Privacy Policy
1) Introduction and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how we handle your personal data when you use our website. Personal data means any information relating to an identified or identifiable natural person. („Wir freuen uns, dass Sie unsere Website besuchen…“)
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is AVLO GmbH, Kolonnenstr. 8, 10827 Berlin, Germany, Tel.: +49 30 754 36 515 , Email: info@avlo.net The controller is the natural or legal person who determines, alone or jointly with others, the purposes and means of the processing of personal data.
2) Data Collection When Visiting Our Website
2.1 When you use our website for informational purposes only—meaning you do not register or otherwise transmit information to us—we only collect the data that your browser transmits to our server (so‑called “server log files”). When you access our website, we collect the following data, which is technically necessary to display the website:
The website visited
Date and time of access
Amount of data sent in bytes
Source/referrer from which you accessed the page
Browser used
Operating system used
IP address used (where applicable: in anonymized form)
Processing is carried out pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not shared or used in any other way. However, we reserve the right to review server log files retrospectively if there are concrete indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” prefix and the lock symbol in your browser.
3) Hosting & Content Delivery Network
We use a hosting provider to operate our website and display its content. The provider performs its services—either directly or through selected subcontractors—exclusively on servers located within the European Union.
All data collected on our website is processed on these servers.
We have concluded a data processing agreement with the provider to ensure the protection of our visitors’ data and to prevent unauthorized disclosure to third parties.
4) Cookies
To make your visit to our website attractive and to enable certain functions, we use cookies—small text files stored on your device. Some cookies are deleted automatically when you close your browser (“session cookies”), while others remain stored for longer and allow us to save your settings (“persistent cookies”).
If personal data is processed through cookies, processing is based on:
Art. 6(1)(b) GDPR (performance of a contract),
Art. 6(1)(a) GDPR (consent), or
Art. 6(1)(f) GDPR (legitimate interest in optimal website functionality and user‑friendly design).
You can configure your browser to inform you about the setting of cookies, allow cookies only in individual cases, exclude them entirely, or delete them automatically after closing the browser.
Please note that disabling cookies may limit the functionality of our website.
5) Contacting Us
When you contact us (e.g., via contact form or email), personal data is collected. The specific data collected is shown in the respective contact form. This data is used exclusively to respond to your inquiry and for the associated technical administration.
Legal basis:
Art. 6(1)(f) GDPR (legitimate interest in responding to your request)
Art. 6(1)(b) GDPR (pre‑contractual measures), if applicable
Your data will be deleted once your inquiry has been fully resolved, unless statutory retention obligations apply.
6) Use of Customer Data for Direct Advertising
Postal Advertising
Based on our legitimate interest in personalized direct marketing, we reserve the right to store your name, postal address, and—if provided during the contractual relationship—your title, academic degree, year of birth, and professional or business designation, pursuant to Art. 6(1)(f) GDPR, and to use this information to send you interesting offers and information by postal mail.
You may object to this use of your data at any time.
7) Web Analytics Services
Matomo
This website uses the web analytics service provided by: InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand (“Matomo”)
The service collects and stores pseudonymized visitor data, including device information such as IP address and browser details. Pseudonymized usage profiles may be created and evaluated for the same purpose. Cookies may be used for this purpose.
The information generated by the cookie is not used to personally identify visitors and is not merged with other personal data.
If data is transferred to the provider’s servers and the service is not hosted locally, we have concluded a data processing agreement to ensure data protection and prevent unauthorized disclosure.
All processing activities—including setting cookies—take place only if you have given your explicit consent pursuant to Art. 6(1)(a) GDPR. Without consent, Matomo is not used.
You may withdraw your consent at any time via the cookie‑consent tool on our website.
If Matomo is self‑hosted, no data is transferred to the provider. New Zealand is covered by an EU adequacy decision.
8) Tools and Other Technologies
8.1 Cookie‑Consent Tool
We use a cookie‑consent tool to obtain valid user consent for cookies and cookie‑based applications. The tool displays an interface where users can grant consent via checkboxes. Cookies requiring consent are only loaded if the user has granted such consent.
The tool sets technically necessary cookies to store your preferences. Personal data is generally not processed.
If personal data (e.g., IP address) is processed for storing or logging consent, processing is based on Art. 6(1)(f) GDPR (legitimate interest in lawful and user‑friendly consent management) and Art. 6(1)(c) GDPR (legal obligation to obtain consent for non‑essential cookies).
A data processing agreement has been concluded with the provider where required.
9) Rights of Data Subjects
You have the following rights under the GDPR:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to notification (Art. 19 GDPR)
Right to data portability (Art. 20 GDPR)
Right to withdraw consent (Art. 7(3) GDPR)
Right to lodge a complaint (Art. 77 GDPR)
Right to Object
If we process your personal data based on our legitimate interests, you may object at any time on grounds relating to your particular situation. If you object, we will stop processing unless we can demonstrate compelling legitimate grounds.
If your data is processed for direct marketing, you may object at any time. In this case, processing for marketing purposes will cease immediately.
10) Duration of Storage of Personal Data
The storage period depends on:
the legal basis,
the purpose of processing, and
statutory retention periods.
Data processed based on consent (Art. 6(1)(a) GDPR) is stored until consent is withdrawn.
Data processed under Art. 6(1)(b) GDPR is stored according to statutory retention periods and deleted thereafter unless further storage is required.
Data processed under Art. 6(1)(f) GDPR is stored until you exercise your right to object, unless overriding legitimate grounds exist.
Unless otherwise stated, personal data is deleted when it is no longer necessary for the purposes for which it was collected.