Privacy policy

    As of October 12, 2026

    1. Data Controller as defined by data protection laws

    The entity responsible for processing personal data on this website is:

    Stroh Diamantwerkzeuge GmbH
    represented by the management, Petra Schneider, Nico Hanke
    Kinzigheimer Weg 2E
    63486 Bruchköbel
    Germany

    Phone: +49 (0) 6181 9740-0
    Email: info@stroh-diamant.de
    Legal Notice: https://stroh-diamant.de/impressum/

    Data Protection Officer

    Mr. Joachim Heuer: You can contact our data protection officer at Joachim.Heuer@stroh-diamant.de

    2. Scope

    This Privacy Policy applies to the following websites operated by our company:

    • https://stroh-diamant.de
    • https://stroh-diamant.com
    • https://stroh-diamant.eu

    This notice explains what personal data (hereinafter also referred to as “data”) we process in connection with the use of our website, for what purposes, and on what legal basis. The terms used are not gender-specific.

    3. Legal Basis for Processing

    Unless we specify a particular legal basis in this Privacy Policy, the following applies: The legal basis for the processing of personal data is the General Data Protection Regulation (GDPR).

    • Consent (Art. 6(1)(a) of the GDPR) – You have given us your consent to process your personal data for one or more specific purposes.
    • Performance of a Contract and Precontractual Measures (Art. 6(1)(b) of the GDPR) – Processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract.
    • Legal obligation (Art. 6(1)(c) of the GDPR) – Processing is necessary to comply with a legal obligation to which we are subject (e.g., retention requirements under commercial and tax law).
    • Legitimate Interests (Art. 6(1)(f) of the GDPR) – Processing is necessary to protect our legitimate interests or those of a third party, unless your interests or fundamental rights take precedence.

    National Regulations and the TDDDG: In addition to the GDPR, the Federal Data Protection Act (BDSG) and the Telecommunications and Digital Services Data Protection Act (TDDDG) apply. The TDDDG specifically regulates the use of cookies and similar technologies: According to Section 25 of the TDDDG, information may only be stored on your device or accessed if it is already stored there with your consent, unless this is strictly necessary to provide the service you have expressly requested.

    4. Your Rights as a Data Subject

    You have the following rights regarding your personal data:

    • Information (Art. 15 of the GDPR) regarding the data we process;
    • Rectification (Art. 16 of the GDPR) of inaccurate data or completion of incomplete data;
    • Erasure (Art. 17 of the GDPR) of your data stored by us, provided that there are no legal retention requirements to the contrary;
    • Restriction of processing (Art. 18 of the GDPR);
    • Data Portability (Art. 20 of the GDPR);
    • Right to object (Art. 21 of the GDPR) to processing based on Art. 6(1)(f) of the GDPR.

    Withdrawal of Consent: You may withdraw your consent at any time with future effect (Art. 7(3) of the GDPR). The lawfulness of the processing carried out prior to the withdrawal remains unaffected.

    Right to Object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data that is based on legitimate interests.

    Right to File a Complaint with the Regulatory Authority

    Without prejudice to any other legal remedies, you have the right to file a complaint with a data protection supervisory authority (Art. 77 of the GDPR). The supervisory authority with jurisdiction over us is:

    The Hessian Commissioner for Data Protection and Freedom of Information
    P.O. Box 3163, 65021 Wiesbaden
    https://datenschutz.hessen.de

    5. Hosting the Website and Creating Server Log Files

    Every time our website is accessed, our system automatically collects data and information from the computer system of the device used to access it. The following data is collected and stored in the server’s log files:

    • the anonymized or truncated IP address of the requesting computer,
    • Date and time of access,
    • Name and URL of the file accessed, as well as the amount of data transferred,
    • the website from which the access is made (referrer URL),
    • the browser and operating system you are using, and the name of your Internet service provider.

    Purpose: The processing is used to establish the connection, ensure system security and stability, and perform technical administration.

    Legal basis: Article 6(1)(f) of the GDPR. Our legitimate interest lies in the proper operation and security of our website.

    Retention Period: Log files are deleted as soon as they are no longer necessary to fulfill the purpose for which they were collected, but no later than 7 days. They may be retained beyond this period if necessary to investigate security incidents.

    Hosting

    Our website is hosted by an external service provider. The personal data collected on this website is stored on the hosting provider’s servers. We have entered into a data processing agreement (Art. 28 GDPR) with the provider. The hosting provider is: Alfahosting GmbH; Edmund-von-Lippmann-Straße 13-15, 06112 Halle (Saale), Germany.

    6. Cookies and Consent Management

    Our website uses cookies. Cookies are small text files that are stored on your device. We use only technically necessary cookies, which are required for the operation of the website and to save your cookie preferences. We do not currently use tracking, statistical, or marketing cookies.

    Consent Management: We use a consent tool (the “Beautiful and Responsive Cookie Consent” plugin) to manage cookie settings. This tool saves your selections so that you are not asked to confirm them again the next time you visit the site. The data used for this purpose remains on our server or in your browser and is not shared with third parties.

    Legal Basis: Technically necessary cookies are stored in accordance with § 25(2) of the TDDDG and our legitimate interest in ensuring technically error-free and optimized operation (Art. 6(1)(f) of the GDPR).

    You can configure your browser to notify you when cookies are set, to allow cookies only on a case-by-case basis, or to block them entirely. If you disable cookies, the functionality of this website may be limited.

    7. Contacting Us and the Contact Form

    On our website, we offer you the option to contact us via a contact form. The following information is processed when you use this form: name, email address, phone number, date, and the content of your message. Alternatively, you can contact us by email or phone.

    Purpose: The data will be used exclusively to process and respond to your inquiry, as well as in the event of follow-up questions.

    Legal Basis: If your inquiry is intended to conclude or fulfill a contract, the legal basis is Article 6(1)(b) of the GDPR. In all other cases, the processing is based on our legitimate interest in responding to inquiries (Article 6(1)(f) of the GDPR).

    Retention Period: We delete the data as soon as it is no longer necessary to achieve the purpose for which it was collected and there are no legal retention requirements that prevent us from doing so.

    8. Spam Protection with Akismet

    To protect against spam submissions via our contact form, we use the Akismet service. The provider is Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA.

    Akismet checks the data submitted via the form—including the IP address, the browser used (user agent), the referrer URL, and the content of the entries—to determine whether it is spam. For this purpose, this data is transmitted to Automattic’s servers and stored there.

    Legal basis: Article 6(1)(f) of the GDPR. Our legitimate interest lies in preventing spam and securing our website.

    Transfers to Third Countries: Data processing also takes place in the United States. Automattic Inc. is certified under the EU-U.S. Data Privacy Framework (DPF); the European Commission has issued an adequacy decision for the United States. In addition or as an alternative, the transfer is based on the European Commission’s Standard Contractual Clauses.

    9. Multilingualism with Weglot

    We use the Weglot service to translate and display our website in multiple languages. The provider is Weglot SAS, 138 rue Joseph Vernet, 84000 Avignon, France.

    Weglot processes the content and URLs of our website in order to translate and deliver them in the selected language. When you access a translated page, technical connection data (e.g., IP address) may be processed. The provider is based in the European Union.

    Legal basis: Article 6(1)(f) of the GDPR. Our legitimate interest lies in making our content available in a clear and multilingual format to an international audience.

    10. Applications

    If you apply to us—for example, for a posted job opening—we will process the application data you submit (e.g., contact information, cover letter, resume, transcripts) for the purpose of conducting the application process.

    Legal basis: Section 26(1) of the Federal Data Protection Act (BDSG) in conjunction with Article 6(1)(b) of the General Data Protection Regulation (GDPR) (initiation of an employment relationship). To the extent that special categories of personal data are processed, this is done only on the basis of separate consent.

    Retention Period: If an employment relationship is not established, your application materials will be deleted no later than six months after the conclusion of the application process, unless you have consented to a longer retention period (e.g., for a candidate pool) or statutory retention periods preclude such deletion.

    11. Recipients and Disclosure of Data

    Your personal data will only be disclosed to third parties to the extent permitted by law or necessary for the performance of a contract, if you have given your consent, or if such disclosure serves to protect legitimate interests. Recipients may include, in particular, data processors we engage (e.g., hosting, IT, and translation service providers) as well as—in accordance with legal obligations—tax advisors and government agencies. We enter into contracts with data processors in accordance with Article 28 of the GDPR.

    12. Data Processing in Third Countries

    If we process data in a third country (outside the EU or the EEA) or if this occurs in connection with the use of third-party services, it is done only in accordance with legal requirements (Art. 44 et seq. of the GDPR). The transfer is based on an adequacy decision by the European Commission (e.g., the EU-U.S. Data Privacy Framework), appropriate safeguards such as the European Commission’s Standard Contractual Clauses, or your explicit consent.

    13. Data Retention Period and Deletion of Data

    We process and store your personal data only for as long as is necessary to fulfill the respective purpose of processing or as required by statutory retention periods. If the purpose no longer applies or a retention period expires, the data is routinely deleted or its processing is restricted. Retention periods under commercial and tax law generally range from 6 to 10 years.

    14. Data Security

    We take appropriate technical and organizational measures to protect your data against tampering, loss, destruction, and unauthorized access. Our website uses SSL/TLS encryption to secure data transmission, which can be identified by the “https://” prefix in your browser’s address bar. When IP addresses are processed and the full address is not required, we truncate them (IP masking).

    15. Validity and Changes to This Privacy Policy

    This Privacy Policy is effective as of October 12, 2026. As our website evolves or due to changes in legal or regulatory requirements, it may become necessary to update this Privacy Policy. The most current version is available on our website at any time.