Legal

Privacy Policy

Carried over from the existing Eco Trust privacy policy. The provider-specific sections (hosting, CDN, analytics, newsletter) must be confirmed against the final hosting and tooling setup of this website before publication.

1. An overview of data protection

The following information provides an overview of what happens to your personal data when you visit this website. The term "personal data" comprises all data that can be used to personally identify you.

Data on this website is processed by the operator of the website, whose contact information is set out under "Information about the responsible party" below. We collect your data when you share it with us — for instance, information you enter into a contact form — and, automatically or after your consent, through our IT systems when you visit the site (primarily technical information such as browser, operating system or time of access). Part of the data is generated to guarantee the error-free provision of the website; other data may be used to analyse usage patterns.

You have the right at any time to receive information free of charge about the source, recipients and purposes of your archived personal data; to demand rectification or erasure; to revoke consent with effect for the future; to demand restriction of processing under certain circumstances; and to lodge a complaint with the competent supervisory authority. Please contact us at any time on these or other data-protection questions.

2. Hosting and content delivery networks

The website is hosted and delivered via the following providers, each on the basis of our legitimate interest in a reliable and secure presentation of our website (Art. 6(1)(f) GDPR) and, where consent has been requested, on the basis of Art. 6(1)(a) GDPR and §25(1) TDDDG. Data processing agreements (DPAs) have been concluded with each provider; transfers to the United States rest on the EU Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

WebflowWebflow, Inc., San Francisco, USA — website creation and hosting. Webflow records log files including your IP address and stores cookies or comparable technologies required for depiction, functionality and security of the site (necessary cookies). Details: webflow.com/legal/eu-privacy-policy.
CloudflareCloudflare Inc., San Francisco, USA — globally available content delivery network with DNS. Data transfer between your browser and our website is technically routed through Cloudflare's network, which acts as a filter against potentially malicious traffic. Details: cloudflare.com/privacypolicy.
Google Cloud CDNGoogle Ireland Limited, Dublin, Ireland — globally distributed content delivery network improving accessibility and performance. Details: cloud.google.com/cdn/docs/overview.
Amazon CloudFrontAmazon Web Services EMEA SARL, Luxembourg — globally distributed content delivery network boosting availability and performance.

3. General and mandatory information

The operators of this website take the protection of your personal data very seriously. We handle your personal data confidentially and in compliance with the statutory data-protection regulations and this privacy policy. We advise that the transmission of data via the Internet (e.g. e-mail communications) may be prone to security gaps; complete protection against third-party access is not possible.

Responsible party (controller)

ALIS Capital Management S.à r.l.
16, rue des Capucins
L-1313 Luxembourg
investor-relations@alis-capital.com

Storage duration

Unless a more specific storage period is stated in this privacy policy, your personal data remains with us until the purpose for its collection no longer applies. If you assert a justified request for deletion or revoke consent, your data will be deleted unless we have other legally permissible reasons for storage (e.g. retention periods under tax or commercial law), in which case deletion takes place once those reasons cease to apply.

Legal bases

Where you have consented, we process your personal data on the basis of Art. 6(1)(a) GDPR (or Art. 9(2)(a) GDPR for special categories, Art. 49(1)(a) GDPR for explicit consent to third-country transfers, and §25(1) TDDDG for storage of cookies or access to information on your device). Where data is required for the performance of a contract or pre-contractual measures, processing rests on Art. 6(1)(b) GDPR; where required to meet a legal obligation, on Art. 6(1)(c) GDPR; and otherwise, where applicable, on our legitimate interest under Art. 6(1)(f) GDPR. The relevant legal basis for each case is stated in this policy.

Recipients, revocation and your rights

We disclose personal data to external parties only where required for contract fulfilment, where legally obliged, where we have a legitimate interest under Art. 6(1)(f) GDPR or where another legal basis permits it; processors act only under valid data processing agreements. You may revoke any consent at any time with effect for the future. You have the right to object to processing based on Art. 6(1)(e) or (f) GDPR on grounds arising from your particular situation, and at any time to processing for direct advertising (Art. 21 GDPR); the right to lodge a complaint with the competent supervisory authority; the right to data portability; the right to information about, rectification and erasure of your archived data; and the right to demand restriction of processing in the cases set out in Art. 18 GDPR.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption, recognisable by the "https://" address line and the lock icon in your browser. Data you transmit to us cannot then be read by third parties.

4. Recording of data on this website

Contact form

If you submit enquiries via a contact form, the information provided, including the contact details entered, is stored for handling the enquiry and follow-up questions and is not shared without your consent. Processing rests on Art. 6(1)(b) GDPR where related to a contract or pre-contractual measures, otherwise on our legitimate interest in the effective processing of enquiries (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) where requested. The data remains with us until you request erasure, revoke consent or the purpose lapses; mandatory retention periods remain unaffected.

Enquiries by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your enquiry including all resulting personal data (name, enquiry) is stored and processed to handle your request, on the same legal bases and with the same storage rules as above.

5. Analysis tools

Fathom Analytics

This website integrates Fathom Analytics (Conva Ventures Inc., Victoria, Canada) to analyse visitor usage patterns. IP address and user agent are promptly anonymised through an individual, non-decodable hash archived for 48 hours at Hetzner in Germany. Fathom Analytics uses no cookies and stores no data that can be used to track or identify visitors; according to the provider, all data generated within the EU is retained on servers within the EU. Use rests on our legitimate interest in the anonymised analysis of usage patterns (Art. 6(1)(f) GDPR) or, where consent has been requested, exclusively on Art. 6(1)(a) GDPR and §25(1) TDDDG; consent may be revoked at any time. A data processing agreement has been concluded.

6. Newsletter

If you wish to receive a newsletter offered on the website, we require an e-mail address and information allowing us to verify that you are the owner of the address and agree to receive it. Dispatch is handled via MailerLite (MailerLite Limited, Dublin, Ireland); the data you enter is stored on MailerLite's servers. MailerLite enables analysis of newsletter campaigns (opens, clicks, conversion) and segmentation of recipients. Processing rests on your consent (Art. 6(1)(a) GDPR), revocable at any time via the unsubscribe link contained in every message. After unsubscribing, your e-mail address is deleted from the distribution list; it may be stored in a blacklist where necessary to prevent future mailings (legitimate interest, Art. 6(1)(f) GDPR). A data processing agreement has been concluded.

7. Plug-ins and tools

Google Fonts (local embedding)

This website uses Google Fonts to ensure the uniform use of fonts. The fonts are installed locally, so no connection to Google's servers is established in conjunction with this application. Further information: developers.google.com/fonts/faq and policies.google.com/privacy.

8. Webdesign

Webdesign on the highest level by DesignTribe. The design and technical implementation of this website were carried out by DesignTribe; the agency has no access to personal data of visitors to this website.