PRIVACY POLICY

1. INTRODUCTION

Thank you for your interest in our website. The protection of your personal data is important to us. Below you will find information about how we handle your data that is collected through your use of our website and that is processed in the Alocai platform. Your data will be processed in accordance with the legal data protection regulations.

1.1. CONTROLLER WITHIN THE MEANING OF DATA PROTECTION LAW
  • Company name: Alocai GmbH
  • Address: Straße der Pariser Kommune 12-16, 10243 Berlin, Germany
  • Phone: +49 30 293 521 00
  • e-mail: hello@alocai.com
1.2. DATA PROTECTION OFFICER
  • Proliance GmbH / www.datenschutzexperte.de
  • Data Protection Officer
  • Leopoldstr. 21, 80802 Munich
  • e-mail: datenschutzbeauftragter@datenschutzexperte.de
1.3. DEFINITIONS

Our privacy policy should be simple and understandable for everyone. For this reason, our privacy policy generally uses the official terms of the General Data Protection Regulation (GDPR). The official definitions are explained in Art. 4 GDPR.

2. DATA PROCESSING ON THE WEBSITE
2.1. WEB HOSTING

This website is hosted by an external service provider (hoster). This website is hosted in the US. Personal data collected on this website is stored on the hoster's servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, web page accesses and other data generated by a website.

We have concluded a Data Processing Agreement with the provider in accordance with the requirements of Art. 28 GDPR, in which we commit him to protect the data of our customers and not to pass them on to third parties.

Since a transfer of personal data to the U.S. takes place, further appropriate safeguards are required to ensure the level of data protection under the GDPR. To guarantee this, Google uses standard contractual clauses in accordance with Art. 46 Para. 2 lit. c GDPR. These oblige the recipient of the data in the U.S. to process the data according to the level of protection in Europe. In cases in which this cannot be guaranteed even by this contractual extension, we endeavour to obtain additional regulations and commitments from the recipient in the U.S.

2.2. SERVER- LOGFILES

Once you visit our website, it is technically necessary that data is transmitted to our web server via your internet browser. The following data is recorded during an active connection for communication between your internet browser and our web server.

  • Browser type / browser version.
  • Operating system.
  • Referrer URL.
  • Host name of the accessing computer.
  • Time of the server request.

We collect the listed data in order to guarantee a frictionless connection establishment and to enable a comfortable use of our website by the users. The log file also serves for evaluating system security and stability as well as administrative purposes. The legal basis for the temporary storage of data or log files is Art. 6 para. 1 lit. f GDPR.

For reasons of technical security, in particular to prevent attempts to attack our web server, we may temporarily store this data. It is not possible for us to draw conclusions about individual persons on the basis of this data. After 7 days at the latest, the data is made anonymous by shortening the IP address at domain level, so that it is no longer possible to establish a reference to the individual user.

2.3. COOKIES

Our website uses so-called “cookies”. Cookies are small text files that are either temporarily stored on your end device for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your terminal device until you delete them yourself or an automatic solution is provided by your web browser.

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or language settings). Other cookies are used to evaluate user behavior or display advertising.

Technically necessary cookies are stored on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the storage of cookies for the technically error-free and optimised presentation of our services. Other cookies are only stored with your consent on the basis of Art. 6 para. 1 lit. a GDPR. This consent can be withdrawn at any time for the future. The legal basis may also result from Art. 6 para. 1 lit. b GDPR if the processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at the request of the data subject.

Insofar as cookies are used for analysis purposes, we will inform you of this separately within the framework of this privacy policy and obtain your consent.

You can set your browser to:

  • Be informed about the setting of cookies,
  • only allow cookies in individual cases,
  • exclude the acceptance of cookies for certain cases or generally,
  • activate the automatic deletion of cookies when the browser is closed.

The cookie settings can be managed under the following links for each browser:

You can also manage cookies of many companies and functions used for advertising individually. To do this, use the appropriate user tools, available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices.

Most browsers also offer a so-called "do-not-track function". When this feature is enabled, the browser tells ad networks, websites, and applications that you do not want to be "tracked" for behavioral advertising and the like.

For information and instructions on how to edit this feature, please refer to the links below, depending on your browser provider:

Additionally, you can prevent the loading of so-called scripts by default. "NoScript" allows the execution of JavaScripts, Java and other plug-ins only at trusted domains of your choice. Information and instructions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox at: https://addons.mozilla.org/en-US/firefox/addon/noscript/ ).

Please note that if you disable cookies, the functionality of our website may be limited.

2.3.1. GOOGLE SERVICES

Google Analytics

Our website uses Google Analytics, an internet analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses so-called "cookies" and web beacons.

Google will use this information on behalf of the operator of this website to evaluate your use of the website and to create reports on website activity. Google will also use this information to provide the website operator with further services related to the use of the website and the internet. The IP address sent by your browser in the context of Google Analytics is not combined with other data from Google. Processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the legal basis of your given consent.

We use Google Analytics only with activated IP anonymisation. This means that your IP address will only be further processed by Google in abbreviated form.

The terms of use of Google Analytics and information on data protection can be accessed via the following links:

http://www.google.com/analytics/terms/
https://policies.google.com/privacy

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. User and event-level data associated with cookies, user IDs (e.g., User ID), and advertising IDs (e.g., DoubleClick cookies, Android Advertising ID, IDFA) will be deleted no later than 14 months after collection.

You can prevent cookies from being saved by adjusting the settings of your browser software accordingly. Please note, however, that if you do so you may not be able to use all the functions of this website without restriction. You can also prevent Google from collecting the data generated by the cookie and analysing your use of the website (including your IP address) and processing this data by Google by downloading and installing the browser plugin available at https://tools.google.com/dlpage/gaoptout. Google Fonts We use "Google Fonts" on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: "Google"). Google Fonts enables us to use external fonts. For this purpose, the required Google Fonts are loaded into your browser cache by your web browser when you access our website. This is necessary so that your browser can also display a visually improved representation of our texts. If your browser does not support this function, a standard font will be used by your computer for display. The integration of these Google Fonts is done by a server call, usually a Google server in the U.S. This transmits to the server which page of our website you have visited. Also, the IP address of the browser of the end device of the visitor is stored by Google.

We use Google Fonts for optimization purposes, in particular to improve the use of our website for you and to make its design more user-friendly. The legal basis for the data processing and transfer to Google is Art. 6 (1) lit. f GDPR.

Further information on data protection can be found in Google's privacy policy: https://policies.google.com/privacy?hl=en&gl=en.

Further information on Google Fonts can be found at https://fonts.google.com/.

Google Maps

Our homepage uses the online map service provider Google Maps via an interface. Provider of the map service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This allows us to display interactive maps directly on the website and makes it easy for you to use the map function. To use the functionalities of Google Maps it is necessary to save your IP address.

Google uses Cookies, to collect information about user behaviour. The legal basis for the processing of your personal data is your given consent according to Art. 6 para. 1 s. 1 lit. a GDPR.

Further information on the handling of user data can be found in Google's privacy policy:

https://www.google.de/intl/de/policies/privacy/ Opt-out: https://www.google.com/settings/ads/

Data transfers when using Google Services

We have concluded a Data Processing Agreement with the provider in accordance with the requirements of Art. 28 GDPR, in which we commit him to protect the data of our customers and not to pass them on to third parties.

Since a transfer of personal data to the U.S. takes place, further appropriate safeguards are required to ensure the level of data protection under the GDPR. To guarantee this, we have concluded standard contractual clauses with the provider in accordance with Art. 46 Para. 2 lit. c GDPR. These oblige the recipient of the data in the U.S. to process the data according to the level of protection in Europe. In cases in which this cannot be guaranteed even by this contractual extension, we endeavour to obtain additional regulations and commitments from the recipient in the U.S.

2.3.2. CHANGE COOKIE SETTINGS

For the website you can revoke or change your cookie settings at any time. To do so, access the cookie settings again via the website.

2.4. EXTERNAL LINKS

On our website Social Media is solely embedded as a link to the respective service. After clicking on the embedded text/image-link you will be directed to the website of the respective provider. User information will be only transferred after the redirection to the respective provider. Information regarding the use of your personal data through the use of the website can be found in the privacy policies of the visited websites.

2.5. CONTACT POSSIBILITIES, NEWSLETTER AND CUSTOMER MANAGEMENT
2.5.1. CONTACT BY EMAIL

If you send us requests email, your details from the email, including the contact data you have provided there, will be stored for the purpose of processing your request and in the event of follow-up questions. Under no circumstances will we pass on this data without your consent. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6 para. 1 lit. f GDPR and, if applicable, Art. 6 para. 1 lit. b GDPR, provided that your request is aimed at concluding a contract. Your data will be deleted after final processing of your request, provided that there are no legal storage obligations to the contrary. You can object to the processing of your personal data at any time in the case of Art. 6 para. 1 lit. f GDPR.

2.5.2. NEWSLETTER

If you would like to receive the newsletter offered on our website with regular information about our offers and products, we need your email address as a mandatory information. We use the so-called opt-in procedure for registering for the newsletter on the website.

By creating the account at Alocai Platform https://platform.alocai.com/ you also agree to storing and processing your data for the purpose of receiving the newsletters with regular information about our offers and products.

In addition to the email address required for sending the newsletter, we store the name, surname, IP address via which you have registered for the newsletter as well as the date and time of registration and confirmation so that we can trace any possible misuse at a later point in time.

You can cancel the newsletter at any time via the link inserted in each newsletter or by sending an email to the above-mentioned responsible party. After your cancellation, your email address will be deleted from our newsletter distribution list immediately, unless you have explicitly consented to continued use of the data collected or continued processing is otherwise legally permissible.

2.5.3. REGISTRATION FOR THE ALOCAI PLATFORM

You have the possibility to register for an account with the Alocai platform on our website and to create a user profile. We collect and use the following personal data during registration and setup:

  • First name, last name
  • Email address of the user
  • Date and time of registration

With your user account you will have the possibility to use further parts of our website and to log in for. If consent is given, the legal basis for data processing is Art. 6 para. 1 lit. a GDPR or Art. 6 para. 1 lit. b GDPR, insofar as the processing is necessary for the provision of the requested services. Your data will be deleted as soon as the user account on our website is deleted and insofar as there are no legal storage obligations. You can usually change and/or delete your user account, including the data you have provided, directly in your user account after logging in or by sending a message to the responsible party named at the beginning of this privacy policy.

2.5.4. WEBSITE ANALYSIS WITH HUBSPOT

We use Hubspot on our website for marketing activities. We use this integrated software solution for our own marketing, lead generation and customer service purposes. This includes email marketing, which handles the sending of newsletters as well as automated mailings, social media publishing and reporting, contact management such as user segmentation and CRM, landing pages and contact forms. Hubspot uses cookies, which are small text files that are stored locally in the cache of your web browser on your terminal device and enable an analysis of your use of the website by us. Hubspot analyzes the information collected (e.g., IP address, geographic location, browser type, length of visit, and pages viewed) on our behalf so that we can generate reports about the visit and the pages viewed. Information collected by Hubspot and the content of our website is stored on servers of Hubspot's service providers. Insofar as you have given your consent to this in accordance with Art. 6 (1) lit. a GDPR, the processing on this website takes place for the purpose of website analysis.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Data will be deleted no later than 13 months after it has been collected.

You can permanently object to the collection of data by Hubspot and the setting of cookies by preventing the storage of cookies accordingly through your browser settings.

Booking of Appointments through Hubspot

On our website you have the option to book an appointment with us.  For this purpose, we use an appointment booking tool from "Hubspot" (HubSpot Ireland Limited in 2nd Floor 30 North Wall Quay, Dublin 1, Ireland).

If you want to book an appointment with us, you can use the form provided for this purpose. The data you provide will then be transmitted via Hubspot to the respective contact person in our company.

You will receive a confirmation of the appointment by e-mail, with the option of entering the data in your calendar.

The purpose of processing the data provided is to be able to coordinate an appointment, process the contact request and get in touch with you.

The legal basis for the processing of personal data described here is Art. 6 (1) lit. f GDPR. Our legitimate interest is to offer you the opportunity to independently arrange appointments with us. This simplifies the coordination regarding appointments and enables an efficient appointment scheduling. If the provision of your data is for the initiation of a contract, Art. 6 (1) lit. b GDPR is the legal basis.

The processing of personal data, which is processed based on a legitimate interest, can be objected to at any time. In such a case, the conversation cannot be continued.

The personal data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.

We have concluded a Data Processing Agreement with Hubspot, so that the data you provide is processed strictly in accordance with our instructions and orders.

Service provider: Hubspot

European branch: HubSpot Ireland Limited at 2nd Floor 30 North Wall Quay, Dublin 1, Ireland.

Address USA: HubSpot, Inc., 25 First St., 2nd floor, Cambridge, Massachusetts 02141, USA.

Privacy Policy: https://legal.hubspot.com/privacy-policy Standard Contractual Clauses: We have concluded Standard Contractual Clauses with the provider based in the USA pursuant to Art. 46 (2) lit. c GDPR to ensure an adequate level of data protection. https://legal.hubspot.com/dpa

2.5.5. LEAD GENERATION WITH BANT.IO

We use the provider bant.io to generate leads through our website. Bant.io is operated by bant.io Limited in the United Kingdom.

With this tool, visitors can be tracked by the website without having to fill out forms. Bant.io collects information about the company to which the visiting employee belongs to make this information available to us. The tool also provides contact information and tracks activity on the website. With this tool, visitors can be tracked by the website without having to fill out forms. Bant.io collects information about the company to which the visiting employee belongs to make this information available to us. The tool also provides contact information and tracks activity on the website.

The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given his consent through the cookie banner. We pay particular attention to the protection of your personal data when using this tool. To exclude a direct personal reference, IP addresses are only stored and processed anonymously. This means that it is only possible to trace which company visited our website, which pages were viewed and how much time was spent on the website. All data is thus only collected at the company level.

The user can withdraw their consent to the above-mentioned processing at any time by accessing the cookie settings and changing the preferences.

We have concluded a Data Processing Agreement with Bant.io, so that the data you provide is processed strictly in accordance with our instructions and orders.

The transfer of data to the UK takes place based on the adequacy decision by the European Commission.

2.6. TWITTER

Features of the Twitter service are connected to our website. These features are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. When you use Twitter and the “re-tweet” function, the websites you visit are connected with your Twitter account and shared with other users. Data is also transmitted to Twitter. We advise you that as the operator of this website, we have no knowledge of the content of the data transmitted to Twitter or how it is used.

You can learn more by consulting Twitter's privacy policy at: http://twitter.com/privacy.

You can change your data privacy settings for Twitter in your account settings at http://twitter.com/account/settings.

3. DATA PROTECTION INFORMATION FOR USERS OF THE ALOCAI PLATFORM
3.1. WEB HOSTING

This website is hosted by Amazon Web Services (hoster) in Frankfurt. Personal data collected on this website is stored on the hoster's servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, web page accesses and other data generated by a website.We have concluded a Data Processing Agreement with the provider in accordance with the requirements of Art. 28 GDPR, in which we commit him to protect the data of our customers and not to pass them on to third parties.

4. FURTHER INFORMATION
4.1. DATA TRANSFER AND RECIPIENTS

Your personal data is not transferred to third parties, unless

  • We have explicitly pointed this out in the description of the respective data processing.
  • you have given your explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
  • the transfer pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defence of legal claims and our legitimate interests are not overridden by your fundamental rights and freedoms.
  • there is a legal obligation to transfer data pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, andrequired by Art. 6 para. 1 sentence 1 lit. b GDPR for the execution of contractual relationships with you.

In addition, we use external service providers for the processing of our services, whom we have carefully selected and commissioned in writing. They are bound by our instructions and are regularly monitored by us. Required data processing agreements pursuant to Art. 28 GDPR are concluded before the commission. In particular, these contracts concern web hosting services, the dispatch of emails and IT updates and maintenance. Your personal data will not be transferred to third parties by our service providers.

4.2. DATA SECURITY

We take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk in accordance with Article 32 of the GDPR, taking into account the state of the art, the cost of implementation and the nature, scope, circumstances and purposes of the processing, as well as the varying probability and severity of the risk to the rights and freedoms of natural persons. This website uses SSL encryption for security reasons and to protect the transmission of confidential content.

4.3. STORAGE PERIOD

The period for which the personal data will be stored is determined by the relevant statutory storage periods (e.g. from commercial law and tax law). The corresponding data is deleted routinely upon expiry of the respective period. If data is required for the fulfilment of a contract or contract initiation, or if we have a legitimate interest in further storage, the data will be deleted if they are no longer required for these purposes or if you make use of your right of withdrawal or objection.

4.4. YOUR RIGHTS

In the following, you will find information about your data subject rights, which the current data protection law grants you against the controller concerning the processing of personal data:

The right, pursuant to Art. 15 GDPR, to obtain information about your personal data processed by us. In particular, you may request information about the purposes of processing, the categories of personal data concerned, the categories of recipients to whom your data has been or will be disclosed, the envisaged period for which the data will be stored, the existence of the right to request from the controller rectification or erasure or personal data or restriction of processing of personal data concerning you or to object such processing, the existence of a right to lodge a complaint with a supervisory authority, the origin of your data, if these have not been collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved, as well as the significance and the envisaged consequences.

The right to obtain without undue delay the rectification of inaccurate personal data concerning you. in accordance with Art. 16 GDPR.

The right to request the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right of freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

The right, pursuant to Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is contested by you, the processing is unlawful, but you oppose the erasure and we no longer need the data for the purposes of processing, but they are required by you for the establishment, exercise or defence of legal claims or you have filed an objection against the processing pursuant to Art. 21 GDPR.

The right, in accordance with Art. 20 GDPR, to receive the personal data concerning you, which you have provided to us in in a commonly used and machine-readable format and the right to transmit those data to another controller.

The right to withdraw your given consent pursuant to Art. 7 para. 3 GDPR with effect in the future at any time.

The right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR, in particular in the Member State of your habitual residence, place of work.

The right to withdraw your given consent pursuant to Art. 7 para. 3 GDPR: You have the right to withdraw your given consent concerning the processing of your personal data with effect for the future at any time. In the event of withdrawal, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal

4.4.1. RIGHT TO OBJECT

If your personal data is processed by us based on legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR, you have the right, pursuant to Art. 21 GDPR, to object at any time to the processing of your personal data on grounds relating to your particular situation. If the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement of stating a particular situation.

If you wish to exercise your right of withdrawal, objection or any of your other rights, simply send an e-mail to hello@alocai.com

4.5. NECESSITY OF PROVIDING PERSONAL DATA

The provision of personal data for the decision on the conclusion of a contract, the fulfilment of the contract or for the implementation of pre-contractual measures is voluntary. However, we can only make the decision in the context of contractual measures if you provide such personal data that is required for the conclusion of the contract, the fulfilment of the contract or pre-contractual measures.

4.6. AUTOMATED DECISION MAKING

Automated decision making or profiling according to Art. 22 GDPR does not take place.

4.7. SUBJECT TO CHANGE

We reserve the right to adapt or update this privacy policy, if necessary, in compliance with the applicable data protection regulations. In this way, we can adapt it to the current legal requirements and take account of changes to our services, e.g. the introduction of new services. The most current version applies to your visit.

Status of this privacy policy: 01.05.2022.