Privacy Policy
Last updated: 2 July 2026
This is a convenience translation. The German version ("Datenschutzerklärung") is authoritative.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
ALP.X Group GmbH
Kanalstr. 10, 80538 Munich, Germany
Phone: +49 89 35658731
E-mail: info@alpx-group.com
For any privacy-related questions, please contact: datenschutz@alpx-group.com
2. Overview
This privacy policy explains which personal data is processed when you visit this website, for what purposes, on what legal basis, and for how long. Personal data means any information that can be used to identify you personally.
Data is processed on this website in the following cases: when you access the website (server log data, delivery via a content delivery network), when you consent to web analytics (Google Analytics), and when you contact us via the contact form, by e-mail, or by phone.
3. Hosting
This website is hosted on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany ("Hetzner"). The servers are located in Germany. When you visit our website, Hetzner automatically records information transmitted by your browser in server log files: IP address, date and time of the request, page or file accessed, volume of data transferred, browser type and version, operating system, and referrer URL.
This data is collected on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the technically error-free presentation, stability, and security of our website. Log data is stored for [insert retention period, e.g. 7 days] and then deleted or anonymized. We have concluded a data processing agreement with Hetzner pursuant to Art. 28 GDPR.
4. Content Delivery Network and Security Services (Cloudflare)
We use Cloudflare, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (for the EEA: Cloudflare Germany GmbH, Rosental 7, 80331 Munich). Cloudflare acts as a content delivery network (CDN) and security service: all traffic between your browser and our website is routed through Cloudflare's network. In doing so, Cloudflare may process technical connection data, in particular your IP address as well as system configuration and log information.
Cloudflare is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in providing our website quickly, reliably, and protected against attacks (e.g., DDoS). Insofar as information on your device is accessed, this is strictly necessary to provide the service you have requested (Section 25(2) no. 2 TDDDG).
Data may be transferred to the USA in this context. Cloudflare is certified under the EU-US Data Privacy Framework (DPF); the transfer is based on the adequacy decision of the EU Commission (Art. 45 GDPR) and, additionally, on standard contractual clauses (Art. 46 GDPR). We have concluded a data processing agreement with Cloudflare. Further information: https://www.cloudflare.com/privacypolicy/
5. Cookies and Consent Management (Cookie Banner)
This website uses cookies and similar technologies. Strictly necessary cookies (e.g., to store your cookie preferences) are used on the basis of Section 25(2) TDDDG and Art. 6(1)(f) GDPR. All non-essential cookies, in particular for analytics purposes, are only set after you have given your consent via our cookie banner (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).
Your selection is stored so that it does not have to be requested again on future visits; your consent is documented to fulfil our accountability obligations (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR). You can withdraw your consent or change your selection at any time with effect for the future by reopening the cookie settings via the "Cookies" link in the footer.
6. Web Analytics with Google Analytics 4
If you have given your consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies and similar technologies that enable an analysis of your use of the website (e.g., pages visited, time spent, device used, approximate region of origin). In Google Analytics 4, IP addresses are truncated by default and are not stored.
Processing takes place exclusively on the basis of your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you give via the cookie banner and can withdraw at any time with effect for the future via the cookie settings.
Data collected through Google Analytics may be transferred to servers of Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework (Art. 45 GDPR); standard contractual clauses (Art. 46 GDPR) apply in addition. We have concluded a data processing agreement with Google. Data sent by us and linked to cookies is automatically deleted after 2 months.
Further information: https://policies.google.com/privacy
7. Contact Form and Spam Protection (Cloudflare Turnstile)
If you contact us via the contact form, we process the data you enter (e.g., name, e-mail address, content of your message) in order to handle your inquiry. The data is stored in a database on our server (Hetzner, Germany); in addition, we receive a notification by e-mail to our mailbox.
The legal basis is Art. 6(1)(b) GDPR insofar as your inquiry relates to the initiation or performance of a contract, and otherwise our legitimate interest in the effective handling of inquiries addressed to us (Art. 6(1)(f) GDPR). Your data remains with us until you request its deletion or the purpose of storage no longer applies (e.g., after your inquiry has been dealt with). Mandatory statutory retention periods remain unaffected.
To protect the form against spam and abuse, we use Cloudflare Turnstile, a service of Cloudflare, Inc. (see Section 4 above). Turnstile verifies that the input originates from a natural person and processes technical characteristics such as IP address, browser information, and interaction data for this purpose; unlike conventional CAPTCHA services, Turnstile does not use tracking cookies. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protecting our website against abusive automated access and spam) and Section 25(2) no. 2 TDDDG. The information on third-country transfers in Section 4 applies.
8. Contact by E-mail or Phone
If you contact us by e-mail or phone, your inquiry, including any personal data resulting from it, will be stored by us for the purpose of processing your request. The legal bases and retention periods set out in Section 7 apply accordingly. We do not pass this data on without your consent.
9. Careers Page (Personio)
Our open positions are listed on an external careers page operated by Personio SE & Co. KG, Seidlstraße 3, 80335 Munich, Germany, which we link to from our website. Data is only processed by Personio once you follow the link; the privacy notice available on the careers page applies to data processing there and during the application process. No data is transferred to Personio when you merely visit our website.
10. Your Rights
You have the following rights with regard to your personal data: the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), and data portability (Art. 20 GDPR).
Right to object (Art. 21 GDPR): You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out on the basis of Art. 6(1)(e) or (f) GDPR. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims.
Withdrawal of consent: You may withdraw any consent you have given at any time with effect for the future. The lawfulness of processing carried out prior to withdrawal remains unaffected.
Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.
To exercise your rights, an informal message to datenschutz@alpx-group.com is sufficient.
11. Obligation to Provide Data; Automated Decision-Making
You are neither legally nor contractually obliged to provide personal data. However, without your contact details we cannot process an inquiry submitted via the contact form. Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.
12. SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the "https://" prefix in your browser's address bar and by the lock icon in the browser line.
13. Changes to this Privacy Policy
We will amend this privacy policy if the legal situation or the data processing on this website changes. The current version published here applies.
