teaser

HiDrive Share Privacy Statement

The protection of your data is one of the most important principles of STRATO AG. With this Privacy Statement, we would like to inform you about the type, scope and purpose of the personal data we collect, use and process. Furthermore, we would like to inform you about the rights to which you are entitled.

1. Contact details

Data controller:

STRATO AG
Otto-Ostrowski-Straße 7
10249 Berlin, Germany

You can reach us at the following email address: kontakt@strato.de

Data Protection Officer:

STRATO AG
Otto-Ostrowski-Straße 7
10249 Berlin, Germany

If you wish to assert your legal rights or have any questions in general, please contact datenschutz@strato.de. You can reach our data protection experts in customer care at this email address. If you wish to contact the STRATO AG company Data Protection Officer directly, please use the postal address above.

2. What data we collect and process

a)

We process the data you upload to the platform. This is done to provide the service in accordance with Art. 6(1)(b) GDPR. The data is deleted after 7 days.

b)

Your IP address is stored on our platform to provide the service and is anonymised after 7 days. We base this both on the legal basis of contract performance (Art. 6(1)(b) GDPR) and on our legitimate interests, Art. 6(1)(f) GDPR.

c)

When you visit our website or use our services, the device with which you access the page automatically transmits log data (connection data) to our servers. This is particularly the case when you order, when you log in or when you upload or download data. This data is anonymised after 7 days. We base this on the legal basis of legitimate interests, Art. 6(1)(f) GDPR.

d)

We process the data that accrues when you contact us by email, fax or post, for example. We base this on the legal basis of contract performance, Art. 6(1)(b) GDPR.

3. Recipient categories

No data is transferred to third parties or processors.

4. Data processing in third countries

No data processing takes place in third countries.

5. Your rights

a) Right of information and confirmation

You have the right to receive information and confirmation about the personal data we store about you and a copy of this information from us free of charge at any time.

b) Right of rectification

You have the right to request that inaccurate personal data concerning you be corrected without delay. You also have the right to request that incomplete personal data be completed, including by means of a supplementary declaration, taking into account the purposes of the processing.

c) Rights of erasure

You have the right to request that inaccurate personal data concerning you be corrected without delay. You also have the right to request that incomplete personal data be completed, including by means of a supplementary declaration, taking into account the purposes of the processing.

  • The personal data was collected or otherwise processed for purposes for which it is no longer necessary.
  • You withdraw your consent on which the processing was based and there is no other legal basis for the processing.
  • You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
  • The personal data has been processed unlawfully.
  • The erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject.
  • The personal data was collected in relation to information society services offered pursuant to Art. 8(1) GDPR.

d) Right of restriction of processing

You have the right to request the restriction of the processing if one of the following conditions is met:

  • You dispute the accuracy of the personal data for a period of time that allows us to verify the accuracy of the personal data.
  • The processing is unlawful, you refuse the erasure of the personal data and instead request the restriction of the use of the personal data.
  • We no longer need the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims.
  • You have objected to the processing pursuant to Art. 21(1) GDPR, and it is not yet clear whether our legitimate grounds outweigh yours.

(e) Rights of objection to processing

You have the right to object at any time to the processing of personal data concerning you that is carried out on the basis of Art. 6(1)(e) or (f) GDPR.

We will no longer process the personal data in the event of objection, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

You have the right to object at any time to the processing of personal data for the purpose of direct marketing.

f) Right of data portability

You have the right to obtain the personal data concerning you that has been provided to us in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, when exercising your right to data portability in accordance with Article 20(1) GDPR, you have the right to have the personal data transferred directly from one controller to another controller, insofar as this is technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.

g) Right to revoke consent under data protection law

You have the right to revoke your consent to the processing of personal data at any time.

h) Right of appeal to the supervisory authority

You have the right to contact a supervisory authority in the member state of your residence or workplace or of the alleged infringement at any time if you believe that the processing of personal data concerning you violates the EU General Data Protection Regulation.

Data privacy issues relating to our products and our website:

Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstr. 219
10969 Berlin, Germany

6. Legal or contractual regulations on the provision of personal data, necessity for the conclusion of the contract, obligation to provide the personal data, possible consequences of not providing the data

The provision of personal data may in part be required by law (e.g. tax regulations) or may also result from contractual regulations (e.g. information on the contractual partner). Sometimes, in order to conclude a contract, it may be necessary for you to provide us with personal data that subsequently has to be processed by us. For example, you are obliged to provide us with personal data if we conclude a contract with you. Failure to provide the personal data would mean that the contract could not be concluded.

7. Existence of automatic decision making / profiling

We do not use automatic decision-making or profiling.