Privacy Policy
1. Controller
The controller responsible for data processing on this website is:
altavios GmbH, Allee 18, 74072 Heilbronn, Germany
Phone: +49 7131 277 654 89 · Email: anfrage@altavios.de
Represented by the Managing Director, Ronald Schneider.
2. Summary
We do not use any analytics, tracking or marketing tools on this website and we do not create user profiles. No automated decision-making takes place.
Only technically necessary cookies are set. That is why we do not ask for consent when you visit and do not show a cookie banner.
Data only goes to third parties when it is needed to run the website or when you trigger it yourself – for example, by submitting a form, booking an appointment or loading the map.
3. Hosting and delivery of the website
Our website is hosted by Lovable Labs Sweden AB (Sweden) and delivered through the network of Cloudflare, Inc. (USA), which also protects the website against attacks.
When you visit, technically necessary data is processed: IP address, date and time, page requested, referrer URL, browser, operating system and status code. The legal basis is our legitimate interest in providing the website securely and reliably (Art. 6(1)(f) GDPR).
We have a data processing agreement with Lovable (Art. 28 GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; transfers to the USA are based on the European Commission's adequacy decision (Art. 45 GDPR).
4. Cookies and local storage
We only use technically necessary cookies (§ 25(2) no. 2 TDDDG, Art. 6(1)(f) GDPR):
- __cf_bm (Cloudflare): detects automated traffic and protects the website; stored for 30 minutes.
- __dpl (hosting): makes sure you see the same version of the website during your visit; stored for 7 days.
If you choose dark mode or a language, your browser stores this setting locally (local storage). It does not leave your device.
You can delete cookies and locally stored data at any time in your browser settings.
5. Contact and project enquiries
If you write to us through a form on this website, we process your details (name, email address, company, phone number, message and project details) to answer your enquiry.
Forms are delivered via EmailJS (EmailJS Pte Ltd, Singapore). The form content and technical data (IP address, browser, time) are transmitted to EmailJS. We have a data processing agreement with EmailJS; transfers to third countries are based on the EU Standard Contractual Clauses (Art. 46 GDPR).
If you contact us by email or phone, we likewise process your details only to handle your request.
The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
6. Appointment booking
"Book an intro call" takes you to the Google Calendar booking page (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The page only opens after you click.
There you enter your name, email address and preferred time. We use these details to prepare and hold the call (Art. 6(1)(b) GDPR).
Google may also transfer data to the USA; Google LLC is certified under the EU-US Data Privacy Framework. More information: policies.google.com/privacy
7. Google Maps
On the contact page you can show a Google Maps map (Google Ireland Limited). The map is only loaded when you click "Load Google Maps".
Only then are your IP address and technical browser data transmitted to Google, possibly also to the USA. The legal basis is your consent given by the click (Art. 6(1)(a) GDPR, § 25(1) TDDDG). After reloading the page, the map is hidden again.
8. Links to other websites
Our website links to external services such as LinkedIn. Data is only transmitted when you click such a link; the privacy policy of that provider then applies.
9. Business outreach
We also contact companies on our own initiative by letter or email. For this we process business contact data (name, position, company, business address and email address) from publicly available sources such as company websites, the commercial register, trade fair directories and professional networks.
The legal basis is our legitimate interest in initiating business relationships (Art. 6(1)(f) GDPR). You can object at any time without giving reasons, for example by email to anfrage@altavios.de. We will then not contact you again.
10. Disclosure of data
We do not sell personal data. We only pass data on to the service providers named in this policy, to subcontractors we use in a project, or where we are legally obliged to do so (Art. 6(1)(c) GDPR).
11. Retention
We keep personal data only as long as it is needed for the purpose concerned:
- Enquiries and business contacts: until they are dealt with, at most 3 years after the last contact unless a business relationship develops.
- Contract and invoice data: in line with statutory retention periods (up to 10 years under German commercial and tax law).
- After an objection to being contacted: only your email address or postal address on a block list, so that we do not contact you again.
- Hosting log data: only as long as needed for security and operation.
12. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3)).
Right to object (Art. 21 GDPR): where we process data on the basis of our legitimate interest, you can object at any time on grounds relating to your particular situation. You can object to processing for direct marketing at any time without giving reasons.
For any request, an email to anfrage@altavios.de is enough. We reply within one month.
13. Right to lodge a complaint
You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany
Phone: +49 711 615541-0 · Email: poststelle@lfdi.bwl.de · baden-wuerttemberg.datenschutz.de
14. Data security
The website is only transmitted encrypted via HTTPS (TLS). We protect your data with appropriate technical and organisational measures.
15. Changes
We update this privacy policy when our website or the legal situation changes. The version published here applies.
Last updated: October 2026