1. Controller
STVenture UG (haftungsbeschränkt), Sascha Theismann, Kyllstraße 10, 53879 Euskirchen, Germany. E-mail: info@stventure.de
2. Hosting and server log files
This website is hosted on a server operated by netcup GmbH, Emmy-Noether-Strasse 10, 76131 Karlsruhe, Germany. The server is located in Germany. Processing is based on a data processing agreement pursuant to Art. 28 GDPR.
When you access this website, information transmitted by your browser is collected automatically (server log files): IP address, date and time of the request, page accessed, data volume, browser type and operating system. This data is used solely for the technically error-free operation and the security of the website. Legal basis: Art. 6(1)(f) GDPR (legitimate interest). The data is not merged with other sources and is deleted after a short period.
No content is loaded from third-party servers: fonts, scripts and graphics – including the charting library used in our studies – are served exclusively from the server named above. No content delivery network or upstream web proxy is used.
3. Cookies
This website uses no tracking, analytics or marketing cookies. Only strictly necessary cookies are set:
- pll_language – stores the language version you selected (German/English). Lifetime: one year.
- WordPress session cookies – only after signing in to the admin area; they are not set for visitors of the website.
These cookies are strictly necessary for the operation of the website and therefore exempt from consent under Section 25(2) no. 2 TDDDG; no cookie banner is required. No web analytics service such as Google Analytics is used.
4. Contact form and e-mail
If you contact us via the form or by e-mail, we process the data you provide (name, e-mail address, message) to handle your enquiry. Form submissions are not stored in this website’s database; they are transmitted to us by e-mail only (see section 7). Legal basis: Art. 6(1)(b) and (f) GDPR. The data is deleted once it is no longer required and no statutory retention periods apply.
5. Links to social networks
The footer contains simple links to our LinkedIn and X profiles. No social plugins or tracking pixels are embedded; data is only transmitted to these providers once you actively click the respective link.
6. Spam protection
To protect our contact form against automated abuse we use a honeypot method: the form contains an additional field that is invisible to you and, as a rule, is only filled in by automated programs. The evaluation takes place entirely on our own server. No data is transmitted to third parties and no cookies are set. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in spam prevention).
7. E-mail delivery (Microsoft 365)
For reliable sending and receiving of e-mails – such as enquiries from the contact form – we use Microsoft 365 (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). The data provided is processed for the purpose of delivery. Legal basis: Art. 6(1)(b) and (f) GDPR. Processing by group companies in third countries cannot be ruled out; Microsoft relies on the EU Standard Contractual Clauses for this and is certified under the EU-US Data Privacy Framework.
8. SSL/TLS encryption
For security reasons this website uses TLS encryption, recognisable by the “https” in your browser address bar.
9. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). Please use the contact details above.
You may also lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is the Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestrasse 2–4, 40213 Düsseldorf, Germany.
Last updated: July 2026.