Privacy Policy | SMART TESTSOLUTIONS GmbH
As of May 13, 2025
Who we are
The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:
SMART TESTSOLUTIONS GmbH
Rötestraße 17
70197 Stuttgart
Germany
+49 711 25521-10
sales@smart-ts.de
Contacting the data protection officer
The data protection officer of the controller is:
DataCo GmbH
Sandstraße 33
80335 Munich
Germany
+49 89 7400 45840
www.dataguard.de
On this page, we inform you about the processing of your personal data on the website.
How we collect and use your personal data depends on how you interact with us or which services you use. We only collect, use, or share your personal data if we have a legitimate purpose and legal basis for doing so.
What do we mean by legal basis?
Consent (Art. 6 (1) (a) GDPR) – You have given us your consent to process your personal data for the specific purpose we have explained to you. You have the right to withdraw your consent at any time. For more information on how to withdraw your consent, please refer to the "Exercising your rights" subsections in the following sections of this Privacy Policy.
Contract (Art. 6(1)(b) GDPR) – We need to use your data to fulfill a contract you have with us. Alternatively, it is necessary to use your data because we have asked you to do so or you yourself have taken certain steps before entering into this contract.
Legal obligation (Art. 6 (1) (c) GDPR) - We must use your data to comply with the law.
Vital interests (Art. 6 para. 1 sentence 1 lit. d GDPR) - The processing of your data is necessary to protect your vital interests or those of another person. For example, to protect you from serious physical harm.
Public task (Art. 6 (1) (e) GDPR) - The processing of your data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us, e.g., for a legal function.
Legitimate interests (Art. 6(1)(f) GDPR) - The processing of your data is necessary to support a legitimate interest that we or another party has, only if your own interests do not outweigh this.
Please note that we may not be able to provide you with our website services if your data is processed to fulfill a contract or legal obligation and you do not provide the requested data.
Sharing of data and international transfer
As explained in this privacy policy, we use various service providers to help us provide our services and ensure the security of your data. When we use these service providers, it is necessary for us to share your personal data with them.
We have agreements in place with all service providers to whom we disclose your data, which oblige them to protect your data.
If your personal data is transferred outside the EU, we ensure that your personal data receives an equivalent level of protection, either because the country to which your data is transferred has an "adequate" data protection standard according to the European Commission, or by applying another protective measure, such as an extended contractual agreement, i.e., the Standard Contractual Clauses (SCCs) adopted by the European Commission.
For example, when we use US service providers, we rely on either the SCCs or the EU-US Data Privacy Framework, depending on the provider. You can request a copy of the SCCs we have entered into with our service providers by sending an email to at the email address provided in this Privacy Policy.
Your rights
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:
You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to access this data and to the following information:
If your personal data is incorrect or incomplete, you have the right to request that it be corrected or supplemented without delay.
If one of the following conditions is met, you have the right to request a restriction on the processing of your personal data:
If one of the following reasons applies, you have the right to request the immediate erasure of your personal data:
Please note that the above reasons do not apply if processing is necessary:
You have the right to receive your personal data in a structured, commonly used, and machine-readable format or to request its transfer to another controller.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 para. 1 sentence 1 lit. e or f GDPR. This also applies to profiling based on these provisions.
If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.
A list of the locally competent supervisory authorities in Germany can be found on the website of the Federal Commissioner for Data Protection at the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html
Provision of the website and creation of log files
Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
This data is stored in our system's log files.
This data is not stored together with other personal data of the user.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context.
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 sentence 1 lit. f GDPR.
The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended.
In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymized so that it is no longer possible to assign them to the calling client.
The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. The user can object to this. Whether the objection is successful must be determined in the context of a balancing of interests.
Use of cookies
When you visit our website, we use technical tools for various functions, in particular cookies, which may be stored on your device. When you visit our website and at any time thereafter, you have the choice of whether to generally allow cookies or which individual additional functions you would like to select. You can make changes in your browser settings or via our consent manager.
Cookies are text files or pieces of information in a database that are stored on your hard drive and assigned to the browser you are using, so that certain information can be sent to the entity that sets the cookie. Below, we describe the types of cookies we use:
We use cookies on our website that are not technically necessary. Text files that do not solely serve the functionality of the website but also collect other data are considered technically unnecessary cookies.
By setting technically non-essential cookies, the following data is processed:
Cookies that are not technically necessary are used for the purpose of improving the quality of our website, its content, and thus our reach and profitability. By setting these cookies, we learn how the website is used and can thus continuously optimize our offering. In particular, these cookies serve the following purposes:
Improving the functionality of our website and increasing user comfort.
The provisions of the Telecommunications and Telemedia Data Protection Act (TDDDG) apply to the storage of information on the end user's terminal device and/or access to information already stored on the end user's terminal device. If the setting and reading of cookies is technically necessary, this is done to ensure the functionality of our website. In this case, cookies are stored on and accessed from your terminal equipment on the basis of Section 25 (2) No. 2 TDDDG. This storage and access to the information on your terminal equipment serves to facilitate your use of our website and to offer you our services as you wish. Some functions of our website do not work without the use of these cookies and therefore cannot be offered. Cookies are generally deleted after the end of the session (e.g., logging out or closing the browser) or after a specified period of time has elapsed. Information on different storage periods for cookies can be found in the following sections of this privacy policy.
If cookies are used that are not technically necessary, this is done on the basis of your express consent, which you can give via the cookie banner. In this case, the basis for storing and accessing information is § 25 (1) TDDDG in conjunction with Art. 6 (1) lit. a), Art. 7 GDPR. You can revoke your consent at any time with effect for the future or grant it again retrospectively by configuring your cookie settings accordingly. Alternatively, you can prevent the storage of cookies by adjusting the settings of your browser software. Please note that the browser settings you make will only apply to the browser you are currently using. If personal data is processed on your end device following the storage of and access to the information, the provisions of the GDPR apply. You can find information on this in the following sections of this privacy policy.
You can revoke your consent to the use of cookies at any time and adjust your preferences. To do so, you will find a link at the end of the privacy policy labeled "Adjust privacy settings."
Newsletter
On our website, you have the option of subscribing to a free newsletter. When you register for the newsletter, the data from the input mask is transmitted to us.
In order to provide this service, we collect the following data from you:
Your consent will be obtained during the registration process for the processing of your data, and reference will be made to this privacy policy.
In connection with data processing for the purpose of sending newsletters, no data will be passed on to third parties. The data will be used exclusively for sending the newsletter.
The user's email address is collected for the purpose of delivering the newsletter.
The collection of other personal data during the registration process serves to prevent misuse of the services or the email address used.
The legal basis for the processing of data after the user has registered for the newsletter is Art. 6 (1) (a) GDPR, provided that the user has given their consent.
The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. The user's email address will therefore be stored for as long as the newsletter subscription is active.
The newsletter subscription can be canceled by the user concerned at any time. For this purpose, there is a corresponding link in every newsletter.
This also allows the consent to the storage of personal data collected during the registration process to be revoked.
Email contact
You can contact us via the email address provided on our website. In this case, the user's personal data transmitted with the email will be stored.
The data will be used exclusively for processing the conversation.
In the case of contact by email, there is also a legitimate interest in the processing of the data.
The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 (1) lit. f GDPR. Our legitimate interest is to respond optimally to your request sent by email.
If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR.
The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
All personal data stored in the course of establishing contact will be deleted in this case.
Contact form
Our website features a contact form that can be used to contact us electronically. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored.
The following data is stored when the message is sent:
The processing of personal data from the input mask of the contact form or via the email address provided serves solely to process the contact request.
The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.
The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest is to respond to your inquiry, which you send to us via the contact form, in the best possible way. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 sentence 1 lit. b GDPR.
The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. For personal data from the input mask of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
If the user contacts us via the input mask in the contact form, they can object to the storage of their personal data at any time in the following way:
Please send revocations to the email address info@smart-ts.de.
In this case, all personal data stored in the course of contacting us will be deleted.
Application by email
You can send us your application by email. We will collect your email address and the data you provide in the email.
The processing of personal data from your application email is used solely for the purpose of processing your application.
The legal basis for the processing of your data is the initiation of a contract at the request of the data subject, Art. 6 (1) (b) (1) GDPR and § 26 (1) (1) BDSG.
After completion of the application process, the data will be stored for up to 6 months. Your data will be deleted at the latest after 6 months. In the event of a legal obligation, the data will be stored in accordance with the applicable provisions.
Company profiles
Instagram, part of Meta Platforms Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland
On our company page, we provide information and offer Instagram users the opportunity to communicate.
If you perform an action on our Instagram company profile (e.g., comments, posts, likes, etc.), you may be making personal data (e.g., your real name or photo from your user profile) public.
However, as we generally have little or no influence on the processing of your personal data by Instagram, we cannot make any binding statements about the purpose and scope of the processing of your data.
We use our company profile on social networks for communication and information exchange with (potential) customers. In particular, we use the company profile for:
providing information about products and services, and disseminating news.
The publications on the company profile may contain the following content:
Every user is free to publish personal data through activities.
Insofar as we process your personal data in order to evaluate your online behavior, offer you competitions, or carry out lead campaigns, this is done on the basis of your express declaration of consent, Art. 6 (1) (a), Art. 7 GDPR.
The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6 (1) (f) GDPR. Our legitimate interest in this is to respond to your enquiry in the best possible way and to provide you with the requested information.
If the purpose of the contact is to conclude a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.
The data generated by the company's website is not stored in our own systems.
We have provided appropriate safeguards in the form of standard data protection clauses pursuant to Art. 46 (2) (c) GDPR for the processing of your personal data in third countries. A copy of the standard data protection clauses can be requested from us.
You can object to the processing of your personal data that we collect in connection with your use of our company website at any time and assert your rights as a data subject as set out in the "Your rights" section of this privacy policy. To do so, please send us an informal email to info@smart-ts.de. For more information about the processing of your personal data by Instagram and the corresponding options for objection, please visit:
YouTube:
YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States
We provide information on our company page and offer YouTube users the opportunity to communicate.
If you perform an action on our YouTube company page (e.g., comments, posts, likes, etc.), you may be making personal data (e.g., your real name or photo from your user profile) public.
However, as we generally or largely have no influence on the processing of your personal data by YouTube, we cannot make any binding statements about the purpose and scope of the processing of your data.
We use our company presence on social networks for communication and information exchange with (potential) customers. In particular, we use our company presence for:
providing information about products and services, and disseminating news.
The posts on our company profile may contain the following content:
Every user is free to publish personal data through activities.
Insofar as we process your personal data in order to evaluate your online behavior, offer you competitions, or carry out lead campaigns, this is done on the basis of your express declaration of consent, Art. 6 (1) (a), Art. 7 GDPR.
The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6 (1) (f) GDPR. Our legitimate interest in this is to respond to your enquiry in the best possible way and to provide you with the requested information.
If the purpose of the contact is to conclude a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.
We have provided appropriate safeguards in the form of standard data protection clauses pursuant to Art. 46 (2) (c) GDPR for the processing of your personal data in third countries. A copy of the standard data protection clauses can be requested from us.
You can object to the processing of your personal data that we collect in connection with your use of our company website at any time and assert your rights as a data subject as set out in the "Your rights" section of this privacy policy. To do so, please send us an informal email to info@smart-ts.de. For more information on the processing of your personal data by YouTube and the corresponding options for objection, please visit:
YouTube: https://policies.google.com/privacy?gl=DE&hl=en
Twitter:
Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland
On our company page, we provide information and offer Twitter users the opportunity to communicate.
If you perform an action on our Twitter company page (e.g., comments, posts, likes, etc.), you may be making personal data (e.g., your real name or photo from your user profile) public.
However, as we generally have no or little influence on the processing of your personal data by Twitter, we cannot make any binding statements about the purpose and scope of the processing of your data.
We use our company profile on social networks for communication and information exchange with (potential) customers. In particular, we use the company profile for:
providing information about products and services, and disseminating news.
The publications on the company profile may contain the following content:
Every user is free to publish personal data through activities.
Insofar as we process your personal data in order to evaluate your online behavior, offer you competitions, or carry out lead campaigns, this is done on the basis of your express declaration of consent, Art. 6 (1) (a), Art. 7 GDPR.
The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6 (1) (f) GDPR. Our legitimate interest in this is to respond to your enquiry in the best possible way and to provide you with the requested information.
If the purpose of the contact is to conclude a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.
The data generated by the company's website is not stored in our own systems.
We have provided appropriate safeguards in the form of standard data protection clauses pursuant to Art. 46 (2) (c) GDPR for the processing of your personal data in third countries. A copy of the standard data protection clauses can be requested from us.
You can object to the processing of your personal data that we collect in connection with your use of our company website at any time and assert your rights as a data subject as set out in the "Your rights" section of this privacy policy. To do so, please send us an informal email to info@smart-ts.de. For more information about the processing of your personal data by Twitter and the corresponding options for objection, please visit:
Twitter: https://twitter.com/de/privacy
Use of company profiles on professional networks
The company profile is used for job applications, information/PR, and active sourcing. We have no information about the processing of your personal data by the companies jointly responsible for the company profile. For more information, please refer to the privacy policy of:
On our site, we provide information and offer users the opportunity to communicate.
The company website is used for applications, information/PR, and active sourcing.
We have no information about the processing of your personal data by the companies jointly responsible for the company website. Further information can be found in the privacy policy of:
LinkedIn:
https://www.linkedin.com/legal/privacy-policy
XING:
If you perform an action on our company website (e.g., comments, posts, likes, etc.), you may be making personal data (e.g., your real name or photo from your user profile) public.
The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6 (1) (f) GDPR. Our legitimate interest in this is to respond to your enquiry in the best possible way and to provide you with the requested information.
If the purpose of the contact is to conclude a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.
Our company website serves to inform users about our services. Users are free to publish personal data through their activities.
The data generated by the company website is not stored in our own systems.
You may object to the processing of your personal data that we collect in connection with your use of our company website at any time and assert your rights as a data subject as set out in the "Your rights" section at of this privacy policy. To do so, please send us an informal email to the email address provided in this privacy policy.
Further information on exercising your rights can be found here:
LinkedIn:
https://www.linkedin.com/legal/privacy-policy
XING:
Hosting
The website is hosted on servers by a service provider commissioned by us.
Our service provider is:
nepustil.net, provided by Dr.-Ing. Nepustil & Co. GmbH, Rathausstraße 3, 72658 Bempflingen, Germany. Further information can be found in the provider's privacy policy: https://nepustil.net/datenschutzerklaerung.html
The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is:
This data is not merged with other data sources. This data is collected on the basis of Art. 6 (1) lit. f GDPR. Our legitimate interest in processing this data is to display our website without errors and to optimize its functions.
The website server is geographically located in Germany.
Integrated third-party services
We use various service providers to provide the services offered on our website.
In general, we have a legitimate interest in sharing your data with the relevant service providers if these services are essential for providing the basic service offered on the website in order to provide the relevant website service.
If such services are required for additional services, extended functions, or additional purposes, your personal data will only be shared with service providers if you give your consent.
You can revoke your consent to the use of integrated third-party services and manage your consent settings at any time here: There is a link at the bottom of the privacy policy page labeled "Adjust privacy settings."
Use of Google Analytics 4 (GA 4)
We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google).
Google Analytics examines, among other things, how website visitors use our site. Google places cookies on your device. During your visit, user behavior is recorded in the form of "events." This allows personal data to be stored and evaluated, including:
IP address anonymization is enabled by default in GA 4. This means that your IP address will be truncated by Google within the member states of the European Union or other signatory states to the Agreement on the European Economic Area. In exceptional cases, the full IP address is transferred to a Google server in the USA and truncated there. Google states that the IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
Further information on the processing of data by Google can be found here: https://policies.google.com/privacy
We use GA 4 to evaluate the use of our online presence and to generate reports on the activities on our website. The reports are used to analyze the performance of our website and to target advertising to people who have already expressed an initial interest by visiting our site.
The legal basis for the processing of users' personal data is generally the consent of the user in accordance with Art. 6 (1) (a) GDPR.
Your personal data will be deleted after 2 months. This deletion takes place automatically once a month.
You have the right to revoke your declaration of consent under data protection law at any time. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent until revocation. You can revoke your consent via our cookie consent tool.
You can prevent Google from collecting and processing your personal data by preventing third-party cookies from being stored on your computer, using the using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net) or Ghostery (https://www.ghostery.com) in your browser at .
For more information on how to object to and remove Google cookies, please visit: https://policies.google.com/technologies/partner-sites
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
You can disable Google's use of your personal data by clicking on the following link: https://adssettings.google.de
Use of Matomo
1. Scope of personal data processing
We use the open source tracking tool Matomo (https://matomo.org/) to analyze the surfing behavior of our users. Matomo places a cookie on your computer. This allows personal data to be stored and evaluated, in particular the user's activity (especially which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and operating system), data about the advertisements displayed (in particular which advertisements were displayed and whether the user clicked on them), and also data from advertising partners (in particular pseudonymized user IDs).
The software is set up so that IP addresses are not stored in full, but rather 2 bytes of the IP address are masked for anonymization (e.g., 192.168.xxx.xxx). This makes it impossible to assign the truncated IP address to the requesting computer. The data is stored in our MySQL database; logs or report data are not sent to Matomo servers.
Further information on the processing of data by Matomo can be found here:
https://matomo.org/privacy-policy/
Use of Google Tag Manager
1. Scope of personal data processing
We use Google Tag Manager (https://www.google.com/intl/de/tagmanager/) from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the EU, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google). Google Tag Manager allows tags from Google and third-party services to be managed and embedded in an online presence in a bundled form. Tags are small code elements on a website that serve, among other things, to measure visitor numbers and behavior, track the impact of online advertising and social channels, use remarketing and targeting, and test and optimize websites. When a user visits the website, the current tag configuration is sent to the user's browser. It contains instructions on which tags should be triggered. Google Tag Manager triggers other tags, which in turn may collect data. For more information, please refer to the sections on the use of the relevant services in this privacy policy. Google Tag Manager does not access this data.
Further information about Google Tag Manager can be found at https://www.google.com/intl/de/tagmanager/faq.html and in Google's privacy policy: https://policies.google.com/privacy?hl=de
Use of Hotjar
We use the web analysis service Hotjar from Hotjar Ltd., Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta (hereinafter: Hotjar). Among other things, Hotjar uses cookies, i.e., small text files that are stored locally in the cache of your web browser on your device and enable an analysis of your use of our online presence. This allows personal data to be stored and evaluated, in particular the user's activity (especially which pages have been visited and which elements have been clicked on), device and browser information (especially the IP address and operating system) and a tracking code (pseudonymized user ID). The information collected in this way is transmitted by Hotjar to a server in Ireland and stored there in anonymized form. Further information on the processing of data by Hotjar can be found here: https://www.hotjar.com/legal/policies/privacy
The Hotjar plug-in is used to better understand the needs of our users and to optimize the content of this website.
The legal basis for the processing of users' personal data is generally the consent of the user in accordance with Art. 6 (1) (a) GDPR.
Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law.
You have the right to revoke your declaration of consent under data protection law at any time. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent until revocation.
You can prevent Hotjar from collecting and processing your personal data by preventing third-party cookies from being stored on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. You can disable the use of your personal data by Hotjar via the following link: https://www.hotjar.com/legal/compliance/opt-out
For more information on how to object to and remove Hotjar, please visit: https://www.hotjar.com/legal/policies/privacy
This privacy policy was created with the support of DataGuard.