Privacy Policy
Last updated: 9 October 2026
This policy explains how the Stämm Products website (stamm.bio/products and its Spanish pages under /es/products) collects and uses personal data. It covers this website only. Other Stämm properties, including the main stamm.bio site, may have their own notices.
1. Who is responsible
The data controller is [[LEGAL ENTITY NAME — e.g. Stämm Biotech, Inc.]], [[REGISTERED ADDRESS]]. For any privacy question or to exercise your rights, contact [[privacy@stamm.bio — confirm mailbox]].
2. What we collect, and why
| Data | Purpose | Legal basis (GDPR) | Recipients |
|---|---|---|---|
| Usage & device data via Google Analytics 4 (pages viewed, approximate location, browser, referrer) | Understand how the site is used and improve it | Consent (Art. 6(1)(a)) | Google LLC / Google Ireland Ltd |
| Contact, order and technical-call forms: name, email, phone, country, organization type (contact form), company name and delivery address (order form), message | Respond to your enquiry and, where relevant, take steps toward a contract | Steps prior to a contract (Art. 6(1)(b)) and legitimate interest in answering enquiries (Art. 6(1)(f)) | Web3Forms (form delivery processor); our email provider [[EMAIL PROVIDER NAME — e.g. Google Workspace / Microsoft 365]]; Stämm staff handling enquiries |
| Embedded product video (YouTube, privacy-enhanced mode) | Show the product video when you open the gallery | Legitimate interest / consent where required (Art. 6(1)(f)/(a)) | Google LLC (YouTube) |
| Server request logs: IP address, user agent, timestamp, requested URL | Operate the site, security, troubleshooting | Legitimate interest (Art. 6(1)(f)) | Our hosting provider [[HOSTING PROVIDER NAME]] |
3. Analytics
We use Google Analytics 4 (measurement ID G-7H7JT68P7K). It is off by default. When the page loads, Google Consent Mode is set to denied, and analytics storage is only enabled if you choose Accept in the privacy banner. Before you accept, or if you decline, Google may still receive cookieless pings used for aggregate, non-identifying modelling; no analytics cookies or identifiers are stored on your device.
If you accept, Google Analytics sets the cookies _ga and _ga_<id>
(typically expiring after up to 2 years) to distinguish sessions. You can change your choice at any
time using the Privacy button at the bottom-right of any page. You can also install
Google’s opt-out browser add-on.
4. Contact and enquiry forms
When you submit the “Contact us”, “Order Request” or “Book a technical call” form, the information you enter is transmitted over HTTPS to Web3Forms, which forwards it by email to our team mailboxes (info@stamm.bio and the Stämm team member who handles enquiries). We do not store form submissions in a CRM or in any other third-party system beyond Web3Forms and our email provider. We use it to reply and to manage the resulting sales or support conversation. Providing the data is voluntary, but we cannot respond without at least a name and email. See the Web3Forms privacy policy.
5. Embedded video
Product pages embed YouTube videos using youtube-nocookie.com (YouTube’s
privacy-enhanced mode). The video frame is loaded when you scroll to the gallery; at that point your
IP address and device data are shared with Google. YouTube does not set persistent tracking cookies
until you play the video. See
Google’s privacy policy.
6. Cookies and local storage
- Local storage:
stamm_privacy_consentstores your Accept/Decline choice so the banner isn’t shown again. This is not a cookie and is not sent to any server. - Cookies: only Google Analytics cookies (
_ga,_ga_<id>), and only after you accept. We set no advertising or first-party tracking cookies.
7. International transfers
Google, Web3Forms and our email provider may process data in the United States. Where required, transfers rely on the EU–U.S. Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses, with Swiss addenda for data subject to the Swiss FADP.
8. Retention
- Analytics data: retained by Google for [[GA4 retention setting — 2 or 14 months]].
- Form submissions and related correspondence: kept for as long as needed to handle your request and then for [[e.g. 24 months]], unless a longer period is required for a contract or by law.
- Server logs: [[e.g. 30–90 days]].
9. Your rights
Subject to applicable law, you can request access to, correction or deletion of your data, restriction of or objection to processing, and data portability, and you can withdraw consent at any time without affecting prior processing. To do so, contact [[privacy@stamm.bio]]. You also have the right to lodge a complaint with a supervisory authority: in Switzerland, the FDPIC; in the EU, your local data protection authority.
10. Changes
We may update this policy; the “last updated” date above reflects the current version. Material changes will be highlighted on this page.
11. Contact
[[LEGAL ENTITY NAME]] — [[privacy@stamm.bio]] — info@stamm.bio