Privacy policy

1. Controller

2. Hosting, email and server log files

This website and the associated email mailboxes are operated by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO processes data as a processor pursuant to Article 28 GDPR. The data is processed in data centres located in Germany.

When you access this website, technically necessary access data is processed. This may include your IP address, the date and time of access, the page or file requested, the volume of data transferred, the HTTP status code, the previously visited page, and information about your browser and operating system.

This processing is necessary to deliver the website and ensure its stability and security. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in operating this website securely and reliably. STRATO stores IP addresses for no more than seven days to detect and prevent attacks. Access logs provided in the customer area are anonymised and can be retrieved for the previous six weeks.

3. Technically necessary session and security check

When you visit the website, a technically necessary PHP session cookie is set. It protects the forms, in particular against cross-site request forgery, limits repeated submissions and associates the locally calculated security check with the relevant session. The cookie is not used for analytics, advertising or profiling.

The forms use a proof-of-work security check. The required computation is performed exclusively in your browser; no external CAPTCHA service is used. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to protect the website and email infrastructure against automated and abusive submissions.

4. Contact enquiries, transport requests and applications

If you contact us through the contact form, transport request form, application form, by email or by telephone, we process the information you provide to answer your enquiry, prepare a quote, process your application and address possible follow-up questions.

The general contact form requires your first name, surname, email address, subject and message; your telephone number is optional. A transport request also processes information about the requested service, vehicle, collection and delivery locations, type of transport, dates, requested additional services and your contact details. The application form processes information about your driving licence, professional experience, willingness to travel, personal priorities and contact details. A message, telephone number and CV in PDF format are optional. Information identified as optional does not have to be provided.

After submission, the information is sent by email to the responsible STRATO mailbox. The website does not maintain its own database of form enquiries. If input errors occur, the information is held briefly in the session so that it can be displayed again on the immediately following form page.

If the enquiry concerns a contract or steps prior to entering into a contract, the legal basis is Article 6(1)(b) GDPR. Other enquiries are processed pursuant to Article 6(1)(f) GDPR on the basis of our legitimate interest in handling business enquiries. The data is deleted when the enquiry has been fully resolved and no statutory retention obligation or legitimate reason requires further storage.

We process applicant data for the purpose of deciding whether to establish an employment relationship pursuant to Section 26(1) of the German Federal Data Protection Act (BDSG). If no employment relationship is established, application documents are generally deleted no later than six months after completion of the application process, unless statutory obligations or legitimate reasons prevent deletion.

Providing your data is neither legally nor contractually required. However, without the information marked as mandatory, we cannot process the relevant enquiry through the form.

5. Recipients

Personal data can be accessed only by employees responsible for processing or continuing to support the relevant enquiry. Access is limited to what is necessary for this purpose.

STRATO provides web hosting and email services as a processor. Technical service providers commissioned by us may access the systems where this is necessary for maintenance, fault analysis or troubleshooting. Data is disclosed to other recipients only where necessary to process your enquiry or perform an order, where required by law or where covered by your consent.

6. Cookies, tracking and external content

This website does not use analytics, marketing or tracking services and does not set cookies that are not technically necessary. Fonts, scripts, images and videos are served locally from our own web server. External maps, videos and social-media content are not embedded automatically.

The website contains links to external services, such as Google, YouTube or Instagram. Data is transferred to the relevant provider only when you follow such a link. The provider’s privacy policy applies to any subsequent processing.

7. Data security

We implement appropriate technical and organisational measures to protect personal data. The website is delivered over an encrypted HTTPS connection. Form input is checked technically and used exclusively to process the relevant enquiry.

8. Your rights

Subject to the applicable legal requirements, you have the right of access, rectification, erasure, restriction of processing and data portability. Where processing is based on Article 6(1)(f) GDPR, you may object to processing on grounds relating to your particular situation.

To exercise your rights, please use the contact details provided above. You also have the right to lodge a complaint with a data protection supervisory authority. In particular, the competent authority is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Heilbronner Straße 35, 70191 Stuttgart, Germany, www.baden-wuerttemberg.datenschutz.de.

9. Last updated

Last updated: October 2026