration of the meeting, data from the microphone and camera of your device. You can switch off or mute the camera and microphone yourself at any time.

We do not record online meetings in general. Exceptional recordings are only made with your consent. If a meeting was scheduled from within a team, members of that team can also read the chat history afterwards.

As part of project work, files (e.g. Word, PDF) are shared and are visible to all members of the respective team. No personal data of third parties and no confidential content, in particular no content subject to professional or business secrecy, is placed on the platform. Automated decision-making within the meaning of Art. 22 GDPR is not used.

4. Legal basis of the processing

If personal data of employees of Stürmer Maschinen GmbH is processed, Section 26 BDSG is the legal basis. If personal data is not required for the employment relationship but is nevertheless an essential part of using Microsoft Teams, the legal basis is Art. 6(1)(f) GDPR; our interest lies in the effective implementation of online meetings and project work.

Otherwise, the legal basis is Art. 6(1)(b) GDPR insofar as the meetings are conducted within the framework of contractual relationships. If there is no contractual relationship, the legal basis is Art. 6(1)(f) GDPR.

5. Recipients

Personal data processed in connection with online meetings and project work is not passed on to third parties unless it is specifically intended to be passed on. Please note that, as with face-to-face meetings, content from online meetings is often used to communicate information to customers, interested parties or third parties. The provider of Microsoft Teams necessarily receives knowledge of the above data insofar as this is provided for in our data processing agreement.

6. Transfer to third countries

We have limited our storage location to data centres in the European Union. However, we cannot exclude the routing of data via internet servers located outside the EU, in particular if participants are in a third country. The data is encrypted during transport and thus protected against unauthorised access.

7. Duration of storage

We delete personal data when there is no need for further storage, for example to fulfil contractual services or to examine warranty and guarantee claims. In the case of statutory retention obligations, deletion will only take place after the respective retention period has expired.

8. Rights of the data subject

You have the rights set out in Part I, Section 16. If you exercise these rights, Stürmer Maschinen GmbH will check whether the legal requirements are met. Please contact our data protection officer for this purpose.

III. Legal Information

1. Content of the online offer

The author assumes no warranty whatsoever for the topicality, correctness, completeness or quality of the information provided. Liability claims against the author relating to damages of a material or non-material nature caused by the use or non-use of the information provided or by the use of erroneous and incomplete information are in principle excluded, unless the author can be proven to have acted intentionally or with gross negligence.

All offers are subject to change and non-binding. The author expressly reserves the right to change, supplement or delete parts of the pages or the entire offer without separate notice, or to discontinue publication temporarily or permanently.

2. References and links

With respect to direct or indirect references to third-party websites (“links”) that lie outside the author's sphere of responsibility, a liability obligation would apply exclusively if the author had knowledge of the content and it would be technically possible and reasonable for him to prevent its use in the case of illegal content.

The author hereby expressly declares that, at the time the links were placed, no illegal content was discernible on the linked pages. The author has no influence whatsoever on the current and future design, content or authorship of the linked pages. He therefore expressly distances himself from all content of all linked pages that has been changed after the links were placed. For illegal, erroneous or incomplete content, and in particular for damages arising from the use or non-use of such information, solely the provider of the page referred to shall be liable, not the party that merely refers to the respective publication via links.

3. Copyright and trademark law

The author endeavours in all publications to observe the copyrights of the graphics, audio documents, video sequences and texts used, to use graphics, audio documents, video sequences and texts created by himself, or to use licence-free graphics, audio documents, video sequences and texts.

All brands and trademarks mentioned on the website and possibly protected by third parties are subject without limitation to the provisions of the applicable trademark law and the ownership rights of the respective registered owners. The mere mention of a trademark does not imply that it is not protected by third-party rights.

The copyright for published objects created by the author remains solely with the author of the pages. Reproduction or use of such graphics, audio documents, video sequences and texts in other electronic or printed publications is not permitted without the express consent of the author.

4. Legal validity of this disclaimer

This disclaimer is to be regarded as part of the online offer from which this page was referenced. If parts or individual formulations of this text do not, no longer or not completely correspond to the applicable legal situation, the remaining parts of the document shall remain unaffected in their content and validity.