Privacy Policy

This privacy policy explains which personal data we process when you visit our website www.stankowitz.eu and when you contact us, for what purposes and on what legal basis we do so, and what rights you have.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Stankowitz Test Equipment GmbH
Steinfelder Straße 10
49356 Diepholz
Germany

Phone: +49 (0) 54 41 99 55 00
Email: info@stankowitz.eu

Represented by the Managing Directors Sabine Stankowitz and Dagmar Selter.

2. Data Protection Officer

We have appointed an external Data Protection Officer. You can contact the Data Protection Officer by email at datenschutz@stankowitz.eu or by post at our address stated above, marked “For the attention of the Data Protection Officer”. Your enquiry will be treated confidentially.

3. General information on data processing

We process personal data only to the extent necessary to provide a functional website, to handle your enquiries or to carry out the procedures described below, and only where there is a legal basis under Art. 6 GDPR. The respective legal basis, the storage period and any recipients are stated for each processing activity.

Personal data is erased as soon as the purpose of storage no longer applies and no statutory retention obligations prevent erasure. Where such a retention obligation exists, we restrict the processing and erase the data once the retention period has expired.

For the operation of the website and for certain procedures, we use service providers who process personal data on our behalf and in accordance with our instructions. We have concluded data processing agreements with these service providers pursuant to Art. 28 GDPR. They include Mittwald CM Service GmbH & Co. KG as our hosting provider (section 4) and cytrus GmbH, Osnabrück, which provides technical support for our website and may have access to the data processed there in the course of maintenance and support.

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

4. Provision of the website and server log files

Our website is hosted by Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4–6, 32339 Espelkamp, Germany. The servers are located in Espelkamp, Germany.

When you access our website, your browser transmits information to the server for technical reasons. Your IP address is processed in order to deliver the requested content to your device. In addition, each access is recorded in server log files. The following data is logged:

• IP address in shortened form, with the last block of the address removed,
• date, time and time zone of the access,
• type of request (HTTP method) and HTTP version used,
• page or file accessed,
• HTTP status code and size of the response transmitted,
• the previously visited page (referrer), where transmitted by the browser,
• browser type, browser version and operating system (user agent),
• the domain accessed.

The server log files serve to detect and prevent misuse and attacks and to analyse technical errors. They are not combined with other data sources or evaluated for analytics or marketing purposes.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website securely and without disruption.

The server log files are automatically deleted after 40 days.

5. Cookies and access to your device

Our website does not set any cookies and does not store any information in your browser’s local storage. We do not use any analytics, tracking or marketing services. All content of the website, including fonts, is delivered from our own server; no content from third parties is loaded. Consent under Section 25(1) of the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, TDDDG) is therefore not required and is not requested.

6. Contacting us

6.1 Contact form

You can use our contact form to send us enquiries, for example about our products or to request data sheets. In doing so, we process the data you enter. Mandatory fields are salutation, last name, company, email address, telephone number and your message; first name and address are optional.

We process this data solely to handle and respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the conclusion or performance of a contract, and otherwise Art. 6(1)(f) GDPR. Our legitimate interest lies in responding to the enquiries addressed to us.

6.2 Contact by email or telephone

If you contact us by email or telephone, we process the information you provide, in particular your name, contact details and the content of your request, in order to handle your enquiry. The legal bases are the same as in section 6.1.

6.3 Storage period

We delete your enquiry once it has been fully dealt with and no further communication is expected. If the enquiry leads to a contractual relationship or qualifies as a commercial or business letter, we retain it in accordance with the statutory retention obligations under Section 257 of the German Commercial Code (Handelsgesetzbuch, HGB) and Section 147 of the German Fiscal Code (Abgabenordnung, AO); the retention period for commercial and business letters is six years. The legal basis for retention is Art. 6(1)(c) GDPR.

7. Job applications

We accept applications by email to the address stated in the respective job advertisement or by post. We process the information you send us with your application, in particular contact details, CV, certificates, evidence of qualifications and, where applicable, salary expectations, solely for the purpose of carrying out the application procedure.

The legal basis is Art. 6(1)(b) GDPR in conjunction with Section 26(1) of the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG), as the processing is necessary for the decision on establishing an employment relationship. If you voluntarily provide special categories of personal data, for example information on a severe disability, we process such data only to the extent necessary for the application procedure (Art. 9(2)(b) GDPR in conjunction with Section 26(3) BDSG).

Only the HR department and the management have access to your application. We do not use an applicant management system or AI-based pre-selection. Your application will not be passed on to third parties.

If an employment relationship is established, the application documents are transferred to the personnel file. Otherwise, we delete your application documents six months after the conclusion of the application procedure. Retention until that date serves to defend against possible claims, in particular under the German General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz, AGG); the legal basis in this respect is Art. 6(1)(f) GDPR. Applications are not added to a talent pool.

8. Whistleblower portal

Via our whistleblower portal, employees and external persons, such as customers or suppliers, can report violations of the law, breaches of internal rules or social standards and other misconduct in connection with our company. Reports can also be submitted anonymously. If you do not state your name, it will not be transmitted to us.

We process the information contained in the report, where applicable your identity and contact details, and data of the persons named in the report, in order to examine the report, take follow-up action and communicate with you via the portal’s secure mailbox. The identity of whistleblowers and of the persons named in the report is treated confidentially.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in detecting and remedying violations and grievances. Where a report falls within the scope of the German Whistleblower Protection Act (Hinweisgeberschutzgesetz, HinSchG), the processing is additionally based on Section 10 HinSchG.

The portal is operated on our behalf as a processor by product kitchen GmbH, Rehsteige 12, 73035 Göppingen, Germany, under the name “hintcatcher”. product kitchen GmbH uses Google Cloud services (Firebase) to operate the portal; according to the provider, processing takes place on servers in Germany wherever possible. A transfer of personal data to Google LLC in the USA cannot be ruled out in this context. Google LLC is certified under the EU-US Data Privacy Framework; the transfer is based on the adequacy decision of the European Commission of 10 July 2023 (Art. 45 GDPR).

The documentation of a report is deleted three years after the conclusion of the procedure (Section 11(5) HinSchG), unless longer retention is necessary and proportionate to comply with statutory obligations.

9. Company profile on LinkedIn

We maintain a company profile on the professional network LinkedIn, to which we link from our website. This is a simple link: no data is transmitted to LinkedIn when you visit our website. You are only redirected to LinkedIn’s website when you click the link.

LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, is responsible for the data processing when you visit our profile. We are jointly responsible with LinkedIn for the creation of page statistics (Page Insights) (Art. 26 GDPR); LinkedIn provides us only with aggregated statistics that do not allow conclusions to be drawn about individual persons. LinkedIn makes the essential content of the joint controller agreement available at legal.linkedin.com/pages-joint-controller-addendum. LinkedIn has undertaken to fulfil the information obligations and to respond to requests concerning data subject rights. Further information can be found in LinkedIn’s privacy policy at www.linkedin.com/legal/privacy-policy.

10. Your rights

Under the GDPR, you have the following rights:

• Right of access to the data stored about you (Art. 15 GDPR),
• Right to rectification of inaccurate data (Art. 16 GDPR),
• Right to erasure of your data (Art. 17 GDPR),
• Right to restriction of processing (Art. 18 GDPR),
• Right to data portability (Art. 20 GDPR), where the processing is based on a contract and carried out by automated means.

To exercise your rights, an informal message to the contact details stated in section 1 or section 2 is sufficient.

Right to object under Art. 21 GDPR

Where we process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

11. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes the GDPR (Art. 77 GDPR). The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz Niedersachsen
(State Commissioner for Data Protection of Lower Saxony)
Prinzenstraße 5
30159 Hannover, Germany
Phone: +49 (0) 511 120-4500
Email: poststelle@lfd.niedersachsen.de

12. Data security

Content transmitted between your browser and our website, including the information entered in the contact form, is encrypted using TLS. You can recognise this by “https://” in your browser’s address bar.

13. Changes to this privacy policy

We will update this privacy policy if the functions of our website, our procedures or the legal requirements change. The version published on this page applies.

This privacy policy is a translation of the German version. In the event of any discrepancies, the German version shall prevail.

 

Last updated: October 2026