Privacy policy

When visiting the website:

For most of our service offerings, no processing of personal data is required. You can therefore visit our website without telling us who you are.

We only collect and process access data that your Internet browser automatically transmits to us for technical reasons to provide the website. Depending on the access protocol used, the protocol data record contains general information with the following contents:

• Your browser version
• your operating system
• the website you were previously on, if it contains a link to the ALUCA website

If our website uses cookies, the web server also stores this information. This also applies if you access our website with a mobile device, such as the browser of a cell phone. As a rule, this data does not allow any direct inference to your person and is processed to improve our website offering. The legal basis for the processing of your personal data is a legitimate interest, Art. 6 para. 1 letter f DS-GVO. We have a legitimate interest in presenting you with a website optimized for your browser and in enabling communication between our server and your terminal device.

When using the contact form:

Purpose of data processing
Personal data is processed in order for us to handle your enquiry. If your enquiry relates to the conclusion of a contract or is connected with an existing contract, personal data is processed solely for the purpose of fulfilling or entering into a contract. We will store any data you provide (such as email address, title, name, telephone number, company, department, address, uploaded documents, customer number, project number, message, etc.).

Legal basis for data processing
The legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO (legitimate interest). The legitimate interest lies in ensuring that your request is processed promptly by our company.

If the request is directed towards the conclusion of a contract or if the request is related to an already concluded contract, the legal basis for the data processing of the personal data processed in the course of sending a request via our contact form is Art. 6 para. 1 p. 1 lit. b DSGVO (implementation of pre-contractual measures/fulfillment of a contract).

For personal data that you provide to us voluntarily, Art. 6 para. 1 lit. a DSGVO (consent) is the legal basis. You can revoke your consent at any time with effect for the future.

Duration of storage
The above data will be deleted as soon as they are no longer required to achieve the purpose of their processing. For the personal data sent by e-mail or the contact form provided, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been conclusively clarified.

If the legal basis for data processing is consent, the data will also be deleted if you have revoked your consent.

To whom do we transfer your data
To process your contact request, we transmit your request internally at the responsible party to the relevant departments. If you also inform us of the country that concerns you, we can process your inquiry even faster by forwarding your contact request to the distribution partner or group company responsible for this country.

The legal basis for the data transfer to the distribution partner or group company is your consent pursuant to Art. 6 (1) p. 1 lit. a DSGVO, as you indicate your country voluntarily. You can revoke your consent at any time with effect for the future.

If your contact request serves to initiate a contract or concerns contractual issues, the legal basis for the data transfer is Art. 6 para. 1 p. 1 lit. b DSGVO.

When subscribing to our newsletter:

If you are interested in our newsletter, you may voluntarily give your consent to receive it. We use a double opt-in process. This means that you will only receive our newsletter after you have confirmed your subscription by clicking the link in a confirmation email sent to the email address you have provided.
Once you have confirmed your subscription (double opt-in), your email address will be used solely for sending our newsletter to you. We will store any data you provide (such as email address, title, name, telephone number, company, department, address, uploaded documents, customer number, project number, message, etc.).

Purpose of data processing
The sole purpose of processing the personal data is for us to provide our newsletter to your specified e-mail address in order to inform you about news and offers.
Legal basis for data processing The legal basis is Art. 6 para. 1 p. 1 lit. a DSGVO (consent). You can revoke your consent at any time and without giving reasons.

Duration of storage
We store your personal data at the longest until you revoke your consent.

Who we share your data with
We use the services of HubSpot Ireland Limited, 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland, to send our newsletters.

We use HubSpot to send and analyse our newsletters. The data you provide for subscribing to our newsletter is processed on HubSpot’s servers. HubSpot may also transfer personal data to the United States. The transfer is made under the EU–U.S. Data Privacy Framework (DPF), for which HubSpot LLC is appropriately certified. For more information, please refer to HubSpot’s Privacy Policy: https://legal.hubspot.com/privacy-policy

You can apply to our company electronically, e.g. via e-mail. Please note that e-mails sent unencrypted will not be protected against unauthorized access.

Your details will be used for processing your application and deciding whether to establish an employment relationship. The legal basis is § 26 para. 1 in conjunction with. Abs. 8 S.2 BDSG. Furthermore, your personal data may be processed insofar as this should be necessary for the defense of asserted legal claims against us arising from the application process. The legal basis for this is Art. 6 para. 1 p.1 lit. f DSGVO. The stated purposes also constitute the legitimate interest in the processing.

Insofar as an employment relationship arises between you and us, we may, in accordance with Section 26 (1) BDSG, further process the personal data already received from you for the purposes of the employment relationship if this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of the employee representation resulting from a law or a collective agreement, a company or service agreement (collective agreement).

Your application data will not be processed beyond the described use.
Your personal data will be deleted after completion of the application process after 6 months at the latest, provided that no other legitimate interests on our part oppose deletion or you have not given us your consent for longer storage. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

Google Analytics 4:

If you have given your consent, this website will use Google Analytics 4, an analytics service of Google LLC. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’).

Google Analytics uses cookies which enable an analysis of your use of our website. The information about your use of this website that is collected using the cookies is usually transferred to a Google server in the US and stored there.

With Google Analytics 4, IP address anonymisation is activated by default. With IP anonymisation, your IP address is truncated by Google within the member states of the European Union or other states party to the Agreement on the European Economic Area. Only in exceptional cases is your full IP address transferred to a Google server in the US and truncated there. Google states that the IP address transmitted by your browser through Google Analytics is not merged with other Google data.

During your visit to our website, your usage patterns are tracked in the form of ‘events’. Events can include:

• page views;
• first visit to our website;
• session start time;
• pages visited;
• your ‘click path’, i.e. interaction with the website;
• scrolls (whenever a user scrolls to the bottom of the page (90% down));
• clicks on external links;
• internal search queries;
• interaction with videos;
• file downloads;
• advertisements viewed or clicked on;
• language setting.

The following is also collected:

• your approximate location (region);
• the date and time of your visit;
• your IP address (truncated);
• technical information about the browser and devices you use (e.g. language setting, screen resolution);
• your internet service provider;
• the referrer URL (the website or advertisement through which you reached this website).

Google uses this information on behalf of the website’s operator to analyse your use of the website and compile reports about website activities. The reports supplied by Google Analytics are used for analysing the performance of our website and the success of our advertising campaigns.

The recipients of the data might be:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as a processor under Art 28 GDPR),
• Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, United States,
• Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, United States.

The European Commission adopted its adequacy decision for the United States on 10 July 2023. Google LLC is certified under the EU–US Privacy Framework. Because Google’s servers are distributed globally and transfer to a third country (like Singapore, for example) cannot be fully excluded, we have also incorporated EU standard contractual clauses with the provider.

The data that is sent by us and linked to cookies is erased automatically after 30 days. The maximum lifetime of Google Analytics cookies is 2 years. When the storage duration for data has expired, that data is erased automatically once per month.

The legal grounds for this data processing are your consent under Art 6(1)(a) GDPR and section 25(1) first sentence of the German Telecommunications and Telemedia Data Protection Act (TTDSG). You can withdraw your consent at any time with effect for the future by accessing the cookie settings and changing your selection in them. The lawfulness of processing based on your consent until the time of your withdrawal will not be affected by this.

You can also stop cookies being stored from the outset by changing the relevant settings in your browser software. If you configure your browser to decline all cookies, however, there might be limitations on the functions on this website and other websites. Furthermore, you can stop Google from collecting data generated by the cookie in relation to your use of the website (including your IP address) and from processing this data by:

• not giving your consent to the setting of cookies, or
• downloading and installing the browser add-on for deactivating Google Analytics HERE .

You can find more information about the Google Analytics terms of service and data protection at Google at https://marketingplatform.google.com/about/analytics/terms/gb/ and at https://policies.google.com/.

Google Tag Manager

For transparency, we would like to inform you that we use Google Tag Manager. This is a tag management system used to manage JavaScript and HTML tags that are used for tracking and analytics purposes. This service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The responsible entity in the EU/EEA is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Google Tag Manager does not collect any personal data itself, instead it helps us to integrate and manage our tags. Tags are small pieces of code used, among other things, to measure traffic and visitor behaviour, track the effectiveness of online advertising and social channels, set up remarketing and audience targeting, as well as to test and optimise websites. If you have disabled tracking, Google Tag Manager will take this into account.

Recipients of the data are:

• Google Ireland Limited, EU
• Google LLC, USA,
• Alphabet Inc., USA.

Your consent is the legal basis for this data processing in accordance with Article 6(1)(a) of the GDPR. You have the right to withdraw any consent you have given at any time, with effect for the future. The lawfulness of the data processing carried out up to the point of your withdrawal remains unaffected.

You can find more information about Google Tag Manager at: https://www.google.com/intl/de/tagmanager/use-policy.html.

Where data is processed outside the EU/EEA, Google is certified under the Data Privacy Framework (DPF) programme and is listed in the Data Privacy Framework registry of the International Trade Administration (ITA). This means that Google has publicly committed to complying with the DPF obligations, and any data transfer transferred to the United States is deemed safe under the European Commission’s adequacy decision of 10 July 2023.