Legal

Privacy Policy

1. Data Controller

Alune GmbH

Schillbachstr. 2

07743 Jena

Germany

Contact: Contact form

2. Collection and Processing of Personal Data

We collect personal data only to the extent necessary to provide a functional website and our content and services. The collection and use of personal data from our users is generally carried out only with the user's consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons and the processing of data is permitted by law.

3. Contact Form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact information you provide, will be stored by us for the purpose of processing your request and in case of follow-up questions. We do not share this data without your consent.

The legal basis for processing this data is Art. 6(1)(b) GDPR (processing for the performance of a contract or to take pre-contractual steps). The data you enter in the contact form will remain with us until you request its deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies (e.g. after your enquiry has been fully processed).

4. Google Analytics

This website may use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses so-called "cookies" — text files that are stored on your device and enable an analysis of your use of the website.

The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the United States. As part of IP anonymisation on this website, your IP address will be truncated by Google beforehand within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area.

The transfer of data to the United States is based on the EU Commission's Standard Contractual Clauses. The legal basis is Art. 6(1)(a) GDPR (consent).

You can prevent Google Analytics from collecting your data by clicking the following link and installing the browser plugin offered there: tools.google.com/dlpage/gaoptout. For more information on how Google handles user data in Google Analytics, please refer to Google's privacy policy: policies.google.com/privacy.

5. Google Tag Manager

This website may use Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a tool that allows marketing and analytics tags to be managed through a single interface. The tool itself (which implements the tags) is a cookieless domain and does not collect personal data. It does, however, trigger other tags which may in turn collect data.

If you have opted out at the domain or cookie level, this opt-out will be respected for all tracking tags implemented via Google Tag Manager. For more information about Google Tag Manager, please visit: policies.google.com.

6. Meta Pixel (Facebook)

This website may use the Meta Pixel provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The Meta Pixel enables Meta to identify visitors to our website as a target audience for the display of advertisements ("Facebook Ads"). Accordingly, we use the Facebook Pixel to show our Facebook Ads only to those Facebook users who have also shown an interest in our website (remarketing).

When you visit our website, the Facebook Pixel may place a cookie directly on your device on behalf of Facebook. If you subsequently log in to Facebook, or visit Facebook while logged in, your visit to our website will be noted in your profile. The data collected is anonymous to us and does not allow any conclusions to be drawn about the identity of individual users. However, the data is stored and processed by Facebook, enabling a connection to the respective user profile.

The legal basis for using the Meta Pixel is Art. 6(1)(a) GDPR (consent). For more information on how Meta processes data, please refer to Meta's privacy policy: facebook.com/privacy/policy. You can object to data collection by the Facebook Pixel at: facebook.com/settings?tab=ads.

7. Cookies

This website may use cookies. Cookies are small text files stored on your device and retrieved by your browser. Cookies do not harm your device and do not contain viruses.

We use cookies to make our website more user-friendly. Some cookies remain stored on your device until you delete them. They allow us to recognise your browser on your next visit. If you do not wish this, you can configure your browser to inform you when cookies are set and to allow them only on a case-by-case basis. Disabling cookies may limit the functionality of this website.

8. Your Rights as a Data Subject

As a data subject, you have the following rights under the GDPR:

  • Right of access (Art. 15 GDPR): You have the right to request confirmation as to whether personal data concerning you is being processed.
  • Right to rectification (Art. 16 GDPR): You have the right to request the immediate correction of inaccurate personal data concerning you.
  • Right to erasure (Art. 17 GDPR): You have the right to request the immediate deletion of personal data concerning you.
  • Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing of personal data concerning you.
  • Right to object (Art. 21 GDPR): You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.
  • Right to data portability (Art. 20 GDPR): You have the right to receive personal data concerning you in a structured, commonly used, and machine-readable format.
  • Right to withdraw consent: Where processing is based on consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out prior to the withdrawal.

To exercise your rights, please use the contact form.

9. Right to Lodge a Complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

The competent supervisory authority for Alune GmbH is:

Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit (TLfDI)

Häßlerstraße 8

99096 Erfurt

Tel.: +49 361 57 311 29 00

Fax: +49 361 57 311 29 04

Email: poststelle@datenschutz.thueringen.de

Web: www.tlfdi.de