Privacy Policy

Last updated on: 17.05.2026

Transparent handling of personal data is very important to us. This data protection statement provides information on what personal data we collect, for what purpose and to whom we pass it on. We regularly review and update this privacy policy to ensure the highest level of transparency.

1. What services we use

Netlify (hosting), Google Fonts (fonts), HubSpot (website analytics and CRM).

2. Contact Information

If you have any questions or concerns about our protection of your data, you can always reach us by email at info@strat-exx.com. Responsible for data processing done through this website is:

3. General principles

3.1 What data we collect from you and from whom we receive this data

First and foremost, we process personal data that you provide to us or that we collect when operating our website. We may also receive personal data about you from third parties. These may be the following categories:

• Personal master data (name, address, dates of birth, etc.);
• Contact information (cell phone number, email address, etc.);
• Financial data (e.g. account details);
• Online identifiers (e.g. cookie identifier, IP addresses);
• Location and traffic data;
• Sound and image recording;
• Particularly sensitive data (e.g. biometric data or information about your health).

3.2 Under what conditions do we process your data?

We process your data in good faith and for the purposes set out in this privacy policy. In doing so, we ensure transparent and proportionate processing. If, in exceptional cases, we are unable to comply with these principles, the data processing may still be lawful because there is a justification. A justification reason may be in particular:

• Your consent;
• the execution of a contract or pre-contractual measures;
• our legitimate interests, unless your interests are overridden.

3.3 How can you withdraw your consent?

If you have given us consent to process your personal data for specific purposes, we will process your data within the scope of this consent unless we have another justification. You can revoke your consent at any time by sending an email to the address given in the imprint. Data processing that has already taken place is not affected by this.

3.4 In which cases can we share your data with third parties?

a. Principle

We may need to rely on the services of third parties or affiliates and engage them to process your data (known as processors). Categories of recipients are namely:

• Accounting, fiduciary and auditing firms;
• Consulting firms (legal, tax, etc.);
• IT service providers (web hosting, support, cloud services, website design, etc.);
• Payment service providers;
• Providers of tracking, conversion and advertising services.

We ensure that these third parties and our affiliates comply with the requirements of data protection and treat your personal data confidentially. We may also be required to disclose your personal information to government authorities.

b. Visiting our social media channels

We may have embedded links to our social media channels on our website. This is apparent to you in each case (typically via corresponding icons). If you click on the icons, you will be redirected to our social media channels. In this case, the social media providers learn that you are accessing their platform from our website. The social media providers can use the data collected in this way for their own purposes. We would like to point out that we have no knowledge of the content of the transmitted data or its use by the operators.

3.5 How long do we keep your data?

We store personal data only for as long as is necessary to fulfill the individual purposes for which the data was collected. Data that we store when you visit our website is kept for twelve months. An exception is made for analysis and tracking data, which may be kept longer. We store contract data for longer, as we are obliged to do so by legal regulations. In particular, we must retain business communications, concluded contracts and accounting records for up to 10 years. As far as we no longer need such data from you to perform the services, the data will be blocked and we will only use it for accounting and tax purposes.

3.6 How do we protect your data?

We will keep your information secure and take all reasonable steps to protect your information from loss, access, misuse or alteration. Our contractual partners and employees who have access to your data are obliged to comply with data protection regulations. In some cases, it will be necessary for us to pass on your requests to companies affiliated with us. In these cases, too, your data will be treated confidentially.
Within our website, we use the SSL (Secure Socket Layer) procedure in conjunction with the highest encryption level supported by your browser.

3.7 What rights do you have?

a. Right to information

You can request information about the data we have stored about you at any time. We ask you to send your request for information together with proof of identity to info@strat-exx.com. You also have the right to receive your data in a common file format if we process your data automatically and if:

• you have given your consent for the processing of this data; or
• you have disclosed data in connection with the conclusion or performance of a contract.

We may restrict or refuse to provide information or data if this conflicts with our legal obligations, our own legitimate interests, public interests or the interests of a third party. The processing of your request is subject to the statutory processing period of 30 days. However, we may extend this period due to a high volume of requests, for legal or technical reasons, or because we need more detailed information from you. You will be informed of the extension of the deadline in good time, at least in text form.

b. Deletion and correction

You have the option of requesting the deletion or correction of your data at any time. We may reject the request if statutory provisions oblige us to store the data for a longer period or to retain it unchanged or if your request conflicts with a legal requirement. Please note that exercising your rights may be in conflict with contractual agreements and may have corresponding effects on the performance of the contract (e.g. premature termination of the contract or cost consequences).

c. Legal process

If you are affected by the processing of personal data, you have the right to enforce your rights in court or to file a complaint with the competent supervisory authority. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC): edoeb.admin.ch. In Germany, jurisdiction depends on the place of residence or registered office; for Bavaria this is the Bavarian State Office for Data Protection Supervision (BayLDA), lda.bayern.de.

3.8 Changes to the privacy policy

We may change this privacy policy at any time. The changes will be published on www.strat-exx.com; you will not be informed separately.

4. Individual data processing operations

4.1 Providing the website and creating log files

What information do we receive and how do we use it?
By visiting www.strat-exx.com, certain data is automatically stored on our servers or on servers of services and products that we obtain and/or have installed, for purposes of system administration, for statistical or backup purposes or for tracking purposes. These are:

• the name of your Internet service provider;
• your IP address (in some circumstances);
• the version of your browser software;
• the operating system of the computer with which the URL is accessed;
• the date and time of access;
• the web page from which you are visiting our URL;
• the search words you used to find the URL.

Why may we process this data?
This data cannot be assigned to a specific person and there is no merging of this data with other data sources. The log files are stored in order to guarantee the functionality of the website and to ensure the security of our information technology systems. This is our legitimate interest.

How can you prevent data collection?
The data is only stored for as long as is necessary to achieve the purpose for which it was collected. Accordingly, the data is deleted after the end of each session. The storage of the log files is mandatory for the operation of the website; you therefore have no possibility to object.

4.2 Hosting by Netlify

Our website is developed and hosted with the help of Netlify, Inc., 44 Montgomery Street, Suite 300, San Francisco, California 94104, USA (hereinafter "Netlify"). Netlify provides us with a platform to operate and continuously improve our website. In this context, Netlify may have access to or collect personal data from users of our website.

Data collection and use
When you visit our website, Netlify may automatically collect technical information such as IP address, browser type, operating system, time spent on the site and pages visited. This data is primarily used to ensure the security of the platform, to improve the user experience and to provide us with statistical information about the use of the website. In addition, Netlify may collect data that you actively enter, for example when you contact us via a contact form on our website. This information may include your name, email address, telephone number and the message you send us.

Forwarding of data
Netlify may use your data to provide the services, to ensure the security of the platform and to comply with legal obligations. Your personal data will only be passed on to third parties if this is necessary for the provision of these services or if there is a legal obligation to do so.

Data protection and security
The protection of your personal data is important to us. Netlify is committed to implementing appropriate security measures to ensure the protection of your data. We also take appropriate measures to ensure the security of your personal data, but please note that no transmission over the Internet is completely secure.

4.3 Website analytics and CRM by HubSpot

Nature and purpose of processing
We use the services of HubSpot, Inc., 2 Canal Park, Cambridge, MA 02141, USA (hereinafter "HubSpot") and its European subsidiary HubSpot Ireland Limited, Ground Floor, 2 Dockland Central, Guild Street, Dublin 1, Ireland. HubSpot is an integrated CRM and marketing tool that we use to analyse website visits and manage business contacts.

Subject to your consent, HubSpot uses cookies and comparable technologies to:

• statistically evaluate the use of our website (pages visited, time spent, source of access);
• identify, via the IP address, the company from whose network the website is being accessed ("Prospects" / "Website Visits");
• recognise known contacts via clicks in our emails and link their activity on the website to their profile in our CRM;
• measure and improve the quality of our content and online marketing activities.

Tracking takes place exclusively after you have given consent via our cookie consent banner.

Legal basis
The legal basis for this data processing is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

Recipients and data processing agreement
Recipients of the data are HubSpot, Inc. (USA) and HubSpot Ireland Limited (Ireland). We have concluded a data processing agreement with HubSpot pursuant to Art. 28 GDPR.

Cookies used

• __hstc — main analytics cookie. Storage duration: 13 months.
• hubspotutk — identifies returning visitors. Storage duration: 13 months.
• __hssc — recognises the current session. Storage duration: 30 minutes.
• __hssrc — detects whether the browser has been restarted. Storage duration: session.

Transfer to third countries
The collected data is transferred to the USA. The following data protection safeguards are in place: HubSpot, Inc. is certified under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023, C(2023)4745). In addition, Standard Contractual Clauses of the European Commission under Implementing Decision (EU) 2021/914 are in place with HubSpot.

Storage duration
The cookies set by HubSpot have different lifetimes — from a session up to 13 months (see above). Personal data we store in our CRM (e.g. when you contact us) is retained only for as long as necessary for the respective purpose; statutory retention periods remain unaffected.

Withdrawal of consent
You can withdraw your consent at any time with effect for the future via the cookie consent tool on our website ("Cookie settings" button in the footer). A withdrawal does not affect the lawfulness of the processing carried out up to that point.

Further information
HubSpot privacy policy: legal.hubspot.com/privacy-policy.

See also our Imprint.