Privacy Policy

1. Who is responsible

The controller for the processing described here is:

Alleina AI GbR
Universitätsstraße 1, 56070 Koblenz, Deutschland
info@alleina.co

For any question about your data, or to exercise the rights in section 8, write to info@alleina.co.

2. What happens when you simply visit

Our hosting provider records standard server log data for every request: the requesting IP address, date and time, the page requested, the referring page, and your browser and operating system version. This is technically unavoidable — it is how a web server answers a request — and we use it only to deliver the site, keep it available, and investigate attacks or abuse.

Legal basis: our legitimate interest in operating a secure and functioning website, Art. 6(1)(f) GDPR. Log data is not combined with any other source and is not used to profile you.

The site also runs a security plugin (Wordfence) which processes request data, including IP addresses, to block malicious traffic. Same legal basis.

3. Cookies and consent

Storing information on your device, or reading information already stored there, requires your prior consent under §25(1) TDDDG (the German ePrivacy rules) — unless that storage is strictly necessary to provide a service you asked for, which is the narrow exemption in §25(2).

Nothing non-essential loads before you choose. The analytics script is not merely disabled until consent — it is not requested at all. Until you accept, your browser makes no connection whatsoever to Google. You can verify this yourself: open your browser's network panel, decline the banner, and confirm that no request to googletagmanager.com or google-analytics.com appears.

You can change or withdraw your choice at any time, with effect for the future: open cookie settings . Withdrawing does not make the processing that already happened unlawful. You can also delete the cookies in your browser settings at any time.

4. Google Analytics 4

If — and only if — you consent, this site uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Why we use it

To understand which pages people actually read, how they arrived, and where they give up — so we can improve the site. We do not use it to advertise to you, and we do not build individual profiles.

What is processed

A randomly generated identifier stored in the cookies named above, the pages you view and when, the referring page, approximate location derived from your IP address, and general device and browser characteristics. Google Analytics 4 truncates IP addresses before storage and does not log the full address.

Legal basis

Your consent — Art. 6(1)(a) GDPR for the processing, and §25(1) TDDDG for storing and reading the cookies. There is no other basis; if you refuse, the service is not loaded.

Recipient, and transfer to the United States

Google acts as our processor under Art. 28 GDPR. Data may be transferred to and processed by Google LLC in the United States. That transfer is covered by the European Commission's adequacy decision of 10 July 2023 for the EU–US Data Privacy Framework, in which Google LLC participates, and additionally by the Commission's Standard Contractual Clauses incorporated into Google's data processing terms. Despite these safeguards, US public authorities may in principle be able to access such data, and EU-level remedies may be harder to enforce than they would be within the EU.

How long it is kept

User-level and event-level data is retained for 2 months — the shortest retention Google Analytics offers — after which it is deleted automatically. Aggregated reports that contain no identifiers are kept for longer. The cookies themselves expire as shown in the table above.

What we have switched off

Google Signals, advertising features, remarketing and ad personalisation are not enabled. Our consent banner defaults every advertising signal to "denied" under Google Consent Mode v2, and the "Marketing" category exists only so that nothing could ever be switched on without your explicit agreement.

How to stop it

Withdraw consent using the cookie settings link in section 3 or in the site footer. You may also install Google's browser opt-out add-on. tools.google.com/dlpage/gaoptout. Google's own privacy policy is at policies.google.com/privacy.

5. Contact form and newsletter

If you send us a message through the contact form, we process the details you enter — name, email address, company, your area of interest and your message — to answer you. Legal basis: Art. 6(1)(b) GDPR where you are asking about our services, otherwise our legitimate interest in responding to enquiries, Art. 6(1)(f) GDPR. To prevent abuse we limit submissions per IP address; that check stores a short-lived record of the request only.

If you subscribe to the newsletter, we store your email address to send it. Legal basis: your consent, Art. 6(1)(a) GDPR. Every newsletter contains an unsubscribe link, and you can withdraw at any time with effect for the future.

Outgoing mail is delivered through our email service provider acting as our processor. We keep enquiry correspondence for as long as needed to deal with the matter and to meet statutory retention periods.

6. Research surveys

Our AI governance and compliance operations surveys can be completed anonymously. Your answers are stored together with a shortened, hashed record of your IP address. Contact details — name, company, email — are stored only if you tick the consent box, and only then.

So that you can close a survey and pick it up later, and so a single response is not counted twice, we store a random identifier on your device and derive a technical characteristic of your browser. This is used only to match a partly completed survey back to you. Legal basis: your consent, Art. 6(1)(a) GDPR and §25(1) TDDDG, given when you begin a survey. If you do not start a survey, none of this happens.

You may ask us to delete your response at any time using the contact address in section 1.

7. Other services in the page

Some resources are loaded from third-party networks when a page is rendered, which necessarily discloses your IP address to those providers:

• Google Fonts and Material Symbols, and the Tailwind CSS content delivery network, for typography and layout. These are needed to display the site and set no cookies of their own.
• Google Search Console, which reports how the site appears in search results using aggregated data. It does not read or write anything on your device.

Links to our platform at ai.alleina.com, and any external site we link to, are governed by their own privacy notices.

8. Your rights

Under the GDPR you have the right to:

• ask what data we hold about you and get a copy (Art. 15)
• have inaccurate data corrected (Art. 16)
• have data erased (Art. 17)
• have processing restricted (Art. 18)
• receive data you gave us in a portable format (Art. 20)
• object to processing based on legitimate interests (Art. 21)
• withdraw any consent at any time, with effect for the future (Art. 7(3))

You also have the right to complain to a supervisory authority, in particular in the EU member state where you live or work. In Germany that is the data protection authority for the state in which the controller is established.

There is no obligation to provide personal data to browse this site. Providing it is necessary only where you choose to contact us, subscribe, or complete a survey with contact details.

9. Changes to this policy

We update this policy when the site or the law changes. The date at the top tells you which version you are reading. If a change materially affects a processing activity that rests on your consent, we will ask again rather than assume the old answer still stands.