Privacy Policy
1. Privacy at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Their contact details can be found in the section "Notice regarding the responsible party" in this privacy policy.
How do we collect your data?
Your data is collected in part by you providing it to us. This may include data that you enter into a contact form, for example.
Other data is collected automatically or with your consent when you visit the website by our IT systems. This is primarily technical data (e.g., internet browser, operating system, or time of page access).
What do we use your data for?
Some data is collected to ensure error-free provision of the website. Other data is processed when you actively submit it through a form or contact request.
What rights do you have regarding your data?
You have the right at any time to obtain free information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data.
2. Hosting and Backend Services
Frontend Hosting via Vercel
Our website is delivered via Vercel. Vercel provides the technical infrastructure for delivery, CDN, SSL encryption, server rendering and performance optimization of the website.
The provider is Vercel Inc., USA. When you access our website, in particular your IP address, date and time of access, requested URL, referrer URL, browser and device information and technical log data may be processed.
We use Vercel in the interest of secure, fast and reliable delivery of our online offering on the basis of Art. 6(1)(f) GDPR.
Backend, Database, Authentication and Storage via Supabase
We use Supabase for backend functions of this website. Supabase provides, in particular, database services, authentication for the administration area, storage for media and downloads, edge functions and interfaces for forms and live content.
The provider is Supabase, Inc., USA. Supabase processes, in particular, data that you submit through contact, partner or product inquiry forms, such as name, email address, phone number, customer type, subject, message, product reference and time of inquiry. Supabase may also process content and files maintained in the administration area, such as media, downloads and blog posts.
Processing takes place to provide and manage the website, to handle inquiries and to technically secure the online offering on the basis of Art. 6(1)(b) GDPR, where processing is necessary for pre-contractual measures or to handle your inquiry, and otherwise on the basis of Art. 6(1)(f) GDPR.
Data Processing Agreements and International Transfers
We use Vercel and Supabase as technical service providers. To the extent that these providers process personal data on our behalf, this is done on the basis of corresponding data processing agreements. As both providers are based in the USA, transfers to a third country may occur. Where required, appropriate safeguards pursuant to Art. 44 et seq. GDPR, in particular EU Standard Contractual Clauses, are used.
Further information is available in the providers' privacy notices and data processing terms: Vercel at https://vercel.com/legal/privacy-notice and https://vercel.com/legal/dpa, Supabase at https://supabase.com/privacy and https://supabase.com/legal/dpa.
3. General Information and Mandatory Disclosures
Data Protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
Notice Regarding the Responsible Party
The responsible party for data processing on this website is:
STRONG Digital GmbH
Von-Werth-Straße 1
50670 Cologne
Germany
Phone: +49 221 2920 1070
Email: info_de@strong-energy.eu
Storage Duration
Unless a more specific storage period has been stated in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies.
General Information on Legal Basis for Data Processing
If you have consented to data processing, we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR.
Recipients of Personal Data
In the course of our business activities, we work with various external parties. We only pass on personal data to external parties if this is necessary for the fulfilment of a contract or if we are legally obligated to do so.
Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your express consent. You may revoke consent already given at any time.
Right to Object to Data Collection (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.
Right to Lodge a Complaint with the Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority.
Right to Data Portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format.
Information, Correction and Deletion
Within the framework of applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of data processing, and, if applicable, a right to correction or deletion of this data.
Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data.
SSL/TLS Encryption
This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content.
4. Data Collection on This Website
Cookies and Local Storage
Our website uses technically necessary storage mechanisms to provide basic functions. This includes, in particular, storing your cookie and privacy selection in your browser's local storage under the key strong-energy-cookie-consent. This information is not transmitted to an external consent provider.
Technically necessary cookies or comparable storage mechanisms are used on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and functional provision of the website.
Consent Management via Our Cookie Banner
Our website uses its own cookie banner to store your choices regarding certain analytics, marketing and privacy settings. You can reject or allow optional analytics functions.
Web Analytics, Heatmaps and Session Replays with Umami
We use Umami on this website for privacy-friendly reach measurement and technical optimization of our online offering. Umami is self-hosted by us on a Hetzner VPS in Nuremberg, Germany. Analytics data is not transferred to an external analytics service such as Google Analytics.
Basic web analytics collects, in particular, page views, referrer URLs, browsers used, operating systems, device types and the country of origin. According to the provider, tracking is performed without cookies; visitors are not tracked across websites.
If you allow optional analytics and marketing features in the cookie banner, we additionally load the Umami Recorder to create heatmaps and session replays. This may record, in particular, mouse movements, clicks, scrolling behavior, page navigations and form interactions. Input fields are masked by Umami by default; sensitive areas can also be technically excluded. Session replays are stored for 30 days according to the Umami default, unless a different configuration is applied.
The legal basis for basic web analytics is Art. 6(1)(f) GDPR. Our legitimate interest lies in statistically evaluating the use of our website and improving the stability, usability and content of our online offering. The legal basis for heatmaps and session replays is your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deleting the locally stored cookie selection for this website in your browser and then making a new selection.
Server Log Files and Technical Access Data
When you access our website, Vercel and, where applicable, Supabase process technically required access data that your browser automatically transmits. This includes in particular:
- IP address
- date and time of the server request
- requested URL or file
- referrer URL
- browser type and browser version
- operating system used
- device type and technical request information
This data is processed to securely deliver the website, analyze errors, detect misuse and maintain technical stability on the basis of Art. 6(1)(f) GDPR.
Contact, Partner and Product Inquiry Forms
If you send us an inquiry via a form, we process the data you enter to handle your request. Depending on the form, this includes name, email address, phone number, customer type, company, product reference, subject, message, UTM information and time of inquiry.
Form data is stored in Supabase and processed in the administration area of this website. Processing takes place to handle your request and carry out pre-contractual measures on the basis of Art. 6(1)(b) GDPR. Where processing serves the organization, documentation and security of our communication, it is additionally based on Art. 6(1)(f) GDPR.
Inquiry by Email, Phone or Fax
If you contact us by email, phone or fax, your inquiry, including all resulting personal data, will be stored and processed for the purpose of handling your request.
5. Plugins and Tools
Google Fonts (Local Hosting)
This site uses so-called Google Fonts provided by Google for the uniform display of fonts. The Google Fonts are installed locally. No connection to Google servers is established.