1. Controller
STALVION GmbH i.G.
Rheinpromenade 10
40789 Monheim am Rhein
Germany
Represented by: Behrad Barzegar
Phone: +49 1578 5561440
Email: behrad.barzegar@stalvion.com
2. Hosting and access data at IONOS
This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you access it, the web server processes the connection and access data necessary to deliver the content. This includes the IP address, the page or file requested, the date and time, browser type and version, operating system and device type, and the page previously visited if your browser sends it as a referrer.
According to the information published by IONOS, IP addresses in web hosting visitor data are anonymised as soon as they are collected. IONOS states that this visitor data is retained for eight weeks and is not transferred to third countries outside the EU. The data is used to deliver the website, troubleshoot problems and maintain security and stability.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is in a reliable and secure website. The hosting provider processes data on our behalf under Article 28 GDPR. Transmission of technically necessary connection data is required to access the pages.
IONOS: data processing in web hosting
IONOS privacy policy
3. Server-side access statistics
According to the provider, IONOS web hosting includes the analysis of access data through IONOS WebAnalytics. Our website does not embed any additional tracking pixel or analytics script for this. Where statistics are provided from server logs, they are used for technical optimisation of the website. IONOS states that WebAnalytics uses no cookies and anonymises the IP address immediately after transmission.
Where personal data is processed before anonymisation, the legal basis is Article 6(1)(f) GDPR. Our interest is in technical optimisation and a stable service. We do not create visitor profiles or embed additional advertising or analytics services. Details of web hosting visitor data and retention periods are set out in Section 2.
IONOS: data processing in WebAnalytics
4. Contact by email or phone
When you contact us, we process the data you provide, such as your name, company, email address and phone number, as well as the content and circumstances of your enquiry. We use this information to handle your request and communicate with you.
If the enquiry concerns a contract with you or steps taken prior to entering into a contract, the legal basis is Article 6(1)(b) GDPR. For other enquiries, particularly those from business contacts, we rely on Article 6(1)(f) GDPR and our legitimate interest in appropriate business communication.
The data is deleted once the enquiry has been fully resolved and further processing is no longer necessary. Where statutory retention obligations apply, for example to business correspondence or accounting records, deletion takes place only after those periods expire. Longer retention may also be necessary while data is needed to establish, exercise or defend legal claims. Recipients may include the service providers used for communication and IT operations, and competent authorities where disclosure is legally required.
Providing this information is voluntary. Without sufficient contact details and information about your request, we may be unable to respond. Clicking an email or telephone link opens the relevant application on your device. This does not automatically send an email.
5. Optional project brief
The form creates a project brief from your entries directly in the open browser. It does not send your entries to a server and uses no cookies, local storage or browser database for this purpose. This feature does not store data on a server.
Information only leaves the form workflow when you choose to copy or download the text or subsequently send it to us by email. Downloading saves a text file on your device at your explicit request. The copy feature writes the text to the clipboard only after you click it. Opening your email application does not automatically transmit the form entries. If you send us the project brief, Section 4 applies.
6. Cookies, external content and technical design
The website itself sets no cookies and uses neither local storage nor fingerprinting. We do not embed advertising networks, social media plugins, maps, videos or externally loaded fonts. Images, logos, JavaScript and CSS are loaded from this website's web server. Arial is used from the system fonts available on your device.
The website as provided does not require a consent banner for optional cookies because it does not use such storage or access technologies. Downloads and the clipboard are used only at your explicit request. If we add services requiring consent in future, we will do so only after providing the relevant information and obtaining consent.
The website is configured for encrypted delivery over HTTPS. Please note that ordinary email does not guarantee end-to-end encryption. For confidential project documents, please agree a suitable transmission method with us.
7. Automated decisions
We do not make decisions through this website based solely on automated processing that produce legal or similarly significant effects, nor do we carry out profiling within the meaning of Article 22 GDPR.
8. Your data protection rights
Subject to the statutory requirements, you have the right to access your personal data (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). Where processing is based on your consent, you may withdraw it at any time with future effect (Article 7(3)). This does not affect the lawfulness of processing carried out before withdrawal.
To exercise your rights, please contact behrad.barzegar@stalvion.com or use the postal address above.
9. Right to lodge a complaint
Under Article 77 GDPR, you may lodge a complaint with a data protection supervisory authority, particularly in the place of your habitual residence, place of work or the alleged infringement. The authority responsible for our registered location is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia:
LDI NRW
Postfach 20 04 44
40102 Düsseldorf
Email: poststelle@ldi.nrw.de
Contact LDI NRW
10. Date of this policy
Last updated: 24 October 2026. If we add functions or services, we will update this privacy policy to reflect the actual processing.