Privacy
We are pleased about your interest in our company and our products or services and want you to feel secure regarding the protection of your data when visiting our website. Because we take the protection of your data very seriously. Compliance with the provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) is a matter of course for us.
As part of our information obligations, we would like to make this privacy policy as transparent as possible. To do this, we present below the purpose limitation of the processing of your data, the use of cookies, tracking and analysis tools, social media, and other third-party services, and inform you about your rights.
If you still have any open questions about the handling of your personal data, you are welcome to contact us (see contact details below).
1. Controller
strait earth GmbH
Josephsplatz 8
90403 Nuremberg
Germany
Phone: 015170025828
E-Mail: hello@strait.earth
As the operator of this website (https://www.strait.earth), strait earth GmbH is the responsible body (controller) within the meaning of the GDPR, which alone or jointly with others decides on the purposes and means of processing personal data (hereinafter referred to as "data").
2. Definitions
We would like to inform you below about the processing of your data when visiting our website and using our content and services. Under the GDPR, "personal data" means any info relating to an identified or identifiable natural person (data subject).
A natural person is identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier (such as name, address, telephone number, email address, IP address, location data, or special characteristics such as the genetic, economic, and social identity of this natural person).
"Processing" means any operation or set of operations performed on data, whether or not by automated means. This includes, in particular, collecting, recording, organizing, structuring, storing, adapting or modifying, retrieving, consulting, using, disclosing by transmission, disseminating or otherwise making available, aligning, combining, restricting, erasing, or destroying.
With regard to any other data protection terms used, we refer to the definitions in Art. 4 GDPR.
3. Scope of Data Processing
In principle, it is not necessary for you to provide data in order to use our website. In certain cases, however, we require your name and address, as well as additional details, so that we can provide the requested services.
The same applies, for example, to sending information materials or answering individual questions. Where this is necessary, we will point it out to you accordingly. Furthermore, we only process data that you voluntarily provide to us and, if applicable, data that we collect automatically when you visit our website.
Insofar as you make use of our services, generally only such data as we require to provide the services is collected. If we ask you for further data, this is voluntary information.
4. Purpose Limitation of Data Processing
We process the data you provide to us in accordance with the principles of data minimization and purpose limitation. In principle, we process your data for the purpose of answering your inquiries, processing your orders, or providing you with access to specific information or offers.
For the purpose of maintaining customer relations, it may also be necessary for us or a service company commissioned by us to use this data to inform you about product offers or to conduct online surveys to better meet the tasks and requirements of our customers.
5. Disclosure of Data to External Parties
Your data will only be passed on to external parties in exceptional cases:
to external service providers acting on our behalf (processors) if this is necessary for the performance of the contractual relationship,
to state institutions and authorities if we are legally obligated to do so, or
if you consent to this.
6. Data Transfers to Third Countries
Insofar as the use of third-party services leads to the disclosure or transfer of data to third parties in a third country, i.e., outside the European Union (EU) or the European Economic Area (EEA), and data is processed further, this will only take place on the basis of your consent, a legal obligation, our legitimate interests, or if it is necessary to fulfill our (pre-)contractual obligations. Insofar as data is transferred to the USA, we rely on an adequacy decision of the European Commission (EU-US Data Privacy Framework) or on the standard contractual clauses of the European Commission.
7. Legal Basis for the Processing of Data
Depending on the purpose, the processing of your data is based on various legal grounds, e.g., on the basis of your consent (Art. 6 para. 1 sentence 1 lit. a GDPR), the fulfillment of contractual obligations, or the implementation of pre-contractual measures (Art. 6 para. 1 sentence 1 lit. b GDPR), to fulfill a legal obligation (Art. 6 para. 1 sentence 1 lit. c GDPR), or to protect legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).
8. Storage Duration and Data Erasure
We only store your data as long as necessary to fulfill the processing purpose and provided that no other legal retention obligations exist. If you have given us consent, we will store your data until you withdraw your consent.
9. Data Collected Automatically When Visiting Our Website
When using our website, technical reasons may lead to the processing of data including: the width of your screen, the name of the browser and operating system you are using, date and time of access, search engines used, names of downloaded files, or your IP address. This processing takes place on the basis of our legitimate interest in a technically error-free and secure operation of our website (Art. 6 para. 1 sentence 1 lit. f GDPR).
10. Hosting
Our website is hosted by Framer B.V., Amsterdam, Netherlands. Framer operates the website on the infrastructure of Amazon Web Services (AWS) and delivers the content via a globally distributed content delivery network (AWS CloudFront), which caches data as close as possible to the visitors' location.
When you visit our website, Framer, as our data processor, processes technical data automatically transmitted by your browser, in particular IP address, date and time of access, retrieved file, as well as browser and operating system information. This processing is necessary to provide the website securely and reliably and is based on our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.
We have concluded a data processing agreement with Framer in accordance with Art. 28 GDPR. Due to AWS's globally distributed network, data may be transferred to third countries outside the EU or the EEA, particularly the USA. This transfer takes place on the basis of appropriate safeguards, namely the European Commission's standard contractual clauses and, where applicable, the EU-US Data Privacy Framework.
11. Cookies
When you visit our website, cookies may be stored on your computer. Cookies are small text files sent by a web server to your browser and stored on your computer's hard drive.
Technically necessary cookies required for the operations of the website are stored on the basis of our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR and Section 25 para. 2 TDDDG. All other cookies, especially for analysis and statistical purposes, are set exclusively after your prior consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with Section 25 para. 1 TDDDG. You can withdraw your consent at any time with future effect via the cookie settings on our website.
12. Google Analytics
On our website, we use Google Analytics, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to analyze user behavior on our website and improve our online presence.
The use of Google Analytics takes place exclusively on the basis of your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with Section 25 para. 1 TDDDG. Without your consent, Google Analytics will not be loaded. You can withdraw your consent at any time with future effect via the cookie settings on our website.
As part of this use, data such as truncated IP addresses and information on user behavior may be transferred to Google servers, including in the USA. For this transfer, Google relies on the adequacy decision of the European Commission (EU-US Data Privacy Framework) and additionally on the standard contractual clauses. We have concluded a data processing agreement with Google in accordance with Art. 28 GDPR.
Further information on data protection with Google Analytics can be found at https://support.google.com/analytics/answer/6004245?hl=en as well as in Google's privacy policy at https://policies.google.com/privacy.
13. Social Media
Our website uses the following links to social media. These are simple links; data transfer to the respective providers only takes place once you actively click on the link and access their platform.
Instagram: We link to our Instagram profile. Within the EU, the operator is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When clicking the link, you leave our site and go to Instagram. Instagram's privacy policy applies there, which you can view at https://privacycenter.instagram.com/policy.
LinkedIn: On our website, you will find links to our LinkedIn profile, operated within the EU by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. If you click on the link, data may be transmitted from your browser to LinkedIn. LinkedIn's privacy policy can be found at https://www.linkedin.com/legal/privacy-policy.
14. Contact Form
If you use our contact form to get in touch with us, we will ask you for personal information. In order for us to answer your inquiry, providing your contact information is required.
Data processing for the purpose of contacting us is carried out on the basis of your voluntarily given consent, to fulfill a contract, or to implement pre-contractual measures. The processing of data entered into the contact form is therefore based on Art. 6 para. 1 sentence 1 lit. a GDPR or Art. 6 para. 1 sentence 1 lit. b GDPR.
You can withdraw consent you have granted at any time with future effect. To do so, please write to strait earth GmbH, Josephsplatz 8, 90403 Nuremberg, or send an email to hello@strait.earth.
We only use your data to the extent necessary to process your inquiries and for further correspondence with you. The data we collect for the use of the contact form is stored by us for the purpose of processing the inquiry and in the event of follow-up questions, and is deleted after your inquiry has been resolved, provided that no statutory storage obligation exists.
15. Newsletter Subscription and Dispatch
If you subscribe to our newsletter, providing your email address is required. We store your email address for the purpose of delivering the newsletter. Providing further, separately marked data is voluntary and is used for personalized addressing and content personalization.
We use the so-called double opt-in procedure for subscriptions. After registering, you will receive an email in which you must confirm your registration. This ensures that the registration actually originates from you. The legal basis is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. We log your registration to meet the requirements for proving consent.
You can unsubscribe from the newsletter and withdraw your consent at any time, for example via the unsubscribe link at the end of each newsletter email or by sending a message to hello@strait.earth.
16. Children and Adolescents
Our website is aimed exclusively at potential applicants, customers, business partners, and press representatives.
Persons under the age of 16 should not transmit any data to us without the consent of their parents or legal guardians. We do not request data from children and adolescents under sixteen years of age. We do not collect such data nor disclose it to third parties.
17. Security
We have taken technical and organizational security measures in accordance with legal requirements to protect your data from loss, destruction, manipulation, and unauthorized access.
Security measures include, in particular, the encrypted transmission of data between your browser and our server. For reasons of security and to protect the transmission of confidential content, this website uses transport encryption (Hypertext Transfer Protocol Secure). You can recognize an encrypted connection by the address line of the browser changing from "http://" to "https://" and by the lock symbol in your browser bar.
All of our employees, all persons involved in data processing, as well as the service companies commissioned by us, are obligated to comply with the GDPR, the BDSG, and other relevant data protection laws, as well as to handle data confidentially. Our security measures are checked regularly and revised continuously in line with technological developments.
18. Data Subject Rights
Insofar as we process your data, you have extensive rights as a data subject, which are detailed below. To assert these, an informal message to strait earth GmbH, Josephsplatz 8, 90403 Nuremberg, or an email to hello@strait.earth is sufficient.
18.1 Withdrawal of Consent If you have given us your consent to process your data, you can withdraw this at any time with effect for the future.
18.2 Right to Access Under Art. 15 GDPR, you can request access to your data processed by us at any time. In particular, you can request info regarding the processing purposes, the categories of data processed, categories of potential recipients, and the planned storage duration.
18.3 Right to Rectification If the data is incorrect, you are entitled under Art. 16 GDPR to demand the rectification or completion of your data stored with us.
18.4 Right to Erasure Under Art. 17 GDPR, you can demand the erasure of the data if storing the data is no longer necessary and there is no other legal basis for processing. You can also demand erasure if you have objected to the processing and there are no overriding legitimate grounds for further processing, if your data was processed unlawfully, or if there is a legal obligation to erase under EU or national law.
18.5 Right to Restriction of Processing Furthermore, under Art. 18 GDPR, you have the right to request restriction of processing if you contest the accuracy of the data, the processing is unlawful but you oppose erasure, the purpose of processing no longer exists but the data is required for the establishment of legal claims, or if you have objected in accordance with Art. 21 GDPR and it has not yet been determined whether the legitimate grounds of the controller override your interests.
18.6 Right to Data Portability Under Art. 20 GDPR, you have the right to receive the data concerning you in a commonly used, structured, and machine-readable format. Furthermore, under certain conditions, you can obtain that your data is transmitted directly to another controller, as far as technically feasible.
18.7 Right to Object You have the right to object to the use of your data for the aforementioned purposes at any time (Art. 21 GDPR). This is possible as far as the objection is directed against direct marketing or there are reasons resulting from your particular situation. In the case of an objection to direct marketing, you have a general right to object, which will be implemented by us without specifying a particular situation.
19. Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of data relating to you infringes the GDPR.
The supervisory authority competent for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach (https://www.lda.bayern.de). A list of all supervisory authorities can be found at https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.
20. Contact for Data Protection Matters
If you have any questions regarding this privacy policy or the processing of your personal data, you can contact us at any time:
strait earth GmbH
Josephsplatz 8
90403 Nuremberg
Phone: 015170025828
E-Mail: hello@strait.earth
21. Changes to our Privacy Policy
We reserve the right to modify our security and data protection measures as required due to technical developments. In these cases, we will also adapt our data protection notices accordingly. Please therefore note the current version of our privacy policy.
As of: June 2026