Privacy Policy

This Privacy Policy describes how [STX Sources] (the “Website”) collects, uses, and shares personal information of users (“you” or “users”) who visit our landing page, blog and comment sections.

1. Data Controller

The data controller responsible for the processing of your personal information is:

STX Sources
Founder: Samuel Körner
Am Hang 17, DE 74937 Spechbach, Germany
samuel.koerner@stx-sources.net
Tel: +49 6226 40156

General Information on Data Processing

We only process personal data insofar as this is necessary to provide our services, respond to inquiries, or enable communication with our users. The legal basis is Art. 6(1)(b), (f) GDPR, and, where applicable, your consent under Art. 6(1)(a) GDPR.

2. Information We Collect

We may collect the following types of personal information:

Information You Provide Directly:

  • Landing Page: If you fill out contact forms, subscribe to newsletters, or request information, we collect the information you provide, such as your name, email address, phone number, and any other information you choose to submit.
  • Blog: If you leave comments on our blog posts, we collect your name (which may be public), email address (which will not be public), and the content of your comment.

Information Collected Automatically:

  • Usage Data: We collect information about how you interact with our Website, such as the pages you visit, the links you click, the time you spend on the Website, and other similar usage statistics.
  • Technical Data: We collect technical information about your device and browser, including your IP address, browser type, operating system, device identifiers, and referring URLs.
  • Cookies and Similar Technologies: We use cookies and other tracking technologies (such as web beacons and pixels) to collect information about your browsing activities. We may use both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a longer period). You can manage your cookie preferences through your browser settings.
3. How We Use Your Information

We may use your personal information for the following purposes:

To Provide and Improve Our Services:

  • To operate and maintain the Website.
  • To personalize your experience on the Website.
  • To respond to your inquiries and requests.
  • To provide you with information and updates related to our products, services, and blog content (if you have subscribed).
  • To monitor and analyze Website usage and trends to improve our content and functionality.

Communication:

  • To send you newsletters, marketing communications, and other information that may be of interest to you (where you have provided consent or where permitted by applicable law).
  • To send you important notices and administrative messages.
  • To respond to your comments and posts.

Security and Fraud Prevention:

  • To detect, prevent, and address security incidents and fraudulent activities.
  • To protect the integrity of our Website.

Legal Compliance:

  • To comply with applicable laws, regulations, and legal processes.
  • To respond to lawful requests from public authorities.
4. Legal Basis for Processing

Our legal basis for processing your personal information will depend on the specific context in which we collect it. Generally, we will process your personal information based on one or more of the following legal grounds:

  • Your Consent: Where you have given us explicit consent to process your personal information for a specific purpose (e.g., subscribing to a newsletter). You have the right to withdraw your consent at any time.
  • Performance of a Contract: Where the processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract (e.g., providing access to blog and comments).
  • Legitimate Interests: Where the processing is necessary for our legitimate interests or the legitimate interests of a third party, provided that your interests and fundamental rights do not override those interests (e.g., analyzing Website usage to improve our services, preventing fraud).
  • Legal Obligation: Where we are required to process your personal information to comply with a legal obligation.
5. Sharing Your Information

We may share your personal information with the following categories of recipients:

  • Service Providers: We may share your information with third-party service providers who assist us in operating our Website, conducting our business, or providing services to you (e.g., hosting providers, email marketing platforms, analytics providers, software providers). These service providers are contractually obligated to protect your information and only use it for the purposes we specify.
  • Other Users: If you participate in discussions, the information you post (including your username and the content of your posts) will be visible to other users. Please be mindful of the information you choose to share publicly.
  • Legal Authorities: We may disclose your information to law enforcement agencies, government bodies, or other legal authorities if required by law or in response to a valid legal request.
  • Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will notify you if your personal information becomes subject to a different privacy policy as a result of such a transfer.
6. Newsletter & Mailchimp

If you subscribe to our newsletter, we will use your email address and other personal data you provide to send you regular updates. We use Mailchimp, a service provided by The Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, to manage and send our newsletters.

Mailchimp processes personal data (such as your email address, IP address, and usage data related to the newsletter) on our behalf in order to deliver and evaluate our email campaigns. The processing takes place on the basis of your consent (Art. 6 (1) lit. a GDPR).

Data may be transferred to the United States. Mailchimp relies on Standard Contractual Clauses approved by the European Commission as a safeguard for such transfers. You can find further details in Mailchimp’s privacy policy: https://mailchimp.com/legal/privacy/.

You may withdraw your consent to receive our newsletter at any time, for example by clicking the unsubscribe link included in each newsletter. If you unsubscribe, your data will be deleted from the mailing list unless legal retention periods require otherwise.

7. Use of Discord

We operate a Discord server to communicate with our community.

  • Service provider: Discord Inc., 444 De Haro Street, Suite 200, San Francisco, CA 94107, USA.

  • Data processing: When using Discord, user data such as profile name, message content, IP address, and usage times are processed directly by Discord.

  • Legal basis: Processing is based on your consent (Art. 6(1)(a) GDPR) and on our legitimate interest in effective communication (Art. 6(1)(f) GDPR).

  • Data transfer: Data may be transferred to the USA. Discord relies on Standard Contractual Clauses to ensure an adequate level of data protection.

  • More information: https://discord.com/privacy

8. Use of WhatsApp

We use WhatsApp (WhatsApp Business) to communicate with customers and interested parties.

  • Service provider: WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (for EU users).

  • Data processing: When contacting us via WhatsApp, personal data such as phone number, profile name, message content, and metadata will be processed.

  • Legal basis: Processing is based on your consent (Art. 6(1)(a) GDPR) and/or for contract performance (Art. 6(1)(b) GDPR).

  • Data transfer: WhatsApp may transfer data to Meta companies in the USA.

  • Important note: Please do not send us particularly sensitive information (e.g., health data, payment details) via WhatsApp.

  • More information: https://www.whatsapp.com/legal/privacy-policy-eea

9. International Data Transfers

Your personal information may be transferred to and processed in countries outside of your country of residence, which may have data protection laws that are different from the laws in your country. We will take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy and applicable data protection laws, such as implementing Standard Contractual Clauses approved by the European Commission.

10. Data Security

We have implemented reasonable technical and organizational measures to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. These measures include [mention specific security measures you take, e.g., encryption, firewalls, access controls]. However, please be aware that no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee the absolute security of your personal information.

11. Data Retention

We will retain your personal information for as long as necessary to fulfill the purposes for which it was collected, as described in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific retention periods will depend on the nature of the information and the purposes of the processing. For example:

  • Contact form submissions will typically be retained for as long as necessary to respond to your inquiry and for a reasonable period thereafter for record-keeping purposes.
  • Newsletter subscriber information will be retained until you unsubscribe.
  • Account information and posts will generally be retained as long as your account is active or as necessary to maintain the integrity of the archives.
12. Your Rights

Under applicable data protection laws, you may have certain rights regarding your personal information, including:

  • Right to Access: You have the right to request access to the personal information we hold about you and to receive a copy of it.
  • Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
  • Right to Erasure (“Right to be Forgotten”): In certain circumstances, you have the right to request that we erase your personal information.
  • Right to Restriction of Processing: In certain circumstances, you have the right to request that we restrict the processing of your personal information.
  • Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another data controller.
  • Right to Object: You have the right to object to the processing of your personal information in certain circumstances, including for direct marketing purposes.
  • Right to Withdraw Consent: If we are processing your personal information based on your consent, you have the right to withdraw your consent at any time.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal information infringes applicable data protection laws.

The relevant supervisory authority in Germany is:

Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)
Graurheindorfer Straße 153
53117 Bonn
Germany
Website: https://www.bfdi.bund.de/

13. Third-Party Websites and Services

Our Website may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third-party websites or services. We encourage you to review the privacy policies of those websites and services before providing them with your personal information.

14. Children’s Privacy

Our Website is not intended for children under the age of [Specify Age, e.g., 16]. We do not knowingly collect personal information from children under this age. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.

15. Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will post any changes on this page and update the “Last Updated” date at the top of the policy. We encourage you to review this Privacy Policy periodically for any updates. Significant changes may be communicated to you more directly, such as via email or a prominent notice on our Website.

16. Contact Us

If you have any questions or concerns about this Privacy Policy or our data processing practices, please contact us at:

samuel.koerner@stx-sources.net