Privacy policy

1. Controller

The controller responsible for data processing in connection with this website is:

Alexander Herrlein
Alexantis, Sole proprietorship (Einzelunternehmen)
Wiesenau 6
97714 Rottershausen
Germany

info@alexantis.de

Further details can be found in the legal notice.

2. Hosting of this website

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Deutschland.

When you visit this website, the hosting provider automatically collects and stores technical connection data (server log files) transmitted by your browser: the IP address of the requesting device, the date and time of access, the content of the request or the file retrieved, the access status (e.g. successful transfer or error), the amount of data transferred, the website from which access was made, as well as browser, operating system and language.

The purpose of this processing is to provide the website free of technical errors and to operate it securely. The legal basis is our legitimate interest in this, Art. 6(1)(f) GDPR.

According to the provider, these log files are deleted after seven days at the latest. According to the provider, personal data is processed at its registered office or in a data centre in Germany.

According to the provider, a data processing agreement pursuant to Art. 28 GDPR is included when the hosting contract is concluded.

3. Contact by email

This website does not contain a contact form. The only way to contact us is the email address info@alexantis.de. If you contact us by email, the personal data you provide (e.g. name, email address, content of your message) will be processed solely to handle your enquiry.

Where your enquiry relates to the initiation or performance of a contract with us, the legal basis is Art. 6(1)(b) GDPR. For other enquiries, the legal basis is our legitimate interest in responding to your message, Art. 6(1)(f) GDPR.

Your data will only be stored for as long as is necessary to handle your enquiry or – where applicable – for as long as statutory retention obligations apply.

To operate the mailbox info@alexantis.de, we use the same provider as for hosting this website, ALL-INKL.COM – Neue Medien Münnich (see section 2).

4. Cookies and tracking

This website currently does not use cookies or any analytics, tracking or marketing services. No processing takes place that would require consent under Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG).

5. Fonts

This website uses the Geist and Inter typefaces. Both are embedded locally when the website is built and are delivered exclusively from our own server. No connection is made to the servers of a font provider.

6. Automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place on this website.

7. Your rights

With regard to the personal data concerning you, you have the following rights against us: the right of access, the right to rectification or erasure, the right to restriction of processing and the right to data portability.

Where we process personal data on the basis of our legitimate interest (Art. 6(1)(f) GDPR, see sections 2 and 3), you have the right to object to this processing on grounds relating to your particular situation.

You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. The competent authority is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Deutschland

8. Support assistant and support requests

For support questions about our products (currently TimeTrace), we optionally offer a support assistant that answers questions automatically on the basis of an editorially approved knowledge base and, where needed, allows your question to be forwarded to a person.

Data processed: When a standard question is successfully answered automatically, the full text of the question and answer is not stored permanently. If a question cannot be answered reliably, we store it only to the extent necessary and, where possible, in shortened/anonymised form in order to improve our knowledge base. If you actively forward a request to us (“Send question to Alexantis”), we process your question, optionally your name, your email address, optional additional text and the result of the security check (see Turnstile below).

Legal basis: Where the processing is necessary for the performance of a contract with you or in order to take steps prior to entering into a contract, Art. 6(1)(b) GDPR. For other support and contact requests, we rely on our legitimate interest in handling and responding to your request, Art. 6(1)(f) GDPR. Consent is not the relevant legal basis for handling regular support requests.

Technology used: The support assistant runs on a dedicated application (Cloudflare Worker) and uses Cloudflare Workers AI (text embedding to identify the topic, no freely generated AI answer) and Cloudflare Vectorize to search within our approved knowledge base. These Cloudflare services run at globally distributed Cloudflare locations and are not operated exclusively in the EU. We store support cases (escalations, feedback) in a Cloudflare D1 database which, according to our current configuration, is operated in Western Europe, without this being fixed as an exclusive, contractually guaranteed EU location. We therefore cannot guarantee that all support data is processed exclusively in the EU.

Cloudflare Turnstile: To protect our support form against bots, abuse and automated requests, we use Cloudflare Turnstile. In doing so, Cloudflare processes technical signals such as the IP address, TLS fingerprint and information about your browser in order to distinguish automated use from human input. According to Cloudflare, this is done without persistent cookies and without creating a user profile. The legal basis is our legitimate interest in the security and functionality of our support form, Art. 6(1)(f) GDPR.

Brevo (email delivery): If you contact us via the support assistant, we send the internal notification and our reply to you via the email service provider Brevo (Sendinblue SAS, France). Brevo is responsible solely for sending the emails; your support case itself is managed by us in the database mentioned above. According to Brevo, the data is processed in data centres in France, Germany and Belgium; according to the provider, access by Brevo group companies outside the EU (including in the USA and India) cannot be completely ruled out. According to the provider, contractual data protection safeguards are in place for such access. Here, too, the legal basis is Art. 6(1)(b) or (f) GDPR, depending on the underlying support case.

Storage period: As a rule, we store support and contact cases for 12 months after the respective case has been closed. Longer storage only takes place where statutory retention obligations apply or where this is necessary for the establishment, exercise or defence of legal claims.

Please do not enter any health data or other particularly sensitive information in the support form. Use of the support assistant is voluntary and does not replace the general means of contact mentioned in section 1. The rights listed in section 7 (access, rectification, erasure, restriction, data portability, objection, complaint to a supervisory authority) also apply accordingly to data processed in connection with the support assistant.