Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

Allane SE
Parkring 33
85748 Garching
Deutschland
Email: support@allane.ltd
Telephone: +49 89 7080 81 0

2. Scope of This Policy

This Privacy Policy applies to the website allane.ltd and all sub-pages operated by Allane SE. It describes how we collect, use, store, and protect personal data when you visit our website or contact us. This website is operated for informational purposes only and does not provide paid services or financial products.

3. Data We Collect

3.1 Data Collected Automatically

When you visit our website, our servers automatically record certain technical information, including your IP address (anonymised after 7 days), browser type and version, operating system, referring URL, pages visited, and date and time of access. This data is processed on the basis of our legitimate interests (Article 6(1)(f) GDPR) to ensure the security and functionality of the website.

3.2 Data You Provide Voluntarily

If you use our contact form, we collect the information you provide, which may include your name, email address, telephone number, and the content of your message. This data is processed on the basis of your consent (Article 6(1)(a) GDPR) and, where applicable, to carry out pre-contractual measures at your request (Article 6(1)(b) GDPR).

3.3 Cookies and Tracking

We use cookies to enhance your browsing experience. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

4. How We Use Your Data

We use collected personal data for the following purposes:

• Responding to your enquiries submitted via the contact form or by email
• Ensuring the technical operation and security of our website
• Analysing website usage in aggregate to improve content and user experience
• Complying with our legal obligations under applicable German and EU law

We do not use your personal data for automated decision-making or profiling.

5. Legal Basis for Processing

We process your personal data only where we have a valid legal basis under the GDPR:

• Consent (Art. 6(1)(a) GDPR): For processing contact form submissions and non-essential cookies, where you have given your explicit consent.
• Legitimate interests (Art. 6(1)(f) GDPR): For server log data collected automatically to maintain website security and performance.
• Legal obligation (Art. 6(1)(c) GDPR): Where processing is required to comply with applicable law.

6. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, or as required by applicable law. Specifically:

• Server log data is retained for a maximum of 7 days, after which IP addresses are anonymised or deleted.
• Contact form submissions are retained for up to 12 months after the last correspondence, unless a longer retention period is required by law.
• Where you withdraw your consent, we will delete your data promptly, subject to any overriding legal retention obligations.

7. Data Sharing and Transfers

We do not sell, rent, or trade your personal data. We may share data with trusted service providers who assist in operating our website (e.g. hosting providers), subject to strict data processing agreements. All such processors are contractually obligated to handle data only on our instructions and in compliance with GDPR.

If any data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): You may request a copy of the personal data we hold about you.
• Right to rectification (Art. 16 GDPR): You may request correction of inaccurate data.
• Right to erasure (Art. 17 GDPR): You may request deletion of your data in certain circumstances.
• Right to restriction of processing (Art. 18 GDPR): You may request that we limit processing of your data.
• Right to data portability (Art. 20 GDPR): You may request your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR): You may object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at support@allane.ltd. We will respond within one month of receiving your request.

9. Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the competent supervisory authority. In Bavaria, Germany, this is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.

10. Website Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Our website uses TLS (HTTPS) encryption for all data transmissions. However, no internet transmission is completely secure, and we cannot guarantee the absolute security of data transmitted to our website.

11. Third-Party Links

Our website may contain links to third-party websites. We have no control over and accept no responsibility for the privacy practices or content of those sites. We encourage you to review the privacy policies of any external sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date of the most recent revision appears at the top of this page. We encourage you to review this policy periodically.

13. Contact

For any questions, concerns, or requests relating to this Privacy Policy, please contact us:

Allane SE
Parkring 33, 85748 Garching, Deutschland
Email: support@allane.ltd
Telephone: +49 89 7080 81 0