Privacy

At a glance

• No cookies, no local storage, no analytics or advertising services, no embedded videos, maps or plugins.
• Fonts and all files come from my own web space. Visiting the site does not create a connection to Google or any other third-party server.
• The server does not write access logs. It only processes what it needs to deliver the page (see the section “Hosting and server logs”).
• If you write to me through the form or by email, or call me, you give me the data I need to reply.
• I do not sell any data and only pass it on where this is necessary for running my business or required by law.

Controller

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Email

kontakt@alpventiur.com

Questions about data protection go to the same address. I answer them myself.

Hosting and server logs

This website and my mailbox are hosted by ALL-INKL.COM - Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The servers are located in its own data centres in Dresden, Germany. ALL-INKL.COM processes the data on my behalf under a data processing agreement pursuant to Art. 28 GDPR.

So that a page can be delivered, your browser sends technically necessary information to the server with every request, in particular the IP address, the requested address and information about the browser. The server needs this information to send the page back.

My hosting provider does not write access logs (log files): logging is switched off in my settings. There is therefore no stored list of visits, and I do not analyse any.

Purpose: delivering the website. Legal basis: Art. 6(1)(f) GDPR. My legitimate interest is in the website being available and working.

If I ever need to switch logging on for troubleshooting or to defend against an attack, I will do so only with shortened IP addresses (11.22.33.44 becomes 11.22.0.0) and with automatic deletion after seven days. In that case, I will update this policy beforehand.

Cookies and browser storage

This website does not set any cookies and does not store anything in local storage, session storage or any other browser storage. That is why there is no cookie banner. As with any website, your browser keeps the site’s files (fonts, images and scripts) in its cache for a while so that the page loads faster on your next visit. It also remembers that this website may only be accessed over an encrypted connection. Neither of these contains any information about visitors, and you can delete both in your browser at any time.

So that the animations run appropriately, the page checks in your browser whether “Reduce motion” is switched on, whether you are using a mouse or a finger, how large the window is and how sharp the screen is. The loading time shown in the footer is also measured by your browser itself. This information stays in your browser. It is neither stored nor sent to me or to third parties. Your choice between light and dark mode and the state of the “Pause motion” switch are not stored either. The hidden details and the mini-game on the homepage do not remember anything either. After a reload, everything starts again from the beginning.

Fonts and third-party content

The typefaces Archivo and Instrument Serif are stored on my own web space. Loading the page does not create a connection to Google Fonts or any other font provider. Scripts, images and animations also come exclusively from my server; no content from other providers is embedded.

Contact form

If you use the contact form, you send me the following information:

• required: email address and message
• optional: name, company, whether you are asking as an individual or for a business, the topic of your enquiry
• only if you request a callback: phone number

Purpose: answering your enquiry and, if you wish, preparing a quote. Legal basis: if the enquiry concerns a possible project, Art. 6(1)(b) GDPR (steps prior to entering into a contract). Otherwise Art. 6(1)(f) GDPR; my legitimate interest is in being able to answer enquiries.

How it works: the form sends your details over an encrypted connection (HTTPS) to a script on my web space. The script forwards them as an email to my mailbox at ALL-INKL.COM. No third-party form service is involved. The email contains only the details from the form, the language of the page and the date and time. It does not contain an IP address.

Spam protection: the form contains an invisible field that only bots fill in. The page also measures how much time passes between opening and sending the form, and sends this figure along with it. If the time is very short, the message was probably sent by a bot. Both are evaluated on my server; the figure does not appear in the email to me. There is no reCAPTCHA or any other verification service, and nothing is stored in your browser.

Storage period: see the section “Storage period”.

Email

If you write to me directly, for example at kontakt@alpventiur.com, you give me your email address, the content of your message and anything else it contains (for example, a signature). The purpose and legal basis are the same as for the contact form.

My mailbox is hosted by ALL-INKL.COM in Germany. Incoming emails pass through a spam and virus filter there. Transmission between mail servers is usually encrypted (transport encryption). This is not end-to-end encryption. For confidential documents, I am happy to suggest another method.

Phone and callback

If you request a callback in the form, you give me a phone number for this purpose. I use it only for that callback. I treat notes from the call in the same way as the enquiry itself.

Legal basis and storage period are the same as for the contact form.

Projects

If an enquiry turns into a project, I process the information I need for it: name, address and contact details; for businesses, the company name and, if available, the VAT identification number; and everything we discuss and exchange in connection with the project.

Purpose: preparing the quote, contract and invoice, carrying out the project, matching payments and, if you withdraw from a contract, handling the withdrawal. Legal basis: Art. 6(1)(b) GDPR (contract) and, for retaining quotes and invoices, Art. 6(1)(c) GDPR (legal obligations under the German Fiscal Code and the German VAT Act).

Without this information I cannot enter into a contract or issue an invoice. Who else receives them is listed under “Recipients”, and how long I keep them under “Storage period”.

Links to social networks

The footer and the menu of this website contain plain links to my profiles on LinkedIn, Instagram, TikTok, X, YouTube and GitHub. The logos next to them are graphics stored on my own server. No plugins, buttons or scripts from these providers are embedded. As long as nobody clicks a link, no data is sent to these providers.

Only when you click does your browser open the provider’s page. The provider then receives the usual connection information and, as a rule, only learns that the visit came from alpventiur.com. What happens after that is governed by the respective provider’s own privacy policy.

My social media profiles

I have profiles under the name “Alpventiur” on LinkedIn, Instagram, TikTok, X, YouTube and GitHub. This section also applies there; the profiles link here.

If you visit a profile, follow it, comment or send me a message there, you are using the platform of the respective provider. The provider processes data according to its own rules, in some cases also in the USA. I have no influence over this. For users in the EU, the following providers are responsible:

• LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn privacy policy
• Instagram: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Instagram privacy policy
• TikTok: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, jointly with TikTok Information Technologies UK Limited. TikTok privacy policy
• X: X Internet Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. X privacy policy
• YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. YouTube privacy policy
• GitHub: GitHub B.V., Prins Bernhardplein 200, 1097 JB Amsterdam, Netherlands, or GitHub, Inc., San Francisco, USA (GitHub names both). GitHub privacy policy

I see public profile information, comments and messages addressed to me. Some platforms also show me aggregated statistics about visits to my profile without identifying individuals. Under the case law of the Court of Justice of the European Union, I am a joint controller with the operator for such statistics (Art. 26 GDPR). LinkedIn and TikTok have published agreements for this under which they assume most of the obligations, such as handling access requests and ensuring data security: LinkedIn agreement and TikTok agreement. Rights relating to these statistics can be exercised most effectively directly with the operator; I forward any requests sent to me without undue delay.

Legal basis: Art. 6(1)(f) GDPR. My legitimate interest is in presenting my services there and being available to be contacted. If a message concerns a possible project, Art. 6(1)(b) GDPR. I treat messages to me in the same way as emails. I do not run paid advertising and do not use the platforms’ pixels or audience targeting features.

Google Search Console and Bing

I use Google Search Console to see how this website appears in Google Search, for example how often it is shown and clicked in search results. No Google code is embedded on the website for this purpose; ownership is verified with a confirmation file on my web space, which is not loaded when you visit the website. Visits to this website are therefore not transmitted to Google.

I also use Microsoft Bing Webmaster Tools to see how this website appears in Bing search. Bing took over the ownership verification from Google Search Console. No code is embedded on the website for this purpose either, and visits to this website are not transmitted to Microsoft.

Games and apps

Separate privacy policies apply to my own games and apps. They are published with each release and are then linked on the game’s page and in the store. This privacy policy applies only to this website.

Recipients

• ALL-INKL.COM - Neue Medien Münnich, Friedersdorf: hosting, form script and mailbox, as a processor. The servers are located in Germany.
• Authorities and advisers: only where the law requires it, for example the tax office for invoices, or for tax advice. Tax advisers are bound by professional secrecy.

Beyond that, I do not pass on or sell any data.

Third countries

No data is transferred via this website to countries outside the European Union or the European Economic Area. If you click a link to a social network, you switch to that provider’s service; whether and how the provider transfers data to third countries is determined by the provider itself.

Storage period

I store data only for as long as I need it for the purpose in question or the law requires me to keep it.

Your rights

Anyone whose data I process has the following rights:

• access to the stored data (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR), insofar as no retention obligation prevents this,
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR) for data they have provided to me themselves and that I process to prepare or perform a contract.

An email to kontakt@alpventiur.com is sufficient. I do not ask for consent, so there is no consent to withdraw here.

Right to object

Where I process data on the basis of Art. 6(1)(f) GDPR (legitimate interests), any data subject may object to this processing at any time on grounds relating to their particular situation (Art. 21 GDPR). I will then no longer process the data unless there are overriding compelling legitimate grounds, or the processing serves the establishment, exercise or defence of legal claims. A short email to kontakt@alpventiur.com is enough.

Complaints

Any data subject may lodge a complaint with a data protection supervisory authority, in particular in the country where they live or work or where the alleged infringement took place (Art. 77 GDPR). The supervisory authority responsible for me is:

No obligation, no automated decisions

Nobody is obliged to provide me with any data. However, the website cannot be delivered without the technical information sent when it is accessed, and I cannot reply to an enquiry without an email address and a message. All other fields are optional.

I do not carry out automated decision-making or profiling within the meaning of Art. 22 GDPR.

Security

The entire website, including the contact form, is encrypted with HTTPS. Access to the hosting account and the mailbox is protected by strong passwords and two-factor authentication.

Changes

If anything changes on the website or in the services I use, I will update this policy. The version published here is the one that applies. Last updated: 12 October 2026.