Privacy Policy

We appreciate your interest in our website. The protection of your personal data is important to us. Below, we inform you about which data is processed when you visit our website and which rights you have under the General Data Protection Regulation (GDPR).

I. Controller
The data controller responsible for this website is:

Alphastone GmbH & Co. KG
Marvin Görlitz
Steekberg 9
24107 Kiel
Germany

Phone: +49 431 90 89 25 – 00
Fax: +49 431 90 89 25 – 21
Email: info@alphastone.eu

The data protection officer of the provider is:
Marvin Görlitz

II. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

If you wish to exercise these rights, please contact us using the contact details provided above.

III. Data Security
For security reasons and to protect the transmission of confidential content, our website uses SSL/TLS encryption. You can recognize an encrypted connection by the lock symbol in your browser bar and the fact that the address line begins with “https://”.

IV. Data Processing When Visiting Our Website
1. Server Log Files
When you access our website, your browser automatically transmits information to our hosting provider for technical reasons. This includes:
- IP address
- Browser type and version
- Operating system
- Date and time of access
- Referrer URL (the previously visited page)
- Accessed pages

This data is technically necessary to deliver the website content correctly and ensures the stability and security of the service.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in a secure and stable operation).  
Storage period: The data will be deleted after your session ends.

2. Cookies
Our website does not use cookies.

3. Analytics and Tracking Tools
No analytics or tracking tools (e.g., Google Analytics, Matomo, Pixels) are used.

V. Forms and Communication
If you contact us via a form (e.g., contact form or quote request) or by email, we process the data you provide (e.g., contact details, information about boats and requested services).

Purpose: Processing and responding to your request.  
Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual or contractual measures).  
Storage period: The data will be deleted once your request has been fully processed and no legal retention obligations exist.

VI. Embedded Services and Content
1. OpenStreetMap
We use maps from the OpenStreetMap (OSM) service to display our locations. The provider is the OpenStreetMap Foundation (UK).

When accessing the maps, your IP address and possibly other browser information are transmitted to OSM servers.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in a user-friendly display of directions and location information).

If you do not want data to be transmitted to OSM, please refrain from using the map function.

2. Other External Services
Other external services such as Google Fonts, YouTube, social media plugins, or analytics tools are not used.

VII. Special Processing
Business Partner and Supplier Data  
As part of our business activities, we process contact details of contact persons, as well as contractual and billing data of our business partners and suppliers.

Purpose: Initiation and execution of business relationships, service, and billing.  
Legal basis: Art. 6 para. 1 lit. b GDPR (contract/initiation) and Art. 6 para. 1 lit. f GDPR (legitimate interest in efficient business operations).  
Storage period: After the purpose ceases, subject to statutory retention obligations (e.g., HGB/AO).

Other Internal Systems  
As part of our business activities, personal data may also be processed in systems not directly integrated into the website, such as CRM systems, applicant management tools, or similar applications. Where data is transferred or processed in this way, it is done in compliance with applicable data protection regulations. Details on the type and scope of this data processing can be obtained from our Data Protection Officer upon request.

VIII. Disclosure of Data
Your personal data will only be transferred to third parties if this is necessary for processing (e.g., technical service providers supporting us in operating the website) or if we are legally required to do so.

IX. International Data Transfer
If we transfer personal data to service providers or partners outside the European Union (EU) or the European Economic Area (EEA), this will only occur if an adequate level of data protection is ensured, for example, through the use of Standard Contractual Clauses or other appropriate safeguards. You can request information on this from our Data Protection Officer. Currently, no data transfers to third countries without adequate data protection take place.

X. Legal Notice and Further Information
Further information about our company can be found in the legal notice (Impressum).