Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

ALBATROSS Holding GmbH
Klenzestraße 50, 80469 Munich, Germany
E-mail: sb@albatross-holding.com

No data protection officer has been appointed, as there is no legal obligation to do so.

2. Overview

We process personal data only to the extent necessary to operate the website, to handle your enquiries and – with your consent – to measure reach with Google Analytics. Fonts and the video on the home page are loaded from our own server. We do not use social media plugins.

3. Hosting and server log files

The website is hosted by united-domains AG, Gautinger Straße 10, 82319 Starnberg, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.

When you access the website, the server automatically records information transmitted by your browser: IP address, date and time of access, page accessed, referrer URL, browser type and version, and operating system. This data is not merged with other data sources.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and error-free provision of the website. Log files are deleted after 7 days unless they are needed to investigate a security incident.

4. SSL/TLS encryption

This website uses SSL or TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.

5. Contact by e-mail or phone

If you contact us by e-mail or phone, we process the information you provide (e.g. name, organisation, contact details, content of the enquiry) in order to handle your enquiry.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in responding to your enquiry. We delete the data as soon as it is no longer required for this purpose and no statutory retention obligations apply, for example under commercial and tax law (up to ten years).

6. Cookies and consent management

We use strictly necessary cookies without consent (Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG). All other cookies and similar technologies, in particular for reach measurement, are only set once you have given your consent via the cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR).

For consent management we use the consent tool CookieYes provided by CookieYes Limited, 3 Warren Yard, Warren Park, Milton Keynes MK12 5NW, United Kingdom. CookieYes stores your choice in a cookie (duration 12 months) and logs the consent with timestamp and truncated IP address so that it can be proven. The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR. An adequacy decision of the EU Commission exists for the United Kingdom.

You can withdraw or change your consent at any time with effect for the future via the “Cookie settings” link at the bottom of the page.

7. Reach measurement with Google Analytics

With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). It is integrated via the WordPress plugin Site Kit by Google.

Google Analytics uses cookies and similar technologies to evaluate your use of the website (e.g. pages visited, time spent, approximate location, device and browser). Google Analytics 4 does not store the IP address; it is only used to determine the approximate location and is then discarded. The data collected is generally transferred to Google servers in the USA. Google LLC is certified under the EU-US Data Privacy Framework; the EU standard contractual clauses apply in addition.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. User and event data stored by Google is deleted after the retention period set in Google Analytics. You can withdraw your consent at any time via the cookie settings. Further information can be found in Google’s privacy policy: policies.google.com/privacy.

8. Fonts and video

The fonts used and the video on the home page are stored locally on our server. No connection to servers of Google or other third-party providers is established for this purpose.

9. Links to external websites

This website contains simple links, for example to LinkedIn and airsight. Data is only transmitted when you click a link and access the external website. The respective provider is responsible for the processing there.

10. Your rights

Under the GDPR you have the following rights vis-à-vis us:

• Access to your stored data (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure (Art. 17) and restriction of processing (Art. 18)
• Data portability (Art. 20)
• Withdrawal of consent given, with effect for the future (Art. 7(3))

An informal message to sb@albatross-holding.com is sufficient to exercise these rights.

11. Right to object

Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to the processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

12. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.

13. Obligation to provide data

You are neither legally nor contractually obliged to provide us with personal data. However, the website cannot be displayed without the server log data. No automated decision-making, including profiling, takes place.

This English version is provided for convenience. The German version (Datenschutzerklärung) is legally binding.