1. Controller
Carsten Alberti e.K.,
Kiliansgraben 9
99974 Muehlhausen
Germany

Phone: +49 38203 747120
Email: dpo@albertigroup.com

2. Your rights as a data subject
You have the right to access your personal data stored by us (Art. 15 GDPR), to rectification of inaccurate data (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR), to data portability (Art. 20 GDPR), and to object to processing (Art. 21 GDPR). You may withdraw any consent given at any time with future effect (Art. 7(3) GDPR). You also have the right to lodge a complaint with a supervisory authority, in particular the authority responsible for our registered seat, the Data Protection Officer for the State of Thuringia (Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit).

3. Hosting and server log data
When you visit our website, our hosting provider automatically collects so-called server log files transmitted by your browser: IP address, date and time of the request, browser type and version, operating system, referrer URL, and the file requested. This serves the technical stability and security of our offering (Art. 6(1)(f) GDPR). [Note: please add the name and address of your actual hosting provider here, if different from Cloudflare – see item 5.]

4. Cookies and consent management
Our website uses cookies. Technically necessary cookies are permitted without your consent pursuant to Section 25(2) TDDDG (German Telecommunications-Digital Services-Data Protection Act), as they are required for the operation of the website. For all other cookies, we obtain your prior consent.
For this purpose, we use the cookie consent manager CCM19, provided by Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, Germany. Only the date and time of your page visit, a randomly generated ID, and your consent status are stored – as evidence of our statutory documentation obligation (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR). All data is hosted exclusively in Germany; no transfer to the USA or other third countries takes place.

5. Cloudflare (content delivery network and security)
We use Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, as a content delivery network and for protection against attacks. Cloudflare processes IP addresses and request data via its global server network, which may include servers in the USA. This serves the secure, fast, and stable provision of our website (Art. 6(1)(f) GDPR). To our knowledge, Cloudflare is certified under the EU-US Data Privacy Framework.

6. Web analytics and marketing

Google Analytics (implemented via Google Site Kit / Google Global Site Tag)
We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Through “Site Kit by Google” and the Global Site Tag (gtag.js), cookies are set and pseudonymous usage profiles are created. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can give or withdraw via CCM19. Data may be transferred to the USA; to our knowledge, Google LLC is certified under the EU-US Data Privacy Framework.

HubSpot
We use HubSpot, a marketing and CRM tool provided by HubSpot, Inc., 2 Canal Park, Cambridge, MA 02141, USA (for EU customers, partly via HubSpot Ireland Limited, Dublin, Ireland). HubSpot sets cookies (including hubspotutk, __hstc, __hssc) to analyze user behavior and for marketing automation. The legal basis is your consent (Art. 6(1)(a) GDPR); insofar as HubSpot is used solely to process an inquiry, the legal basis is Art. 6(1)(b) GDPR. Data may be transferred to the USA; to our knowledge, HubSpot is certified under the EU-US Data Privacy Framework.

7. Google Fonts
Our website uses Google Fonts for consistent typography. These fonts are hosted locally on our own server; no connection to Google’s servers is established, and no data is transmitted to Google. No consent is required for this.

8. Google Maps
Our website may include a map from Google Maps, provided by Google Ireland Limited. When the map loads, your IP address and other usage data are transmitted to Google. The legal basis is your consent (Art. 6(1)(a) GDPR). We recommend loading the map via CCM19 only after consent has been given.

9. Contact via WhatsApp
We offer the option to contact us via a WhatsApp button. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin, Ireland (part of the Meta group of companies). When the button is clicked, data such as your phone number, device information, and IP address are transmitted to WhatsApp/Meta, even before any message is sent. Message content is end-to-end encrypted; however, metadata is still processed by Meta. Data may be transferred to the USA; to our knowledge, Meta Platforms, Inc. is partially certified under the EU-US Data Privacy Framework.

10. Social media: LinkedIn
Our website links to our LinkedIn profile. This is a plain link (no embedded plug-in) – no data is transmitted to LinkedIn merely by visiting our site. Only once you actively click the link does LinkedIn’s privacy policy apply.

11. Multilingual functionality (Polylang)
To provide our website in multiple languages, we use the Polylang plugin. To remember your selected language, a technically necessary cookie is set (Section 25(2) TDDDG). No data is transmitted to third parties.

12. Search engine optimization (Yoast SEO)
We use the Yoast SEO plugin to generate meta information, XML sitemaps, and structured data for search engines. The plugin operates entirely server-side, does not process any personal data of our visitors, and does not set any cookies.

13. International data transfers
Several of the providers listed above process data in the USA. The legal basis for this is generally the EU-US Data Privacy Framework, which is currently valid, although an appeal against the underlying adequacy decision is pending before the Court of Justice of the European Union (Case C-703/25 P). We are monitoring this development and will update this privacy policy as necessary.

14. Changes to this privacy policy
We will update this privacy policy whenever our offering or the applicable legal requirements change. The version in effect at the time of your visit shall apply.