Privacy policy

This is a translation for convenience. The German version is the legally binding one.

With this privacy policy we would like to inform you about the nature, scope and purpose of the processing of personal data (hereinafter also referred to simply as “data”). Personal data is any data that has a personal reference to you, e.g. name, address, e-mail address or your user behaviour. This privacy policy applies to all data processing operations carried out by us, both as part of our core activities and for the online media we maintain.

Who is responsible for data processing

The controller for data processing is:

Alaska.Labs GmbH
Am Ende 14
01277 Dresden
Germany
+49 (0) 351 / 20 85 84 57
info@alaskalabs.de
alaskalabs.de/impressum

Under the GDPR you have the rights listed below, which you may assert at any time with the controller named in section 1 of this privacy policy:

Right of access: you have the right to request information from us as to whether and which of your data we process.
Right to rectification: you have the right to request the correction of inaccurate data or the completion of incomplete data.
Right to erasure: you have the right to request the deletion of your data.
Right to restriction: in certain cases you have the right to request that we only process your data on a restricted basis.
Right to data portability: you have the right to request that we transmit your data to you or to another controller in a structured, commonly used and machine-readable format.
Right to lodge a complaint: you have the right to complain to a supervisory authority. The competent authority is that of your habitual residence, your place of work or our registered office.

Right of withdrawal

You have the right to withdraw the consent you have given to data processing at any time.

Right to object

You have the right to object at any time to the processing of your data that we base on our legitimate interest under Art. 6 (1) (f) GDPR. If you exercise your right to object, we ask you to state your reasons. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests and rights.

Irrespective of the above, you have the right at any time to object to the processing of your personal data for advertising and data analysis purposes.

Please address your objection to the contact address of the controller given above.

When do we delete your data?

We delete your data when we no longer need it or when you instruct us to do so. This means that — unless stated otherwise in the individual sections of this privacy policy — we delete your data

when the purpose of the data processing no longer applies and therefore the respective legal basis named in the individual sections no longer exists, e.g. after the end of the contractual or membership relationship between us (Art. 6 (1) (a) GDPR) or after our legitimate interest in the further processing or storage of your data ceases to apply (Art. 6 (1) (f) GDPR),
when you exercise your right of withdrawal and no other statutory legal basis for the processing within the meaning of Art. 6 (1) (b)–(f) GDPR applies,
when you exercise your right to object and no compelling legitimate grounds prevent deletion.

If we still have to retain (certain parts of) your data for other purposes, for example because tax retention periods (generally 6 years for business correspondence and 10 years for accounting records) or the assertion, exercise or defence of legal claims arising from contractual relationships (up to four years) require this, or the data is needed to protect the rights of another natural or legal person, we will delete (that part of) your data only after these periods have expired. Until then, however, we restrict the processing of this data to those purposes (fulfilment of retention obligations).

Contacting us

If you contact us by e-mail, social media, telephone, fax, post, our contact form or otherwise, and in doing so provide us with personal data such as your name, telephone number or e-mail address, or make further statements about yourself or your request, we process this data in order to answer your enquiry within the framework of the pre-contractual or contractual relationship between us.

Data concerned: master data (e.g. names, addresses), contact data (e.g. e-mail address, telephone number, postal address), content data (texts, photos, videos), contract data (e.g. subject matter of the contract, contract term)

Data subjects: interested parties, customers, business and contractual partners

Purpose of processing: communication and answering enquiries, office and organisational procedures

Legal basis: performance of a contract and pre-contractual enquiries, Art. 6 (1) (b) GDPR; legitimate interest, Art. 6 (1) (f) GDPR

Handling of your data in the application process

If you apply to us, we process the personal data you submit to us in the application process, such as your name, address, place of residence, age, application photo, e-mail and telephone number, and career history including schools, vocational training and studies. If you send the data by e-mail or via a contact form on our website, processing takes place electronically. When you send your application via the contact form, the transmission of your data is encrypted according to the state of the art. If you send your data by e-mail, we point out that transmission is generally unencrypted. If an employment contract is concluded following the application process, we store your data for the purpose of handling the employment relationship in compliance with statutory provisions.

Data concerned: master data (e.g. names, addresses), payment data (e.g. bank details, invoices), contact data (e.g. e-mail address, telephone number, postal address), contract data (e.g. subject matter of the contract, contract term)

Data subjects: applicants

Purpose of processing: handling of the application process

Legal basis: performance of a contract and pre-contractual enquiries, Art. 6 (1) (b) GDPR; legal obligation, Art. 6 (1) (c) GDPR

Deletion: if no employment contract is concluded, your data will be deleted after completion of the application process, at the latest 2 months after its completion. This does not apply where statutory provisions prevent deletion or where further storage of your data is necessary for the purpose of providing evidence, for example in proceedings under the German General Equal Treatment Act (AGG). The application process is deemed to be complete once the rejection has been sent to you.

Map display using OpenStreetMap

On our contact section we embed a map provided by OpenStreetMap. The provider is the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom.

The map is not loaded automatically. It is only retrieved from the OpenStreetMap servers once you actively click the “Show map” button. Only at that point is your IP address transmitted to OpenStreetMap; without a click, no connection to OpenStreetMap takes place.

Data concerned: usage data (e.g. map sections viewed, access times), communication data (e.g. IP address, information about the device used)

Purpose of processing: display of our location

Legal basis: consent, Art. 6 (1) (a) GDPR. You give your consent by clicking “Show map” and can withdraw it for the future at any time by reloading the page.

Provider’s privacy policy: https://wiki.osmfoundation.org/wiki/Privacy_Policy

Web fonts

The fonts used on this website are served from our own server. There is no connection to third-party servers — in particular, no data is transmitted to Google Fonts.

We maintain a presence on the social networks listed below. If you visit one of these, the respective provider collects and processes the data detailed below. As a rule, this data is collected for advertising and market research purposes and used to create usage profiles. Usage profiles may store data regardless of the device you use. This is particularly the case if you are a member of the respective platform and are logged in to it. Providers may use the usage profiles to display interest-based advertising to you. You have a right of withdrawal against the creation of user profiles. To exercise it, you must contact the respective provider.

If you have an account with one of the providers listed below and are logged in there when visiting our website, the respective provider may collect data about your usage behaviour on our website. To prevent your data from being linked in this way, you can log out of the provider’s service before visiting our site.

You can find the purpose and scope of the data collected by the provider in the respective privacy policies communicated below.

We would like to point out that, depending on the country in which the provider named below is based, data collected via its platform may be transferred and processed outside the European Union. In this case there is a risk that the level of data protection prescribed by the GDPR is not maintained and that the enforcement of your rights may not be possible or only with difficulty.

Data concerned: master and contact data (e.g. name, address, telephone number, e-mail address), content data (e.g. posts, photos, videos), usage data (e.g. access times, pages clicked), communication data (e.g. information about the device used, IP address)

Purpose of processing: communication and marketing, tracking and analysis of user behaviour

Legal basis: consent, Art. 6 (1) (a) GDPR; legitimate interest, Art. 6 (1) (f) GDPR

Objection options: for the respective objection options (opt-out) we refer to the providers’ information linked below.

We maintain a presence on the following social networks:

Service provider: LinkedIn Corporation, 1000 W Maude, Sunnyvale, CA 94085, USA
Registered office in Germany: LinkedIn, Hofstatt 4th Floor, Sendlinger Str. 12, 80331 Munich
Website: https://www.linkedin.com/
Privacy policy: https://www.linkedin.com/legal/privacy-policy

XING

Service provider: New Work SE, Dammtorstraße 30, 20354 Hamburg
Website: https://www.xing.com/
Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung

Security measures

We take technical and organisational security measures in line with the state of the art in order to comply with the provisions of data protection law and to protect your data against accidental or intentional manipulation, partial or total loss, destruction or unauthorised access by third parties.

Currency of and changes to this privacy policy

This privacy policy is currently valid and dated August 2026. Changes in statutory or official requirements may make it necessary to adapt this privacy policy.

In its original version, this privacy policy was created with the help of the data protection generator by SOS Recht. SOS Recht is a service of Mueller.legal Rechtsanwälte Partnerschaft, based in Berlin.