Privacy policy

(1) Below we provide information on the collection of personal data when our website is used. Personal data are all data that can be related to you personally, e.g. name, address, email addresses, user behaviour.

(2) You can reach our data protection officer at admin@privatealpha.de or at our postal address marked “the data protection officer”.

(3) When you contact us by email or via a contact form, the data you provide (your email address, and where applicable your name and your telephone number) are stored by us in order to answer your questions. We delete the data arising in this connection once storage is no longer necessary, or we restrict the processing if statutory retention obligations exist.

(4) If we make use of commissioned service providers for individual functions of our offering, or wish to use your data for advertising purposes, we will inform you in detail about the respective operations below. In doing so we also state the defined criteria for the storage period.

(1) You have the following rights vis-à-vis us in respect of the personal data concerning you:

• Right of access,
• Right to rectification or erasure,
• Right to restriction of processing,
• Right to object to the processing,
• Right to data portability.

(2) You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.

(1) Where the website is used merely for information purposes, that is where you do not register or otherwise transmit information to us, we collect only the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which are technically necessary for us in order to display our website to you and to ensure stability and security (the legal basis is Art. 6 Abs. 1 S. 1 lit. f DS- GVO):

• IP address
• Date and time of the request
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transferred in each case
• Website from which the request comes
• Browser
• Operating system and its interface
• Language and version of the browser software.

(2) In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive, assigned to the browser you use, and by means of which certain information flows to the body that sets the cookie (here, to us). Cookies cannot run programs or transmit viruses to your computer. They serve to make the internet offering as a whole more user-friendly and more effective.

(3) Use of cookies:

a) This website uses the following types of cookies, whose scope and manner of operation are explained below:

• Transient cookies (see b)
• Persistent cookies (see c).

b) Transient cookies are deleted automatically when you close the browser. These include in particular session cookies. They store a so-called session ID, by means of which various requests from your browser can be assigned to the common session. This allows your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.

c) Persistent cookies are deleted automatically after a specified period, which can differ depending on the cookie. You can delete the cookies at any time in the security settings of your browser.

d) You can configure your browser setting in accordance with your wishes and, for example, refuse the acceptance of third-party cookies or of all cookies. We point out to you that you may then not be able to use all functions of this website.

e) We use cookies in order to be able to identify you for subsequent visits if you have an account with us. Otherwise you would have to log in again for each visit.

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so you generally have to provide further personal data, which we use to render the respective service and to which the principles of data processing set out above apply.

(2) In part we make use of external service providers to process your data. They have been carefully selected and commissioned by us, are bound by our instructions and are checked regularly.

(3) A transfer of data to countries outside the EU or the EEA takes place only insofar as this is necessary for the performance of the service owed or is required by law (e.g. tax reporting obligations), you have given us your consent, or it takes place in the context of commissioned data processing. Should service providers in a third country be used, they are obliged, in addition to written instructions, to comply with the level of data protection in Europe by way of the agreement of the EU standard contractual clauses.

(1) If you seek to conclude a contract via our website, it is necessary for you to provide your personal data, which we require in order to process it. The mandatory details necessary for the processing of the contracts are marked separately; further details are voluntary. We process the data you provide in order to perform the contract. In the course of processing the application or of issuing the policy we may pass your data on to the respective product partner. The legal basis for this is Art. 6 Abs. 1 S. 1 lit. b DS-GVO.

We may also process the data you provide in order to inform you about further interesting products from our portfolio or to send you emails containing technical information.

(2) On the basis of commercial and tax law requirements we are obliged to store your address, payment and order data for a period of ten years. After three years, however, we restrict the processing, i.e. your data are used only in order to comply with the statutory obligations.

(3) In order to prevent unauthorised access by third parties to your personal data, in particular financial data, the ordering process is encrypted using SSL technology.

(1) With your consent you can subscribe to our newsletter, with which we inform you about our current interesting offers. The products and services advertised are named in the declaration of consent.

(2) For registration for our newsletter we use the so-called double opt-in procedure. This means that, after your registration, we send an email to the email address provided in which we ask you to confirm that you wish the newsletter to be sent. If you do not confirm your registration within 24 hours, your information is blocked and automatically deleted after one month. We also store, in each case, the IP addresses you have used and the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, where applicable, to clarify any possible misuse of your personal data.

(3) The only mandatory detail for the sending of the newsletter is your email address. [The provision of further, separately marked data is voluntary and is used in order to be able to address you personally.] After your confirmation we store your email address for the purpose of sending the newsletter. The legal basis is Art. 6 Abs. 1 S. 1 lit. a DS-GVO.

(4) You can withdraw your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the withdrawal by clicking the link provided in every newsletter email, by email to Newsletter@privatealpha.de or by a message to the contact details given in the legal notice.

(5) We point out to you that we evaluate your user behaviour when the newsletter is sent. For this evaluation the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. For the evaluations we link the data referred to in § 3 and the web beacons with your email address and an individual ID. Links received in the newsletter also contain this ID. The data are collected exclusively in pseudonymised form, so the IDs are not linked with your other personal data and any direct attribution to a person is excluded.

Such tracking is furthermore not possible if you have deactivated the display of images by default in your email program. In that case the newsletter will not be displayed to you in full and you may not be able to use all functions. If you click on the images, the tracking described above takes place.

(1) If you have given consent to the processing of your data, you can withdraw it at any time. Such a withdrawal affects the permissibility of the processing of your personal data after you have declared it to us.

(2) Insofar as we base the processing of your personal data on a balancing of interests between your interest in anonymity and our interest in using the data you have transmitted, you can object to this processing. This is the case where the processing is in particular not necessary for the performance of a contract with you, which we set out in each case in the description of the functions below. When exercising such an objection we ask you to state the reasons why we should not process your personal data as we have done. In the event of your justified objection we will examine the situation and will either cease or adjust the data processing or show you our compelling legitimate grounds on the basis of which we continue the processing.

(3) You may of course object at any time to the processing of your personal data for the purposes of advertising and data analysis. You can inform us of your objection to advertising at the following contact details: admin@privatealpha.de.

1. Use of Google Analytics

(1) This website uses Google Analytics, a web analytics service of Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transferred to a Google server in the USA and stored there. If IP anonymisation is activated on this website, however, your IP address will first be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information in order to evaluate your use of the website, to compile reports on website activity and to render further services to the website operator connected with website use and internet use.

(2) The IP address transmitted by your browser in the context of Google Analytics is not merged with other data held by Google.

(3) You can prevent the storage of the cookies by means of a corresponding setting of your browser software; we point out to you, however, that in this case you may not be able to use all functions of this website to their full extent. You can furthermore prevent the collection by Google of the data generated by the cookie and relating to your use of the website (incl. your IP address), as well as the processing of these data by Google, by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

(4) This website uses Google Analytics with the extension “_anonymizeIp()”. As a result, IP addresses are further processed in truncated form, so that attribution to a person can be excluded. Insofar as the data collected about you can be attributed to a person, that attribution is therefore excluded immediately and the personal data are thereby deleted without delay.

(5) We use Google Analytics in order to be able to analyse the use of our website and to improve it regularly. The statistics obtained allow us to improve our offering and to make it more interesting for you as a user. For the exceptional cases in which personal data are transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 Abs. 1 S. 1 lit. f DS-GVO.

(6) Information of the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: http://www.google.com/analytics/terms/de.html, overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, and the privacy policy: http://www.google.de/intl/de/policies/privacy.

[(7) This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. In your customer account, under “My data”, “personal data”, you can deactivate the cross-device analysis of your use.]