Privacy

Controller

SteinCastle Gesellschaft mit beschränkter Haftung

Hofistrasse 22, 9497 Triesenberg, Principality of Liechtenstein

Email: [email protected]

Principle

Protecting your personal data matters to us. Personal data is processed only to the extent technically necessary and within the applicable regulations, in particular the Liechtenstein Data Protection Act (DSG) and the General Data Protection Regulation (GDPR).

Hosting

This website runs on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data centre in Germany. Hetzner processes the data solely on our behalf; a data processing agreement is in place with Hetzner.

When you access the website, the server processes technically necessary connection data – in particular your IP address, date and time, the page requested and details of your browser and operating system – in order to deliver the page. Our server does not store access logs containing IP addresses; technical error messages are logged without IP addresses.

The legal basis is our legitimate interest in the secure and technically faultless operation of the website (Art. 6(1)(f) GDPR).

Delivery and protection of the website: Cloudflare

The website is delivered via the network of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (content delivery network and protection against attacks). All requests pass through Cloudflare servers. Cloudflare processes connection data such as your IP address, the page requested and details of your browser and device, and may log them briefly in order to detect and fend off attacks.

The legal basis is our legitimate interest in a secure, fast and available website (Art. 6(1)(f) GDPR). Cloudflare processes the data as a processor on the basis of the Cloudflare Data Processing Addendum. For transfers to the USA, Cloudflare is certified under the EU-US Data Privacy Framework; the EU Standard Contractual Clauses apply in addition.

Contact form

When you send us an enquiry through the contact form, we use the details you provide — name, company, email address, website, area of interest and your message — to handle that enquiry.

The legal basis is the taking of steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR) together with our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

The details are not passed to third parties without your consent – except to the service providers named in this statement, who process them solely on our behalf. They are deleted once the enquiry has been dealt with, unless statutory retention periods apply.

Abuse protection: Cloudflare Turnstile

To protect the contact form against automated submissions we use Cloudflare Turnstile, a service of Cloudflare, Inc. (address above).

Turnstile checks whether a submission comes from a human. Technical information is transmitted to Cloudflare in the process, in particular your IP address, details about your browser and device, and the website making the request. In most cases no interaction is required; an additional check is shown only in doubtful cases.

For the security check, Cloudflare processes this data on our behalf. Cloudflare also uses it under its own responsibility to improve its bot detection; details are set out in Cloudflare's Turnstile Privacy Addendum at cloudflare.com/turnstile-privacy-policy.

The legal basis is our legitimate interest in preventing spam and abuse (Art. 6(1)(f) GDPR). For transfers to the USA, the information on Cloudflare above applies.

Email delivery: SMTP2GO

We use the email delivery service SMTP2GO of Sand Dune Mail Ltd, 96–106 Manchester Street, Christchurch 8011, New Zealand, to deliver enquiries submitted through the contact form. The details you enter in the form are transmitted to SMTP2GO and processed there solely for the purpose of delivery. The data is stored in data centres within the EEA.

The legal basis is our legitimate interest in the reliable delivery of enquiries (Art. 6(1)(f) GDPR). A data processing agreement is in place with the provider. The European Commission has issued an adequacy decision for New Zealand.

Mailbox: Google Workspace

Enquiries sent through the contact form and emails to us are stored in our mailbox at Google Workspace, a service of Google Cloud EMEA Limited, Velasco, Clanwilliam Place, Dublin 2, Ireland.

Google processes the data on our behalf on the basis of the Cloud Data Processing Addendum. A transfer to the USA cannot be ruled out; Google is certified under the EU-US Data Privacy Framework, and the EU Standard Contractual Clauses apply in addition. The legal basis is the handling of your enquiry (Art. 6(1)(b) and (f) GDPR).

Fonts

The fonts used on this website are hosted locally. No connection to Google Fonts or other font providers is made when you visit the website.

Cookies and web analytics

This website sets no cookies for analytics or marketing purposes, and no web analytics service is embedded.

Cloudflare Turnstile may store technically necessary information in the browser in order to carry out its security check. This is not used for advertising or profiling.

As soon as an analytics tool is introduced, its purpose, scope and opt-out will be described here.

Encryption

This website is delivered exclusively over a TLS-encrypted connection, so transmitted content cannot be read by third parties.

Your rights

You have the right to information about the data we process about you, and to its correction, deletion or the restriction of its processing. You also have the right to data portability and the right to object to processing.

Please contact [email protected] to exercise these rights.

You also have the right to lodge a complaint with the Data Protection Office of the Principality of Liechtenstein.

Changes to this statement

We update this privacy statement when the website or the services it uses change. The version published here is the one that applies.