LEGAL NOTICE & PRIVACY POLICY

    Privacy Policy

    allygatr GmbH · Last updated 10 February 2025

    Who We Are

    The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:

    Information according to § 5 TMG:

    allygatr GmbH
    Kolonnenstraße 8
    10827 Berlin

    CEO: Benjamin Visser
    DE285569336
    HRB 152243 B / Charlottenburg

    Contacting the Data Protection Officer

    The controller's data protection officer is:

    DataCo GmbH
    Sandstraße 33
    80335 Munich
    Germany
    +49 89 7400 45840
    www.dataguard.de

    On this page we inform you about the processing of your personal data on this website. How we collect and use your personal data depends on how you interact with us or which services you use. We only collect, use or share your personal data when we have a legitimate purpose and a lawful basis for doing so.

    What Do We Mean by Lawful Basis?

    Consent (Art. 6(1)(a) GDPR) – You have given us your consent to process your personal data for the specific purpose we explained to you. You have the right to withdraw your consent at any time.

    Contract (Art. 6(1)(b) GDPR) – We need to use your data to fulfil a contract you have with us, or to take steps prior to entering into such a contract.

    Legal obligation (Art. 6(1)(c) GDPR) – We need to use your data to comply with the law.

    Vital interests (Art. 6(1)(d) GDPR) – Processing your data is necessary to protect your vital interests or those of another person.

    Public task (Art. 6(1)(e) GDPR) – Processing your data is necessary for the performance of a task carried out in the public interest.

    Legitimate interests (Art. 6(1)(f) GDPR) – Processing your data is necessary to support a legitimate interest pursued by us or another party, provided your own interests do not override it.

    Data Sharing and International Transfers

    As explained in this privacy policy, we use various service providers who help us deliver our services and keep your data secure. When we use these providers, it is necessary to share your personal data with them. We have agreements in place with all our service providers obliging them to protect your data. When your personal data is transferred outside the EU, we ensure an equivalent level of protection — either because the destination country has an "adequate" level of data protection as recognised by the European Commission, or by relying on Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework.

    Your Rights

    If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

    1. Right of access (Art. 15 GDPR)

    You have the right to obtain confirmation as to whether personal data concerning you is being processed, as well as information about the processing purposes, the categories of data, recipients, storage period, your rights, and the origin of the data.

    2. Right to rectification (Art. 16 GDPR)

    If your personal data is inaccurate or incomplete, you have the right to request its immediate correction or completion.

    3. Right to restriction of processing (Art. 18 GDPR)

    Under certain conditions, you may request that we restrict the processing of your personal data.

    4. Right to erasure ("right to be forgotten") (Art. 17 GDPR)

    Under certain conditions, you have the right to request the immediate deletion of your personal data.

    5. Right to data portability (Art. 20 GDPR)

    You have the right to receive your personal data in a structured, commonly used and machine-readable format, or to request its transmission to another controller.

    6. Right to object (Art. 21 GDPR)

    You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.

    7. Right to lodge a complaint with a supervisory authority

    Without prejudice to any other remedy, you have the right to lodge a complaint with a supervisory authority. A list of the competent supervisory authorities in Germany is available at: bfdi.bund.de.

    Provision of the Website and Creation of Log Files

    Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device: browser type and version, operating system, date and time of access, referrer URLs and pages accessed. This data is stored in log files but is not combined with other personal data.

    The legal basis is Art. 6(1)(f) GDPR. Log file data is deleted or anonymised after no more than seven days.

    Use of Cookies

    We use technically necessary cookies as well as — based on your consent — cookies for analytics, marketing and the integration of third-party services. You can adjust your cookie settings at any time via the consent manager or your browser settings.

    The legal basis for non-essential cookies is Section 25(1) TTDSG in conjunction with Art. 6(1)(a) and Art. 7 GDPR. For technically necessary cookies, Section 25(2) No. 2 TTDSG applies.

    Email Contact

    You can contact us via the email address provided on our website. The personal data transmitted with the email will be used exclusively to process the conversation. The legal basis is Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR for contractual matters.

    Social Media Presence

    We operate company profiles on social networks (including Instagram, LinkedIn and TikTok) to communicate with customers, prospects and applicants. We have only limited influence on the data processing carried out by the platform operators. For more information, please refer to the privacy notices of the respective providers:

    Hosting

    The website is hosted on servers operated by our service providers:

    IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany — privacy notice

    Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, USA — AWS GDPR DPA

    Data is collected on the basis of Art. 6(1)(f) GDPR. The website server is located in Germany.

    Content Delivery Network: Amazon CloudFront

    We use Amazon CloudFront, provided by Amazon Web Services Inc., to improve loading times and protect against misuse. Server log files are processed, including IP address, activity, and device and browser information. The legal basis is Art. 6(1)(f) GDPR. More information: aws.amazon.com/privacy.

    Integrated Third-Party Services

    Google Analytics 4

    We use Google Analytics, a web analytics service provided by Google Ireland Limited, to evaluate the use of our website. Processing is carried out on the basis of your consent (Art. 6(1)(a) GDPR). Data is deleted after 2 months. More at policies.google.com/privacy.

    Google Maps

    We use Google Maps to visually display maps. When accessed, your IP address (among other data) is transmitted to Google. Legal basis: consent (Art. 6(1)(a) GDPR).

    Google Web Fonts

    We use Google Web Fonts to display our text in an appealing way. When the page is loaded, data is sent to Google domains. Legal basis: consent.

    Hotjar

    We use Hotjar (Hotjar Ltd., Malta) to analyse user behaviour. Data is stored anonymised on servers in Ireland. Legal basis: consent. Opt-out: hotjar.com/legal/compliance/opt-out.

    Adobe Fonts

    We use Adobe Fonts (Adobe Systems Software Ireland Limited) to display our typography. Technical data is transmitted when the page loads. Legal basis: consent.

    Spotify

    We use Spotify to provide audio content. Spotify processes IP address, device information and usage data, among others. Legal basis: Art. 6(1)(f) GDPR. More: spotify.com/legal/privacy-policy.

    Elfsight

    We use Elfsight (Elfsight LLC, Armenia) to embed interactive widgets. IP address and usage behaviour, among others, are processed. Legal basis: consent (Art. 6(1)(a) GDPR) or legitimate interest (Art. 6(1)(f) GDPR).

    Calendly

    We use Calendly (Calendly LLC, USA) for online appointment booking. Name, email, phone, and appointment and communication data are processed. Legal basis: Art. 6(1)(b) or (f) GDPR. More: calendly.com/privacy.

    Note

    This privacy policy was created with the support of DataGuard.