Privacy Statement for the www.sthamer-analysis.com website

Thank you for your interest in our website at www.sthamer-analysis.com (“website”). This website is operated by Fabrik chemischer Präparate von Dr. Richard Sthamer Gmbh & Co. KG (hereinafter referred to as “Sthamer” or “we”/ “us”), and provides you, the user (hereinafter referred to as “user” or “you”) the opportunity to find out more about us and our products and services and to send in foam samples for analysis in our laboratory.

In the following, we provide you with information regarding the personal data we collect, and its use, when you visit our website or order a product or service. This privacy statement explains the legal basis and the purpose for this data collection. We also provide you with information on your rights with regard to the use of your personal data. Should you have any questions regarding our use of your personal data, please contact us as the Controller under data protection law (for contact details see Clause 1).

1. Controller for Data Privacy

The operator of this website, and therefore the Controller for data protection is:
Fabrik chemischer Präparate von Dr. Richard Sthamer GmbH & Co. KG
 Liebigstraße 5
 D-22113 Hamburg

Tel.: +49 (0)40-73 61 68-0
 Fax: +49 (0)40-73 61 68-60
 E-Mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

2. Revocation of your consent to data processing

Some data processing may only be conducted with your express consent. You may revoke your consent at any time with future effect. For this, it is sufficient to send an informal message to us, via email (see contact details under Clause 1). Revocation does not affect the lawfulness of data processing carried out up to the date of revocation.

3. Data Protection Officer

We have appointed a data protection officer, who can be reached at
E-Mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

4. General information on data processing on our website

When you use this website, a range of personal data is collected.

“Personal data” is any information that can be used to identify you, directly or indirectly (such as your name, address, email-address, telephone number, IP address).

In principle, the collection and processing of this personal data is only carried out so far as permitted by law, or to which you have granted your consent. Once the purpose for which the data was collected has been fulfilled or ceased to exist, the data will be deleted, unless you have granted your consent for another use, or statutory retention provisions preclude deletion. The following list details the data processing operations:

5. Data collection on our website and the creation of logfiles

5.1 Description of the data processing

The user can visit our website without registering. However, access data is collected in a logfile by our IT system when you visit the website and for every file accessed. Sthamer or the webspace provider collects this information in server log files, which is automatically provided to us by your browser. This information lists:

browser type and version
operating system
referrer URL
anonymized hostname of the device accessing the website
time of server request
IP address (may be anonymized)
amount of data transferred, access status (file sent, file not found)

This data is collected automatically, as soon as you access our website. It is not merged with any other data sources.

5.2 Legal basis and purpose

The legal basis for data is Art. 6 (1) (f) General Data Protection Regulation (“GDPR”), which permits processing of data in the case of a legitimate interest, unless overriding interests, fundamental rights or freedoms of the user require otherwise. Temporary storage of this data is necessary to display website information to the user. The collection of this data is therefore required for the representation of our website. For this purpose, the user's IP address must also be stored for the duration of the session. This data is stored as logfiles, to preserve the functionality and to optimize our website, as well as ensuring the security of our IT systems. We therefore reserve the right to subsequently check the logfiles if there are concrete indications of illegal use. These purposes constitute a legitimate interest for Sthamer in its data processing pursuant to Art. 6 (1) (f) GDPR.

5.3 Retention period

This data will be deleted when it is no longer required for the purpose for which it was stored. In terms of displaying the website, this occurs with the end of the individual session. For data stored as log files, this will occur after three months. Data may be stored beyond this point if the user IP address has been deleted or anonymised to the extent that it can no longer be assigned to any individual user.

5.4 Opportunity to object

We are unable to identify you as the data subject from the stored information. Art. 15 to 22 GDPR therefore do not apply pursuant to Art. 11 (2) GDPR, unless you provide additional information in order to exercise your rights laid down in these articles, which makes it possible to identify you.

6. Data processing for the purposes of registering a user Customer Account and for the processing of orders

6.1 Description of the data processing

Users can register for a Customer Account on the website. Creation of a Customer Account requires personal data be collected and stored. The Customer Account provides the user with the opportunity to order services for the analysis of fire extinguishing foam concentrates and to see previous orders.

To register a Customer Account, a minimum of the data listed in the registration form and marked with an asterisk (*) is required. This data is required for the processing of contracts in the event of an order being placed: company, VAT number, first and last name of the contact person, user name, company address, billing address (where different from the company address), telephone number, email address and a password.

The user will be sent a confirmation email with a link to confirm the registration of the Customer Account. The user must click the link contained in this email to activate the account.

All relevant personal data will be treated as confidential and not disclosed to third parties, unless this is necessary to process the order or you have granted your consent, or Sthamer is obliged to do so by law (see Clause 7).

6.2 Purpose and legal basis for data processing

The processing of user data only occurs with the user has registered for a Customer Account and ordered a foam analysis from Sthamer. The personal data collected as part of the registration will only be used for the purpose and maintenance of a Customer Account and for processing and carrying out orders, and for no other purpose. The data to be provided is required to proceed with Customer Account registration and/or the processing of an order for the analysis of fire extinguishing foam concentrates.

Registration is necessary to implement the contract. The legal basis for processing personal data is Art. 6 (1) (b) GDPR.

6.3 Retention period; Potential to object

Sthamer only stores data for as long as is necessary to accomplish the processing purpose or to fulfill contractual or statutory obligations.

Sthamer deletes the customer account if the user sends an email to This email address is being protected from spambots. You need JavaScript enabled to view it., giving details of their customer account with the request that it be deleted. Thereupon we will delete your data, provided no commercial and tax retention obligations prevent us from doing so.

The customer account will be deleted automatically as soon as a user has been inactive for more than 6 years.

7. Inquiries via mail, email, and telephone

7.1 Description of the data processing

When you send us an inquiry by mail, email or telephone, we will store the data provided by you, including your contact information, for the purposes of processing your inquiry and in case of further questions.

The following data will be sent to and stored by us: email address, name, address, telephone number where provided, and any other personal information you have included in the inquiry text.

7.2 Purpose and legal basis for data processing

When you make contact with our company as a customer or interested party, we will process your contact details to the extent required to establish or transact the contractual relationship. Legal basis for this processing is Art. 6 (1) (b) GDPR.

7.3 Purpose of processing

Processing of the transferred data is necessary to process the inquiry and in the event of follow-up questions to establish or transact the contractual relationship.

7.4 Retention period

We will only retain the data provided by you by email or by telephone until such time as it has fulfilled its purpose. For data collected when making contact by mail, email or telephone, this will occur when the specific inquiry has been processed and resolved. We will also delete this data prior to resolution should you so request. Mandatory statutory provisions - particularly retention periods - remain unaffected.

8. Use of Cookies

8.1 Description of the data processing

Our website uses cookies. Cookies are small text files that are saved by your browser on your end-device. When a user accesses a website, a cookie will be saved on the user's operating system, which allows for the individual browser to be identified when the website is accessed again.

We use cookies to make our website more user-friendly, effective and secure. Some elements of our website require that the browser can be identified even after another webpage has been accessed.

We also use cookies to analyze user behavior on our website. For more details of this analysis see Clause 9.2 and Clause 10.

The user data collected in this way is pseudonymized. The data is not assigned to the user or other personal data of the user.

At the beginning of the use of the website, users are informed about the use of cookies for analysis purposes with reference to this Privacy Statement. The user will also be informed about the possibility of preventing the storage of cookies.

8.2 Third party cookies

On visiting our website, cookies from our partner companies will also be saved on your end device (third party cookies), to make our internet presence more interesting for you. The use and scope of these cookies and the data they collect is explained in more detail in Clause 10.

8.3 Purpose and legal basis for data processing

The purpose for using technical cookies is to make our website easier to use. Some website functions cannot be utilised without the use of cookies. These functions require that your browser can be identified even after you have accessed another webpage. Some cookies are used to make the use of the website easier (for example, by storing language settings, remember search terms etc.). The user data collected through technical cookies is not used to create user profiles.

The processing of personal data using cookies is based on Art. 6 (1) (f) GDPR. Sthamer has a legitimate interest in storing these cookies to ensure error-free and optimal presentation of its services.

Analysis cookies are used to improve the quality of our website, and to optimize the services we offer. The data collected in this process will only be used in pseudonymized user profiles. In addition, we use the statistical data provided to us to identify faults and to calculate advertising costs.

These purposes also include the legitimate interest in the processing of personal data pursuant to Art. 6 (1) (f) GDPR.

8.4 Retention period; Potential to object

Cookies are stored on your end device. “Session cookies” will be automatically deleted at the end of your session. Other cookies, “permanent cookies” remain stored on the device you used to view the website until you delete them. These cookies enable us or our partners (third party cookies) to recognize your browser the next time it accesses our website. Permanent cookies are automatically deleted after a specified period of time, which can vary from cookie to cookie.

You can configure your browser to inform you when a cookie is being set, so that you can decide to accept or reject each cookie. Alternatively, you can set your browser to automatically accept specific types of cookies or always reject them. You can also set your browser to automatically delete cookies at the end of each session. If cookies are deactivated, the functionality of this website may be restricted.

If a user does not want to allow cookies to be stored on the device displaying the website, would like to delete a stored cookie or would like to be informed before a cookie is stored, the browser settings can be adjusted accordingly. The Help section of the individual browser provides information on how to do this. We would like to expressly state that should this option be taken, not all functions of this website can be used to their full capacity.

9. Links to other websites

The website may contain links (interactive reference points) to third-party websites, for which we are not responsible. Sthamer has no influence whatsoever on the content and presentation of external links or the internet presence to which the user accesses via these links. The relevant provider is responsible for the content and presentation of these internet presences, as well as ensuring it meets data protection regulations.

10. Protection of your data: SSL or TLS encryption

For security reasons, and to protect confidential content such as orders or inquiries you may send us, this website uses SSL or TLS encryption. An encrypted connection is recognisable in that the address line in the browser changes from “http://” to “https://”, and a lock symbol is also displayed in the browser address line.

The information you send to us when SSL or TLS encryption is activated cannot be read by third-parties.

However, we would like to point out that data transmission via the Internet (e.g. communication by email) can be subject to security gaps. A complete protection of the data against access by third parties is not possible.

11. Data protection and rights of the data subject

As the data subject, you have the right to receive information about the origin, recipient of and purpose for your stored personal data at any time, free of charge. You also have the right to have this data corrected, blocked or deleted at any time. If you have any questions regarding data protection, you can contact us at any time using the contact information provided in Clause 1. In addition, you have a right of appeal to the competent supervisory authority. A list of the rights available to you as a data subject against us as the Controller are as follows:

11.1 Right of access

You may request a confirmation of whether we are processing your personal data. Should this be the case, you have the right to the following information:

processing purposes;
the recipients or categories of recipients to whom your personal data has been or will be disclosed;
where available, the planned retention period of the personal data, or where not available, the criteria for determining that retention period;
your additional rights (see below);
all available information regarding the origin of the data, if the personal data has not been collected from you;
the existence of automated decision-making, including profiling, and where existent, further relevant information.

You have the right to be informed of the appropriate safeguards available pursuant to Art. 46 GDPR against the transfer of your data to a third country or international organization.

11.2 Right to rectification

You have the right to have incorrect or incomplete personal data concerning you to be corrected without delay.

11.3 Right to restriction of processing

You have the right to request a restriction of data processing activities when one of the following conditions is met:

you dispute the accuracy of the personal data;
the data processing is unlawful, but you do not agree to the deletion of that data, requesting instead a restriction of its use;
we no longer need the personal data for the purpose for which it was collected, but it is required by you to establish, exercise or defend legal claims; or
you have lodged an objection to the processing (see below) but it is not yet clear whether our legitimate grounds will prevail.

11.4 Right to erasure (right to be forgotten)

You have the right to have your personal data immediately erased, and we are obliged to delete said data without delay where one of the following grounds applies:

Your personal data are no longer required for the purpose for which they were collected or otherwise processed.
You withdraw your consent and there is no other legal grounds for processing that data.
You have lodged an objection (see below) against the data processing.
Your personal data was unlawfully processed.
The deletion of your personal data is necessary to fulfill an obligation under EU law of the law of the Member States.
The personal data was collected based on consent granted by a child.

11.5 Right to notification

If you have exercised your right to rectification, erasure or restriction of processing, we are required to notify all recipients to whom your personal data has been disclosed of this rectification, erasure, or restriction of processing unless less this proves impossible or requires a disproportionate effort. You have the right to be informed by us of those recipients.

11.6 Right to data portability

You have the right to receive personal data that you have provided to use in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another Controller without interference on our part provided:

the processing is based on consent granted in accordance with Art. 6 (1) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR, and
the processing is carried out using automated methods.

In the exercise of this right, you may request that your personal data is transferred directly from one Controller to another Controller, in so far as this is technically feasible and does not infringe on the rights and freedoms of any other person. The right to data portability does not apply to the processing of personal data that is required for the fulfillment of a task in the public interest or in the exercise of an official authority conferred on the Controller.

11.7 Right to object

You have the right, for reasons arising from your own personal situation to object at any time to the processing of your personal data based on one of the following grounds:

our processing of your personal data is required for the performance of a task in the public interest or in the exercise of a public authority conferred onto us; or
the processing is necessary to safeguard our legitimate interests or those of a third-party, unless your interests or basic rights require that the protection of your personal data prevail.

You also have the right to object to profiling based on this processing.

If the personal data being processed is used for direct marketing purposes, you have the right to object to that processing for such marketing purposes. This also applies to profiling, insofar as it is associated with such direct marketing.

You also have the right to object on reasons arising from your own personal situation against the processing of your personal data by us for purposes of scientific or historical research or statistics, unless that processing is required for performing a task in the public interest.

11.8 Right to appeal to a supervisory authority

If there has been a breach of data protection legislation, the affected person may lodge an appeal with the supervisory authority. A list of Data Protection Commissioners and their contact details can be found under the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

The responsible supervisory authority for data protection issues is the Hamburg Commissioner for Data Protection and Freedom of Information for Sthamer (Klosterwall 6 (Block C), 20095 Hamburg, Tel.: 040/42854-4040, E-Fax: 040/4279-11811, E-Mail: This email address is being protected from spambots. You need JavaScript enabled to view it.).

12. Changes

To ensure that this Privacy Statement meets statutory requirements, Sthamer retains the right to make changes at any time. This also applies should the Privacy Statement need to be adapted to reflect changes in our website and services. The new Privacy Statement applies from the next time the user accesses our website.

English Menu (mobile)