Data protection has a particularly high priority for our company. In the following, we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour. We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security procedures are regularly reviewed and adapted to technological progress
Who is responsible for data processing?
This data protection information applies to data processing by:
Managing Directors: Frédéric Straß, Christian Breuer
Who can I contact if I have questions about data protection?
You can reach our company data protection officer at:
What is personal data?
Any information relating to an identified or identifiable natural person. Personal data is information about an identified or identifiable person and therefore all information that makes a person identifiable. Statistical data that cannot be linked to your person is not included here.
What personal data do we process, and what is the nature and purpose of its use?
When visiting the website:
Most of our services do not require the processing of personal data. You can therefore visit our website without telling us who you are.
We only collect and process access data that your internet browser automatically transmits to us for technical reasons in order to provide the website. Depending on the access protocol used, the log data record contains general information with the following contents:
-Your browser version
-Your operating system
-the website you were previously on if it contains a link to the ALUCA website;
As a rule, this data does not allow any direct conclusions to be drawn about your person and is processed to improve our website offering. The legal basis for the processing of your personal data is a legitimate interest, Art. 6 para. 1 sentence 1 lit. f) GDPR. We have a legitimate interest in presenting you with a website optimised for your browser and in enabling communication between our server and your terminal device.
When using the contact form:
Purpose of the data processing
The processing of the personal data serves us to process the contact enquiry. If your request is for the conclusion of a contract or in connection with an already concluded contract, then the processing of the personal data serves us exclusively for the fulfilment or initiation of the contract.
The following data is collected:
-First name, last name
-Phone number (optional)
Legal basis for data processing
The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interest). The legitimate interest lies in ensuring that your requests are processed promptly by our company.
If the enquiry is directed towards the conclusion of a contract or if the enquiry is related to an already concluded contract, the legal basis for the data processing of the personal data processed in the course of sending an enquiry via our contact form is Art. 6 para. 1 sentence 1 lit. b GDPR (implementation of pre-contractual measures/fulfilment of a contract).
For personal data that you voluntarily provide to us, the legal basis is Art. 6 para. 1 sentence 1 lit. a)GDPR (consent). You can revoke your consent at any time with effect for the future.
Duration of storage
The above-mentioned data will be deleted as soon as they are no longer required to achieve the purpose of their processing. For personal data sent by e-mail or the contact form provided, this is the case when the respective conversation with the user has ended.
The conversation is terminated when it can be inferred from the circumstances that the facts of the matter have been conclusively clarified. If the legal basis for the data processing is consent, the data will also be deleted if you have revoked your consent.
To whom do we transfer your data
In order to process your contact request, we will forward your request internally to the responsible department. If you also inform us of your country, we can process your enquiry even more quickly by forwarding your contact enquiry to the distribution partner or group company responsible for that country.
The legal basis for the transfer of data to the distribution partners or group company is your consent in accordance with Art. 6 Para. 1 sentence 1 lit. a GDPR, as you indicate your country voluntarily. You can revoke your consent at any time with effect for the future.
If your contact request serves to initiate a contract or concerns contractual issues, the legal basis for the data transfer is Art. 6 para. 1 sentence 1 lit. b GDPR.
When ordering a newsletter:
If you are interested in our newsletters, you have the option to voluntarily give your consent to receive newsletters. We use the double opt-in procedure. This means that we will only send you the newsletter if you confirm that you would like to subscribe to our newsletter after a confirmation link has been sent to the e-mail address you provided, using a link contained in this e-mail.
After sending a confirmation link by e-mail (double opt-in) to the e-mail address you have provided, we will use your e-mail address exclusively for sending our newsletter.
The following data is collected by us in the process:
-First name and surname
Purpose of the data processing
The processing of personal data is solely for the purpose of providing our newsletter to your specified e-mail address in order to inform you about news and offers.
Legal basis for data processing
The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR (consent). You can revoke your consent at any time and without giving reasons.
Duration of storage
We store your personal data at the longest until you revoke your consent.
To whom do we transfer your data
The newsletter dispatch is carried out by the service provider: Newsletter2go.
Sendinblue GmbH (formerly Newsletter2Go)
This website uses Sendinblue to send newsletters. The provider is Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany. Newsletter2Go is a service with which, among other things, the sending of newsletters can be organised and analysed. The data you enter for the purpose of receiving the newsletter is stored on Sendinblue’s servers in Germany.
If you do not want Sendinblue to analyse your data, you must unsubscribe from the newsletter. You can revoke your consent to the storage of the data, the email address and their use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter.
Data analysis by Sendinblue
With the help of Newsletter2Go, it is possible for us to analyse our newsletter campaigns. For example, we can see whether a newsletter message was opened and which links, if any, were clicked. In this way, we can determine, among other things, which links were clicked on particularly often.
In addition, we can see whether certain previously defined actions have been carried out after opening/clicking (conversion rate). For example, we can see whether you have made a purchase after clicking on the newsletter.
Sendinblue also allows us to subdivide (“cluster”) newsletter recipients according to different categories. In this way, the newsletters can be better adapted to the respective target groups.
For detailed information on the functions of Sendinblue, please see the following link: https://de.sendinblue.com/informationen-newsletter-empfaenger/?rtype=n2go
We have concluded a order processing agreement with this service provider to protect your data.
You can apply to our company electronically, e.g. via e-mail. Please note that unencrypted e-mails will not be transmitted without access protection.
Your details will be used for processing your application and deciding on the establishment of an employment relationship. The legal basis is section 26 para. 1 in conjunction with. para. 8 sentence 2 BDSG. Furthermore, your personal data may be processed if this is necessary to defend legal claims asserted against us from the application process. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f GDPR. The legitimate interest in the processing also lies in the stated purposes.
Insofar as an employment relationship arises between you and us, we may further process the personal data already received from you for the purposes of the employment relationship in accordance with section 2 para. 1 of the BDSG if this is necessary for the performance or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of the employee representation resulting from a law or a collective agreement, a works agreement or a service agreement (collective agreement).
Your application data will not be processed beyond the described use.
Your personal data will be deleted after completion of the application procedure after 6 months at the latest, provided that no other legitimate interests on our part oppose deletion or you have not given us consent for longer storage. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).
Is data transferred to third parties?
As a matter of principle, your personal data will not be transferred to third parties unless we are legally obliged to do so, or the transfer of data is necessary for the performance of the contractual relationship, or you have previously expressly consented to the transfer of your data.
External service providers and partner companies, such as online payment providers or a shipping company commissioned with the delivery, only receive your data insofar as this is necessary for the processing of your order / your order. In these cases, however, the scope of the transmitted data is limited to the necessary minimum. Insofar as our service providers process your personal data on our behalf, we ensure within the scope of order processing pursuant to Art. 28 GDPR that they comply with the provisions of the data protection laws in the same manner.
Please also note the data protection information of the respective providers. The respective service provider is responsible for the content of third-party services, whereby we check the services for compliance with the legal requirements within the scope of reasonableness.
We make a point of processing your data within the EU / EEA. However, we may use service providers who process data outside the EU / EEA. If data is processed outside the EU / EEA and there is no adequacy decision by the EU Commission, we have concluded the standard data protection clauses adopted by the EU Commission in accordance with Art. 46 of the GDPR with the service provider in order to establish a secure level of data protection, which allow the transfer of personal data to a third country in individual cases.
What are cookies
Cookies are small text files that enable the web server to recognise a website visitor and which store information about the visited websites in the web browser. Cookies can be divided into “session cookies” and “persistent cookies”. Session cookies are all cookies that expire when a session is closed, i.e. they are only stored for the duration of the session. Persistent cookies, on the other hand, store the collected information for a longer period of time. Cookies can be set by website providers, but also by third parties.
Some cookies are required to provide core functionality. This website does not function properly without these cookies and they are enabled by default.
Analytical cookies help us improve our website by collecting and reporting information about your usage.
Marketing cookies are used to track visitors to websites so that publishers can serve relevant ads.
You can change or revoke your settings for the setting of cookies at any time on our website.
Cookie settings in your browser
We would also like to point out that, irrespective of the question of granting/not granting consent, you can prevent cookies from being stored altogether by making the setting in your browser that cookies are only accepted if you agree to this.
Cookie consent with Cookie Notice
Our website uses Cookie Notice for GDPR to obtain your consent to store certain cookies on your terminal device and to document this in a data protection compliant manner.
Cookie Notice is installed locally on our servers, so no connection is made to third-party servers. Cookie Notice & Compliance for GDPR stores a cookie in your browser in order to be able to allocate the consents granted to you or their revocation. The cookie is deleted after the end of the session.
For more information, please visit https://en-gb.wordpress.org/plugins/cookie-notice/
Which cookies do we use?
|Cookie name||Provider||Purpose of processing||Lagal basis of processing||Storage period|
|pll_language||Polylang||Polylang uses a cookie to remember the language selected by the user when he comes back to visit again the website.||Consent||Until the end of Session|
|cookie_notice_accepted||Cookie Notice||Cookie Notice is storing it’s own cookie named cookie_notice_accepted once users makes a decision – Accepts or Refuses the cookies.||Legitimate interest||Until the end of Session|
|_ga*||_ga’ is the main cookie used by Google Analytics. _ga’ enables a service to distinguish one user from another It’s used by any site that implements Google Analytics, including Google services.||Consent||2 Years|
Due to IP anonymisation, your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
During your visit to the website, your user behaviour is recorded in the form of “events”. Events can be:
- Page views
- First visit to the website
- Start of the session
- Clicks on external links
- Internal queries
It also records:
- Your approximate location (region)
- Your IP address (in shortened form)
- Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
- The referrer URL (via which website/advertising medium you came to this website)
Purpose of the processing
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, and compiling reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website and the success of our marketing campaigns.
Recipients of the data are/could be
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor pursuant to Art. 28 GDPR)
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
It cannot be ruled out that US authorities will access the data stored by Google.
Third country transfer
Insofar as data is processed outside the EU/EEA and there is no level of data protection corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. The USA is currently considered a third country from a data protection perspective. You do not have the same rights there as within the EU/EEA. You may not have any legal remedies against access by authorities.
The data sent by us and linked to cookies are automatically deleted 24 months. The deletion of data whose retention period has been reached takes place automatically once a month.
The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.
You can revoke your consent at any time with effect for the future by clicking the “Revoke cookie consent” button below on the ALUCA website and changing your selection there. The lawfulness of the processing carried out on the basis of the consent up to the revocation remains unaffected by this.
Alternatively, you can prevent the storage of cookies from the outset by configuring your browser software accordingly. However, if you configure your browser to reject all cookies, functionalities on this and other websites may be restricted.
Google Tag Manager
For reasons of transparency, we would like to point out that we use the Google Tag Manager of the provider Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland. The Google Tag Manager itself does not collect any personal data. The Google Tag Manager makes it easier for us to integrate and manage our tags. Tags are small pieces of code that are used to, among other things, measure traffic and visitor behaviour, track the impact of online advertising and social channels, set up remarketing and targeting, and test and optimise websites. We use the Tag Manager for the Google Analytics service. If you have deactivated it, this deactivation will be taken into account by the Google Tag Manager.
For more information on the Google Tag Manager, see: https://www.google.com/intl/de/tagmanager/use-policy.html
Google Maps Plug-In
This site uses the mapping service Google Maps. Google Maps is a mapping service provided by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
In order to use the functions of Google Maps, information, including the IP address as well as the address, which is entered within the scope of the route function, can be transmitted to the provider’s servers. This information is usually transferred to a Google server in the USA and stored there. When you visit a website that contains Google Maps, your browser establishes a direct connection with Google’s servers, whereby the map content is sent to your browser and integrated by it. The provider of this site has no influence on this data transmission. According to current knowledge, this includes the following data:
- Date and time of the visit to the website in question,
- Internet address or URL of the accessed website,
- IP address, (start) address entered as part of route planning
Where data is processed outside the European Economic Area/EU, where there is no level of data protection equivalent to the European standard, Google states that it uses standard contractual clauses.
The collection and storage of data only takes place after explicit consent according to Art. 6 para. 1 sentence 1 lit. a GDPR. This consent can be revoked at any time with effect for the future.
What rights do you have?
Right to information
In accordance with Art. 15 of the GDPR, you are entitled to request confirmation from the controller at any time as to whether personal data relating to you is being processed. To do so, you can use the form available under this link.
Right of rectification
Pursuant to Art. 16 of the GDPR, you have the right to request the controller to correct any inaccurate personal data relating to you without undue delay. This right also includes, depending on the purpose, the completion of incomplete personal data.
If the personal data you have provided above is no longer necessary for the purpose of processing, the consent you have given for processing is revoked and there is no other reason for further processing, you may exercise your right to erasure in accordance with Art. 17 GDPR and if there are no overriding legitimate grounds for further processing, you may request that your data be erased.
Restriction of processing
If the accuracy of the personal data processed by you is contested, the processing is unlawful, and in the case of other grounds referred to in Article 18 of the GDPR, you may request the controller to restrict the processing.
Pursuant to Art. 20 GDPR, you may request that the controller transmit the data you have provided to it in a structured, common and machine-readable format to you or to a third party.
Right of objection
Pursuant to Art. 21 para. 1 GDPR, you have the right to object at any time on grounds relating to your particular situation to the processing of personal data relating to you which is carried out on the basis of Art. 6 para. 1 sentence. 1 lit. e (public interest) or f (legitimate interest); this also applies to profiling based on these provisions. We will no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing, in accordance with Article 21 para.2 of the GDPR; this also applies to profiling, insofar as it is associated with such direct marketing.
You can lodge your objection by post at the address to ALUCA GmbH, Westring 1, 74538 Rosengarten or at firstname.lastname@example.org
Revocation of consent
You can revoke your consent at any time, without giving reasons, in writing by post to ALUCA GmbH, Westring 1, 74538 Rosengarten or at email@example.com To do so, you can use the form available under this link.
The lawfulness of the processing of your personal data processed on the basis of the consent up to the time of the revocation is not affected by the revocation.
Right of appeal
If you believe that the processing of personal data concerning you violates legal provisions, you have the right to lodge a complaint with a supervisory authority.
Due to further developments of our website and offers on it, as well as changed legal regulations and/or requirements, it may become necessary to change this data protection declaration. You can find the current data protection declaration here.