Privacy Policy

§ 1 Information on the collection of personal data

(1) Below we provide information on the collection of personal data when our website is used. Personal data are all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.

(2) You can reach our data protection officer at [admin@privatealpha.de] or at our postal address marked for the attention of „der Datenschutzbeauftragte“ (the data protection officer).

(3) If you contact us by e-mail or via a contact form, the data you provide (your e-mail address and, where applicable, your name and telephone number) are stored by us in order to answer your questions. We delete the data arising in this connection once storage is no longer necessary, or we restrict processing where statutory retention obligations apply.

(4) If we use commissioned service providers for individual functions of our offering, or wish to use your data for advertising purposes, we will inform you in detail below about the respective operations. In doing so we also state the defined criteria for the storage period.

§ 2 Your rights

(1) You have the following rights vis-à-vis us in respect of the personal data concerning you:

• right of access,
• right to rectification or erasure,
• right to restriction of processing,
• right to object to processing,
• right to data portability.

(2) You also have the right to complain to a data protection supervisory authority about our processing of your personal data.

§ 3 Collection of personal data when visiting our website

(1) Where the website is used for information purposes only, that is to say if you do not register or otherwise transmit information to us, we collect only the personal data which your browser transmits to our server. If you wish to view our website, we collect the following data, which are technically necessary for us in order to display our website to you and to ensure stability and security (the legal basis is Art. 6 Abs. 1 S. 1 lit. f DSGVO, the EU General Data Protection Regulation):

• IP address
• date and time of the request
• time zone difference from Greenwich Mean Time (GMT)
• content of the request (specific page)
• access status/HTTP status code
• volume of data transferred in each case
• website from which the request originates
• browser
• operating system and its interface
• language and version of the browser software.

(2) In addition to the data referred to above, cookies are stored on your computer when you use our website. Cookies are small text files which are stored on your hard drive, assigned to the browser you are using, and by means of which certain information flows to the body setting the cookie (here, to us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the internet offering as a whole more user-friendly and more effective.

(3) Use of cookies:

a) This website uses the following types of cookies, the scope and functioning of which are explained below:

• Transient cookies (see b)
• Persistent cookies (see c).

b) Transient cookies are deleted automatically when you close your browser. These include in particular session cookies. These store a so-called session ID, by means of which various requests from your browser can be assigned to the common session. This allows your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close your browser.

c) Persistent cookies are deleted automatically after a predetermined period, which may vary depending on the cookie. You can delete the cookies at any time in the security settings of your browser.

d) You can configure your browser setting according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We point out that you may then not be able to use all functions of this website.

e) We use cookies in order to be able to identify you on subsequent visits if you have an account with us. Otherwise you would have to log in again for every visit.

§ 4 Further functions and offerings of our website

(1) In addition to the purely informational use of our website, we offer various services which you may use if you are interested. To do so you generally have to provide further personal data, which we use in order to provide the respective service and to which the data processing principles referred to above apply.

(2) In some cases we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are checked regularly.

(3) Data are transferred to countries outside the EU or the EEA only where this is necessary for the performance of the service owed or is required by law (e.g. tax reporting obligations), where you have given us your consent, or where it takes place within the framework of commissioned data processing. Where service providers in a third country are used, they are obliged, in addition to written instructions, to comply with the European level of data protection by way of the agreement of the EU standard contractual clauses.

§ 5 Conclusion of contracts online

(1) If you seek to conclude a contract via our website, it is necessary for you to provide your personal data, which we require in order to process it. The mandatory information necessary for the processing of contracts is marked separately; further information is voluntary. We process the data you provide in order to perform the contract. In the course of processing the application or issuing the policy, we may pass your data on to the respective product partner. The legal basis for this is Art. 6 Abs. 1 S. 1 lit. b DS-GVO. We may also process the data you provide in order to inform you about other interesting products from our portfolio or to send you e-mails containing technical information.

(2) We are obliged, on the basis of commercial and tax law requirements, to store your address, payment and order data for a period of ten years. However, after three years we restrict processing, i.e. your data are used only in order to comply with the statutory obligations.

(3) In order to prevent unauthorised access by third parties to your personal data, in particular financial data, the ordering process is encrypted using SSL technology.

§ 6 Newsletter

(1) With your consent you can subscribe to our newsletter, by means of which we inform you about our current offers of interest. The products and services advertised are named in the declaration of consent.

(2) For registration for our newsletter we use the so-called double opt-in procedure. This means that, after you have registered, we send an e-mail to the e-mail address provided in which we ask you to confirm that you wish the newsletter to be sent. If you do not confirm your registration within 24 hours, your information is blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, where applicable, to clarify any possible misuse of your personal data.

(3) The only mandatory information for sending the newsletter is your e-mail address. [The provision of further, separately marked data is voluntary and is used in order to be able to address you personally.] After your confirmation we store your e-mail address for the purpose of sending the newsletter. The legal basis is Art. 6 Abs. 1 S. 1 lit. a DS-GVO.

(4) You can withdraw your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the withdrawal by clicking the link provided in every newsletter e-mail, by e-mail to Newsletter@privatealpha.de or by a message to the contact details stated in the Impressum (legal notice).

(5) We point out that we evaluate your user behaviour when the newsletter is sent. For this evaluation the e-mails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. For the evaluations we link the data referred to in § 3 and the web beacons with your e-mail address and an individual ID. Links received in the newsletter also contain this ID. The data are collected on a pseudonymised basis only, that is to say the IDs are not linked with your other personal data, and any direct attribution to a person is excluded. Such tracking is moreover not possible if you have deactivated the display of images by default in your e-mail program. In that case the newsletter is not displayed to you in full and you may not be able to use all functions. If you display the images manually, the tracking referred to above takes place.

§ 7 Objection to or withdrawal of consent to the processing of your data

(1) If you have given consent to the processing of your data, you can withdraw it at any time. Such a withdrawal affects the permissibility of the processing of your personal data after you have declared it to us.

(2) Insofar as we base the processing of your personal data on a balancing of interests between your interest in anonymity and our interest in using the data you have transmitted, you may object to that processing. This is the case where the processing is in particular not necessary for the performance of a contract with you, which is set out by us in each case in the description of the functions below. When exercising such an objection, we ask you to state the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either cease or adapt the data processing or set out to you our compelling legitimate grounds on the basis of which we will continue the processing.

(3) You may of course object at any time to the processing of your personal data for the purposes of advertising and data analysis. You can inform us of your objection to advertising at the following contact details: admin@privatealpha.de.

§ 8 Web Analytics

1. Use of Google Analytics

(1) This website uses Google Analytics, a web analytics service of Google Inc. („Google“). Google Analytics uses so-called „cookies“, text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. If IP anonymisation is activated on this website, however, your IP address will first be truncated by Google within the member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information in order to evaluate your use of the website, to compile reports on website activity and to provide further services to the website operator connected with website use and internet use.

(2) The IP address transmitted by your browser in the context of Google Analytics is not merged with other data held by Google.

(3) You can prevent the storage of cookies by setting your browser software accordingly; we point out, however, that in that case you may not be able to use all functions of this website to their full extent. You can furthermore prevent the collection by Google of the data generated by the cookie and relating to your use of the website (including your IP address), as well as the processing of these data by Google, by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

(4) This website uses Google Analytics with the extension „_anonymizeIp()“. As a result, IP addresses are further processed in truncated form, so that attribution to a person can be excluded. Insofar as the data collected about you can be attributed to a person, such attribution is therefore excluded immediately and the personal data are accordingly deleted without delay.

(5) We use Google Analytics in order to be able to analyse and regularly improve the use of our website. By means of the statistics obtained we can improve our offering and make it more interesting for you as a user. For the exceptional cases in which personal data are transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 Abs. 1 S. 1 lit. f DS-GVO.

(6) Third-party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: http://www.google.com/analytics/terms/de.html, data protection overview: http://www.google.com/intl/de/analytics/learn/privacy.html, and the privacy policy: http://www.google.de/intl/de/policies/privacy.[(7) This website additionally uses Google Analytics for a cross-device analysis of visitor flows, which is carried out by means of a user ID. You can deactivate the cross-device analysis of your use in your customer account under „Meine Daten“, „persönliche Daten“ (my data, personal data).]