Privacy Policy
PURSUANT TO ART. 13 / 14 GDPR
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
ALVPHA Tech GmbH
Schillerstraße 21
73054 Eislingen
Germany
Email: contact@alvpha.com
2. General information on data processing
As a matter of principle, we process personal data of our website visitors only to the extent necessary to provide a functioning website and our content and services. Processing regularly takes place only with the user's consent, or in cases where obtaining prior consent is not possible for practical reasons and the processing is permitted by law.
3. Provision of the website (server logs)
Each time our website is accessed, our hosting provider automatically collects data and information from the accessing computer system. The following data is collected:
- IP address
- Date and time of access
- Page / URL accessed
- Referrer URL
- Browser and operating system used
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a technically error-free presentation and the security of our website). Log data is stored for a short period and deleted after 30 days at the latest, unless a security-relevant incident requires longer retention.
Hosting: Vercel Inc., 340 Pine Street Suite 701, San Francisco, CA 94104, USA — server location: Frankfurt, Germany (region fra1). A data processing agreement (DPA) pursuant to Art. 28 GDPR is in place; insofar as data is transferred to the USA, this is based on the EU-U.S. Data Privacy Framework or the EU Standard Contractual Clauses (Art. 44 et seq. GDPR).
4. Contacting us (contact form and email)
A contact form is available on our website. We process the data you enter (name, email address, message) in order to answer your inquiry. Submitting the form requires your explicit consent via the corresponding checkbox. The same applies accordingly if you contact us directly by email.
Legal bases: Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR where the inquiry is aimed at entering into a contract, otherwise Art. 6 (1) (f) GDPR. You may withdraw your consent at any time with effect for the future.
Delivery of the form message to our inbox is handled by the email service provider Resend (see section 6). We delete the data arising in this context once its storage is no longer necessary, or restrict processing where statutory retention obligations apply.
5. Newsletter (double opt-in)
For our newsletter, we process your email address in order to send you research and company updates. Registration uses a double-opt-in procedure: after entering your address, you receive a confirmation email containing a link valid for 48 hours. Only when you click this link is your address added to our mailing list — it is not stored before that.
Legal basis: Art. 6 (1) (a) GDPR (consent). You can unsubscribe at any time via the unsubscribe link in every email or by writing to contact@alvpha.com; your address will then be removed from the mailing list. Sending and list management are handled by the service provider Resend (see section 6).
6. Email delivery via Resend
For sending confirmation and newsletter emails and for delivering contact-form messages, we use the service Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) as a processor pursuant to Art. 28 GDPR. Resend processes the data required in each case (email address, and for contact inquiries additionally name and message content).
As Resend is based in the USA, data is transferred to a third country. This transfer is safeguarded by the conclusion of EU Standard Contractual Clauses pursuant to Art. 46 (2) (c) GDPR.
7. Cookies and local storage
Our website does not use cookies. There is no tracking, no web analytics and no profiling.
For technical operation, the website stores two settings in your browser's local storage (localStorage): your language choice (German/English) and the information that you have closed the privacy notice. This storage is necessary for the service you request and is therefore exempt from consent pursuant to § 25 (2) no. 2 of the German TDDDG. The values remain exclusively in your browser, are not transmitted to us or to third parties, and can be deleted at any time via your browser settings.
8. Fonts (Google Fonts, self-hosted)
This website uses web fonts for a consistent presentation of typefaces. The fonts are served locally from our hosting infrastructure. No connection to third-party servers (e.g. Google) is established.
9. Your rights
You have the following rights vis-à-vis us regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent (Art. 7 (3) GDPR)
To exercise your rights, please contact: contact@alvpha.com
10. Right to lodge a complaint with a supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. The competent supervisory authority is:
The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (LfDI BW)
Lautenschlagerstraße 20
70173 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de
11. Validity and changes to this privacy policy
This privacy policy is currently valid and has the status stated below. As our website and the services offered on it evolve, or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy.