Controller
The controller responsible for data processing on this website is:
Stoerkens GmbH
Karl-Birzer-Str. 7, 85521 Ottobrunn, Germany
Managing Director: Andreas Stoll
Email: andreas.stoll@stoerkens.de
Phone: +49 89 212311841
Your rights
You have the right, at any time, to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You may withdraw any consent given at any time with effect for the future. To exercise these rights, please contact the address above. You also have the right to lodge a complaint with a supervisory authority.
Access data and server log files
When you access this website, our hosting provider automatically stores technically necessary data in server log files (IP address, date and time of access, requested resource, referrer, browser and operating-system information). This processing serves the secure and stable operation of the website and is based on our legitimate interest (Art. 6 (1) (f) GDPR). Log files are deleted after a short period unless they are needed to investigate security incidents.
Hosting
This website is served as a static site hosted in Germany. Data transfer is exclusively encrypted (TLS/HTTPS). A data-processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.
Cookies
We use technically necessary cookies required to operate the website. We set optional cookies (e.g. for reach measurement) only with your consent (Art. 6 (1) (a) GDPR). You can withdraw your consent at any time via the cookie settings.
Company identification (Albacross)
This website uses Albacross, a service provided by Albacross Nordic AB (company registration no. 556942-7338, Epicenter, Malmskillnadsgatan 42, 111 57 Stockholm, Sweden). Albacross is used to identify which companies visit our website. In doing so, it processes your IP address, browser and operating-system information, time stamps, cookie identifiers and information about the pages you visit. The IP address is matched against a database of corporate networks. The purpose is not to identify individual persons, but to attribute a visit to a company.
The script is loaded only after your explicit consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). As long as you have not consented, or if you decline, the script is not loaded and no data is transmitted to Albacross. You can withdraw your consent at any time via the cookie settings with effect for the future.
Albacross processes the data as a processor on our behalf. Data may be transferred to service providers outside the EU or EEA; such transfers are covered by appropriate safeguards pursuant to Art. 44 et seq. GDPR. For more information, see Albacross's privacy policy: https://www.albacross.com/privacy-policy.
Reach measurement (Google Analytics 4)
This website uses Google Analytics 4, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics is used for reach measurement: we analyse how our website is found and used in order to improve our content and offering. In doing so, it processes your truncated IP address, device and browser information, time stamps, the pages you visit, the origin of the visit (referrer) and a randomly assigned identifier (client ID) stored in a cookie. Google Analytics 4 truncates IP addresses by default before any storage; the full IP address is not stored.
The script is loaded only after your explicit consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). As long as you have not consented, or if you decline, the script is not loaded and no data is transmitted to Google. You can withdraw your consent at any time via the cookie settings with effect for the future.
Google processes the data as a processor on our behalf on the basis of the Google Ads Data Processing Terms. Data may be transferred to Google LLC in the USA. Such transfers are covered by the European Commission's adequacy decision on the EU-US Data Privacy Framework and, in addition, by standard contractual clauses pursuant to Art. 46 GDPR. The retention period for usage data is limited to 14 months. For more information, see Google's privacy policy: https://policies.google.com/privacy.
Contact and notification forms
If you contact us via a contact form or the "Notify me" form (waitlist for apps that are not yet available), we process the data you provide (e.g. your email address) to handle your request or to inform you about availability. The legal basis is Art. 6 (1) (b) or (a) GDPR. The data is deleted once the purpose no longer applies and no statutory retention periods prevent this.
Business outreach by email
We contact companies that publicly present themselves as CRM or Pipedrive service providers by email to introduce our Pipedrive app development offering. If you have received such an email from us, the following information applies to you (Art. 14 GDPR).
What data: your name, your business email address, your company, country and website, the address of the page where we found your contact details, and a short note on the services your company describes publicly. In addition, we record the delivery status of our emails (delivered, bounced, replied). We do not track whether or when you open an email or click a link.
Where the data comes from: from publicly accessible sources, namely software vendors' partner directories and your company's website. We state the exact source in every email.
Purpose and legal basis: business-to-business outreach (direct marketing). The legal basis is our legitimate interest under Art. 6 (1) (f) GDPR; according to Recital 47 GDPR, processing for direct marketing may be regarded as carried out for a legitimate interest. Our interest is to present service providers with an offering that fits the business they describe publicly. We only use business contact details that your company has published itself, send no more than four emails and stop immediately if you object.
Recipients: we send the emails using the open-source software Mautic, which we operate ourselves. Mautic and our mail server run on servers of Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen) in Germany. For delivery we use Amazon Simple Email Service provided by Amazon Web Services EMEA SARL (38 Avenue John F. Kennedy, L-1855 Luxembourg), data centre Frankfurt am Main. Both providers act on our behalf. A transfer to Amazon Web Services, Inc. in the USA cannot be ruled out. It is covered by the European Commission's adequacy decision on the EU-US Data Privacy Framework and, in addition, by standard contractual clauses pursuant to Art. 46 GDPR.
Retention period: we delete your data no later than 12 months after our last email if no conversation has resulted from it. If you object, we delete your data immediately and keep only your email address on a suppression list so that you are not contacted again. If a business relationship results from the outreach, the information under "Retention period" applies.
Your right to object (Art. 21 (2) and (3) GDPR): you may object to the processing of your data for direct marketing at any time without giving reasons. A short reply to our email or a message to daniel@crmbooster.io is sufficient. This incurs no costs other than transmission costs at basic rates. Your other rights are listed under "Your rights".
Recipients in Switzerland: the Swiss Federal Act on Data Protection (FADP) also applies to you. The information in this section applies accordingly. You can request access under Art. 25 FADP and object in the same way. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).
Partner portal (account)
We provide a password-protected portal for partners. To provide the account and its billing functions, we process master, contract and billing data. The legal basis is the performance of a contract (Art. 6 (1) (b) GDPR) and compliance with tax and commercial-law obligations (Art. 6 (1) (c) GDPR).
Payment processing
Purchases are processed via the payment service provider Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). The data required for payment (e.g. payment method, amount, customer identifier) is transmitted to and processed by Stripe on its own responsibility. The legal basis is Art. 6 (1) (b) GDPR. For more information, see Stripe's privacy policy: https://stripe.com/privacy.
Retention period
We store personal data only for as long as necessary for the respective purposes. Statutory retention periods under the German Commercial Code (HGB) and Fiscal Code (AO) apply to accounting and invoicing records (generally 6 or 10 years).
Supervisory authority
The supervisory authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany. Without prejudice to any other remedy, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).