Privacy Policy

The ACE Alternatives GmbH(hereinafter referred to as “we”, “us”) is pleased to welcome you to our websitewww.ace-alternatives.com(hereinafter referred to as “website”).

Our principle is to only collect what we need and to process this information solely to provide you with the service you expect.

The controller responsible for the processing of personal data on our website within the meaning of the General Data Protection Regulation (hereinafter referred to as “GDPR”) is:

ACE Alternatives GmbH
Kurfürstendamm 195
10707 Berlin
Email: info@ace-alternatives.com
Phone: +49.30.3187697-00

Our appointed Data Protection Officer is:

Kertos GmbH
Briennerstraße 41
80333 Munich
Germany
Email: dsb@kertos.io

Personal data are all information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, or IP address. Information that we cannot (or only with disproportionate effort) associate with your person, for example by anonymizing the information, is not personal data. The processing of personal data (e.g. collecting, querying, using, storing, or transmitting) always requires a legal basis such as your consent.

Personal data are all information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, or IP address. Information that we cannot (or only with disproportionate effort) associate with your person, for example by anonymizing the information, is not personal data. The processing of personal data (e.g. collecting, querying, using, storing, or transmitting) always requires a legal basis such as your consent.

Scope and purpose of data processing

We collect and use personal data of our users only to the extent necessary to provide a functional website and our content and services or information.
When you access and use our website, we collect personal data that your browser automatically transmits to our server. This information is temporarily stored in a so-called log file.

The following information is collected without your intervention and stored until automatic deletion:

We process the aforementioned data for the following purposes:  

Legal basis
Art. 6 para. 1 lit. f GDPR serves as the legal basis. The processing of the aforementioned data is necessary for the provision of a website and to enable a secure and comfortable use and thus serves the protection of a legitimate interest of our company.

Retention period and data deletion
As soon as the aforementioned data are no longer required for the representation of the website, they are deleted (at the latest after 30 days). The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. Therefore, the user has no possibility to object. Further storage occurs in individual cases when required by law.

Third parties

Host

Our website is hosted by Neue Medien Muennich GmbH. The Neue Medien Muennich GmbH provides us with the technical platform and services necessary to operate our website and enable our online presence.

As a hosting provider, NMM processes the following data on our behalf:

Fonts

To display the content of our website, we use “Google Fonts” provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”).

To integrate Google Fonts, the fonts are loaded from a Google server. This typically involves the transmission of the following data:

Your data is generally transmitted to a Google server in the USA. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. “Google” is certified within this framework, so such transmissions are based on the legal basis according to Article 45 GDPR. When using Google Analytics, it cannot be excluded that the cookies set by Google Analytics collect other personal data in addition to the IP address. We would like to point out that Google may transfer this information to third parties where required by law or where such third parties process the information on Google’s behalf.

You can generally prevent the storage of cookies by adjusting your browser settings accordingly. However, we would like to point out that in this case, you may not be able to use all the functions of this website to their full extent.

More information on data protection at Google can be found at: https://policies.google.com/privacy.

We mainly process your data within the European Union (EU) and the European Economic Area (EEA). However, some of our service providers may be located in so-called “third countries” outside the EEA. The General Data Protection Regulation imposes high requirements for the transfer of personal data to third countries. All our data recipients must meet these requirements. Before we transfer your data to a service provider in a third country, each service provider is first checked for their level of data protection. A service provider is only selected if they can demonstrate an adequate level of data protection outside the EEA. Regardless of whether our service providers are located within the EEA or in third countries, each service provider must enter into a data processing agreement with us. For service providers outside the EEA, additional requirements must be met. According to Art. 44 et seq. GDPR, personal data can be transferred to service providers who meet at least one of the following conditions:

a.Real Time Tax Reporting

If you use our “Real Time Tax Reporting” service, our sister company Ace Tax Steuerberatungsgesellschaft acts as an independent controller and is the recipient of your personal data in this regard.

b. Within our company, only those individuals have access to your personal data who need it for the specified purposes. Your personal data is only shared with external recipients if we are legally entitled to do so or if you have consented. Below is an overview of the respective recipients:

On our website, we use HubSpot Forms, a service by HubSpot, Inc. (25 First Street, 2nd Floor, Cambridge, MA 02141, USA). When using HubSpot Forms, the following data is transmitted to HubSpot:

The purpose of HubSpot Forms is to enable the creation and management of online forms and to process the data collected through them. The service helps us efficiently handle customer inquiries and optimize our customer relationship management. The information is usually forwarded to a HubSpot server in the USA and stored there.

For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-US Data Privacy Framework. HubSpot is certified within this framework, so such transfers are based on the legal basis of Art. 45 GDPR. The data is stored for the duration of the business relationship or according to statutory retention periods.

The use of HubSpot Forms is based on our legitimate interest in efficient customer service and optimization of our business processes in accordance with Art. 6 para. 1 lit. f GDPR.

More information on data protection at HubSpot can be found at: https://legal.hubspot.com/de/privacy-policy

For our email marketing, we use the service HubSpot, provided by HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA (hereinafter “HubSpot”). HubSpot enables us to send emails through their servers.

When using HubSpot, the following personal data is processed:

This data is used to enable email dispatch and ensure deliverability. The processing is based on your consent according to Art. 6 para. 1 lit. aGDPR.

HubSpot stores the data on servers in the USA. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. HubSpot is certified within this framework, so the transfers are based on the legal basis according to Article 45 GDPR.

HubSpot may share this information with third parties where required by law or where such third parties process the data on behalf of HubSpot. You can object to the processing of your data at any time. However, please note that in this case, the sending of emails may no longer be ensured.

Further information on data protection at HubSpot can be found at: https://legal.hubspot.com/privacy-policy

On our website, we use the service HubSpot, provided by HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA. HubSpot is used to integrate content on our website. When using the service, the following data is transmitted to HubSpot:

The purpose of HubSpot is to enhance the presentation and functionality of our website and to dynamically integrate and manage content. This allows us to provide you with an optimized user experience.

The information is usually forwarded to a HubSpot server in the USA and stored there. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-US Data Privacy Framework. HubSpot is certified within this framework, so such transfers are based on the legal basis of Art. 45 GDPR.

The data is stored for the duration necessary to fulfill the purpose of data collection and is then deleted or anonymized.

Due to the improvement of our website functionality and the provision of an optimized user experience, we have a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

You have the right to object to the processing of your personal data at any time. You can do this by adjusting your browser settings accordingly or contacting us.

More information on data protection at HubSpot can be found at: https://legal.hubspot.com/de/privacy-policy

Scope and Purpose of Data Processing
Various tracking technologies are used on our website. These include, among other things, the setting of cookies, the creation of a recognizable value by combining various device and browser information (device fingerprinting), or the use of so-called “universal IDs”. In the following, the term “cookies” is used for any tracking technology.

Cookies are data sets that are stored on your computer when you visit our website and that enable your browser to be reassigned. Cookies store information such as your language settings, for the duration of your visit to our website, or the entries you make there.

There are different types of cookies. Session cookies are temporary cookies stored in the user’s internet browser until the browser window is closed and the session cookies are deleted. Permanent or persistent cookies are used for repeated visits and stored in the user’s browser for a predefined period. First-party cookies are set by the website the user visits. Only this website is allowed to read information from the cookies. Third-party cookies are set by organizations that do not operate the website the user visits.

It is also possible to differentiate between technically necessary, functional, and advertising cookies. The former are necessary to ensure basic functions of the website (e.g., storing the language setting). Functional cookies collect information about the user’s behavior and whether they receive error messages. Advertising cookies, on the other hand, are used to offer tailored advertising to the user.

Legal Basis
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR due to the described purposes of use, as we have an interest in a user-friendly presentation of our website. If you have given us your consent to the use of functional and advertising cookies by means of a notice provided by us on the website (“cookie banner”), the legality of the use is also based on Art. 6 para. 1 sentence 1 lit. a GDPR.

Storage Duration and Data Deletion
As soon as the data transmitted to us via the cookies is no longer required to fulfill the purposes described above, this information will be deleted. Further storage takes place in individual cases if this is required by law.

Configuration of Browser Settings
Most browsers are set to accept cookies by default. However, you can configure your browser to accept only certain cookies or no cookies at all. However, we would like to point out that you may no longer be able to use all the functions of our website if you deactivate cookies via your browser settings on our website. You can also delete cookies already stored in your browser or display the storage duration via your browser settings. It is also possible to set your browser to notify you before cookies are stored. Since the various browsers can differ in their respective functions, we ask you to use the respective help menu of your browser for the configuration options.

Cookielist

We use tracking and analysis tools to ensure continuous optimization and customized design of our website. With the help of tracking measures, we are also able to statistically record the use of our website by visitors and further develop our online offering for you using the insights gained. If you have given us your consent to use cookies via a notice provided by us on the website (“Cookie Banner”), the legality of the use is also determined in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. The following description of the tracking and analysis tools also shows the respective processing purposes and the processed data.

Google Tag Manager

This website uses the Google Tag Manager, which is provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: “Google”). Google Tag Manager enables the management of website tags. When you visit the website, an HTTP request is sent to Google. This transfers device information (such as your IP address) to Google and within a Google server in the USA. There is an adequacy decision by the EU Commission for data transfers to the USA, the EU-U.S. Data Privacy Framework. “Google” is certified within this framework, which is why such transfers are based on the legal basis of Art. 45 GDPR.

When using the Google Tag Manager, it cannot be excluded that the data collected by Google also captures other personal data. We point out that Google may transfer this information to third parties if required by law or as far as third parties process this data on behalf of Google.

Processing takes place exclusively after your explicit consent has been given. You can revoke your consent to processing and transfer to third countries at any time. The legality of the processing carried out until the revocation is not affected by this.

More information about data protection at Google can be found at:https://policies.google.com/privacy.

Google – Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: “Google”). Google Analytics uses cookies and similar tracking methods such as Device Fingerprinting.

The information stored in these cookies, e.g. about the time, place and frequency of your use of our website, is usually transferred to a Google server in the USA and stored there. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. “Google” is certified within this framework, which is why such transfers are based on the legal basis according to Article 45 GDPR. In addition, so-called Standard Contractual Clauses (SCC) have been concluded with “Google”. When using Google Analytics, it cannot be excluded that the cookies set by Google Analytics capture other personal data in addition to the IP address. We point out that Google may transfer this information to third parties if required by law or as far as third parties process this data on behalf of Google.

Google will use the information generated by the cookie to evaluate your use of the website, to compile reports on website activity and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google according to Google.

You can usually prevent the storage of cookies by setting your browser software accordingly. However, we point out that you may not be able to use all functions of this website to their full extent in this case.

You can revoke your consent to processing and transfer to third countries at any time. The legality of the processing carried out until the revocation is not affected by this.

More information about data protection at Google can be found at:https://policies.google.com/privacy

Google Conversion Linker

This website uses conversion tracking, which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as well as by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: “Google”). Google uses “cookies” and similar tracking technologies.

The information stored in these cookies, including the time, place, and frequency of your use of our website, is usually transferred to a Google server in the USA and stored there. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. Google is certified within this framework, which is why such transfers are based on the legal basis according to Article 45 GDPR. In addition, Standard Contractual Clauses (SCC) have been concluded with Google.

When using the Google Conversion Linker, it cannot be excluded that the cookies set by Google capture other personal data in addition to the IP address. We point out that Google may transfer this information to third parties if required by law or as far as third parties process this data on behalf of Google.

Google uses the information generated by the cookie to evaluate your use of the website, create reports on website activities, and provide other services related to website and internet usage for the website operator.

You can prevent the storage of cookies in your browser settings. However, we point out that you may not be able to use all functions of this website to their full extent in this case.

However, this does not affect the legality of the processing carried out up to that point.

More information about data protection at Google can be found at:https://policies.google.com/privacy.

On our website we use the “reCAPTCHA” service, which is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: “Google”). When using the service, the following data is transmitted to Google:

The purpose of “reCAPTCHA” is to determine whether an automated user or a real person is hidden behind the user in the case of contacting via our contact form. The service thus protects against a failure of the website due to a high number of automated inquiries. The information is usually transferred to a Google server in the USA andstored there. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-U.S. Data Privacy Framework. “Google” is certified within this framework, which is why such transfers are based on the legal basis of Art. 45 GDPR.

The data is deleted again after transmission to us.

Due to the protection of the website and the associated assurance of the provision of the website, there is a legitimate interest for us in the sense of Art. 6 para. 1 lit. f GDPR.

More information about data protection at Google can be found at: https://policies.google.com/privacy.

LinkedIn

On our website, we use plugins from the social network LinkedIn, which is operated by the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (hereinafter “LinkedIn”). When using the plugin, the following data is transmitted to LinkedIn:

The purpose of the LinkedIn plugin is to give our visitors the opportunity to share content from our website directly on LinkedIn or to log in to our website via LinkedIn. The plugin helps us improve our online presence and increase interaction with our users. The information is usually transferred to a LinkedIn server in the USA and stored there.

For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-US Data Privacy Framework. LinkedIn is certified within this framework, which is why such transfers are based on the legal basis of Art. 45 GDPR. The data is processed and stored according to LinkedIn’s privacy policies.

The processing of your personal data is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future.

More information about data protection at LinkedIn can be found at:https://www.linkedin.com/legal/privacy-policy

We are committed to keeping your personal data confidential. To prevent manipulation, loss or misuse of your data stored with us, we take extensive technical and organizational security precautions, which are regularly reviewed and adapted to technological progress.

However, we point out that due to the structure of the Internet, it is possible that the rules of data protection and the security measures mentioned above are not observed by other persons or institutions outside our area of responsibility. In particular, unencrypted data – e.g., when transmitted by e-mail – can be viewed by third parties. We have no technical influence on this. It is your responsibility as a user to protect the data you provide against misuse by encryption or other means.

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage can also occur if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. Blocking or deleting of the data also occurs if a storage period prescribed by the aforementioned norms expires unless further storage of the data is necessary for the conclusion or fulfillment of a contract.

With regard to your personal data, you have the following legal rights towards us:

Right of Access

You have the right to request confirmation as to whether we are processing personal data concerning you. If this is the case, you have the right to access this personal data and further information, e.g., about the processing purposes, the recipients, and the planned duration of storage or the criteria for determining the duration.

Right to Rectification

You have the right to request the correction of inaccurate data without undue delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete data.

Right to Erasure (“Right to be Forgotten”)

You have the right to request deletion if processing is not necessary. This is the case, for example, when your data is no longer needed for the original purposes, when you have withdrawn your consent under data protection law, or when the data has been processed unlawfully.

Right to Restrict Processing

You have the right to restrict processing, e.g., if you believe that the personal data is inaccurate.

Right to Data Portability

You have the right toreceive the personal data concerning you in a structured, commonly used and machine-readable format.

Right to Object

You have the right to object at any time to the processing of certain personal data concerning you for reasons arising from your particular situation. In the case of direct advertising, you as the data subject have the right to object at any time to the processing of personal data concerning you for such advertising purposes; this also applies to profiling insofar as it is related to such direct advertising.

Right to Withdraw Your Consent under Data Protection Law

You can withdraw your consent to the processing of your personal data at any time with effect for the future. However, this does not affect the lawfulness of the processing carried out until the withdrawal.

Regardless of these rights, you have the right to lodge a complaint with a supervisory authority at any time if you believe that the processing of your personal data violates data protection regulations.