Privacy Policy

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified.

Data Collection on this Website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the "Information on the Responsible Party" section of this privacy policy.

2. Hosting

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host's servers.

3. General Information and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Information on the Responsible Party

The responsible party for data processing on this website is:

Alpha4lution UG
Herrenstraße 3
23909 Ratzeburg
Deutschland

Phone:
Email:

4. Data Collection on this Website

Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions.

Orders

When you place an order, we collect and store the data required to process the order (name, address, email address, phone number). This data is used to fulfill the contract and to communicate regarding your order.

Payment Processing

To process payments, we use the payment service provider Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA. During payment processing, the data required for payment (name, email address, billing address, payment information) is transmitted to Stripe. The data transmission is encrypted. The legal basis for data processing is Art. 6 para. 1 lit. b GDPR (contract fulfillment). The storage period is determined by legal retention periods (usually 10 years after contract termination). Further information on data processing by Stripe can be found in Stripe's privacy policy: https://stripe.com/privacy.

Invoicing and Accounting

For invoicing and accounting, we use the service provider SevDesk (sevDesk GmbH, Hauptstraße 115, 77652 Offenburg, Germany). When creating invoices, the data required for the invoice (name, address, email address, order details) is transmitted to SevDesk. The legal basis is Art. 6 para. 1 lit. b GDPR (contract fulfillment) and Art. 6 para. 1 lit. c GDPR (legal retention obligations). The data is stored in accordance with legal retention periods (usually 10 years). Further information can be found in SevDesk's privacy policy: https://sevdesk.de/datenschutz.

Affiliate Tracking

We use an affiliate tracking system to track the origin of orders. Technical data such as IP address, user agent, referrer, and timestamp are stored. This data is used to correctly assign affiliate commissions. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in correct accounting). The data is stored for the duration of legal retention periods (usually 10 years).

Email Delivery

For sending emails (order confirmations, status updates, etc.), we use the email function of our hosting provider. Email addresses are transmitted to the hosting provider. The legal basis is Art. 6 para. 1 lit. b GDPR (contract fulfillment). Email addresses are stored as long as this is necessary for contract fulfillment or legal retention periods exist.

Hosting

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact data, access times, website access, and other data generated via a website. The use of the host is for the purpose of contract fulfillment towards our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).

5. Cookies

What are Cookies?

Cookies are small text files that are stored on your device. This website uses only technically necessary cookies that are required for the basic functions of the website.

Which Cookies do we use?

We use the following technically necessary cookies:

  • Session Cookie (PHPSESSID): This cookie is absolutely necessary for the functionality of the website. It stores a unique session ID that allows us to identify you during your visit. It is automatically deleted when you close your browser.
  • Authentication: Stores your login credentials during your session so you remain logged in.
  • Shopping Cart: Stores items in your shopping cart, even if you are not logged in.
  • Security Token: Protects against Cross-Site-Request-Forgery attacks and secures form submissions.
  • Language Setting: Stores your preferred language setting for the website.

Consent

Since the cookies used are exclusively technically necessary cookies that are required for the basic functions of the website, no consent is required under the GDPR. These cookies are automatically set when you use the website.

Cookie Settings

You can disable cookies in your browser settings. However, please note that this may significantly limit the functionality of the website. For example, you may no longer be able to stay logged in or add items to your shopping cart.

6. Your Rights

You have the right at any time to:

  • Obtain information about your personal data stored by us (Art. 15 GDPR)
  • Request correction of incorrect data (Art. 16 GDPR)
  • Request deletion of your data stored by us, provided no legal retention periods apply (Art. 17 GDPR)
  • Request restriction of data processing (Art. 18 GDPR)
  • Object to the processing of your data (Art. 21 GDPR)
  • Request data portability (Art. 20 GDPR)
  • Lodge a complaint with a supervisory authority (Art. 77 GDPR)

Right to Complain

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR. The competent supervisory authority for us is: The State Commissioner for Data Protection Schleswig-Holstein, Holstenstraße 98, 24103 Kiel, Germany. Website: https://www.datenschutz.schleswig-holstein.de

7. SSL or TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the browser address line changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

8. Legal Basis for Data Processing

If we obtain consent from the data subject for processing operations involving personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for carrying out pre-contractual measures. If processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person require processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis. If processing is necessary to safeguard the legitimate interests of our company or a third party and if the interests, fundamental rights, and freedoms of the data subject do not override the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.

9. Storage Duration

Unless a more specific storage period is mentioned within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke consent for data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods). In the latter case, deletion will take place after these reasons no longer apply.

Order Data

Order data is stored in accordance with legal retention periods. According to § 257 HGB and § 147 AO, the retention period for commercial books, inventories, opening balance sheets, annual financial statements, management reports, the work instructions required for their understanding, as well as booking documents is 10 years. Invoices and receipts are also kept for 10 years.

Account Data

Account data is stored as long as the account is active. After account deletion, the data is deleted unless legal retention periods apply. Order data remains stored even after account deletion in accordance with legal retention periods.

9. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy. You can find the current version on this page. In the event of significant changes, we will inform you separately.