Privacy Policy
Last updated: 10 August 2025
1. Controller
STwo Industries GmbH
Stephan Stapel
Eichenkoppel 19
22399 Hamburg, Germany
Email:
2. Data processing when visiting the website
When you visit this website, your device's browser automatically sends information to our server, which is temporarily stored in server log files. This includes, among other things: IP address (shortened/anonymized), date and time of access, the URL accessed, the referrer URL, and the browser and operating system used.
Purpose: ensuring a smooth connection, system security and stability.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
Storage period: log files are deleted after [[7–14]] days.
3. Cookies & consent
We use cookies to provide basic website functionality. A notice banner appears on your first visit. Your choice is stored in the fs_cookie_consent cookie.
- Necessary cookies: e.g. language settings (
fs_lang), session handling. Legal basis: Art. 6(1)(f) GDPR. - Non-essential cookies/tools: only set after you consent. Legal basis: Art. 6(1)(a) GDPR.
You can change your choice at any time via "Cookie settings" in the footer. If you select "Decline", non-essential cookies/tools will not be loaded.
4. Getting in touch (form/email)
If you contact us via a form or by email, we process the information you provide (name, email, message, and any other details you choose to share) in order to handle your inquiry.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual/contractual measures) or (f) (legitimate interest in customer communication).
Storage period: until your request has been resolved, or as required by statutory retention obligations.
5. License purchase / contract processing (where applicable)
When you purchase a license, we process account and payment data in order to fulfil the contract. Payment data may be forwarded to payment service providers.
Legal basis: Art. 6(1)(b) GDPR.
Recipients: [[payment service provider, e.g. Stripe/PayPal, registered office, privacy notices]].
6. Hosting & data processing agreements
This website is hosted by [[hosting/cloud provider, country]]. We have a data processing agreement with the hosting provider in accordance with Art. 28 GDPR.
7. Analytics/marketing tools (optional)
Only fill in if actually in use. Example: "We only use [[Matomo/Google Analytics]] after you have given your consent (Art. 6(1)(a) GDPR). Data collection only begins once you have agreed via the cookie banner."
8. Data transfers to third countries
If processing takes place in third countries (outside the EU/EEA), we ensure an adequate level of data protection (e.g. through EU standard contractual clauses). Details are provided by the respective tools/providers.
9. Storage period
We only store personal data for as long as necessary for the purposes described above, or as required by statutory retention obligations.
10. Your rights
- Right to access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent given (Art. 7(3) GDPR)
To exercise your rights, please use the contact details given above.
11. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority, for example the authority responsible for your place of residence or for our registered office.
12. Security
We take appropriate technical and organizational measures to protect your data against loss, misuse and unauthorized access (e.g. TLS encryption, access restrictions).
13. Changes to this policy
We update this privacy policy whenever the legal situation, our data processing, or the underlying technology changes. The current version is always available on this page.