Privacy information for alleon.eu

1 Controller

The controller is ALLEON UG (haftungsbeschränkt), Am Josenberg 8, 78355 Hohenfels, Deutschland, represented by its Managing Director Christian Akulayi Kanyiki. You can contact us by email at hello@alleon.eu.

2 Hosting and technical access data

We use the “Hosting für WordPress Basis” product provided by united-domains GmbH, Gautinger Straße 10, 82319 Starnberg, Deutschland. According to united-domains, the WordPress hosting is operated by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Deutschland; the provider states that the servers are located in Germany.

When you access the website, the hosting providers process the technical data required to handle the request, in particular your IP address and the URL requested. This serves to provide and secure the website. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website.

The retention of technical access data is limited according to the respective purpose of processing. The determining factor is how long the data is needed to provide and securely operate the website and to detect and remedy technical faults or misuse. If a specific security incident needs to be investigated, the necessary data may be retained until the investigation and any necessary legal proceedings have concluded.

For more information, see the united-domains privacy information on WordPress hosting.

3 Contact by email

If you contact us by email, we process your email address, your name where provided, and the information in your message in order to handle your enquiry. For enquiries concerning a contract or steps prior to entering into a contract, the legal basis is Article 6(1)(b) GDPR. We handle other enquiries on the basis of Article 6(1)(f) GDPR; our legitimate interest is responding to your enquiry.

Providing this information is voluntary. Without suitable contact details or the information necessary to address your concern, we may not be able to answer your enquiry. We use the email service of united-domains GmbH for our mailbox hello@alleon.eu. When emails are sent and received, united-domains and the email service providers involved on the sender’s side process the address and message information required for that purpose. The processing we commission from united-domains takes place within the European Union under the agreed data processing arrangement.

For general enquiries, we regularly check whether the matter and any necessary follow-up communication have been concluded. If there is no further reason to retain the data, we delete the associated personal data. Statutory retention obligations and any retention necessary for the establishment, exercise or defence of specific legal claims remain unaffected. Deletion does not take place automatically after a fixed period. For contract-related enquiries, retention is determined by the necessary steps for entering into or performing the contract and the applicable statutory retention obligations. Where a statutory retention obligation applies, the legal basis is Article 6(1)(c) GDPR. Retention necessary for legal claims is based on Article 6(1)(f) GDPR; our legitimate interest is the establishment, exercise or defence of those claims.

4 Links to other services

The website contains links to the ALLEON online shop and social media profiles. If you follow one of these links, you access the respective other service; your browser transmits the data necessary for that request to its provider. The privacy information of the respective service applies to the processing carried out there.

5 Your data protection rights

Subject to the applicable legal conditions, you have the right to access your personal data, to have inaccurate data rectified, to have data erased and to restrict processing. You may request the portability of the data you have provided where the conditions of Article 20 GDPR are met.

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of the processing carried out before withdrawal remains unaffected. To exercise your rights, you can contact hello@alleon.eu.

6 Right to object

You may object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(e) or (f) GDPR. If your data is processed for direct marketing, you may object to that processing at any time; this also applies to profiling to the extent that it is related to such direct marketing.

7 Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of an alleged infringement. For Baden-Württemberg, you can contact the State Commissioner for Data Protection and Freedom of Information through the complaints page.

8 Optional storage of your language choice

You can select English, German or French without storing your choice. The “Remember my choice for 180 days” checkbox in the language dialog is initially unchecked unless you have previously explicitly enabled remembering and that choice is still valid. Only when you check the box and then select a language or click “Continue” do we store the selected or currently displayed language, an expiry time and an indication that remembering is enabled locally in your browser. We use the localStorage entry “alleon-language-choice-v2” for this purpose. The optional storage of your language choice is based on your consent under section 25(1) TDDDG.

The entry remains valid for 180 days from the time it is stored. While a valid entry exists, the initial dialog does not appear again. On the privacy information page, the initial dialog never opens automatically, regardless of whether a valid entry exists; the language links and “Language settings” in the header remain available. Clicking a language in the header does not store anything unless such a remember choice is still valid. If remembering was previously explicitly enabled and that choice is still valid, clicking a language in the header updates the entry and starts the 180-day period again. Confirming again in the dialog with the remember checkbox checked also restarts the validity period.

You can open the dialog at any time using “Language settings” in the header. The checkbox indicates whether a valid remember choice exists. If you uncheck it and then click “Continue” or a language, the stored entry is removed. The Escape key closes the dialog without saving a choice or changing an existing entry.

Once expired, the entry is no longer used and is deleted the next time the website is visited. Any older “alleon-language-choice-v1” entry is also removed on the next visit and is not carried over as an enabled remember choice. You can delete stored entries at any time through your browser’s website data settings. If browser storage is unavailable, the initial dialog may appear again.

You can change the language at any time using the language switcher in the header. The language feature does not automatically detect your browser language and does not automatically redirect you based on a stored entry. This feature does not transmit the local language entry to our server or to third parties. Accessing a selected language URL generates the technical access data described in section 2, as any page request does.

9 Instagram images on this website

On the homepage we display up to six available posts from each of our Instagram profiles @alleon.official and @alleon.home. The HOME page displays posts from @alleon.home. We use the Smash Balloon Instagram Feed plugin for authorized requests from our web server to Instagram and for caching the posts and image copies on our website.

The gallery images are delivered from alleon.eu. Our display adapter does not embed Instagram players or send your browser to Instagram automatically to load these images. Requests for these local image files generate the technical access data described in section 2. The display adapter does not set cookies or store a separate visitor preference.

If you click a post or a profile link, you leave our website and open Instagram. Instagram then processes the data associated with that visit under its own privacy information; this may include your IP address and information associated with an Instagram account if you are logged in there.

The display uses cached data. Refreshing depends on the authorized account connection and the website’s scheduled processing. Local images and backup copies may remain beyond a refresh interval; they are replaced or removed through the website’s cache and media management. If verified local images are unavailable, we show only the relevant profile link rather than substitute images.