Legal

Privacy Policy

Effective Date: April 4, 2025

1. Introduction

This Privacy Policy describes how Alttagger B.V. ("Alttagger," "we," "us," or "our") collects, uses, processes, and discloses your information, including personal information, in connection with your access to and use of the Alttagger website and services (collectively, the "Service").

We are committed to protecting your privacy and ensuring the security of your personal information. Please read this Privacy Policy carefully to understand our practices regarding your personal data and how we will treat it.

2. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: [email protected]

3. Personal Information We Collect

3.1 Information You Provide to Us

When you register for an account, subscribe to our Service, or communicate with us, we may collect the following information:

  • Account Information: Name, email address, business name, business size, business type, business location, and password.
  • Payment Information: We do not directly collect or store your payment information. Payments are processed by our third-party payment processor, Paddle, which has its own Privacy Policy that you will need to agree to.
  • Communications: Information you provide when you contact us for customer support or other inquiries.

3.2 Information We Collect Automatically

When you use our Service, we automatically collect certain information about your device and usage:

  • Device Information: IP address, browser type and version, operating system, and other technical information about the device you use to access the Service.
  • Usage Data: Information about how you use our Service, including pages visited, features used, actions taken, time spent on the Service, and referring website or source.
  • Cookies and Similar Technologies: We use cookies and similar tracking technologies to collect information about your browsing activities and to distinguish you from other users of our Service. For more information about the cookies we use, see Section 8 below.

3.3 Information From Third Parties

We may receive information about you from third parties, such as:

  • Marketing and Analytics Partners: We work with analytics providers (such as Google Analytics) and marketing partners who provide us with information about your interactions with our Service and advertisements.
  • Affiliates: If you were referred to our Service through an affiliate program, we may receive information about the referral.

4. How We Use Your Information

We use the information we collect for various purposes, including:

4.1 Providing and Improving the Service

  • To set up and maintain your account
  • To provide the features and functionality of the Service
  • To process your transactions and send related information
  • To improve and develop the Service and create new features
  • To understand how users interact with the Service
  • To troubleshoot and fix issues with the Service

4.2 Communications

  • To respond to your inquiries and support requests
  • To send administrative messages, updates, and security alerts
  • To send marketing communications, in accordance with your preferences

4.3 Marketing and Advertising

  • To deliver personalized content and advertisements that may be of interest to you
  • To measure the effectiveness of marketing campaigns
  • To invite you to participate in surveys or other promotional activities

4.4 Legal and Security

  • To enforce our Terms and Conditions and other policies
  • To protect the security and integrity of our Service
  • To comply with applicable laws and regulations
  • To respond to legal requests and prevent harm

5. How We Share Your Information

We may share your personal information with the following categories of recipients:

5.1 Service Providers

We share information with third-party service providers who help us operate, provide, improve, and market the Service, such as:

  • Email Service Providers: We use Postmark and Amazon AWS to send emails.
  • Payment Processors: We use Paddle to process payments.
  • Analytics and Marketing Tools: We use Google Analytics, Google Ads, Google Tag Manager, Bento, and Klaviyo to analyze Service usage and market our products.

5.2 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

5.4 With Your Consent

We may share your information with third parties when you have given us your consent to do so.

6. Data Retention

We retain your personal information for as long as necessary to provide the Service you have requested, or for other essential purposes such as complying with our legal obligations, resolving disputes, and enforcing our Terms and Conditions.

When your account is terminated, we will delete or anonymize your personal information, unless we need to retain certain information for legitimate business or legal purposes. In such cases, your personal information will be isolated from further processing and only retained for the period necessary for those specific purposes.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information. Under the General Data Protection Regulation (GDPR) and similar laws, these rights may include:

7.1 Access and Information

You have the right to request information about the personal data we hold about you and how we process it.

7.2 Correction

You have the right to request that we correct inaccurate or incomplete personal information about you.

7.3 Deletion

You have the right to request that we delete your personal information in certain circumstances (often referred to as the "right to be forgotten").

7.4 Restriction of Processing

You have the right to request that we restrict the processing of your personal information in certain circumstances.

7.5 Data Portability

You have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format, and to request that we transfer this information to another service provider where technically feasible.

7.6 Objection

You have the right to object to our processing of your personal information based on our legitimate interests, and to object to processing for direct marketing purposes.

7.7 Withdraw Consent

Where we process your personal information based on your consent, you have the right to withdraw that consent at any time.

7.8 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within a reasonable timeframe, typically within one month, unless your request is particularly complex or you have made multiple requests, in which case we may respond within three months.

You can delete your account at any time through your account settings or by contacting us.

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work more efficiently and provide information to the website owners.

8.2 How We Use Cookies

We use cookies and similar tracking technologies for the following purposes:

  • Essential Cookies: These are necessary for the Service to function properly and cannot be disabled.
  • Functional Cookies: These enable enhanced functionality and personalization, such as remembering your preferences.
  • Analytics Cookies: These help us understand how visitors interact with our Service by collecting and reporting information anonymously.
  • Marketing Cookies: These are used to track visitors across websites to display relevant advertisements.

8.3 Third-Party Cookies

Some cookies are placed by third parties on our behalf, such as Google Analytics, Google Ads, and other marketing partners. These third parties may use cookies, web beacons, and similar technologies to collect information about your use of our Service and other websites.

8.4 Cookie Management

Most web browsers allow you to manage your cookie preferences. You can set your browser to refuse cookies, or to alert you when cookies are being sent. Please note that if you disable or refuse cookies, some parts of our Service may not function properly.

For more detailed information about the specific cookies we use, their purposes, and how to manage them, please visit our Cookie Notice (available via the Cookie Banner on our website).

9. Data Security

We have implemented appropriate technical and organizational measures to protect your personal information from accidental loss and unauthorized access, use, alteration, and disclosure.

Our hosting provider, Hetzner, is certified in accordance with DIN ISO/IEC 27001, an internationally recognized standard for information security. This certification confirms that Hetzner has established and implemented an appropriate information security management system (ISMS), which includes protecting the security, confidentiality, and integrity of customer data.

Our security measures include:

  • Encryption of sensitive data both in transit and at rest
  • Secure access controls and authentication systems
  • Regular security assessments and testing
  • Employee training on data protection and security practices
  • Physical and electronic safeguards for our systems

However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately.

10. Data Breach Procedures

In the event of a data breach that affects your personal information, we will:

  1. Assess the nature and scope of the breach
  2. Take immediate steps to contain and mitigate the breach
  3. Notify affected individuals without undue delay, typically within 72 hours of becoming aware of the breach, where feasible and where required by law
  4. Provide information about the breach and steps you can take to protect yourself
  5. Notify relevant supervisory authorities as required by applicable laws
  6. Conduct a thorough investigation and implement measures to prevent future breaches

11. International Data Transfers

Your personal information may be transferred to, and processed in, countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country.

Specifically, our servers are located in the European Union, but some of our service providers may be based in other countries.

By using our Service, you consent to the transfer of your information to these countries in accordance with this Privacy Policy.

12. Children's Privacy

Our Service is not directed to individuals under the age of 16, and we do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete such information as soon as possible.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us at [email protected].

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make material changes, we will notify you by email or by posting a notice on our website prior to the changes becoming effective.

We encourage you to periodically review this Privacy Policy for the latest information on our privacy practices. Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

14. Additional Information for European Users

14.1 Legal Basis for Processing

Under the GDPR, we must have a legal basis for processing your personal information. We generally rely on the following legal bases:

  • Performance of a Contract: To provide you with the Service you have requested, including setting up and maintaining your account.
  • Legitimate Interests: To pursue our legitimate business interests, such as to improve our Service, conduct business analytics, prevent fraud, and for marketing purposes. We balance our interests against your rights and freedoms and will not process your information if your rights override our interests.
  • Consent: In some cases, we process your information based on your consent, such as for certain types of marketing communications. You can withdraw your consent at any time.
  • Legal Obligation: To comply with our legal obligations under EU law or the laws of EU Member States.

14.2 Data Protection Authority

If you are located in the European Economic Area and believe that our processing of your personal information infringes data protection laws, you have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or the place of the alleged infringement.

15. California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

  • The right to know what personal information we collect, use, disclose, and sell
  • The right to request deletion of your personal information
  • The right to correct inaccurate personal information
  • The right to opt-out of the sale or sharing of your personal information
  • The right to limit the use and disclosure of sensitive personal information
  • The right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us using the information provided in Section 2.

16. Do Not Track Signals

Some browsers have a "Do Not Track" feature that signals to websites that you visit that you do not want to have your online activity tracked. Due to the lack of a common interpretation of Do Not Track signals across the industry, we currently do not respond to Do Not Track signals on our website.