aalesch.tech

Privacy Policy

Updated: —

This Policy describes what personal data the alesch.tech website collects, how it is used, stored and protected.

1. Data Controller

Information about the data controller will be published shortly.

2. What data we collect

2.1. Data you provide yourself

  • Contact form: name, email and/or phone, company name (optional), message text

2.2. Data collected automatically

  • IP address (anonymized for analytics)
  • Device type, browser, operating system
  • Pages visited, time on site, referral source
  • Cookies (see Cookie Policy)

2.3. Data we do not collect

We do not collect special categories of personal data and do not intend the site for persons under 16.

3. Legal bases for processing

  • Processing requests — Art. 6(1)(b) (pre-contractual measures)
  • Web analytics — Art. 6(1)(a) (consent via cookie banner)
  • Site security and server logs — Art. 6(1)(f) (legitimate interest)

4. Who receives your data

  • Hosting provider — site storage and CDN
  • Email service — notifications about requests
  • Google Ireland Ltd. (when analytics is enabled) — GA4 web analytics

We do not sell or share your data with third parties for marketing purposes without your explicit consent.

5. Data retention periods

  • Request data — 24 months from receipt, unless there has been further communication
  • Analytics data (when GA4 is enabled) — 14 months
  • Server logs — 30 days

6. Your rights (GDPR)

  • Request access to your data (Art. 15 GDPR)
  • Request correction of inaccurate data (Art. 16)
  • Request deletion — 'right to be forgotten' (Art. 17)
  • Restrict processing (Art. 18)
  • Receive data in portable format (Art. 20)
  • Object to processing (Art. 21)
  • Withdraw consent at any time without giving reasons

To exercise any of these rights, write to alesch.tech@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the supervisory authority of your country.

7. Data transfer outside the EU

The services used may process data on servers in the USA. Such transfers are carried out on the basis of mechanisms recognized by the European Commission as providing adequate protection: EU-US Data Privacy Framework and Standard Contractual Clauses.

8. Data security

We apply technical and organizational measures to protect data from unauthorized access, loss or disclosure: connection encryption (HTTPS/TLS), restricted access to form data, regular system updates.

9. Data breach notification

In the event of a personal data breach creating a risk to the rights and freedoms of data subjects, we will notify the competent supervisory authority within 72 hours under Art. 33 GDPR.

10. Changes to this Policy

We may update this Policy. The current version is always available on this page.

11. Contact

For all questions related to personal data processing: alesch.tech@gmail.com