Privacy Policy

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Altora Technologies UG (haftungsbeschränkt)
Jägerhofstr. 50
40880 Ratingen
Germany

Represented by the Managing Director Marjan Akhoundi.

Email: info@altora-tech.de

We take the protection of your personal data seriously. We only process personal data to the extent necessary to provide our website, to handle inquiries, to ensure the security of our IT systems, or to comply with legal or contractual obligations.

The processing of personal data is based in particular on:

• Art. 6(1)(b) GDPR, where processing is necessary for the performance of a contract or for pre-contractual measures;
• Art. 6(1)(f) GDPR, where processing is necessary to safeguard our legitimate interests and no overriding interests or fundamental rights of the data subject prevail;
• Art. 6(1)(c) GDPR, where processing is necessary to comply with a legal obligation;
• Art. 6(1)(a) GDPR, where consent has been obtained for a specific processing operation.

When you access our website, technically necessary information is processed that your browser automatically transmits to our web server. This may include in particular:

• IP address,
• date and time of access,
• the page or URL requested,
• referrer URL,
• browser type and version,
• operating system used,
• technical information about the connection used.

This data is processed to technically provide the website, to ensure stability and security, to detect and prevent abuse, and for error analysis and technical administration.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable provision of our website.

Server log data is generally deleted after 30 days at the latest, unless longer storage is required to investigate a specific security incident, to assert, exercise or defend legal claims, or due to legal obligations.

Our website is operated with an external hosting provider. As part of the hosting, the technical data required to operate the website is processed. This may include in particular IP addresses, access times, pages accessed, and technical connection data.

This processing serves the technical provision and protection of our website and ensures stable and secure operation. The legal basis is Art. 6(1)(f) GDPR.

Where the hosting provider processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.

If you contact us by email, we process the personal data you provide, in particular your name (where provided), your email address, the content of your message, and any other information you voluntarily provide.

This processing serves to handle your inquiry and to communicate with you. The legal basis is Art. 6(1)(f) GDPR for general inquiries or Art. 6(1)(b) GDPR where your inquiry is aimed at initiating or performing a contract.

The data is deleted once the inquiry has been conclusively handled and no statutory retention obligations or other legitimate grounds for further storage exist. Statutory retention obligations remain unaffected.

Our website offers the option to contact us via a contact form. When using the contact form, the following data in particular may be processed:

• first name,
• last name,
• company,
• email address,
• phone number,
• subject of your inquiry,
• content of the message,
• technical data generated in connection with the transmission.

Providing the data is required to the extent it is necessary to handle your inquiry; further details may be provided voluntarily. Your form message is delivered by email to a mailbox of Altora Technologies for further processing; delivery takes place via our email/hosting service provider (see section 11).

This processing serves to handle your inquiry and, where applicable, to answer follow-up questions. The legal basis is Art. 6(1)(f) GDPR for general inquiries or Art. 6(1)(b) GDPR where the inquiry is aimed at concluding or performing a contract.

The data is deleted once the inquiry has been conclusively handled and no statutory retention obligations or other legitimate grounds for further storage exist.

To protect our contact form against automated abuse and spam, we use Cloudflare Turnstile, a service provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA.

Turnstile serves to distinguish between human visitors and automated requests or bots. For this purpose, when pages containing the contact form are loaded, a JavaScript is loaded from a Cloudflare server (challenges.cloudflare.com) and technical security checks are performed in the visitor's browser. This loading transmits your IP address to Cloudflare.

According to Cloudflare, technical signals such as the client IP address, TLS fingerprint, user-agent header, and the sitekey used for Turnstile and its origin may be processed. Cloudflare states that these signals are used to detect and mitigate bot traffic and are not intended to identify, profile, or target individuals. According to Cloudflare, Turnstile does not access the content of form fields or other content entered by the user on the page.

This processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting our contact form against spam, automated abuse, and attacks, and in ensuring the security of our website.

Transfer to the USA

Cloudflare is a company based in the USA. Using Cloudflare services may therefore involve processing of personal data in the USA.

Cloudflare states that, for transfers of personal data from the European Economic Area to the USA, it relies on its certification under the EU-U.S. Data Privacy Framework (EU-U.S. DPF). Where necessary, Cloudflare additionally uses the Standard Contractual Clauses approved by the European Commission, including supplementary measures.

Further information can be found in the Cloudflare privacy policy and in the Cloudflare Turnstile privacy notice.

We currently do not use any analytics or marketing cookies on this website and no services for advertising or retargeting purposes. In particular, we do not use services such as Google Analytics, Meta Pixel, or comparable analytics or marketing tracking services.

Technically necessary processing that is required for the security and functionality of the website may be exempt from this. This includes:

• a technically necessary cookie to store your language selection ("NEXT_LOCALE"), which is set when you switch the language;
• an entry in your browser's local storage that we use to remember that you have acknowledged our cookie/privacy notice, so that it does not appear again on every page view;
• the use of Cloudflare Turnstile to protect the contact form, as described in section 7.

This processing is strictly necessary for the operation of the website; the legal basis is Section 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR.

Should analytics, marketing, advertising, or comparable services be used in the future, we will update this privacy policy accordingly and – where legally required – obtain consent before processing.

This website uses fonts (including "Space Grotesk", "DM Sans", and "Montserrat") that are integrated via the font feature of our web framework. The font files are downloaded when the website is built and are served exclusively from our own server. As a result, no connection to servers of Google or other third parties is established when the website is accessed, and no personal data is transmitted to third parties for this purpose.

In the footer of our website, we link to our profiles on LinkedIn, Instagram, and Facebook. These are simple hyperlinks only; no social media plugins, tracking pixels, or buttons are embedded that would transfer data to the respective providers as soon as our pages load.

Only when you actively click one of these links are you redirected to the respective provider's pages, where that provider's privacy policy applies. We have no influence over the data processing that takes place there.

As part of the processing operations described above, personal data may be transferred to the following categories of recipients:

• hosting and IT service providers,
• email or mailbox service providers for delivering contact inquiries,
• providers of security and spam protection services (Cloudflare),
• other technical service providers,
• public bodies authorised by law or by the authorities, where applicable.

Personal data is only disclosed where there is a legal basis for doing so or where it is necessary to provide the respective service. Where processors are engaged, this is done on the basis of agreements pursuant to Art. 28 GDPR.

Personal data is generally only transferred to countries outside the European Economic Area where the legal requirements of Art. 44 et seq. GDPR are met.

Where a transfer to the USA takes place as part of the use of Cloudflare, reliance is placed on the appropriate safeguards indicated by Cloudflare, in particular the EU-U.S. Data Privacy Framework and, where applicable, Standard Contractual Clauses.

We generally store personal data only for as long as necessary for the respective purpose. In addition, personal data may be stored where statutory retention obligations exist, where the data is needed to assert, exercise or defend legal claims, or where another legally permissible ground for longer storage applies.

Once the respective storage purpose no longer applies, the data is deleted unless a legal obligation or other legal basis requires further storage.

Automated decision-making, including profiling, within the meaning of Art. 22 GDPR does not take place.

Subject to the statutory requirements, you have the following rights:

Right of access

Pursuant to Art. 15 GDPR, you have the right to request information about whether and which personal data we process about you.

Right to rectification

Pursuant to Art. 16 GDPR, you have the right to request the rectification of inaccurate personal data or the completion of incomplete personal data.

Right to erasure

Pursuant to Art. 17 GDPR, you have the right, under the statutory conditions, to request the erasure of your personal data.

Right to restriction of processing

Pursuant to Art. 18 GDPR, you have the right, under the statutory conditions, to request the restriction of the processing of your personal data.

Right to data portability

Pursuant to Art. 20 GDPR, you have the right, under the statutory conditions, to receive the personal data concerning you in a structured, commonly used, and machine-readable format, or to request its transmission to another controller.

Right to object

Pursuant to Art. 21 GDPR, you have the right to object, on grounds relating to your particular situation, to processing based on Art. 6(1)(e) or (f) GDPR. Where personal data is processed for direct marketing purposes, you have the right to object at any time to processing for such marketing purposes.

Right to withdraw consent

Where processing is based on your consent pursuant to Art. 6(1)(a) GDPR, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out on the basis of the consent up to the withdrawal remains unaffected.

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes data protection law.

For companies based in North Rhine-Westphalia, the following authority is generally responsible:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Website: www.ldi.nrw.de

We use appropriate technical and organisational security measures to protect personal data against accidental or intentional manipulation, loss, destruction, or unauthorised access by third parties. Data is transmitted via an encrypted SSL/TLS connection. The security measures are regularly reviewed and adapted in line with technological developments and organisational possibilities.

We reserve the right to amend this privacy policy where legal requirements, our website, the technical services we use, or our data processing operations change. The current version published on this website applies in each case.