This is a translation for convenience; the German privacy policy is legally binding.
In short: this website sets no cookies, includes no analytics service and loads nothing from third-party servers. Data is processed so that the pages can be delivered, and when you write to us. How often each page is viewed we count anonymously from the logs of our own web server.
Controller
The controller responsible for processing personal data on this website is:
Alstapp GmbH i. G.
Wiesendamm 31c
22305 Hamburg
E-mail: info@alstapp.de
Represented by the managing director Stefan Ostermann.
Server log files
This website runs on a server that we administer ourselves. The infrastructure for it is provided by netcup GmbH in Karlsruhe. There is no content delivery network or any other external service for delivering the pages.
With every request, the web server writes an entry to a log file. It records the IP address of the requesting device, shortened before it is stored (for IPv4 without the last byte, for IPv6 only the first 48 bits), the date and time of the request, the address requested, the HTTP status code, the amount of data transferred, and the referrer address and browser identification sent by your browser.
This processing is necessary to deliver the pages, detect faults and fend off attacks. The legal basis is our legitimate interest in the secure and functioning operation of the website under Art. 6 (1) (f) GDPR.
The log files are deleted after seven days. They are not analysed to recognise individuals, not combined with other data and not passed on to third parties. If an entry is needed to investigate a specific attack, we keep it until the incident has been resolved.
Access statistics
From the log files we count on our own server how often each page is viewed, from which region and through which website the views come. The statistics contain only aggregated numbers without IP addresses, allow no conclusions about individual persons and are not passed on to third parties. The legal basis is our legitimate interest in improving our website (Art. 6 (1) (f) GDPR).
Contact form
The form on the contact page sends us your name, your company, your e-mail address, your phone number if you provide it, and your message. We use these details solely to answer your enquiry and to arrange a workshop with you.
The legal basis is Art. 6 (1) (b) GDPR insofar as the enquiry concerns entering into a contract, and otherwise your consent under Art. 6 (1) (a) GDPR, which you give by ticking the box in the form. You can withdraw it at any time with effect for the future, for example by e-mail.
The message is delivered to our mailbox over an encrypted connection. No form service, analytics provider or captcha service is involved, and the website does not store the message in any database. To prevent the form from being misused for bulk mail, the server stores a one-way hash of your IP address together with a timestamp for one hour and then deletes it; the address itself is not recorded (Art. 6 (1) (f) GDPR).
We keep your enquiry for as long as it is needed to deal with it and for any collaboration that results from it. Business correspondence is subject to the statutory retention periods of six and ten years under German commercial and tax law.
Contact by e-mail
If you write to us directly by e-mail, the same applies: we process your address and the content of your message solely to answer your enquiry (Art. 6 (1) (b) and (f) GDPR), and delete the correspondence once it has been dealt with and no retention obligation applies.
Storage in your browser
This website sets no cookies, includes no analytics or advertising services, and loads no fonts, scripts or images from third-party servers.
If you choose the dark theme, your browser remembers this choice locally (local storage). It stays on your device, is not transmitted to us and is necessary for the service you requested (§ 25 (2) no. 2 TDDDG). You can delete it at any time in your browser settings.
Your rights
You have the right to access the data we process about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can object to processing based on our legitimate interest (Art. 21). You can withdraw consent you have given at any time (Art. 7 (3)). An e-mail to info@alstapp.de is enough.
You also have the right to lodge a complaint with a data protection supervisory authority; the authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information.
Last updated: November 2026