Privacy Policy
Privacy Policy
1. Controller
The controller responsible for the processing of personal data on this website is:
Aly Tech GmbH
Schleißheimer Straße 433
80935 Munich
Germany
Represented by:
Managing Director: Hao Li
Email: info@alytech.de
Phone: +49 152 2439 4137
2. General information
We take the protection of personal data seriously. Personal data is processed on this website only to the extent necessary to operate the website, process inquiries, provide website functions or comply with legal obligations.
This privacy policy explains what data we process, for what purposes, on what legal basis, and what rights data subjects have.
3. Hosting and server log files
When you visit this website, the hosting server automatically processes technical access data. This may include:
- IP address
- date and time of the request
- requested URL
- referrer URL
- browser type and version
- operating system
- amount of data transferred
- HTTP status code
The processing is carried out to technically provide the website, ensure security and stability, and prevent misuse.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and stable operation of the website.
4. Contact and inquiry form
If you contact us via the contact or inquiry form, we process the data you provide. This may include:
- name
- email address
- phone number
- country
- preferred language
- requested vehicle or product
- budget information
- message
- source page of the inquiry
- date and time of the inquiry
The purpose of processing is to handle your inquiry, contact you, advise you about vehicles and services, and conduct pre-contractual communication.
The legal basis is Article 6(1)(b) GDPR if the inquiry relates to pre-contractual measures or a possible contract. Where processing is required to organise and follow up inquiries, it is also based on Article 6(1)(f) GDPR. Our legitimate interest lies in the efficient handling of customer inquiries.
If explicit consent is requested in the form, Article 6(1)(a) GDPR may additionally apply. Consent can be withdrawn at any time with effect for the future.
5. Inquiry management in the backend
Incoming inquiries are stored in a protected administration area and processed by authorised persons. Access to this area is password-protected.
6. Cookies and consent settings
This website uses technically necessary cookies or similar storage technologies that are required for the operation of the website. These may include:
- session cookies for the administration area
- security-related cookies
- storage of cookie or consent preferences
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and functional operation of the website.
Currently, no Google Analytics, Meta Pixel or comparable marketing or tracking services are loaded. If analytics, marketing or external media services are used in the future, this privacy policy will be updated and, where required, consent will be obtained.
7. Recipients of personal data
Personal data is shared with third parties only where necessary to process your inquiry, operate the website, comply with legal obligations or protect legitimate interests.
Possible recipients may include:
- hosting and IT service providers
- technical service providers for maintenance and operation
- authorised internal persons
- public authorities where legally required
8. Storage period
Personal data is stored only for as long as necessary for the relevant purposes.
Inquiries are generally stored for as long as necessary to process, follow up and document communication. Statutory retention obligations remain unaffected.
9. Data subject rights
Data subjects have, subject to the legal requirements, in particular the following rights:
- right of access under Article 15 GDPR
- right to rectification under Article 16 GDPR
- right to erasure under Article 17 GDPR
- right to restriction of processing under Article 18 GDPR
- right to data portability under Article 20 GDPR
- right to object under Article 21 GDPR
- right to withdraw consent under Article 7(3) GDPR
10. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.
11. Requirement to provide data
Providing personal data via the contact form is voluntary. However, without the required information, we may not be able to process your inquiry or may only be able to do so to a limited extent.
12. Automated decision-making
Automated decision-making, including profiling, does not take place.
13. Status of this privacy policy
This privacy policy is a draft based on the currently known website functions. Before production launch, it should be legally reviewed and updated if additional services, cookies, tracking technologies or external media are used.