Privacy policy for the use of Strauss "Toolbox XR" and data information in accordance with the EU Data Act
I. Privacy policy
As of: November 20, 2025
This data protection information provides details about data processing in connection with the use of the Strauss "Toolbox XR" app ("app," hereinafter referred to as I.). The app is connected to Meta Quest 3S VR glasses ("glasses"), which can be controlled by the app. This document also provides information in accordance with the EU Data Act (hereinafter referred to as II.).
1) Who is responsible for processing and who can I contact?
The responsible body within the meaning of Art. 4 No. 7 GDPR for the processing of personal data (hereinafter "data") in connection with the use of the App is
Strauss Deutschland GmbH & Co. KG
Frankfurter Straße 98-108
63599 Biebergemünd
Please send any questions, complaints, or requests for information regarding data protection by email to datenschutz@strauss.de or by post to the above address, adding "Data Protection" to the subject line.
Contact details of the data protection officer:
Dr. Florian Modlinger
Mitterweg 36a
83233 Bernau a. Chiemsee
Tel. 0176-32572896
Fax +4932121434755
Email: modlinger@strauss.de
Our supplementary user management services are performed within the framework of a data processing relationship based on a data processing agreement in accordance with Art. 28 GDPR with the respective contractual partner.
2) Third-party services
The respective privacy policies of third-party providers apply to the download of the app or use of third-party app stores (e.g., Meta, Apple, Google). In this context, please note that Meta Platforms ( https://www.meta.com/de/legal/quest/about-us/?srsltid=AfmBOooqxt793bnKrYPaRYTRC_OvT1gpyHGwci5AGRBOif03h99bie25) is independently responsible for data processing in connection with the Meta account and device-related analytics for Meta Quest 3S. Our services may depend on this, but only process the data necessary for the functions. For more information about what data is collected from your device or in connection with the use of the device, please refer to the respective notices from Meta, which are available here: https://www.meta.com/de-de/help/quest/741121407333403/?utm_source=mdc_app_store
3) What data processing takes place?
We receive the data directly from you or in the context of your use of the app (interactions, measurements, metadata) as well as from system events in the context of app use (logs).
In the app, personal data is primarily processed for the measurement and visualization of objects and rooms. This includes user interactions with the glasses (e.g., eye and hand gestures) as well as sensor-supported derivatives such as measurement vectors, surfaces, and simplified 3D models without textures.
We also process individual personal data when you register to use the app (including device identifiers). Usernames and passwords are user IDs that are generated automatically and independently of the user, which we use for registration purposes and, if necessary, for troubleshooting and warranty purposes.
Categories of personal data
Depending on the use of the app, we process the following categories of personal data in the app or in the corresponding area of the platform:
In particular, we do not collect: names, location data, usage/behavioral data. We do not access your Meta account or Meta device storage.
The app does not use cookies, tracking technologies, or analytics SDKs. Insofar as the app technically works with sensors for a short period of time (e.g., camera/depth for room scanning; hand/eye signals), this only occurs fleetingly in the working memory to fulfill the respective function and without persistence of the raw data.
To collect additional personal data, we or Meta will generally obtain your separate consent via the respective functions of the app.
Special categories of personal data (Art. 9 GDPR) are not processed.
Purpose and legal basis of data processing
The purpose is to provide the core function (measurement/visualization), ensure stability/security, and display errors without content. The legal bases are Art. 6 (1) (b) GDPR (contract/contract-like relationship) for functional processing and Art. 6 (1) (f) GDPR (legitimate interests) for minimal technical operation (e.g., session IDs, error message codes). Access/storage on the end device (e.g., sensor access) only takes place to the extent that it is technically necessary, e.g., for troubleshooting, or with the user's consent.
We also process device management data such as device status/policy compliance, app whitelist, and technical logs (without content, without meta account data) to ensure administration and security and to enable troubleshooting. The legal basis is Art. 6 (1) lit. f GDPR and our legitimate interest in the secure, policy-compliant operation of the services. Insofar as processing is carried out for the purpose of rectifying defects, the legal basis is Art. 6 (1) lit. b GDPR. Device serial numbers or meta account data are not transferred to our systems.
In addition, we use account and master data as well as metadata for the purposes of business and service analysis, product and function development, and, if necessary, for AI training, testing and evaluation, quality assurance, support, and reliability engineering in the future. e processing for the above purposes is always carried out in a depersonalized form. The legal basis is Art. 6 (1) lit. f GDPR and our legitimate interest in the efficient, economical, and user-friendly provision of services, as well as the further development of our offering and adaptation to user expectations and habits.
4) Will my data be passed on to third parties?
Some of your data may also be passed on to the following recipients if this is necessary for the performance of the contract (Art. 6 (1) (b) GDPR), if we are legally obliged to do so (Art. 6 (1) (c) GDPR) or if this is necessary to safeguard our legitimate interests (Art. 6 (1) (f) GDPR):
In some cases, we use additional external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored. These service providers include, for example, hosting, support, and other IT service providers, call center agencies, data collection and data maintenance agencies, as well as service providers for shipping control and shipping communication. The legal basis is Art. 28 GDPR, provided that these service providers are processors.
Independently responsible parties may be Meta or third-party systems designated by you to which you export data. Data is not passed on to other parties.
5) Is data transferred to third countries?
Processing generally takes place in the EU/EEA. If, in exceptional cases, services outside the EEA are used, the transfer will only take place if suitable safeguards are in place, in particular EU adequacy decisions or standard contractual clauses (SCC) in conjunction with a transfer impact assessment (TIA) and additional technical measures within the meaning of Art. 44 ff. GDPR. Further information on how Meta processes personal data in this context can be found in the respective Meta notices, which are available here: https://www.meta.com/de-de/help/quest/741121407333403/?utm_source=mdc_app_store
6) How long is the data stored?
Raw data (RGB/depth) is not persisted, but only processed temporarily in the device's working memory.
Measurement derivatives, log data (security/error logs), support diagnostic data, and project data are stored on the device in accordance with the settings specified by the user.
Data collected by Strauss for the purpose of providing services and troubleshooting is regularly deleted 90 days after collection, unless further storage is required due to specific circumstances (e.g., ongoing support request, etc.).
Backups are subject to a documented retention plan.
We store contract and invoice data for up to 10 years in accordance with applicable commercial and tax regulations.
7) What are your rights?
If you have given your consent to the processing of personal data, you can revoke this consent at any time with effect for the future. Such revocation does not affect the lawfulness of the processing prior to the revocation of consent (Art. 7 (3) GDPR).
In accordance with the applicable data protection regulations, you have the right to request information (Art. 15 GDPR), correction (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and to object to the processing of your personal data (Art. 21 GDPR).
In addition, you have the right to lodge a complaint with the competent data protection supervisory authority (Art. 77).
Right of access (Art. 15 GDPR):
You have the right to obtain confirmation from us as to whether personal data concerning you is being processed and, if so, to request access to that personal data. The information includes, among other things, the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipients to whom the personal data has been or will be disclosed.
Right to rectification (Art. 16 GDPR):
You have the right to request that we correct inaccurate personal data. Depending on the purpose of the processing, you have the right to have incomplete personal data completed.
Right to erasure ("right to be forgotten") (Art. 17 GDPR):
Under certain circumstances, you have the right to request that we erase your personal data, and we are obliged to erase this personal data.
Right to restriction of processing (Art. 18 GDPR):
Under certain circumstances, you have the right to request that we restrict the processing of your personal data. In this case, the data in question will be marked and may only be processed by us for specific purposes.
Right to data portability (Art. 20 GDPR):
Under certain circumstances, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another controller without hindrance from us.
Right to object (Art. 21 GDPR):
Under certain circumstances, you have the right to object to the processing of your personal data on grounds relating to your particular situation, and we may be obliged to no longer process your personal data. If your personal data is processed for direct marketing purposes, you also have the right to object at any time to the processing of your personal data for such marketing purposes, including profiling, insofar as it is related to this direct marketing. In this case, we will no longer process your personal data for such purposes.
Right to lodge a complaint (Art. 77 GDPR):
Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement, if the data subject considers that the processing of personal data relating to them infringes this Regulation.
Automated individual decision-making, including profiling (Art. 22 GDPR):
We do not make any exclusively automated decisions in individual cases, including profiling within the meaning of Art. 22 GDPR.
8) Changes to this privacy policy
We may amend this privacy policy if functions, legal, or technical conditions change. Significant changes will be displayed when you reopen the app. In addition, we will inform you of significant changes by email.
The current version of this privacy policy can be found at any time in the Strauss app menu and in the VR glasses menu.
II. Data information in accordance with the EU Data Act
You are a user of the Strauss "Toolbox XR" app. Depending on the configuration of the device you are using (VR glasses), information about the use of the device, the device status, and other technical data is transmitted to Strauss (hereinafter "Strauss" or "we," "us") via the app and processed in a separate area of the platform so that we and our partners can offer you the best possible service.
Regulations on data access and the use of device data can be found in our General Terms and Conditions of Use (GTCU) for our app, which we provide to you separately, but which you can also find at any time on our websites at https://www.strauss.com/de/de/Rechtliches/Datenschutz_Sicherheitsbestimmungen_ToolBoxXR.
Below, we provide information about what data we collect and use when you use the app and how you can access it.
1) General information
Meta is the manufacturer of Meta Quest 3S (VR glasses). Strauss has no data processing authority over data in the glasses. Further information about what data Meta collects and uses when you use the VR glasses and how you can access this data is provided separately by Meta. Further information can be found at: https://transparency.meta.com/de-de/policies/other-policies/pre-disclosure/quest/
Strauss offers a supplementary app for your device that enables, among other things, the measurement and visualization of objects and rooms. The app and an associated device management service serve to supplement, update, and, if necessary, adapt the functions of the device and the app. Further information on the services we offer for your device or via the app can be found in the app's terms and conditions. These can be found at any time on our website at https://www.strauss.com/de/de/Rechtliches/Datenschutz_Sicherheitsbestimmungen_ToolBoxXR.
2) Type, format, and estimated scope of the product data that the connected service can generate
a) Data types
Meta Quest 3S processes sensor and system data required for the operation of the VR headset on the device side (under Meta's own responsibility). Further details are available at https://transparency.meta.com/de-de/policies/other-policies/pre-disclosure/quest/.
Our Strauss app connected to the device generates and processes, in particular, the following categories of data that can be provided as part of the measurement/visualization process:
For the purposes of providing the app's services and functions, as well as for troubleshooting and other purposes described in the AEB, we store and process certain device data, some of which is generated automatically and some of which is generated manually by the user, in a restricted area of the platform to which only Strauss has access. In some cases, the data is only stored on the device itself.
This data includes the following:
Account and master data as well as metadata may also be processed by Meta. For more information on data processing by Meta, please visit: https://transparency.meta.com/de-de/policies/other-policies/pre-disclosure/quest/.
b) Data formats
The above-mentioned data types are stored or further processed in the app or platform in the following data formats.
c) Estimated volume
The amount of data may vary depending on the model, configuration, and user settings of the device, as well as the object size, scan duration, degree of simplification, and export format. The generally estimated volume of data generated in the Strauss app therefore depends largely on individual parameters.
3) Continuous data generation in real time
During an active scan or measurement session, measurement/geometry data can be generated continuously in real time (only for the duration of the session). Outside of active use, the Strauss app does not generate data continuously.
4) Data storage capability
By default, on-device processing takes place without persistence of raw sensor data. Measurement derivatives/project data can be stored locally on the device.
The retention period for the collected data depends on the type of data and the use case/project, as well as the user's settings in the app.
5) Data access, retrieval, and deletion by the user
Users can access the data stored on the device via the app's functions. It is also possible to export device data. Further information on how to perform such an export using the functions provided by Meta for this purpose can be found at: click here.
At the user's request, data can also be shared with third parties, depending on the recipient and availability. Further information on this can also be found in the information provided by Meta (see above).
If the provision of further data to the user or third parties is requested, we are available at any time at datenschutz@strauss.de for corresponding inquiries, which will be reviewed and processed as quickly as possible. The provision of further information may be subject to additional requirements, including the protection of trade and business secrets or the assumption of costs to the extent permitted by law.
6) Purpose of data processing
Data processing is carried out for the purpose of providing the functions and services offered by the app. Any further use of the above-mentioned data is carried out for the purposes additionally specified in the respective agreement (including quality control, product improvement and development, business analytics, etc.). In addition, the data will be used as necessary to comply with legal requirements (including product monitoring, retention obligations) or to fulfill legitimate interests (e.g., legal defense). In addition, we may also disclose the above data to third parties for the agreed purposes and/or legitimate interests. These purposes may include, among other things, collaboration with technology partners to integrate advanced features, partnerships with research institutions to promote scientific progress, and collaboration with service providers to provide seamless and efficient user experiences.
The data is usually non-personal data. If, in exceptional cases, it is personal data, further information on data protection can be found in the relevant data protection notices.
7) Transfer of data to third parties
Data is disclosed to service providers to the extent necessary for the provision of the services offered. In addition to affiliated companies, this also includes technical service providers who, for example, provide technical support for the app. These service providers are bound to confidentiality and act on our behalf. In exceptional cases, such data may also be disclosed to other third parties if this is necessary, for example, for legal prosecution or defense or for the use of services in the field of legal advice or auditing. For any use of such data by Meta, see I.3. above and also: click here.
Data will only be passed on to third parties commissioned by the user at the user's request. Users and/or service providers can send corresponding requests to Strauss by email at datenschutz@strauss.de.
8) Right of appeal
Users may lodge a complaint with the competent authority at any time if, in the user's opinion, we have not done so. The competent authority for this is designated by the respective EU member state.
9) Trade secrets
The requested data may contain trade secrets and must therefore be protected by special measures if necessary. Further details can be found in the respective Terms of Use for the respective service.
10) Contact details Data owner / service provider of the associated service "Strauss App"
Strauss Deutschland GmbH & Co. KG
Frankfurter Straße 98-108
63599 Biebergemünd
https://www.strauss.com/de/en/Legal_information/Imprint
General Terms and Conditions of Use ("GTC") for the use of the Strauss VR app
1) Scope, provider, subject matter of the contract
1.1) These GTC govern the use by the user of the VR application and device software (the "App") provided by Strauss Deutschland GmbH & Co. KG, Frankfurter Straße 98-108, 63599 Biebergemünd, ("Strauss," "we") on compatible VR glasses (together "Services").
1.2) In particular, the Services enable measurements and 3D room calculations (digital tape measure/laser measuring device) and the storage of measurement data on the device.
1.3) Any deviating terms and conditions of the user shall not become part of the contract unless we expressly agree to their validity in writing.
2) Definitions
3) Conclusion of contract; user accounts
3.1) Use requires acceptance of these Terms of Use and registration of the device via the platform supporting the device. For this purpose, each user is provided with an automatically generated username and password together with the device. After registration on the platform, the device is ready for use. Further information on the registration process can be found in the help section provided with the device.
3.2) The minimum age for use is 18 years. Otherwise, use may only take place with the proven consent of the legal representatives.
3.3) Users are obliged to provide accurate information and to treat access data confidentially.
3.4) We may refuse registrations or block accounts if false information, misuse, or legal risks exist.
4) Scope of services; availability; changes
4.1) We provide the services within the scope of the current range of functions. Certain features may vary depending on the device, region, or account type.
4.2) We strive to ensure high availability; maintenance windows, updates, and disruptions may occur. Statutory warranty rights (in particular §§ 327 ff. BGB) remain unaffected.
4.3) We may modify the services (security, technical improvements, legal requirements, new/discontinued features). For consumers, § 327f BGB (security and feature updates) applies.
4.4) Beta/preview features may be marked as such and may involve increased risks/changes.
5) Rights of use for the app and services
5.1) We grant a simple, non-transferable, non-sublicensable right to use the app and services in accordance with these GTC, limited to the term of the contract and the account type.
5.2) The following are expressly prohibited: reverse engineering, decompiling (except to the extent permitted by law), circumventing protective mechanisms, unauthorized reproduction/distribution, transfer to third parties outside the permitted organizational use, use for the development of competing services, automated reading without approved interfaces.
6) Rights and responsibilities
6.1) The user grants Strauss a worldwide, royalty-free, simple right of use to process measurement data for the purpose of providing the services, storing, displaying, sharing, exporting/porting, troubleshooting, securing, and improving the services.
6.2) Strauss may use measurement data in aggregated or anonymized form for statistical, improvement, and security purposes, provided that no personal reference can be made (any longer).
6.3) The user is responsible for obtaining the necessary rights, consents, and access/recording permissions (e.g., in third-party premises) and for not infringing any third-party rights (personal rights, copyrights, property rights, confidentiality rights).
7) Accuracy of measurements; safe use of VR
7.1) The app is not a calibratable precision measuring device and is not a substitute for technical measurements relevant to surveying or structural engineering. Measurements may vary depending on the sensor technology, surfaces, light, calibration, user guidance, and environmental conditions.
7.2) Critical uses (e.g., safety-related components, structural calculations, medical/clinical applications) are excluded unless expressly agreed in writing.
7.3) The device may only be used in a safe environment free of obstacles; the instructions for use and measures specified by the manufacturer of the glasses (e.g., recommended breaks) must be observed.
8) Data protection
Information on the processing of personal data can be found in the data protection information at https://www.strauss.com/de/de/Rechtliches/Datenschutz.
9) Pricing; billing (for services subject to a fee)
9.1) Insofar as services are subject to a fee, the prices, billing periods, and service descriptions stated at the time of conclusion of the contract shall apply.
9.2) We may change prices with future effect; we will provide reasonable notice of any such changes. Consumers have a special right of termination in the event of disadvantageous changes.
10) Third-party platforms, app stores, device manufacturers
10.1) Use may require third-party platforms (e.g., app stores, VR operating systems). Their terms of use apply in addition.
10.2) Functions depend on the VR hardware/firmware. We are not responsible for third-party products.
10.3) Updates may be distributed via app stores/manufacturer channels.
11) Prohibited uses
The following are prohibited in particular: illegal content/uses; security testing without permission; mass automated reading; disruption/circumvention of security mechanisms; uploading malicious software; violation of export/sanctions regulations; use in particularly vulnerable environments (e.g., critical infrastructure) without a separate agreement.
12) Warranty and digital content
Consumers are entitled to the statutory rights in the event of defects in digital products (Sections 327 et seq. BGB), including the obligation to provide security updates. No further guarantees exist unless expressly stated.
13) User liability
The user is liable in accordance with the statutory provisions.
14) Strauss's liability
14.1) In cases of intent and gross negligence, Strauss is liable in accordance with the statutory provisions.
14.2) In cases of simple negligence, Strauss shall only be liable for breach of a material contractual obligation, limited to compensation for foreseeable, typically occurring damage. A material contractual obligation is an obligation whose fulfillment is essential to achieving the purpose pursued by the conclusion of the contract and on whose fulfillment the user may regularly rely.
14.3) The limitation of liability under Section 14.2 does not apply to claims under the Product Liability Act and, outside the scope of this Act, to at least negligent injury to life, limb, or health of persons.
14.4) Insofar as Strauss' liability is excluded or limited, this also applies to the personal liability of its employees, representatives, and vicarious agents.
15) Updates, data access, rights to device data, costs
15.1) We provide the digitally owed services and maintain them in accordance with the contract.
15.2) We deliver the necessary updates, including security updates, for the agreed period. The user shall install the provided updates without delay, insofar as this is reasonable.
15.3)For the purposes of providing the services and functions of the app and troubleshooting, we store and process certain device data generated during the use of , partly automatically and partly manually by the user themselves, in a separate area of the platform that is only accessible to Strauss. In some cases, the data is only stored on the device itself.
This includes the following data
Account and master data as well as metadata may also be processed by Meta. Further information on data processing by Meta can be found at: https://transparency.meta.com/de-de/policies/other-policies/pre-disclosure/quest/.
15.4) Strauss also uses the above-mentioned account and master data as well as metadata for the continuous development of services, analysis, and quality assurance. For this purpose, the user hereby grants Strauss a non-exclusive, non-exclusive, transferable and sublicensable, worldwide, perpetual, irrevocable right to use the relevant data for the following purposes: (i) business and service analysis; (ii) product and feature development; (iii) future AI training, testing, and evaluation, if applicable; (iv) quality assurance, support, and reliability engineering; and (v) other internal uses directly related to the aforementioned purposes. Processing for the above purposes shall always be carried out in a depersonalized form. The right of use shall remain unaffected by any termination of these GTC or the termination of the user relationship.
15.5) The user can view their measurement data in the app via the device at any time. It is also possible to export device data. Further information on how to perform such an export using the functions provided by Meta for this purpose can be found click here.
15.6) At the user's request, data may also be shared with third parties, depending on the recipient and availability. Further information on this can be found in the information provided by Meta.
15.7) If the provision of further data to the user or third parties is requested, we are available at any time at datenschutz@strauss.de for corresponding inquiries, which will be reviewed and processed as quickly as possible. The provision of further information may be subject to additional requirements, including the protection of trade and business secrets or the assumption of costs to the extent permitted by law.
15.8) Further information on the use of data and its provision can be found in the data information section of the app's privacy policy. This information is not part of these Terms of Use and is subject to change at any time.
15.9) If services are or will be subject to a fee, consumers will be clearly informed in advance about the price and scope of services. In this case, consumers can terminate the contractual relationship at any time.
16) Term, termination, blocking
16.1) The contract runs for a period of two (2) years. It is automatically extended for a further year if Strauss does not object by giving the user four (4) weeks' notice before the end of the contract period.
16.2) We may block or terminate accounts if there is good cause (e.g., significant breach of duty, misuse, legal risks) and if, taking the circumstances into account, continuation is unreasonable.
16.3) In the event of termination, we will delete the respective accounts. We delete or anonymize personal data in accordance with the data protection information and statutory retention obligations. Exports should be made in good time before the end of the contract. After the end of the contract, only data required by law may be available.
17) Changes to these GTC
17.1) We may amend these GTC for objectively justified reasons (e.g., legal situation, security requirements, functions, market conditions), provided that the user is not unreasonably disadvantaged.
17.2) The following applies to consumers: We will inform you of any significant changes in good time. If the consumer does not object within 30 days and continues to use the services , the changes shall be deemed to have been approved; we will point this out in the notification. In the event of disadvantageous changes, the consumer has a special right of termination.
18) Assignment, subcontractors
18.1) Rights and obligations may not be assigned without consent, except to affiliated companies or as part of a company/asset transfer by Strauss.
18.2) We may use subcontractors; however, we remain responsible. An overview of key subcontractors can be found in the privacy policy.
19) Final provisions; place of jurisdiction; language
19.1) German law applies, excluding the UN Convention on Contracts for the International Sale of Goods. For consumers, mandatory consumer protection regulations of the country of habitual residence remain unaffected.
19.2) Frankfurt am Main is the exclusive place of jurisdiction for merchants, legal entities under public law, or special funds under public law; consumers may bring legal action before the courts of their place of residence.
19.3) The contract language is German. Any translations are for information purposes only.
Safety and usage instructions for using the app
These instructions are for your safety and are intended to help prevent accidents in your everyday work. Compliance with these instructions is a prerequisite for using the app.
Environment and sources of danger
Safety and behavior
Personal protective measures
Health and stress
Failure to follow these instructions may result in accidents and legal consequences. You are responsible for using the app safely.