Alphaiota

Back to the start

Privacy notice

This page states in plain language which data we process on this website, why we do so and on what legal basis. This page is a translation. The German version is authoritative.

Version: 08.10.2026

1. Introduction

This website is operated by Basilius Peetz, sole proprietorship, trading under the business name Alphaiota.

It matters to us to treat the data of our website visitors with care and to protect it as well as possible. We therefore make every effort to meet the requirements of the GDPR.

Below we explain how we process your data on this website, in language that is as clear as possible. In short: this website sets no cookies, measures nothing and embeds no third-party content. Data arises when you load a page, when you submit the contact form and when you write to us or call us.

2. General information

2.1 Processing of personal data and other terms

Data protection applies to the processing of personal data. Personal data means all data with which you can be identified personally, for example the IP address of the device you are sitting at. Such data is processed whenever anything is done with it. For example, your browser transmits its IP address to our hosting provider, where it is stored automatically. That is processing (Art. 4 No. 2 GDPR) of personal data (Art. 4 No. 1 GDPR). These and further legal definitions are in Art. 4 GDPR.

2.2 Applicable rules: GDPR, BDSG and TDDDG

The scope of data protection is set by law: here the GDPR (General Data Protection Regulation) as a European regulation and the BDSG (Federal Data Protection Act) as national law.

The TDDDG (Telecommunications Digital Services Data Protection Act) supplements the GDPR where access to end devices and the use of cookies are concerned. It replaced the former TTDSG in May 2024.

2.3 The controller

The controller within the meaning of the GDPR is responsible for data processing on this website. This is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data. You can reach the controller at:

Basilius Peetz
Alphaiota
Osterstr. 43A
30159 Hannover
Germany
Phone: +49 511 321001
E-mail: peetz@alphaiota.de

We have not appointed a data protection officer because the legal requirements for doing so are not met.

2.4 How data is processed on this website in general

As mentioned, some data (for example the IP address) is collected automatically. It is mostly needed to provide the website technically. Where we use further personal data or collect other data, we tell you or ask for your consent.

Other personal data you give us deliberately, for example through our contact form. You will find detailed information below.

2.5 Your rights

The GDPR gives you extensive rights. They include free information about the origin, recipients and purpose of your stored personal data. You can also demand correction, restriction or deletion of this data or lodge a complaint with the competent data protection supervisory authority. You can withdraw any consent you have given at any time. Section 4 describes these rights in detail and how to exercise them.

2.6 Data protection: our view

For us, data protection is more than a tiresome duty. Personal data has great value, and handling it carefully should be a matter of course in a digital world. You should also be able to decide yourself what happens to your data, when and by whom. We therefore commit to complying with all legal provisions, collect only the data we need and treat it confidentially.

2.7 Disclosure and deletion

Disclosure and deletion of data are important and sensitive topics, so a short word on our general approach first.

Data is disclosed only on a legal basis and only where necessary. This is the case in particular with a so-called processor with whom a data processing agreement under Art. 28 GDPR has been concluded.

We delete your data when the purpose and the legal basis for processing no longer apply and no other legal obligations prevent deletion, in particular commercial and tax retention periods of six and ten years. Art. 17 GDPR gives an overview.

2.8 Hosting

This website is not operated on our own servers but by a hosting provider. The provider is:

STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany

STRATO processes on our behalf all data that arises when you visit this website. This includes in particular the automatically generated server log files (see section 3.1), the data sent through our contact form (see section 3.4) and the delivery of all content, images and fonts of this website.

[[TO BE COMPLETED: name the data processing agreement with STRATO under Art. 28 GDPR only once it has been concluded in the STRATO customer area, e.g. “We have concluded a data processing agreement with STRATO under Art. 28 GDPR.” Also confirm the server location according to the contract.]]

The legal basis for using the provider is Art. 6 (1) (f) GDPR. We have a legitimate interest in a secure, stable and professionally provided website.

Further information: https://www.strato.de/datenschutz/

Processing personal data always needs a legal basis. Art. 6 (1) GDPR provides for the following:

In the following sections we name the specific legal basis for each processing operation.

3. What happens on our website

When you visit our website we process personal data about you. To protect this data as well as possible against unauthorised access by third parties, we use SSL/TLS encryption. You can recognise the encrypted connection by the lock symbol or the prefix https in your browser’s address bar. Below you learn which data is collected when you visit our website, for what purpose and on what legal basis.

3.1 Data collected when you load the website

When you load the website, information is stored automatically in so-called server log files. It is the following:

This data is needed to show you our website reliably and without problems. In particular it serves these purposes:

The processing takes place under Art. 6 (1) (f) GDPR from our legitimate interest in the functionality and security of the website. Where possible this data is stored pseudonymised and deleted once its purpose is met. An exception applies when a security-relevant event occurs. In that case the server log files are kept until the event has been resolved and fully clarified.

[[TO BE COMPLETED: storage period of the server log files according to STRATO or according to your own server settings, e.g. “Where the server log files allow the data subject to be identified, the data is stored for a maximum of … days.”]]

The data is not merged with other data.

3.2 Fonts

The font used on this website (Manrope) is delivered by the same server the pages come from. We embed no external font services. When you visit, your browser retrieves no content from third-party servers. There are no embedded videos, maps or social network buttons. Section 2.8 applies.

3.3 Cookies

This website sets no cookies and stores nothing else on your device. You therefore see no consent banner on this website.

3.4 Data processing through your input

3.4.1 Contact form

On our website we offer a form through which you can send a non-binding enquiry. We process the data you enter, in particular:

Mandatory fields are marked as such. For evidence we also store the time of sending, the language of the page and the fact that you agreed to the notice in the form. The transmission is encrypted.

We use this data solely to process your enquiry and to contact you by e-mail or phone. The legal basis is your consent, which you give by ticking the box in the form (Art. 6 (1) (a) GDPR) and, where your enquiry aims at concluding a contract, Art. 6 (1) (b) GDPR. You can withdraw your consent at any time with effect for the future, for example by e-mail to peetz@alphaiota.de.

We store the enquiry in a list of enquiries on the server on which this website is hosted (see section 2.8) and have ourselves notified of new enquiries by e-mail.

[[TO BE COMPLETED: provider of the e-mail sending and of the mailbox in which the notification arrives, with name, address, location of the servers and, if outside the EU or EEA, the basis for the transfer. State a data processing agreement under Art. 28 GDPR only once it has been concluded.]]

Protection against abuse: the form contains a hidden field and checks how much time passed between loading the page and submitting, so that automatic programs are recognised. We also limit how many enquiries are possible per internet address and hour. For this we keep your IP address in the server’s memory for one hour at most. It is not stored in the list of enquiries.

We delete the data as soon as it is no longer needed for the purpose for which it was collected, at the latest three years after the last contact. Statutory retention duties remain unaffected.

You are not obliged to give us any data. Without an e-mail address and a phone number, however, we cannot accept an enquiry through the form.

3.4.2 Contact by e-mail and phone

When you contact us by e-mail or phone, we process your contact data and the information you give us. E-mails are stored on the mail server and partly on the respective devices. Depending on the matter, the legal basis is Art. 6 (1) (f) GDPR or Art. 6 (1) (b) GDPR. The data is deleted as soon as its purpose ceases and the law allows it.

3.5 What we do not use

This website has no analytics or tracking tools, no advertising pixels, no newsletter and no embedded content from social networks. There is no automated decision-making, including profiling.

4. Your rights in detail

4.1 Right of access, Art. 15 GDPR

You can request information on whether personal data about you is processed. If so, you can request further information on how it is processed. A detailed list is in Art. 15 (1) (a) to (h) GDPR.

4.2 Right to rectification, Art. 16 GDPR

This right covers the correction of inaccurate data and the completion of incomplete personal data.

4.3 Right to erasure, Art. 17 GDPR

This so-called right to be forgotten gives you the right, under certain conditions, to demand the deletion of your personal data. This is generally the case when the purpose of the processing has ceased, when consent has been withdrawn or when the processing took place without a legal basis. A detailed list is in Art. 17 (1) (a) to (f) GDPR.

4.4 Right to restriction of processing, Art. 18 GDPR

This right depends on the conditions in Art. 18 (1) (a) to (d) GDPR.

4.5 Right to data portability, Art. 20 GDPR

This governs the right to receive your own data in a common, machine-readable format and to transmit it to another controller. It applies to data processed on the basis of consent or a contract and where technically feasible.

4.6 Right to object, Art. 21 GDPR

Where we process your data on the basis of Art. 6 (1) (e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation. We then no longer process the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where your personal data is processed for direct marketing, you have the right to object at any time. This also applies to profiling to the extent it is related to such direct marketing. If you object, your data will no longer be used for direct marketing.

4.7 Right regarding individual decisions, Art. 22 GDPR

You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you. This right too is limited and supplemented by Art. 22 (2) and (4) GDPR.

You can withdraw any consent you have given at any time with effect for the future. The lawfulness of the processing carried out until the withdrawal is not affected.

We also point to your rights under Sections 32 ff. BDSG, which largely match the rights described.

4.9 Right to lodge a complaint, Art. 77 GDPR

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR. Competent are, among others, the authority where you usually live or the authority responsible for us:

Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5
30159 Hannover
Germany

4.10 How to exercise your rights

For all matters concerning your data, an informal message to peetz@alphaiota.de or to the address named in section 2.3 is enough. We process your request within one month.

5. Changes to this privacy notice

We adapt this privacy notice as soon as the legal situation, our services or the data processing on this website change. The version available on this page applies. The current version date is stated at the top of the document.