Privacy Policy

Protecting your personal data is important to us. In accordance with Art. 13 and 14 of the General Data Protection Regulation (GDPR), we explain below which data we process when you use our website alltena.com, for which purposes and on which legal basis, and which rights you have.

Controller

The controller within the meaning of the GDPR is:

Alltena GmbH Schwalbenweg 16 D-71404 Korb, Germany

Phone: +49 7151 90384-0 E-Mail: datenschutz@alltena.com

Represented by the managing director Christoph Friedrich.

We have not appointed a data protection officer, as there is no legal obligation to do so. For any data protection questions you can reach us at any time at datenschutz@alltena.com.

Scope and updates

This privacy policy applies to the use of the website alltena.com. Your personal data is processed in accordance with the GDPR, the German Federal Data Protection Act (BDSG) and the German Telecommunications and Digital Services Data Protection Act (TDDDG). As our website evolves or due to new legal or technical requirements, this privacy policy may need to be amended. The version available at the time of your visit applies.

A separate Services Privacy Policy applies to the use of our products (Allegra).

Data processing when visiting our website (server log files)

Each time our website is accessed, our server automatically and temporarily collects and stores information transmitted by your browser:

Message about successful retrieval
Amount of data transferred
File, date and time of the request
Name of the website accessed
Operating system used by the requesting computer
Browser type and version
The website from which you are visiting us (referrer URL)
File request of the client
IP address of the requesting computer

This processing is technically necessary to deliver the website, ensure its stability and security, and detect malfunctions. The legal basis is our legitimate interest in a secure and functional web presence under Art. 6(1)(f) GDPR. No personal evaluation of the server log files takes place, and the data is not merged with other data sources. The data is deleted after a short period, unless it is exceptionally required for longer to investigate a specific security incident.

Contacting us via the contact form

You can use our contact form to send us an inquiry. In order for us to contact you, it is necessary to provide your name and e-mail address. You may provide further information on a voluntary basis. Your data is transmitted to us by e-mail via our provider. The legal basis is Art. 6(1)(b) GDPR where your inquiry relates to the conclusion or performance of a contract, and otherwise our legitimate interest in responding to your inquiry under Art. 6(1)(f) GDPR. The data is deleted one year after your inquiry has been handled, unless statutory retention obligations apply. We do not use the data for any other purpose or pass it on to third parties.

Support requests

Support requests that you send by e-mail to our support address are registered in our support system. We store your e-mail address and the content of your message. The legal basis is Art. 6(1)(b) GDPR (performance of contractual obligations) or Art. 6(1)(f) GDPR (legitimate interest in handling your request). The data is deleted after five years. We do not use the data for any purpose other than support or pass it on to third parties.

License key

To use our products you may need a license key. To obtain one, you provide us with:

The IP address of the computer for which the product is to be licensed
Your e-mail address
Your name

The legal basis is Art. 6(1)(b) GDPR (performance of the license agreement). This data is stored for up to five years after the termination of the contract in order to comply with tax and commercial retention obligations (Art. 6(1)(c) GDPR).

We use cookies and similar technologies on alltena.com. Cookies are small text files stored on your device. We distinguish between technically necessary services and services that are only activated after your consent.

On your first visit you are shown a cookie banner where you make your choice. You can accept all services, reject all, or adjust your settings per category. We use the following categories:

Necessary: required for the operation of the website, always active.
Analytics & statistics: reach measurement (Google Analytics 4).
Marketing: measuring the effectiveness of advertising (Google Ads).
Functional: enhanced functionality and convenience settings.

Services in the analytics, marketing and functional categories are only executed after you have given your consent (Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG). Necessary cookies, including storing your cookie choice, are based on Section 25(2) TDDDG and on our legitimate interest under Art. 6(1)(f) GDPR.

You can change or withdraw your choice at any time with effect for the future. To do so, click “Change Privacy Settings” in the footer of the website to reopen the selection dialog.

Cookie	Provider	Purpose	Duration
cc_cookie	Alltena GmbH	Stores your cookie consent	1 year
_ga, ga*	Google	Distinguishing users (Google Analytics 4)	up to 2 years
_gid	Google	Distinguishing users (Google Analytics 4)	24 hours
_gcl_au	Google	Conversion measurement (Google Ads)	up to 90 days

We use Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to centrally manage the services (tags) used on our website. Google Tag Manager itself does not set cookies but controls the triggering of the downstream services.

We use Google Consent Mode v2 in advanced mode. This means: Google Tag Manager is loaded on every page. As long as you have not given consent, or have rejected consent, only cookieless signals are transmitted to Google. These signals may contain technical information such as your truncated IP address, but serve only an aggregated, anonymous measurement and do not result in cookies being stored on your device. This cookieless transmission to Google also takes place if you reject. The legal basis for this is our legitimate interest in a basic, data-minimizing reach measurement under Art. 6(1)(f) GDPR.

Only after your consent are cookies set and the full data processing by Google Analytics 4 and Google Ads activated (Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG).

Google Analytics 4

After your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited. Google Analytics helps us understand how our website is used so that we can improve it. Usage data such as pages viewed, time spent and approximate region is processed. Google Analytics 4 truncates IP addresses by design, so that no full IP address is stored.

The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw it at any time via “Change Privacy Settings” in the footer. For more information, see Google’s privacy policy.

Google Ads and conversion tracking

After your consent, we use Google Ads, provided by Google Ireland Limited, to measure the success of our advertising campaigns (conversion tracking). For this purpose, the cookie _gcl_au, among others, is set. This allows us to understand whether users perform a desired action on our website after clicking on an ad.

The legal basis is your consent under Art. 6(1)(a) GDPR, which you can withdraw at any time via “Change Privacy Settings”.

Transfer to third countries (USA)

When using Google services, personal data may be transmitted to and processed by Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, so that the transfer is covered by an adequacy decision of the European Commission under Art. 45 GDPR. In addition, Google has concluded Standard Contractual Clauses under Art. 46 GDPR. We point out that, despite these safeguards, a residual risk of access by US authorities cannot be entirely excluded when transferring data to the USA (Art. 49 GDPR). Your consent also extends to this transfer.

YouTube

On individual pages we embed videos. We use a privacy-friendly solution in which the YouTube player is only loaded after you click the preview image. Before this click, no cookies are set by YouTube. As soon as you start the video, a connection to YouTube (Google Ireland Limited) is established in privacy-enhanced mode and data may be transmitted to Google. For more information, see Google’s privacy policy.

Disclosure to third parties and processors

We do not pass on your personal data to third parties unless:

you have expressly consented,
the disclosure is necessary to perform a contract or to provide a service you have requested,
we use carefully selected service providers as processors (for example for hosting or the Google services mentioned), who act on our instructions and on the basis of a contract under Art. 28 GDPR,
we are legally obliged to disclose data to authorities entitled to information.

Retention periods and standard deletion deadlines

We process and store personal data only for as long as is necessary to achieve the purpose of the processing or as required by statutory retention obligations. After these periods have expired, or when the purpose no longer applies, the data is routinely deleted. Where processing is based on your consent, we delete the data after your withdrawal, unless another legal basis applies.

Your rights

You have the right at any time to:

Access the data stored about you (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure of your data (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Object to processing based on a legitimate interest (Art. 21 GDPR)
Withdraw a given consent with effect for the future (Art. 7(3) GDPR)

To exercise these rights, an informal message to datenschutz@alltena.com is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg Lautenschlagerstraße 20 70173 Stuttgart, Germany

You can withdraw any consent given at any time with effect for the future. You adjust your cookie consent via the “Change Privacy Settings” button in the footer of the website. Other data protection consents can be withdrawn informally via the contact details below. Withdrawal does not affect the lawfulness of processing carried out up to that point.