strg+a

Privacy policy

This is a translation for your convenience. Only the German version is legally binding.

Personal data is processed when you visit this website. Personal data is data that can be related to you personally (for example name, email address, usage behaviour). This policy informs you about the nature, scope and purpose of the processing and about your rights.

1. Controller

strg+a GmbH, Tulpenstraße 37, 70180 Stuttgart, Germany
Commercial register: HRB 790150, Amtsgericht Stuttgart
Represented by: Marvin Kassühlke
Email: marvin@strga.de

2. Hosting and server log files

This website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, located in Nuremberg. When the site is accessed, the following data is processed in server log files:

The legal basis is our legitimate interest in the secure operation of the website (Art. 6 (1) (f) GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner. Log files are deleted after seven days.

3. Cookies

This website does not set cookies and does not store anything in your browser.

4. Web analytics with Umami

We use the open-source software Umami, which runs on our own server in Nuremberg. Umami does not set cookies. It records the pages visited (including industry pages and intermediate pages), clicks on elements of the home page (figures, terms, selection boxes), the start of a reference video, the download of a document (with version and page, without personal details), the booking of an initial call (only the lead time in days, no personal details), as well as referrer, browser type and language, operating system, device type, screen size, and country, region and city. Country, region and city are derived from the IP address, which itself is not stored.

To distinguish visits, Umami forms a hash value from the IP address and browser identifier using a key that changes monthly. Recognition is possible within one calendar month at most; after that a new hash value is created.

The legal basis is our legitimate interest in analysing and improving our offering (Art. 6 (1) (f) GDPR). You can object to the processing at any time by email to marvin@strga.de.

We keep the analytics data for a maximum of 24 months and delete it afterwards.

5. Download of documents

You download our documents without providing personal data. Only the download itself is recorded, in the server log files (section 2) and in web analytics (section 4).

6. Contact form and email

Via the contact form we process your name, your email address, your company if you wish, and your message. The purpose is to handle your enquiry (Art. 6 (1) (b) or (f) GDPR).

Messages are sent via Brevo (Sendinblue GmbH, Köhlerstraße 2, 10115 Berlin, Germany, part of the Brevo group based in Paris). The servers are located in the EU, and a data processing agreement is in place with Brevo. The message is delivered to our mailbox; it is not stored in Brevo beyond the sending process. We delete the data once your enquiry has been dealt with conclusively, unless statutory retention obligations apply.

If you write to us directly by email at marvin@strga.de, we likewise process your details to handle your enquiry (Art. 6 (1) (b) or (f) GDPR) and delete them once it has been dealt with conclusively, unless statutory retention obligations apply.

7. Booking an initial call

If you book an initial call via this website, we process your name, your email address and the selected time and, if you provide them, your company, role, business software, website and your request. In addition, we record from which page and via which channel you came to us: referrer, campaign parameters in the address and click identifiers of advertisements. The purpose is to conduct and prepare the call (Art. 6 (1) (b) GDPR); the analysis of the origin is based on our legitimate interest in learning which channels reach interested parties (Art. 6 (1) (f) GDPR).

The appointment is entered in our calendar at Google Workspace; you receive an invitation with a Google Meet link. The provider is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, with which a data processing agreement is in place; a transfer to the USA is safeguarded by Google's certification under the EU-US Data Privacy Framework and by the standard contractual clauses. Before the booking, our site only queries Google for the periods that are occupied in our calendar; no data from you is transmitted in the process.

The call is transcribed automatically so that we can prepare an offer for you on that basis. The transcript is stored in our Google Drive; Google Meet indicates on joining that the call is being transcribed. If you do not want a transcript, tell us at the beginning of the call and we will switch it off.

We additionally store your details as a contact at Brevo (see section 6), without adding you to a mailing list. We keep the calendar entry and the transcript as business records for as long as the initiation or performance of a contract continues, and delete them no later than twelve months after the call if no contract follows; we delete the data at Brevo no later than three years after the last contact.

8. TLS encryption

This site uses TLS encryption. You can recognise an encrypted connection by "https://" and the lock symbol in your browser's address bar.

9. Your rights

You also have the right to lodge a complaint with the competent supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg).

10. Changes to this privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to reflect changes to our services in the policy. The new privacy policy will then apply to your next visit.

Last updated: November 2026