Privacy

We are pleased about your interest in our company and our products and services, and we want you to feel secure regarding the protection of your data when visiting our website. We take the protection of your data very seriously. Complying with the provisions of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) is a matter of course for us.

As part of our information obligations, we want to make this privacy policy as transparent as possible. To that end, the following sets out the purpose limitation for the processing of your data, the use of cookies, tracking and analytics tools, social media and other third-party services, and informs you about your rights.

If, beyond this, you still have any questions about how we handle your personal data, you are welcome to contact us (contact details below).

1. Controller

strait earth GmbH Josephsplatz 8 90403 Nuremberg Germany Phone: 015170025828 Email: hello@strait.earth

As the operator of this website (https://www.strait.earth), strait earth GmbH is the responsible body (controller) within the meaning of the GDPR, which alone or jointly with others determines the purposes and means of processing personal data (hereinafter "data").

2. Definitions

In the following, we would like to inform you about the processing of your data when you visit our website and use our content and services. Under the GDPR, "personal data" means any information relating to an identified or identifiable natural person (data subject).

A natural person is identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier (such as name, address, telephone number, email address, IP address, location data, or special characteristics such as the genetic, economic, and social identity of that natural person).

"Processing" means any operation or set of operations which is performed on data, whether or not by automated means. This includes in particular the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, combination, restriction, erasure, or destruction.

With regard to the other data protection terms used, we refer to the definitions in Art. 4 GDPR.

3. Scope of data processing

In principle, it is not necessary for you to provide data in order to use our website. In certain cases, however, we require your name and address as well as further details so that we can provide the requested services.

The same applies, for example, to sending information materials or answering individual questions. Where this is necessary, we will inform you accordingly. Beyond that, we only process data that you provide to us voluntarily and, where applicable, data that we automatically collect when you visit our website.

If you use our services, we generally only collect data that we need to provide those services. Where we ask you for further data, this is voluntary information.

4. Purpose limitation of data processing

We process the data you provide in accordance with the principles of data minimization and purpose limitation. In principle, we process your data for the purpose of answering your inquiries, processing your orders, or providing you with access to certain information or offers.

To maintain customer relationships, it may also be necessary for us, or a service provider commissioned by us, to use this data to inform you about product offers or to conduct online surveys in order to better meet the tasks and requirements of our customers.

5. Disclosure of data to third parties

Your data is only disclosed to external parties in exceptional cases:

• to external service providers acting on our behalf (processors), where this is necessary for the purpose of performing the contractual relationship;

• to state institutions and authorities, where we are legally obliged to do so; or

• where you consent to this.

6. Data transfers to a third country

If, in the course of using third-party services, data is disclosed or transmitted to third parties in a third country — i.e. outside the European Union (EU) or the European Economic Area (EEA) — and data is further processed, this only takes place on the basis of your consent, a legal obligation, our legitimate interests, or where it is necessary to fulfill our (pre-)contractual obligations. Where data is transferred to the USA, we rely on an adequacy decision of the European Commission (EU-US Data Privacy Framework) or on the European Commission's Standard Contractual Clauses.

7. Legal bases for processing data

Depending on the purpose, the processing of your data is based on various legal bases, e.g. on the basis of your consent (Art. 6(1)(a) GDPR), the performance of contractual obligations or the implementation of pre-contractual measures (Art. 6(1)(b) GDPR), compliance with a legal obligation (Art. 6(1)(c) GDPR), or the protection of legitimate interests (Art. 6(1)(f) GDPR).

8. Storage period and data erasure

We store your data only until the purpose of processing has been fulfilled and no other statutory retention obligations exist. If you have given us consent, we store your data until you withdraw that consent.

9. Data automatically collected when you visit our website

When you use our website, the following data may be processed, among other things for technical reasons: the width of your screen, the name of the browser and operating system you use, the date and time of access, the search engines used, the names of downloaded files, or your IP address. This processing takes place on the basis of our legitimate interest in the technically error-free and secure operation of our website (Art. 6(1)(f) GDPR).

10. Hosting

Our website is hosted by Framer B.V., Amsterdam, Netherlands. Framer operates the website on the infrastructure of Amazon Web Services (AWS) and delivers the content via a globally distributed content delivery network (AWS CloudFront), which caches data as close as possible to the visitor's location.

When you visit our website, Framer, acting as our processor, processes technical data that your browser automatically transmits, in particular the IP address, the date and time of access, the file retrieved, and browser and operating system information. This processing is necessary in order to provide the website securely and reliably and takes place on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

We have concluded a data processing agreement with Framer in accordance with Art. 28 GDPR. Due to the globally distributed AWS network, data may be transferred to third countries outside the EU or EEA, in particular to the USA. This transfer takes place on the basis of appropriate safeguards, namely the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

11. Cookies

When you visit our website, cookies may be stored on your computer. Cookies are small text files that are sent by a web server to your browser and stored on your computer's hard drive.

Technically necessary cookies that are required for the operation of the website are stored on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR and Section 25(2) TDDDG. All other cookies, in particular for analytics and statistics purposes, are set exclusively with your prior consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You can withdraw your consent at any time with effect for the future via the cookie settings on our website.

12. Google Analytics

On our website, we use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to analyze user behavior on our website and to improve our online offering.

The use of Google Analytics takes place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. Without your consent, Google Analytics is not loaded. You can withdraw your consent at any time with effect for the future via the cookie settings on our website.

In the course of use, data such as truncated IP addresses and information on user behavior may be transferred to Google servers, including in the USA. For this transfer, Google relies on the European Commission's adequacy decision (EU-US Data Privacy Framework) and, additionally, on the Standard Contractual Clauses. We have concluded a data processing agreement with Google in accordance with Art. 28 GDPR.

You can find further information on data protection at Google Analytics at https://support.google.com/analytics/answer/6004245?hl=de and in Google's privacy policy at https://policies.google.com/privacy.

13. Social media

Our website uses the following links to social media. These are simple links; data is only transferred to the respective providers once you actively click the link and access their platform.

Instagram: We link to our Instagram profile. The operator within the EU is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When you click the link, you leave our site and switch to Instagram. Instagram's privacy provisions then apply, which you can view at https://privacycenter.instagram.com/policy.

LinkedIn: On our website you will find links to our LinkedIn profile, which within the EU is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. When you click the link, data may be transferred from your browser to LinkedIn. You can find LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy.

14. Contact form

If you use our contact form to get in touch, we ask you for personal information. So that we can answer your inquiry, providing your contact information is required.

The processing of data for the purpose of contacting us takes place on the basis of your voluntarily given consent, for the performance of a contract, or to carry out pre-contractual measures. The processing of the data entered into the contact form therefore takes place on the basis of Art. 6(1)(a) GDPR or Art. 6(1)(b) GDPR.

You can withdraw any consent given at any time with effect for the future. To do so, please write to strait earth GmbH, Josephsplatz 8, 90403 Nuremberg, or send an email to hello@strait.earth.

We only use your data insofar as this is necessary to process your inquiries and for further correspondence with you. The data we collect through the use of the contact form is stored by us for the purpose of processing the inquiry and in case of follow-up questions, and is deleted once your inquiry has been resolved, unless a statutory retention obligation exists.

15. Newsletter sign-up and dispatch

If you sign up for our newsletter, providing your email address is required. We store your email address for the purpose of delivering the newsletter. Providing further, separately marked data is voluntary and is used for the purpose of personal address and personalization.

For sign-up, we use what is known as the double opt-in procedure. After signing up, you receive an email in which you must confirm the registration. This ensures that the registration actually originates from you. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. We log your registration in order to meet the requirements for proof of consent.

You can unsubscribe from the newsletter and withdraw your consent at any time, for example via the unsubscribe link at the end of every newsletter email or by sending a message to hello@strait.earth.

16. Children and adolescents

Our website is aimed exclusively at potential applicants, customers, business partners, and members of the press.

Persons under the age of 16 should not transmit any data to us without the consent of their parents or legal guardians. We do not request data from children and adolescents who have not yet reached the age of sixteen. We do not collect such data and do not pass it on to third parties.

17. Security

We have taken technical and organizational security measures in accordance with the statutory requirements to protect your data against loss, destruction, manipulation, and unauthorized access.

The security measures include in particular the encrypted transmission of data between your browser and our server. For reasons of security and to protect the transmission of confidential content, this website uses transport encryption (Hypertext Transfer Protocol Secure). You can recognize an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://" and by the lock symbol in your browser bar.

All our employees and all persons involved in data processing, as well as the service providers commissioned by us, are obliged to comply with the GDPR, the BDSG, and other data protection laws, and to handle data confidentially. Our security measures are reviewed regularly and continuously revised in line with technological developments.

18. Data subject rights

Insofar as we process your data, you have extensive rights as a data subject, which are listed individually below. To assert them, an informal message to strait earth GmbH, Josephsplatz 8, 90403 Nuremberg, or an email to hello@strait.earth is sufficient in each case.

18.1 Withdrawal of consent — Insofar as you have given us your consent to process your data, you can withdraw it at any time with effect for the future.

18.2 Right of access — Under Art. 15 GDPR, you can obtain information about the data we process about you at any time. In particular, you can request information about the purposes of processing, the categories of data processed, the categories of possible recipients, and the planned storage period.

18.3 Right to rectification — In the event that data is inaccurate, you are entitled under Art. 16 GDPR to request the rectification or completion of the data stored about you.

18.4 Right to erasure — Under Art. 17 GDPR, you can request the erasure of data if storage of the data is no longer necessary and there is no other legal basis for the processing. You can also request erasure if you have objected to the processing and there are no overriding legitimate grounds for further processing, if your data has been processed unlawfully, or if there is a legal obligation to erase under EU or national law.

18.5 Right to restriction of processing — In addition, under Art. 18 GDPR you have the right to restriction of processing if you contest the accuracy of the data, if the processing is unlawful but you refuse erasure, if the purpose of processing no longer applies but the data is necessary for the assertion of legal claims, or if you have objected under Art. 21 GDPR and it has not yet been established whether the controller's legitimate grounds override your interests.

18.6 Right to data portability — Under Art. 20 GDPR, you have the right to receive the data concerning you in a commonly used, structured, and machine-readable format. In addition, under certain conditions you can have your data transmitted directly to another controller, insofar as this is technically feasible.

18.7 Right to object — You have the right to object to the use of your data for the purposes mentioned above at any time (Art. 21 GDPR). This is possible insofar as the objection is directed against direct marketing or there are grounds arising from your particular situation. In the case of an objection to direct marketing, you have a general right to object, which we will implement without you having to state a particular situation.

19. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work, or place of the alleged infringement, if you consider that the processing of the data concerning you infringes the GDPR.

The supervisory authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach (https://www.lda.bayern.de). A list of all supervisory authorities can be found at https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.

20. Contact for data protection matters

If you have any questions about this privacy policy or about the processing of your personal data, you can contact us at any time:

strait earth GmbH Josephsplatz 8 90403 Nuremberg Phone: 015170025828 Email: hello@strait.earth

21. Changes to our privacy policy

We reserve the right to change our security and data protection measures insofar as this becomes necessary due to technological developments. In such cases, we will also adjust our privacy notices accordingly. Please therefore refer to the current version of our privacy policy.

Last updated: June 2026