This is a translation for convenience. The German version is the legally binding one.

With this privacy policy, we would like to inform you about the nature, scope and purpose of the processing of personal data (hereinafter also referred to simply as “data”). Personal data is all data that has a personal connection to you, e.g. name, address, e-mail address or your usage behaviour. This privacy policy applies to all data processing operations carried out by us, both within the framework of our core business activities and for the online media we operate.

1. Who is responsible for data processing at our company

The party responsible for data processing is:

Alaska.Labs GmbH

Am Ende 14, 01277 Dresden

Germany

+49 (0) 351 / 20 85 84 57

info@alaskalabs.de

https://alaskalabs.de/impressum/

2. Processing of your data within the framework of our company’s core business activities

If you are our customer or business partner, or if you are interested in our services, the nature, scope and purpose of the processing of your data will be governed by the contractual or pre-contractual relationship existing between us. In this sense, the data we process includes all data that is or was provided by you for the purpose of using the contractual or pre-contractual services and that is required to process your enquiry or the contract concluded between us. Unless otherwise stated in the further notes of this privacy policy, the processing of your data and its disclosure to third parties is limited to the data necessary and appropriate for responding to your enquiries and/or for the performance of the contract concluded between you and us, for the safeguarding of our rights, and for the fulfilment of legal obligations. We will inform you before or during data collection which data is required for this purpose. To the extent that we use third-party providers to provide our services, the data protection notices of the respective third-party providers apply.

Data affected:

Master data (e.g. names, addresses)
Payment data (e.g. bank account details, invoices)
Contact data (e.g. e-mail address, telephone number, postal address)
Contract data (e.g. subject matter of the contract, contract duration)
Persons affected: prospects, business and contractual partners

Purpose of processing: processing of contractual services, communication and response to contact enquiries, office and organisational processes

Legal basis: performance of a contract and pre-contractual enquiries, Art. 6(1)(b) GDPR, legal obligation, Art. 6(1)(c) GDPR, legitimate interest pursuant to Art. 6(1)(f) GDPR in the documentation of our business processes, communication with the contact persons of our business and contractual partners, maintenance of existing business relationships, as well as the safeguarding and enforcement of our contractual and legal claims

The provision of personal data is, as a rule, not legally prescribed. To the extent that certain information is required for the processing of an enquiry, the conclusion or the performance of a contract, we cannot provide the corresponding services, or can only provide them in a limited way, without this information. Any information beyond this is provided voluntarily.

Under the GDPR, you have the following rights, which you can assert at any time with the controller named in Section 1 of this privacy policy:

Right to information: You have the right to request information from us on whether and which data we process about you.
Right to rectification: You have the right to request the rectification of incorrect or the completion of incomplete data.
Right to erasure: You have the right to request the erasure of your data.
Right to restriction of processing: In certain cases, you have the right to request that we process your data only in a restricted manner.
Right to data portability: You have the right to request that we transmit your data to you or to another controller in a structured, commonly used and machine-readable format.
Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. The competent authority is the supervisory authority at your usual place of residence, your workplace or our company’s headquarters.

You have the right to withdraw your consent to the processing of data at any time.

Right to object

You have the right to object at any time to the processing of your data that we base on our legitimate interest pursuant to Art. 6(1)(f) GDPR. If you make use of your right to object, we ask you to provide reasons. We will then no longer process your personal data, unless we can demonstrate to you that compelling legitimate grounds for the processing override your interests, rights and freedoms.

Regardless of the foregoing, you have the right at any time to object to the processing of your personal data for the purposes of advertising and data analysis.

4. When do we delete your data?

We delete your data when we no longer need it or when you instruct us to do so. This means that — unless otherwise stated in the individual data protection notes of this privacy policy — we delete your data

when the purpose of the data processing has ceased and the respective legal basis named in the individual data protection notes no longer exists, e.g.
- after the termination of the contractual or membership relationship existing between us (Art. 6(1)(b) GDPR) or
- after our legitimate interest in the further processing or storage of your data has ceased (Art. 6(1)(f) GDPR),
when you make use of your right to withdraw consent and no other statutory legal basis for the processing within the meaning of Art. 6(1)(b)–(f) GDPR applies,
when you make use of your right to object and no compelling legitimate grounds preclude the erasure.

However, if we (certain parts of) your data still have to be retained for other purposes, because this is, for example, required by tax retention periods or the assertion, exercise or defence of legal claims arising from contractual relationships (up to four years), or the data is needed to protect the rights of another natural or legal person, we delete (that part of) your data only after these periods have expired. Until the expiry of these periods, however, we restrict the processing of this data to these purposes (fulfilment of retention obligations).

5. Which data is processed for which purpose and on what legal basis?

Web hosting

We use a provider to host our web pages, on whose servers our web pages are stored and made available for retrieval on the internet (hosting). In this context, the provider may process all data transmitted via the browser you use that arises from the use of our web pages. This includes in particular your IP address, which the provider needs in order to deliver our online offer to the browser you use, as well as all entries you make via our web page. In addition, the provider we use may

the date and time of access to our web page
the time zone difference to Greenwich Mean Time (GMT)
the access status (HTTP status)
the amount of data transferred
the internet service provider of the accessing system
the browser type and its version used by you
the operating system used by you
the web page from which you may have arrived at our web page
the pages or sub-pages you visit on our web page

collect. The aforementioned data is stored as log files on the servers of our provider. This is necessary to ensure the stability and security of the operation of our web page.

Data affected:

Content data (e.g. posts, photos, videos)
Usage data (e.g. access times, web pages clicked)
Communication data (e.g. information about the device used, IP address)

Persons affected: users of our online presence

Purpose of processing: delivery of our web pages, ensuring the operation of our web pages

Legal basis: legitimate interest pursuant to Art. 6(1)(f) GDPR in providing a functional and secure online presence, ensuring technical stability, detection and prevention of abusive access, as well as analysis and remediation of technical failures

There is no statutory or contractual obligation to provide the technical connection data. However, the transmission of technically necessary data, in particular the IP address, is required for the retrieval of our web pages. Without this data, the technical provision of the website is not possible.

Web hoster commissioned by us:

STRATO

Service provider: STRATO AG, Pascalstr. 10, 10587 Berlin Website: https://www.strato.de/hosting/ Privacy policy: https://www.strato.de/datenschutz/

Contact as well as product quote and demo requests

To the extent that you contact us by e-mail, via social media, telephone, post, our contact form or by other means, we process the personal data you transmit to us in order to process and respond to your matter.

This applies in particular to enquiries about our products, including quote requests, demo requests, as well as enquiries about features, prices and usage options. For quote requests, we use your information to create a quote tailored to your requirements. For demo requests, we use your data to make contact, coordinate appointments and carry out a product demonstration.

Any further processing for other purposes, in particular for the sending of unsolicited advertising, takes place only to the extent that a separate legal basis exists for this.

Data affected:

Master data (e.g. name, company, address)
Contact data (e.g. e-mail address, telephone number)
Content data (e.g. messages, information about the matter and technical requirements)
Contract and enquiry data (e.g. products requested, scope of services, desired licence models)

Persons affected: prospects, customers, business and contractual partners, as well as their contact persons

Purpose of processing: communication, processing and response to contact enquiries, creation of quotes, organisation and conduct of product demonstrations, as well as initiation and maintenance of business relationships

Legal basis: performance of a contract and pre-contractual enquiries pursuant to Art. 6(1)(b) GDPR, to the extent that the person concerned is or is to become a party to the contract; legitimate interest pursuant to Art. 6(1)(f) GDPR in processing business enquiries, communication with the contact persons of companies, as well as the initiation and maintenance of business relationships

As a rule, there is no statutory or contractual obligation to make contact or to provide personal data. However, for the processing of an enquiry we need suitable contact details and the information required for processing. If these are not provided, we may not be able to respond to the enquiry, or only in a limited way, or may not be able to create a suitable quote. Any further information is provided voluntarily.

Handling of your data in the recruitment process

If you apply to us, we process the personal data you transmit to us in the course of the application process, such as e.g. your name, address, place of residence, age, application photo, e-mail and telephone number, professional career including schools, training and studies. If you send the data by e-mail or via a contact form of our online presence, the processing takes place electronically. If you send your application via the contact form, the transmission of your data is encrypted in accordance with the state of the art. If you send your data by e-mail, we point out that the transmission usually takes place unencrypted. If the application process is followed by the conclusion of an employment contract, we store your data for the purpose of processing the employment relationship in compliance with statutory provisions.

Data affected:

Master data (e.g. names, addresses)
Payment data (e.g. bank account details, invoices)
Contact data (e.g. e-mail address, telephone number, postal address)
Contract data (e.g. subject matter of the contract, contract duration)

Persons affected: applicants

Purpose of processing: processing of the application process

Legal basis: performance of a contract and pre-contractual enquiries, Art. 6(1)(b) GDPR, legal obligation, Art. 6(1)(c) GDPR

Submitting an application is voluntary. For the review and processing of your application we need certain personal information, in particular contact details and information about your professional qualifications. Without this information we may not be able to take your application into consideration. Any information beyond this, in particular an application photo, is provided voluntarily.

Erasure: If no employment contract is concluded, your data will be deleted after the completion of the application process or at the latest two months after its completion. This does not apply if statutory provisions preclude the erasure or if the further storage of your data is required for the purpose of evidence, e.g. in proceedings under the General Equal Treatment Act (AGG). The application process is deemed completed upon the sending of the rejection to you.

Map display using OpenStreetMap

On our contact section we embed a map provided by OpenStreetMap. The provider is the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom.

The map is not loaded automatically. It is only retrieved from the OpenStreetMap servers once you actively click the “Show map” button. Only at that point is your IP address transmitted to OpenStreetMap; without a click, no connection to OpenStreetMap takes place.

Data concerned:

usage data (e.g. map sections viewed, access times)
communication data (e.g. IP address, information about the device used)

Purpose of processing: display of our location

Legal basis: consent, Art. 6 (1) (a) GDPR. You give your consent by clicking “Show map” and can withdraw it for the future at any time by reloading the page.

Provider’s privacy policy: https://wiki.osmfoundation.org/wiki/Privacy_Policy

Web analytics and technical security

Each time our web pages are called up, technically necessary connection data is processed in order to provide the content called up, to ensure the functionality and security of our systems, and to be able to detect and prevent technical failures and abusive access. This data may possibly permit identification.

To the extent technically necessary, this information is stored in server log files. No clear-text data such as names or e-mail addresses is stored. The use of this data for the creation of personal usage profiles does not take place within the framework of this processing operation.

Data affected:

Usage data (e.g. pages called up, access times)
Communication data (e.g. technical device and browser information)
Log data (e.g. server responses, error and security events)

Persons affected: visitors of our web pages

Purpose of processing: technical provision of the website, ensuring system security and stability, error analysis, as well as detection and prevention of abusive access

Legal basis: legitimate interest pursuant to Art. 6(1)(f) GDPR in ensuring the trouble-free and secure operation of our web pages, detection and prevention of security risks and abusive access, as well as analysis and remediation of technical errors.

There is no statutory or contractual obligation to provide the technical connection data. However, certain data, in particular the IP address, is required for the technical provision and secure operation of the web pages. Without this data, the retrieval of our web pages is technically not possible.

We operate online presences within the social networks listed below. If you visit one of these presences, the respective provider collects and processes the data listed in more detail below. As a rule, this data is collected for advertising and market research purposes and usage profiles are created with it. The usage profiles may store data independently of the device you use. This is in particular the case if you are a member of the respective platform and logged in to it. The providers may use the usage profiles to serve you interest-based advertising. You have the right to withdraw consent to the creation of user profiles. To exercise this right, you must contact the respective provider.

If you have an account with one of the providers listed below and are logged in there when visiting our website, the respective provider may collect data about your usage behaviour on our website. To prevent such a linking of your data, you can log out of the provider’s service before visiting our page.

For which purpose and to what extent data is collected by the provider, you can find in the respective privacy policies of the providers communicated below.

We would like to point out that, depending on the country of residence of the provider named below, the data collected via its platform may be transferred and processed outside the area of the European Union. In this case, there is a risk that the level of data protection prescribed by the GDPR is not upheld and that the enforcement of your rights may not take place or may only take place with difficulty.

Data affected:

Master and contact data (e.g. name, address, telephone number, e-mail address)
Content data (e.g. posts, photos, videos)
Usage data (e.g. access times, web pages clicked)
Communication data (e.g. information about the device used, IP address).

Purpose of processing: communication and marketing, tracking and analysis of usage behaviour

Legal basis: consent, Art. 6(1)(a) GDPR, legitimate interest pursuant to Art. 6(1)(f) GDPR in public relations, presentation of our company and our services, information about products and services, as well as communication with prospects, customers and business partners via our company presences.

The use of our social media presences is voluntary. There is no statutory or contractual obligation to provide personal data in this regard. Without the use of the respective platform, communication via this channel is not possible. Alternative contact options are available via our website.

Options to object: For the respective options to object (opt-out), we refer you to the information of the providers linked below.

We maintain online presences on the following social networks:

LinkedIn

Service provider: LinkedIn Corporation, 1000 W Maude, Sunnyvale, CA 94085, USA

Office in Germany: LinkedIn, Hofstatt 4th Floor, Sendlinger Str. 12, 80331 München

Website: https://www.linkedin.com/?trk=nav_logo

XING

Service provider: New Work SE, Dammtorstraße 30, 20354 Hamburg

Website: https://www.xing.com/

We use offers from third-party providers to enable online meetings, conference calls by video and/or audio, as well as online seminars among employees as well as with prospects or customers. If you communicate with us via such a service, the data collected in this communication process is processed both by us and by the third-party provider. The data that may arise in such a communication process includes in particular your login and contact data, contributions in the chat window, your video and audio contributions, as well as shared screen content. The data processed by the third-party provider we use includes primarily user data as well as metadata (e.g. IP address, computer system information). The service provider, within the framework of providing the service, processes in particular technical connection and usage data, to the extent this is necessary for the operation, security and functionality of the service. Further information about the data processing by Infomaniak results from the provider’s privacy policy.

We use the video conferencing service kMeet from the Swiss provider Infomaniak. The processing of the video conference data takes place, as a rule, on servers in Switzerland. For Switzerland there is an adequacy decision of the European Commission pursuant to Art. 45 GDPR.

Data affected:

Master data (e.g. names, addresses)
Contact details (e.g. e-mail address, telephone number)
Shared content (e.g. photos, videos, texts, audio recordings)
User data (e.g. times of access, web pages visited, interest in content)
Meta and communication data (e.g. IP address, computer system information)

Persons affected: prospects, customers, communication partners

Purpose of processing: processing of contact enquiries, internal and external communication with employees as well as prospects and customers, fulfilment of our contractual services, service offer

Legal basis: consent, Art. 6(1)(a) GDPR, performance of a contract and pre-contractual enquiries, Art. 6(1)(b) GDPR, legitimate interest pursuant to Art. 6(1)(f) GDPR in conducting efficient and location-independent communication with prospects, customers and business partners, presentation and demonstration of our software products, coordination of business matters, as well as conduct of consulting and support conversations.

As a rule, there is no statutory obligation to participate in video conferences or to provide personal data. However, for the technical participation in a video conference, certain connection data must be processed. Without this data, participation via the service used is not possible. The activation of the camera and microphone, as well as the sharing of screen content, takes place voluntarily, to the extent that these are not exceptionally required for a specifically agreed service.

Services used by us:

kMeet (Infomaniak kSuite)

Service provider: Infomaniak Network SA (AG), Rue Eugène-Marziano 25, 1227 Les Acacias, Geneva, Switzerland

Website: https://www.infomaniak.com/de/ksuite/kmeet

Legal notices: https://www.infomaniak.com/de/agb/rechtliche-hinweise

Online shop

If you place orders via our online shop, we process the information you provide in the order process in order to be able to process your order. This includes in particular your name as well as your address and electronic contact data, information for processing the payment process, as well as the information about your specific order. Which data we need in detail, we will inform you within the framework of the order process.

To the extent that it is necessary for the fulfilment of the contract concluded between us, for the protection of your vital interests, or because of statutory provisions, we transmit your data to third parties, taking your rights into account, such as e.g. to the logistics company commissioned with the delivery, to payment service providers for the purpose of payment processing, as well as to our tax adviser. To the extent that we use third-party providers to provide our services, the data protection notices of the respective third-party providers apply.

Data affected:

Master data (e.g. names, addresses)
Payment data (e.g. bank account details, invoices)
Contact data (e.g. e-mail address, telephone number, postal address)
Contract data (e.g. subject matter of the contract, contract duration)
Usage data (e.g. access times, web pages clicked)
Communication data (e.g. information about the device used, IP address)

Persons affected: customers, prospects, business and contractual partners

Purpose of processing: processing of orders and communication, as well as response to enquiries, data security, office and organisational processes

Legal basis: performance of a contract and pre-contractual enquiries, Art. 6(1)(b) GDPR, legal obligation, Art. 6(1)(c) GDPR, legitimate interest pursuant to Art. 6(1)(f) GDPR in the efficient and secure organisation of order processes, communication with the contact persons of business customers, prevention of abusive orders, as well as the safeguarding and enforcement of contractual claims.

The data required for the order, the conclusion of the contract and the performance of the contract must be provided so that we can process the order and perform the contract. Without this information, the conclusion of the contract or the processing of the order is not possible or is only possible in a limited way. In addition, certain invoice and business data must be processed on the basis of statutory, in particular tax and commercial law, obligations. Any information beyond this is provided voluntarily.

Payment service providers

Pursuant to our statutory obligations or on the basis of our legitimate interests in an efficient, secure and customer-oriented payment processing, persons who have concluded a contract or another legal relationship with us can use both banks and credit institutions as well as further payment service providers for payment. The payment service providers offered by us process, within this framework, master data, which include name, address or also bank data such as account/credit card number, passwords, TANs, check numbers, as well as information about the concluded contract and information about the recipient of the payment.

The data collected in this context is required in order to be able to carry out the payment processing by the payment service provider. Exclusively the payment service provider commissioned by us collects and processes this personal information. We do not receive information about your bank account or credit card connection at any time. We are informed by our payment service provider whether the payment of our customers has arrived or not. There is a possibility that our payment service providers forward the data of our customers to business credit agencies in order to be able to check the identity and creditworthiness of the payer. In this regard, we refer you to the privacy policy and general terms and conditions (GTC) of our payment service providers.

The GTC and privacy policy of the respective payment service provider apply. You will find these notices on the website of the affected service provider or in the transaction application. For further information and for the assertion of your rights regarding withdrawal and information, we refer you in this regard to the provisions of the respective service provider.

Data affected:

Master data (e.g. name, address),
Usage data (e.g. web pages visited, interest in certain topics, times of access),
Payment data (e.g. bank account details, invoices, payment history),
Business conclusion data (e.g. duration, customer category, subject matter of the contract),
Communication and meta data (e.g. IP address, information about the device or computer system)

Purpose of processing: effective, secure and customer-oriented payment offers (service) as well as processing of payments pursuant to contractual agreement

Legal basis: performance of a contract and fulfilment of pre-contractual enquiries, Art. 6(1)(b) GDPR, legitimate interests pursuant to Art. 6(1)(f) GDPR in ensuring efficient and secure payment processing, proper attribution of payment transactions, as well as detection and prevention of payment fraud and abusive transactions.

The data required for the chosen payment method must be provided in order to be able to carry out the payment. Without this information, the payment via the respective payment method cannot be processed. To the extent that alternative payment options are offered, another payment method can be chosen. Statutorily required invoice and booking data is processed within the framework of the applicable retention obligations.

Options to withdraw consent: You can withdraw your consent to the use of the personal data at any time vis-à-vis the respective payment service provider. Despite withdrawal, the payment service provider may still be entitled to process, use and transmit the personal data that are strictly necessary for the contractual payment processing. Regarding the storage and timely erasure of the personal data, we refer you to the respective privacy policy of the payment service provider.

We use the following payment service providers:

Stripe

Service provider: Stripe Inc., 510 Townsend Street, San Francisco, CA 94103, USA

Website: https://stripe.com/de

Licence portal and user account

When purchasing our software Alcilla, a user account is automatically created on our licence server within the framework of the order process. This is used for the provision, administration and use of the acquired software licences as well as for the processing of the existing contractual relationship.

For the setup of the user account, in particular the name or company name as well as the e-mail address of the customer from the order process are taken over.

Via the licence portal, customers can retrieve and download their acquired licences, view their customer number and licence information, as well as check, in the case of group licences, the number of available and already assigned licence seats. In addition, existing contracts or subscriptions can be cancelled via the customer account.

Data affected:

Master data (e.g. name, address),
Contact data (e.g. e-mail address, telephone number, postal address)
Contract data (e.g. subject matter of the contract, contract duration)
Licence data (e.g. acquired products and licences, licence numbers, licence status)
Authentication data (e.g. e-mail address, passwords)

Persons affected: customers, buyers, business and contractual partners, as well as their authorised contact persons.

Purpose of processing: automatic setup and administration of customer accounts, provision and administration of acquired software licences, display of licence and contract information, administration of group licences, conduct of contract changes and cancellations, as well as ensuring protected access to the licence portal.

Legal basis: performance of a contract and fulfilment of pre-contractual enquiries, Art. 6(1)(b) GDPR, legitimate interests pursuant to Art. 6(1)(f) GDPR in the efficient administration of customer accounts and software licences, provision of a protected customer access, prevention of unauthorised access and abusive licence use, as well as proper care of existing business relationships.

The provision of the personal data required for the order and licence administration is required for the conclusion of the contract or for the provision and use of the acquired software. Without this information, we cannot create an assigned customer account and cannot ensure the contractual licence provision. As a rule, there is no further statutory obligation to provide this data.

Erasure: The user account and the associated licence and contract data are, as a rule, stored for the duration of the contractual relationship. After its termination, the data will be deleted as soon as they are no longer needed for the processing of the contract, the fulfilment of statutory retention obligations, or the assertion or defence of legal claims. To the extent that statutory retention obligations exist, the further processing is restricted to the purposes required for this.

Web fonts

The fonts used on this website are served from our own server. There is no connection to third-party servers — in particular, no data is transmitted to Google Fonts.

6. Automated decision-making and profiling

Automated decision-making, including profiling, within the meaning of Art. 22(1) and (4) GDPR does not take place within the framework of our data processing.

7. Security measures

In addition, we take technical and organisational security measures in accordance with the state of the art in order to comply with the provisions of data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or against unauthorised access by third parties.

8. Currency and amendment of this privacy policy

This privacy policy is currently in force and is dated November 2026. Due to changed statutory or official requirements, it may be necessary to adapt this privacy policy.

This privacy policy was created with the help of the data protection generator of SOS Recht. SOS Recht is an offer of Mueller.legal Rechtsanwälte Partnerschaft with headquarters in Berlin.

Privacy Policy

1. Who is responsible for data processing at our company

2. Processing of your data within the framework of our company’s core business activities

3. Your rights under the GDPR

Right to withdraw consent

Right to object

4. When do we delete your data?

5. Which data is processed for which purpose and on what legal basis?

Web hosting

Contact as well as product quote and demo requests

Handling of your data in the recruitment process

Map display using OpenStreetMap

Web analytics and technical security

Social networks

Online meetings, video conferences and screen sharing

Online shop

Payment service providers

Licence portal and user account

Web fonts

6. Automated decision-making and profiling

7. Security measures

8. Currency and amendment of this privacy policy