Data Policy

Data Protection & Privacy Policy
Altagram Group • Last updated: April 2026

1. Data Controller

The data controller responsible for processing your personal data on this website is:

Altagram GmbH
Puschkinallee 39
12435, Berlin
Germany
Email: hello@altagram.com

For all questions regarding this policy or the handling of your personal data, please contact us at the details above or via the information provided in our Imprint.

2. Data Protection Officer

We have appointed an external Data Protection Officer. If you have any questions or concerns regarding data protection, you may contact our DPO directly:

PROLIANCE GmbH
Leopoldstr. 21
80802 Munich
Germany
Website: www.datenschutzexperte.de
Email: datenschutzbeauftragter@datenschutzexperte.de

3. General Information

Using this website is generally possible without providing personal information. Where personal data (such as names, addresses or email addresses) is collected, this is done on a voluntary basis wherever possible. Your data will not be passed on to third parties without your explicit consent.

Please be aware that the transmission of data over the internet (for example, when communicating by email) can have security vulnerabilities. Complete protection of your data against access by third parties cannot be guaranteed.

4. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 of the EU General Data Protection Regulation (GDPR):

Consent (Art. 6(1)(a) GDPR) – where you have given us clear consent to process your personal data for a specific purpose, such as analytics cookies or marketing communications.

Contract performance (Art. 6(1)(b) GDPR) – where processing is necessary to fulfil a contract with you, or to take steps at your request before entering into a contract.

Legitimate interests (Art. 6(1)(f) GDPR) – where processing is necessary for our legitimate business interests (such as responding to enquiries and improving our website), provided these interests are not overridden by your rights.

5. Cookies

This website uses cookies in several places. Cookies are small text files stored on your device by your browser. Their purpose is to make our website more user-friendly, effective and secure.

Session Cookies

Most cookies used here are “session cookies”, which are automatically deleted at the end of your visit.

Persistent Cookies

Other cookies remain stored on your device until you delete them. These allow us to recognise your browser on your next visit.

Your Cookie Choices

You can configure your browser to be informed about the placement of cookies, to accept or decline cookies on a case-by-case basis, or to block all cookies automatically. Please note that disabling cookies may restrict the functionality of this website.

Where cookies require your consent (such as analytics or marketing cookies), we will ask for your consent via our cookie consent banner before placing them. You can withdraw or update your preferences at any time using the cookie settings link in the website footer.

6. Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Analytics uses cookies to help us understand how visitors use the site. We only activate Google Analytics with your prior consent, obtained through our cookie consent banner. The legal basis for this processing is your consent (Art. 6(1)(a) GDPR).

When you consent, information generated about your use of this website (including a pseudonymised version of your IP address) is transmitted to and stored by Google on servers in the United States. Google is certified under the EU-US Data Privacy Framework, which provides an adequate level of data protection. Google will use this information to evaluate website usage, compile reports on website activity, and provide other services relating to website activity and internet usage.

Your IP address is anonymised before transmission wherever technically possible, and will not be associated with any other data held by Google.

Opting Out

You can withdraw your consent at any time via the cookie settings link in the website footer. Alternatively, you can prevent Google Analytics from collecting data by installing the Google Analytics opt-out browser add-on, available at:

https://tools.google.com/dlpage/gaoptout

7. Contact & Enquiry Forms

This website includes contact and enquiry forms powered by HubSpot, Inc. (“HubSpot”), 25 First Street, Cambridge, MA 02141, USA. HubSpot acts as a data processor on our behalf under a Data Processing Agreement.

Data Collected

When you submit a form, we collect the personal data you provide, which may include:

Full name
Email address
Company name
The content of your message or enquiry

Purpose & Legal Basis

We process this data in order to respond to your enquiry and manage our relationship with you. The legal basis is our legitimate interest in communicating with prospective and existing clients (Art. 6(1)(f) GDPR), or contract performance where applicable (Art. 6(1)(b) GDPR). Where you have opted in to marketing communications, the legal basis is your consent (Art. 6(1)(a) GDPR).

Data Storage & Transfer

Submitted form data is stored on HubSpot’s servers, which may be located in the United States. HubSpot is certified under the EU-US Data Privacy Framework. We have entered into a Data Processing Agreement with HubSpot to ensure your data is handled in accordance with GDPR requirements. We do not pass on your form data to any other third parties without your consent.

Retention

Enquiry data is retained for as long as necessary to handle your request and for a reasonable period thereafter for legitimate business purposes, typically no longer than three years unless a longer retention period is required by law or by an ongoing business relationship.

8. Newsletter

You can subscribe to our newsletter via the signup form on this website. The newsletter is sent using HubSpot (see Section 7 for details on HubSpot as a data processor).

Data Collected & Legal Basis

To subscribe to the newsletter, we collect your email address and, where provided, your name. The legal basis for processing is your consent (Art. 6(1)(a) GDPR). We use a double opt-in process: after submitting the form, you will receive a confirmation email asking you to verify your subscription. Only confirmed subscriptions are activated.

Unsubscribing

You can unsubscribe from the newsletter at any time by clicking the unsubscribe link included in every newsletter email, or by contacting us at hello@altagram.com. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

Retention

Your subscription data is retained for as long as your newsletter subscription is active. Upon unsubscribing, your data will be deleted or anonymised, unless we are required to retain it for compliance purposes.

9. Job Applications

If you apply for a position at Altagram through our careers page, your application data is processed via Personio GmbH, Seidlstraße 3, 80335 Munich, Germany (“Personio”), our applicant tracking system. Personio acts as a data processor on our behalf.

Data Collected

When submitting an application, we may collect the following personal data:

Name and contact details (email, phone, address)
CV / résumé and cover letter
Professional qualifications, work history and references
Any other information you voluntarily provide in your application

Purpose & Legal Basis

We process your application data for the purpose of evaluating your application and conducting the recruitment process. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) and, in Germany, §26 BDSG (processing for employment-related purposes). Where you consent to your data being retained for future vacancies, the legal basis is Art. 6(1)(a) GDPR.

Retention

If your application is unsuccessful, your data will be deleted within six months of the conclusion of the application process, unless you have consented to longer retention for consideration for future roles. If an employment relationship is established, your data will be transferred to your personnel file and retained in accordance with statutory retention obligations.

Data Transfer

Application data is stored on Personio’s servers within the European Union. We have entered into a Data Processing Agreement with Personio. Your data will not be shared with third parties outside the recruitment process without your consent.

10. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights in relation to your personal data:

Right of access (Art. 15 GDPR) – You have the right to request a copy of the personal data we hold about you.

Right to rectification (Art. 16 GDPR) – You have the right to request correction of inaccurate or incomplete data.

Right to erasure / ‘right to be forgotten’ (Art. 17 GDPR) – You have the right to request deletion of your personal data in certain circumstances.

Right to restriction of processing (Art. 18 GDPR) – You have the right to request that we restrict the processing of your data in certain circumstances.

Right to data portability (Art. 20 GDPR) – Where processing is based on consent or contract, you have the right to receive your data in a structured, machine-readable format.

Right to object (Art. 21 GDPR) – You have the right to object to processing based on legitimate interests. We will stop processing your data unless we can demonstrate compelling legitimate grounds.

Right to withdraw consent – Where processing is based on your consent, you have the right to withdraw it at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us at hello@altagram.com or reach our Data Protection Officer at the contact details in Section 2.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data infringes the GDPR. The competent supervisory authority in Germany is the relevant state data protection authority (Landesdatenschutzbehörde) for Altagram’s registered location. You may also contact the supervisory authority in the EU member state of your habitual residence or place of work.

11. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. Specific retention periods are as follows:

Contact form and enquiry data: up to three years from the date of last contact, unless an ongoing relationship requires longer retention.

Analytics data (Google Analytics): up to 14 months, in line with our Google Analytics data retention settings.

Cookie consent records: retained for the duration required to demonstrate compliance, typically two years.

12. Data Security

We take appropriate technical and organisational measures to protect your personal data against accidental loss, destruction, alteration, unauthorised disclosure, or access. However, please be aware that no method of internet transmission is completely secure, and we cannot guarantee the absolute security of data transmitted to us electronically.

13. Changes to This Policy

We may update this Data Protection & Privacy Policy from time to time to reflect changes in law, technology, or our business practices. The date of the most recent revision appears at the top of this page. We encourage you to review this policy periodically.