Legal
Privacy policy
This is a translation for information purposes. The German version is the legally binding one.
1 Controller
ALR Consulting UG (haftungsbeschränkt), Römerstr. 54, 46045 Oberhausen, represented by the Managing Director Christoph Sikora, e-mail info@feldkontor.com.
No data protection officer has been appointed, because the conditions of § 38(1) BDSG (German Federal Data Protection Act) are not met.
2 Processing when visiting the website
| Purpose | Data | Legal basis | Storage period |
|---|---|---|---|
| Delivery of the website, operational security, defence against attacks | IP address, date and time, page requested, volume of data transferred, status code, referrer URL, browser and operating system details (server log files) | Art. 6(1)(f) GDPR, legitimate interest in secure and trouble-free operation | 7 days, then deletion or shortening of the IP address |
| Technically necessary session management | Session identifier | Art. 6(1)(f) GDPR; access to the end device requires no consent under § 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), because it is strictly necessary for the service requested | End of the session |
This website uses no analytics, tracking or advertising services and embeds no fonts, maps or videos from third-party servers. A consent banner is therefore not required.
3 Getting in touch and requesting test access
| Item | Content |
|---|---|
| Data | Name, company, position, e-mail address, phone number, project details, content of the message |
| Purpose | Processing the enquiry, demonstration, setting up test access, preparing an offer |
| Legal basis | Art. 6(1)(b) GDPR for pre-contractual measures, otherwise Art. 6(1)(f) GDPR on the basis of the legitimate interest in answering business enquiries. Where you have consented to being contacted for advisory purposes and to receiving information material, that processing is based on Art. 6(1)(a) GDPR and § 7(2) UWG (German Act against Unfair Competition). |
| Required details | Name and e-mail address are needed in order to answer the enquiry. Without these details processing is not possible. Further details are optional. |
| Withdrawal | You can withdraw consent that has been given at any time with effect for the future, for example without any formality by e-mail to kontakt@feldkontor.com. |
| Storage period | until the enquiry has been dealt with, then deletion, unless a commercial or tax retention obligation of six or ten years applies |
4 Recipients
The recipients are the web hosting provider and the e-mail service provider, each as a processor on the basis of a contract under Art. 28 GDPR: STRATO GmbH, Otto-Ostrowski-Str. 7, 10249 Berlin (web hosting and e-mail dispatch). No transfer to a third country outside the European Union takes place. Beyond that, data is passed on only where there is a statutory obligation.
5 Data in the application
For data that customers and their users process inside the application, the respective customer is the controller. ALR Consulting UG (haftungsbeschränkt) acts in that respect as a processor on the basis of a contract under Art. 28 GDPR. Data subjects should address their rights to the respective customer; requests received are passed on to that customer.
6 Rights of data subjects
Data subjects have the right of access under Art. 15 GDPR, to rectification under Art. 16 GDPR, to erasure under Art. 17 GDPR, to restriction of processing under Art. 18 GDPR and to data portability under Art. 20 GDPR.
Right to object under Art. 21 GDPR. Where data is processed on the basis of Art. 6(1)(f) GDPR, there is a right to object to the processing at any time on grounds arising from the particular situation.
Where consent has been given, it can be withdrawn at any time with effect for the future; the lawfulness of the processing carried out up to the withdrawal is not affected.
There is a right to lodge a complaint with a supervisory authority, for ALR Consulting UG (haftungsbeschränkt) in particular with the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (data protection authority of North Rhine-Westphalia), Kavalleriestraße 2 bis 4, 40213 Düsseldorf.
7 Automated decision-making
Automated decision-making including profiling under Art. 22 GDPR does not take place.
8 Status
This privacy policy is as at 21 October 2026. It will be amended if the processing or the legal position changes.