Privacy

1. Controller

Alpha Plutos Investment GmbH
Messer-Platz 1
65812 Bad Soden am Taunus
Germany

Email: contact@alphaplutos.com

2. Accessing this website and server log data

When this website is accessed, technically necessary connection data are processed by the web server and hosting provider. Depending on the hosting configuration, this may include the IP address, date and time of access, requested file or page, amount of data transferred, referrer URL where transmitted, browser type and version, operating system and similar technical information.

The processing is necessary to deliver the website, maintain technical security and investigate misuse or technical faults. The legal basis is Article 6(1)(f) GDPR. The legitimate interests are the secure, stable and efficient operation of the website. Hosting providers may process these data on our behalf. Server log data are retained only for as long as necessary for these purposes unless a longer period is required by law or for the investigation of a specific security incident.

3. Contact by email

If you contact Alpha Plutos by email, the personal data contained in your message are processed for the purpose of handling and responding to your enquiry. Depending on the subject of the communication, the legal basis is Article 6(1)(f) GDPR (our legitimate interest in responding to business enquiries) or Article 6(1)(b) GDPR where the communication relates to steps prior to entering into, or performance of, a contract.

4. Online enquiry form

If you use the online enquiry form, we process the information you enter, in particular your name, email address, company if provided, selected topic and message. The data are transmitted through our hosting environment and forwarded to our company email account. The purpose is to receive, allocate and respond to your enquiry.

The legal basis is Article 6(1)(f) GDPR (our legitimate interest in providing an efficient contact channel and responding to business enquiries) or Article 6(1)(b) GDPR where your enquiry concerns steps prior to entering into, or performance of, a contract. The form does not use an external CAPTCHA, analytics service or advertising tracker.

Mandatory fields are limited to the information required to process the enquiry. Please do not submit special categories of personal data or other confidential information unless this is necessary for your enquiry.

5. Retention of enquiries

Enquiries and correspondence are retained for as long as necessary to deal with the matter. Data may be retained for a longer period where statutory retention obligations apply or where this is necessary for the establishment, exercise or defence of legal claims. Data that are no longer required are deleted in accordance with the applicable legal requirements.

6. Cookies, analytics and external content

This website does not use analytics or advertising tools, does not set non-essential cookies and does not embed third-party media. Fonts and visual assets are served locally or use fonts available on the visitor's device; the website package does not initiate a connection to an external font provider.

If analytics, embedded media, marketing tools or other non-essential technologies are added in the future, this privacy notice and, where legally required, the consent mechanism will be updated before those technologies are activated.

7. Recipients and international transfers

Personal data are disclosed only where necessary for the purposes described above, in particular to technical service providers such as hosting and email providers acting on our behalf, or where disclosure is required by law. Service providers processing personal data on our behalf are engaged in accordance with the applicable data-protection requirements.

The website package itself does not embed third-party services that independently initiate transfers of personal data outside the European Economic Area. If the selected hosting or email infrastructure results in an international transfer, the transfer is made only where the requirements of Chapter V GDPR are satisfied.

8. Security

We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. The website is intended to be made available exclusively via encrypted HTTPS connections.

9. Your rights

Subject to the applicable statutory conditions, you have rights under the GDPR including the right of access, rectification, erasure, restriction of processing, objection to processing and data portability. Where processing is based on consent, you may withdraw that consent at any time with effect for the future.

You also have the right to lodge a complaint with a data-protection supervisory authority. For a company established in Hesse, the competent supervisory authority is:

The Hessian Commissioner for Data Protection and Freedom of Information (HBDI)
Wilhelmstraße 7
65185 Wiesbaden
Germany
Website: datenschutz.hessen.de

10. Automated decision-making

No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place through this website.

11. Changes to this privacy notice

This privacy notice may be updated where the website, its technical infrastructure or the applicable legal requirements change. The version published on this page is the current version.

Last updated: September 2026