Privacy policy
As of October 2026
This is a translation for convenience. Only the German version is legally binding.
1. Controller
ST 77 Holding GmbH, Kronengasse 5, 89073 Ulm, Germany. Email: info@st77.de, phone: +49 731 280 654-77.
2. Principles
We process personal data only to the extent necessary to operate this website and handle your enquiries, or where you have given your consent. Fonts and videos are served from our own server. Google Analytics and third-party social media posts are only loaded with your consent.
3. Hosting and server log files
This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with IONOS.
When you access the website, technically necessary data (IP address, date and time, page requested, browser, operating system, referrer) is processed in server log files. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and stable provision of the website. Log files are deleted automatically after a short period.
4. Contact by email and phone
If you contact us by email or phone or offer us a property, we process your details and the documents provided in order to handle your request. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in reviewing offers and answering enquiries). We delete the data once it is no longer required for this purpose, unless statutory retention obligations apply.
5. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21).
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.
6. SSL/TLS encryption
For security reasons, this website uses TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.
7. Consent management
We store your privacy choice in your browser’s local storage (key “st77-consent”: choice and timestamp). This storage is strictly necessary to respect your decision (Section 25 (2) no. 2 TDDDG, Art. 6(1)(c) GDPR). You can change or withdraw your choice at any time via “Cookie settings” in the footer.
8. Social media content (LinkedIn, Instagram, Facebook)
Individual pages may embed posts from our social media channels. These are only loaded once you have consented to the “External media” category or actively loaded the post (Art. 6(1)(a) GDPR, Section 25 (1) TDDDG). In that case data such as your IP address, browser information and possibly cookies are transferred to the respective provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland (Instagram, Facebook). Transfers to the USA are possible; the providers are certified under the EU-US Data Privacy Framework. You can withdraw your consent at any time with effect for the future.
9. Map services
On the contact page we link to Google Maps and Apple Maps. These are plain links; data is only transferred to the respective provider (Google Ireland Limited or Apple Inc.) when you click them.
10. Share function
The share buttons are plain links. You are only redirected to the respective network when you click them; no data is transferred to LinkedIn or Facebook beforehand.
11. Our social media pages
We maintain company pages on LinkedIn and Instagram. We are jointly responsible with LinkedIn or Meta for the statistics (“Insights”) provided there (Art. 26 GDPR); the providers make the agreements available. The privacy notices of the respective platform also apply.
12. Google Analytics
If you consent to the “Statistics” category, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The purpose is the statistical analysis of how our website is used (e.g. pages viewed, time spent, approximate origin at country or region level, device type) in order to improve our website. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).
Google Analytics sets cookies (_ga, _ga_*) with a lifetime of no more than 60 days. Google Analytics 4 does not store IP addresses. Google signals and ad personalisation are disabled; data is deleted in Google Analytics after two months. A data processing agreement has been concluded with Google. Data may be transferred to the USA; Google LLC is certified under the EU-US Data Privacy Framework.
Google Analytics is not loaded without your consent. You can withdraw your consent at any time with effect for the future via “Cookie settings” in the footer; the cookies are then deleted and no further data is collected.