Privacy Policy

When you visit this website, our hosting provider (Hetzner Online GmbH) automatically stores access data: IP address, date/time, URL accessed, HTTP status, data transferred, referrer, browser and operating system. This data is used exclusively for the secure operation of the website (Art. 6(1)(f) GDPR) and is automatically deleted after 7 days.

If you use our contact form, your name, email address and message are stored to process your enquiry (Art. 6(1)(b) GDPR). Data is stored in our self-hosted lead management system (Hetzner, Germany) and is deleted after the enquiry has been processed, unless a business relationship results.

This website offers three free self-assessment tools: the Data Maturity Check, the Analytics Check, and the Service Finder. Results are calculated locally in your browser. The following sections explain in detail what data is stored for each tool.

Data Maturity Check & Analytics Check

The following data is stored on our servers even without providing an email address, for the purpose of quality assurance and tool improvement:

• All individual question answers and total score
• Result level and dimension scores (breakdown by area)
• Primary leverage point, weakest and strongest dimension (Analytics Check)
• Industry, company size, and BI tool currently used
• Optional free-text description of the main business challenge (max. 1,000 characters)
• Origin URL (without query parameters; may allow inferences about context or campaign)
• Marketing consent flag (stored as false when no consent is given)

These data are stored without name or email address; however, attribution to individual persons or companies cannot be entirely excluded in all cases. Additionally, a marketing consent flag is always stored (as false when no consent is given). Legal basis: Art. 6(1)(f) GDPR (legitimate interests in improving our tools). Retention period: 24 months. You have the right to object to this processing at any time under Art. 21 GDPR by contacting contact@alplytics.at.

If you additionally provide your email address and tick the first consent checkbox (requesting your action plan), your email address, consent timestamp and consent purpose are stored together with the above data. The result email is sent on the basis of Art. 6(1)(b) GDPR (fulfilment of a service you explicitly requested). If you also tick the optional second checkbox, you will receive automated marketing email follow-ups on the basis of Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time via the unsubscribe link in any email or by contacting contact@alplytics.at. Stored data is deleted within 30 days of a deletion request.

Service Finder

Without providing an email address, no personal data is stored. Only a completion count is recorded without direct identifiers (no name, no email address; Art. 6(1)(f) GDPR, retention 24 months). If you provide your email address and tick the consent checkbox, the following data is stored in our self-hosted lead management system (Hetzner, Germany): name, company name, email address, match scores, and service recommendation. Legal basis: Art. 6(1)(b) GDPR for sending the results briefing you requested; Art. 6(1)(a) GDPR for marketing follow-up (optional second checkbox). Withdrawal and deletion as described above.

Anonymous completion tracking (all tools)

For every completed check, the following is recorded without direct identifiers (no name, no email address): tool type, whether an email address was provided, and the origin URL (without query parameters). Legal basis: Art. 6(1)(f) GDPR. Retention period: 24 months.

If you provide your email address in one of our tools or forms, you will receive automated emails sent from our own servers (Hetzner, Germany). Legal basis: Art. 6(1)(a) GDPR (consent). Every email contains an unsubscribe link. You can also unsubscribe by contacting contact@alplytics.at.

• Data Maturity Check & Analytics Check: up to 4 emails over approx. 14 days, personalised with your result.
• Service Finder: up to 4 emails over approx. 18 days, personalised with recommended services.
• Whitepaper download: up to 3 emails over approx. 14 days.
• Contact form: 1 confirmation email.

Email tracking: our automated emails may contain a tracking pixel (1×1 transparent image) and tracked links. Loading the pixel (opening the email) and clicking on links is recorded to allow us to better serve your enquiry and improve our communication. Legal basis: Art. 6(1)(a) GDPR (consent). You can prevent tracking by disabling automatic image loading in your email client.

For managing enquiries, tool results and automated email sequences, we use a self-hosted lead management system operated on our own servers at Hetzner Online GmbH, Germany. No data is transferred to third parties. When you submit a form or complete a check with your email address, the following data is stored:

• Contact data: email address, name, company name (if provided)
• Tool interaction data: tools used, results and scores, booking data
• Email interaction data (if marketing consent given): opens and clicks in our automated emails
• Marketing consent status and consent timestamp
• UTM parameters (campaign source of your visit, if applicable)

Purpose: management of business enquiries, prevention of duplicate contacts, delivery of requested results. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures / services you requested) for storing results and sending result emails; Art. 6(1)(a) GDPR (consent) for marketing email follow-ups. Retention period: 24 months after the last interaction, then automatic deletion.

For managing our newsletter, we use Listmonk, a self-hosted newsletter system operated on our own servers at Hetzner Online GmbH, Germany. If you subscribe to our newsletter, your email address and name (if provided) are stored in Listmonk. Legal basis: Art. 6(1)(a) GDPR (consent). You can unsubscribe at any time via the unsubscribe link in every newsletter email or by contacting contact@alplytics.at. Your data is deleted within 30 days of unsubscribing.

For appointment booking, we use the service Cal.com (Cal.com, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). The Cal.com booking widget is only loaded after you have consented to the "Functional" cookie category via the cookie banner. Legal basis for loading the widget: Art. 6(1)(a) GDPR (consent). The data you enter when making a booking (name, email address, desired appointment) is processed on the basis of Art. 6(1)(b) GDPR. A Data Processing Agreement (DPA) with Cal.com is in place; data is stored on EU servers where possible. You can withdraw your consent at any time via "Cookie Settings" in the footer. Cal.com's privacy policy: cal.com/privacy.

This website uses Rybbit, a privacy-friendly web analytics tool (self-hosted on our own servers at Hetzner Online GmbH, Germany — no data is transferred to third parties). Rybbit works without cookies and without collecting personal data such as IP addresses or device fingerprints. Only aggregated, anonymised metrics are recorded: page views, sessions, approximate geographic region (country/city level from anonymised IP), referrer source, and browser type. No cross-site tracking takes place. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding how our website is used, without processing personal data). No consent is required. Retention period: 12 months.

Required for the basic operation of the website. No consent required (§ 165(3) TKG 2021 / Art. 6(1)(f) GDPR).

Enables third-party features such as appointment booking. Only loaded after consent to the "Functional" category.

We do not use automated decision-making or profiling as defined in Art. 22 GDPR. No decisions with legal effect or similarly significant impact are made solely on the basis of automated processing of your personal data. The results of our self-assessment tools (scores, maturity levels, recommendations) serve exclusively for personal self-assessment and have no legal or similarly significant effect within the meaning of Art. 22 GDPR. No automated decision-making takes place.

We do not sell personal data. We do not share your data with third parties beyond the processors explicitly named in this privacy policy (Hetzner, Cal.com). Any future addition of a new processor will be reflected in an updated version of this policy.

We reserve the right to update this privacy policy to reflect changes in legal requirements or our data processing practices. The current version is always available at alplytics.at/privacy-policy. We recommend checking this page periodically. The date at the top of this page indicates when the policy was last updated.