Privacy policy

Thank you for visiting. Below we explain how personal data is processed on this website, in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

This English version is provided for convenience. The German version is the legally binding one.

1. Controller

StelvioTech UG (haftungsbeschränkt)
Virchowstraße 18, 85521 Ottobrunn, Germany
Managing Director: Israel Serrano Ortiz
Phone: +49 176 6246 0022
Email: info@stelviotech.com

We are not required to appoint a data protection officer (§ 38 (1) BDSG). For any data protection matter, please use the contact details above.

2. Visiting the website and server log files

When you open this website, your browser automatically transmits information to our hosting provider's server. The following data is recorded without any action on your part and stored temporarily in a log file:

• IP address of the requesting device
• date and time of access
• name and URL of the file retrieved, and the HTTP status code
• volume of data transferred
• referrer URL, where transmitted
• browser and operating system used

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in delivering the website reliably, and in its stability and security. This data is not combined with other sources and is not evaluated for marketing purposes.

3. Hosting

This website is hosted by Soluciones Web On Line, S.L. (ProfesionalHosting), C/ Hermanos Machado 19, Edificio Europa 1ª, 04720 Roquetas de Mar (Almería), Spain. The host processes the log file data described above on our behalf. A data processing agreement under Art. 28 GDPR is in place. The servers are located within the European Union. The host in turn engages sub-processors, including providers established in the United States (among them Cloudflare, for attack mitigation and content delivery); such transfers are based on the European Commission's Standard Contractual Clauses pursuant to Art. 46 (2) (c) GDPR.

4. Language selection based on the origin of your IP address

The first time you open the home page, we determine the associated country from your IP address in order to show you the site in a suitable language. This happens exclusively on our own server, using a locally stored lookup file. Your IP address is never transmitted to any third party for this purpose, is not logged and is not stored; it is processed in memory only for the duration of the request. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is to offer visitors an intelligible language version immediately. You can choose a different language at any time using the language selector in the header; your choice overrides the automatic detection.

5. Cookies

This website uses no analytics, tracking or advertising cookies, and embeds no audience measurement services. The only cookie set is the following:

This cookie is strictly necessary to provide a service you have expressly requested. It is therefore stored without consent under § 25 (2) no. 2 TDDDG; the subsequent processing is based on Art. 6 (1) (f) GDPR. You can delete the cookie at any time in your browser settings. This is why we deliberately do not show a cookie banner: there is nothing for you to consent to.

6. Fonts

The typeface used (Montserrat) is served from our own server. No connection is made to Google Fonts or any other external provider. Your IP address is not transmitted to third parties when fonts are loaded.

7. Contacting us by email or telephone

If you contact us by email or by telephone, we process the details you provide (name, contact details, the content of your enquiry) solely in order to deal with your request. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to entering into or performing a contract, and otherwise Art. 6 (1) (f) GDPR (legitimate interest in responding to enquiries). We erase the data as soon as it is no longer required for that purpose and no statutory retention periods apply; business correspondence is subject to commercial and tax retention obligations of up to six and ten years respectively.

Contact form

When you use the contact form we process the data you enter: name, organisation, email address, the interest you select and your message. We also process your IP address in order to prevent automated abuse of the form.

Purpose: handling and answering your enquiry.
Legal basis: your consent under Art. 6(1)(a) GDPR, given when you tick the box, and, where the enquiry concerns entering into or performing a contract, Art. 6(1)(b) GDPR. Processing of the IP address rests on our legitimate interest in preventing spam, Art. 6(1)(f) GDPR.

No external service provider. The form is processed by a script on our own server and the message is delivered straight into our own mailbox. It is not passed to any form, newsletter or analytics service and it does not leave the European Union. The only party involved is our hosting provider (Soluciones Web On Line, S.L. (ProfesionalHosting)) as a processor under Art. 28 GDPR.

Retention: your message stays in our mailbox for as long as we need it to deal with your enquiry, and is then deleted unless commercial or tax law requires us to keep it. The IP data kept for spam prevention is deleted automatically after one hour.

You may withdraw your consent at any time with effect for the future — an informal email to info@stelviotech.com is enough. You are not obliged to use the form: you can reach us by email or telephone instead.

8. Recipients and disclosure

Beyond the processors named in this policy, your data is not passed on to third parties. In particular, we do not sell data and we use no advertising networks or social media plugins.

9. Your rights

You have the following rights in respect of your personal data:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object to processing (Art. 21 GDPR)
• right to withdraw consent with effect for the future (Art. 7 (3) GDPR)

An informal message to info@stelviotech.com is sufficient.

10. Right to object

Where we process your data on the basis of legitimate interests under Art. 6 (1) (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms.

11. Right to lodge a complaint

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18, 91522 Ansbach, Germany
Phone: 0981 180093-0
Email: poststelle@lda.bayern.de
www.lda.bayern.de

12. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

13. Changes to this policy

We update this privacy policy whenever changes to our processing activities or to the legal situation require it. The version available on this page applies.

Last updated: 2026-08-22