Privacy

Privacy Policy

Information pursuant to Art. 13, 14 GDPR

This is an English-language translation provided for convenience. The legally binding version is the German Datenschutzerklärung.

1. Data controller

The controller responsible for data processing under the General Data Protection Regulation (GDPR) is:

2. Hosting and server log files

This website is hosted by an external service provider (processor): Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, and Cloudflare Germany GmbH.

When you access the website, the host automatically collects information that your browser transmits, in so-called server log files:

• IP address of the accessing device
• date and time of access
• the page or file requested
• amount of data transferred
• browser type and operating system
• referrer URL (the previously visited page)

This data is processed to deliver the website, ensure system security and stability, and for technical error analysis.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a technically sound and secure provision of the website). A data processing agreement (Art. 28 GDPR) is in place with the host.

3. Contacting us by email

If you contact us by email, the data you provide (your email address and, where applicable, your name and telephone number) is stored by us in order to answer your enquiry. Processing is based on Art. 6(1)(b) GDPR (where the enquiry serves to take steps prior to entering into a contract) or Art. 6(1)(f) GDPR (legitimate interest in handling enquiries). The data is deleted once it is no longer required for the purpose for which it was collected.

4. Consent management

We use the consent management tool Klaro to obtain and manage consent. Klaro is an open-source solution run directly on our own server (Cloudflare); no data is transferred to an external consent-tool provider. Optional services (analytics, marketing) are loaded only after you have given explicit consent.

Your selection is stored locally in your browser (localStorage) so that you are not asked again on each visit. You can withdraw or change your consent at any time, with effect for the future, via the privacy settings.

Legal basis: § 25(2) TDDDG and Art. 6(1)(f) GDPR (legitimate interest in legally compliant consent management) for storing the settings necessary for this function.

Cookies and similar technologies used

The table below lists the cookies used on this website. Analytics and marketing cookies are set only after your consent. The retention periods shown are the providers’ typical values and may change.

Analytics cookies (_ga, _ga_<ID>, _gid) are set only with consent to the “Analytics” category; marketing cookies (_fbp, fr) only with consent to the “Marketing” category.

5. Google Analytics 4

Only with your consent. We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to analyse how the website is used.

The following data in particular is collected: truncated IP address, pages viewed, time spent, approximate location (city/region level), device and browser used, and the source of the visit. This helps us understand how our website is used so that we can improve it.

Processing takes place only if you have consented to the “Analytics” category via our consent tool. Without your consent, Google Analytics is not loaded.

Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG (consent). You can withdraw your consent at any time via the privacy settings.

6. Meta Pixel

Only with your consent. We use the Meta Pixel, a service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. The Meta Pixel lets us measure the effectiveness of our ads on Facebook and Instagram and reach visitors to our website for advertising purposes (remarketing).

Information about your behaviour on this website may be transmitted to Meta and linked to your Meta account, if you have one. Processing takes place only if you have consented to the “Marketing” category via our consent tool. Without your consent, the Meta Pixel is not loaded.

Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG (consent). You can withdraw your consent at any time via the privacy settings.

7. International data transfers

Using the services above (Cloudflare, Google, Meta) may involve transferring personal data to the USA. For these transfers, the providers rely on appropriate safeguards under Art. 44 et seq. GDPR, in particular the European Commission’s Standard Contractual Clauses and, where certified, the EU-U.S. Data Privacy Framework.

There is a risk that U.S. authorities may access this data and that effective legal remedies may not be available to you. Optional services are activated only with your explicit consent.

8. Your rights

Subject to the statutory conditions, you have the following rights:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object to processing (Art. 21 GDPR)
• right to withdraw consent (Art. 7(3) GDPR)

To exercise your rights, an informal message to info@truestereolabs.com is sufficient.

9. Notice for California residents

If you are a California resident, the California Consumer Privacy Act as amended by the CPRA gives you certain rights regarding your personal information:

• the right to know what personal information we collect and how it is used;
• the right to request deletion of your personal information;
• the right to correct inaccurate personal information;
• the right to opt out of the “sale” or “sharing” of personal information;
• the right not to be discriminated against for exercising these rights.

We do not sell your personal information for money. We may “share” personal information for cross-context behavioural advertising through the Meta Pixel — but only if you have consented to the “Marketing” category in our privacy settings. If you decline that category, or withdraw your consent, no such sharing takes place. You can therefore exercise your opt-out at any time directly through the consent banner.

To make a request regarding your California privacy rights, contact us at info@truestereolabs.com.

10. Right to lodge a complaint

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.

The competent authority includes the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin.