Privacy Policy

1. Scope

This privacy policy applies to the website of Rostra AG (hereinafter referred to as “Rostra”) (https://rostra.ag) and to the personal data processed on this website. For websites of other providers that are referred to, for example, via links or that are integrated via iFrames, the privacy policies applicable there apply.

2. Responsible party

The controller responsible for the processing of personal data within the scope of this website in accordance with Art. 4 No. 7 GDPR is: Rostra AG Fritz-Vomfelde-Str. 34 40547 Düsseldorf Telephone: +49-211-53883434 E-Mail: info@rostra.ag

3. Purpose of data processing

3.1 Personal data
According to Art. 4 No. 1 GDPR, personal data is any information relating to an identified or identifiable natural person; A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

4. Processing operations

4.1 Hosting
As part of hosting our website, all data processed in connection with the operation and use of the website is stored. This is necessary to enable the website to function. The processing of personal data is therefore based on our legitimate interest pursuant to Art. 6 (1) (f) GDPR. To provide our website, we use the services of web hosting providers to whom we transmit the above-mentioned data.
4.2 Log files
We log your visit to our website. The following personal data is processed: Name of the website accessed, date and time of access, access status, amount of data transferred, browser type and version, operating system used, referrer URL (the website visited previously), your IP address, and the requesting provider. The processing of personal data is based on our legitimate interest pursuant to Art. 6 (1) lit. f) GDPR in ensuring the security of our platform.

5 Functional, statistical, and marketing services

We use cookies and other tracking technologies to enable the use of certain services. These include short data packets that are stored on your device and exchanged with other providers. Some of the cookies we use are deleted immediately after you close your browser (so-called session cookies). Other cookies remain on your device and enable your browser to be recognized on your next visit (persistent cookies). You can delete all cookies stored on your device and set common browsers to prevent cookies from being stored. In this case, you may have to reset some settings each time you visit this platform and accept the impairment of some functions.

6 Disclosure of your data

Personal data will only be disclosed to third parties to the extent permitted by law. We only disclose user data to third parties if
  • you have given your express consent to this in accordance with Art. 6 (1) (a) GDPR,
  • this is necessary for the performance of contractual relationships with you in accordance with Art. 6 (1) (b) GDPR.
  • we are legally obliged to disclose it pursuant to Art. 6 (1) (c) GDPR, and
  • the disclosure is necessary for the establishment, exercise, or defense of legal claims pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data.

    7 International transfer of your (personal) data

    We may transfer (personal) data received from you to countries other than the one in which you reside. The laws of these countries may not guarantee the same level of protection for your (personal) data. We only transfer data to such third countries if adequate safeguards are in place and all laws and regulations relating to such transfers are complied with. In the case of data transfers from the EU to non-EU countries, unless the transfer is permitted on the basis of Articles 45, 49(1)(a), (b), (c) GDPR, we agree with the data importer on the applicability of the current standard contractual clauses issued by the EU Commission. You can request information and copies from the contact above.

    8 Duration of storage of personal data

    We retain your personal data for as long as necessary to fulfill the purpose for which it was collected and used (e.g., as long as we need to send you the newsletters you have subscribed to, respond to inquiries, etc.), unless a longer period is required to comply with our legal obligations or pursue a legal or financial claim.

    9 Automated decision-making, including profiling

    Automated decision-making, including profiling, does not take place on our platform.

    10 Your rights

    Visitors to our website have various rights under the GDPR, which arise in particular from Articles 15 to 18 and 21 GDPR:
    10.1 Right to information
    You may request information pursuant to Art. 15 GDPR about personal data concerning you that we process. In your request for information, you should specify your concern in order to make it easier for us to compile the necessary data. Please note that your right to information may be restricted under certain circumstances in accordance with legal regulations.
    10.2 Right to rectification
    If the information concerning you is no longer accurate, you may request that it be corrected in accordance with Art. 16 GDPR. If your data is incomplete, you may request that it be completed.
    10.3 Right to erasure
    You may request the deletion of your personal data under the conditions of Art. 17 GDPR. Your right to erasure depends, among other things, on whether the data concerning you is still required by us to fulfill our legal obligations or whether we have an overriding interest in storing it (e.g., to defend our rights and claims).
    10.4 Right to restriction of processing
    Within the scope of the provisions of Art. 18 GDPR, you have the right to request a restriction on the processing of data concerning you.
    10.5 Right to data portability pursuant to Art. 20 GDPR:
    You have the right to receive your personal data that you have provided to us in a commonly used file format or to request that it be transferred to another controller, insofar as this is technically feasible.
    10.6 Right to object
    Under Article 21 of the GDPR, you have the right to object to the processing of data concerning you at any time for reasons arising from your particular situation. However, we cannot always comply with this, e.g. if legal provisions require us to process data in the course of our official duties.
    10.7 Withdrawal of your consent
    If we rely on your consent as the legal basis for processing your personal data, you may withdraw this consent at any time. Please note that we will need to verify your identity before we can comply with your request to exercise your data protection rights. This procedure enables us to protect our customers’ personal data from fraudulent requests. To exercise your aforementioned rights, please contact: By mail: Rostra AG Fritz-Vomfelde-Str. 34 40547 Düsseldorf By e-mail: info@rostra.ag
    10.8 Right to lodge a complaint
    If you believe that we have not complied with data protection regulations when processing your data, you can lodge a complaint with the supervisory authority responsible for us. The supervisory authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)

    11 Changes to this privacy policy

    This privacy policy is subject to regular changes and additions.
    As of: September 2025