Legal
Privacy notice
This website sets no cookies, uses no analytics and loads nothing from third parties. What we do process is listed here. The German version at /datenschutz/ is the legally binding one.
Controller
Sturmform GmbH, Betriebsstraße 7/2, 2440 Gramatneusiedl, Austria. Phone +43 2234 73823, e-mail info@sturmform.at.
Contact and quote requests
When you contact us by e-mail, phone or the request form, we store the details you provide (name, company, e-mail address, phone number, the content of your request, drawings and files) to process the request and for follow-up questions. The form sends your data encrypted to our web server, from where it is transferred to our internal order system and then deleted from the web server. The web server briefly keeps a truncated IP address to prevent abuse; requests not collected are deleted there after 30 days at the latest. In our order system the request is kept for six months and then deleted automatically together with the files. If a quote or order results, the retention periods under "Contract processing" apply. Legal basis: Art. 6(1)(b) GDPR.
Contract processing
To process orders we store company name, contact person, address, e-mail, phone, bank details and the technical documents of the order. Data is passed on only to carriers for delivery, banks for payment, our tax advisor, and partner companies where external processing steps (such as heat treatment or coating) require it. Contract data is kept for the statutory retention period of 7 years; name, address, delivered goods and delivery date for 10 years (product liability). Legal basis: Art. 6(1)(b) and (c) GDPR.
Server logs
Our web server stores no access log and no IP addresses. For a simple visitor statistic, page views are condensed into daily counts the moment they arrive (page, language, referring site, number of visitors). To count a visitor only once per day, a short value is derived from IP address and browser identifier with a random salt that changes daily and cannot be traced back after the day ends. No cookies are set, there is no recognition across days and no data is passed to third parties. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reach measurement). To fend off attacks, the firewall and intrusion protection log IP addresses of rejected or suspicious connection attempts and technical errors; these system logs are deleted after 14 days at the latest. Legal basis: Art. 6(1)(f) GDPR.
Cookies, fonts, maps, analytics
This website sets no cookies. Fonts and images are served from our own server; no third-party content is embedded. We use no analytics or tracking services. The link "Open route in Google Maps" on the contact page leads to Google only after you click it.
Hosting
This website is hosted on servers in the European Union under a data processing agreement pursuant to Art. 28 GDPR.
Your rights
You have the right to access, rectification, erasure, restriction, data portability, withdrawal of consent and objection. If you believe the processing of your data violates data protection law, you may lodge a complaint with the supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.