1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Caitlin Grieser
Epscheider Str. 1
58339 Breckerfeld
Germany
Email: contact@stonehearst-group.com
2. Hosting and Server Logs
The website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Whenever a page is requested, the browser necessarily transmits data to the server: IP address, date and time, the requested address, the previously visited page (referrer), browser type and version, and operating system. Without this data the site cannot be delivered.
IONOS processes this data to deliver the site and keep it stable and secure. According to IONOS, the IP address is only stored in shortened (anonymized) form, and the data is deleted after eight weeks. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in the secure and reliable operation of the website. A data processing agreement under Art. 28 GDPR is in place with IONOS. The data is not analyzed for statistics or advertising. All pages are delivered exclusively over encrypted HTTPS connections.
3. Contact Form and Email
Anyone who uses the contact form or writes to contact@stonehearst-group.com transmits their email address, the message and, if provided, a name. The form sends this information as an email to that mailbox; it does not store it in a database and does not attach an IP address. The messages are kept in the email mailbox at IONOS.
The information is used only to answer the request and is not passed on to third parties. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in answering the message. The message is deleted once the request has been dealt with and no follow-up questions are expected.
To protect against automated spam, the form contains a field that is invisible to humans, and the browser measures how long it took to fill in. No additional data is stored in the process.
4. Cookie and Local Storage
The site sets exactly one cookie, and only when someone switches the language in the page footer: "lang" with the value "de" or "en", valid for one year. The browser sends it along on later visits so the server can deliver the chosen language. It is not linked to any other information.
In addition, the browser stores two settings locally (local storage): whether animations are paused ("stonehearst-motion") and which items of the newcomer checklist are ticked ("stonehearst-checklist"). These values stay on the device and are not transmitted.
The cookie and local storage are strictly necessary to provide functions that were expressly chosen (section 25(2) no. 2 of the German TDDDG); the site therefore does not ask for consent. The legal basis for the processing is Art. 6(1)(f) GDPR. The cookie and stored values can be deleted at any time in the browser settings.
5. External Links and Referral Code
Links to Roberts Space Industries and other sites are ordinary links. Only when one is clicked does the browser connect to the respective provider; from then on, that provider's privacy policy applies. The site does not embed any content from these providers.
The clearly labeled referral link passes the visible referral code to Roberts Space Industries. Anyone who creates an account with it does so at RSI; which data RSI processes in the process is governed by RSI's own privacy policy.
6. Rights of Data Subjects
Anyone affected by data processing has the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). An informal email to contact@stonehearst-group.com is sufficient.
Right to Object
Where data is processed on the basis of Art. 6(1)(f) GDPR, every data subject may object to this processing at any time on grounds relating to their particular situation (Art. 21 GDPR). The data will then no longer be processed unless there are compelling legitimate grounds for the processing or it serves the establishment, exercise or defense of legal claims.
Right to Lodge a Complaint
There is also the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR).
7. Further Information
The site can be used without providing any personal data. Information in the contact form is voluntary; without an email address, however, no reply is possible. No transfer to countries outside the European Union is intended. There is no automated decision-making or profiling.
This English version is provided for convenience; the German Datenschutzerklärung is authoritative. Last updated: October 29, 2026.