Controller
Alvantiq UG (haftungsbeschränkt)
Eppsteiner Str. 40
60323 Frankfurt am Main, Germany
Email: contact@alvantiq.com
Hosting and server logs
The published website is delivered through Vercel Inc. Technically necessary log data may be processed when the page is accessed, including IP address, time, requested file, referrer, browser and operating system. Processing serves secure and reliable delivery under Art. 6 (1) (f) GDPR. Where data is processed outside the EU or EEA, the transfer mechanisms identified by the provider apply, in particular the EU-US Data Privacy Framework and Standard Contractual Clauses.
Website and preview measurement
We measure how the public website, institutional pages and myPACE previews are used. Institutional links identify a university context, not the person using the link. The neutral demo has no university assignment.
Without measurement consent, events remain unlinked. We record server page requests separately from browser page views, CTA position, dialog opening, form beginning, accepted preview requests, mail provider acceptance or failure, preview and module navigation, and video progress in quarters. Technical information includes time, page path, referrer hostname, coarse device, browser and operating system families, and indicators of automated or internal traffic. We never put names, email addresses or form contents into analytics URLs or event payloads. On institutional pages a truncated network address and country may be retained for up to seven days; public events contain neither.
The purpose is to improve the website, identify form or mail failures and understand aggregate institutional interest. Unlinked measurement uses Art. 6 (1) (f) GDPR. There is no automated decision-making within the meaning of Art. 22 GDPR.
Optional connected sessions
Only after valid consent, under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, do we use the random identifier in the HttpOnly cookie alvantiq-vid to connect subsequent website, form and preview events. The cookie lasts six months. A new session starts after 30 minutes of inactivity. Earlier events are never linked retrospectively. Session conversion rates describe only this measurable subset, not all visitors.
You can decline without losing access, or withdraw through “Cookies” in the footer. Withdrawal removes the identifier from your device and breaks existing event connections in our database. Aggregate counts without an identifier remain. The prior lawfulness of processing is unaffected. Your choice itself, including refusal, is stored in alvantiq-messung for one year so we can honour it; this cookie contains no visitor identifier.
Retention and reporting
Individual journeys and related identifiers are available for seven days. The scheduled retention process replaces older measurements with daily aggregates, without session or visitor identifiers, retained for up to 365 days. Historical events collected before this version remain readable under their existing retention periods; interactions not collected then are not reconstructed. Truncated network details are removed after seven days and historical daily salts after two days. Contact and preview requests and consent records are retained for up to three years from their recorded date, subject to earlier removal when no longer needed.
The public website and /vorschau/demo are included in aggregate reporting. Without consent their events cannot be connected to a journey or named recipient. Internal traffic is excluded and counted separately without an identifier. Bot indicators remain visible as technical estimates. Questions and objections can be addressed to the controller above.
Your right to object to direct marketing
You may object to the reach measurement described above at any time. No reason is required and you suffer no disadvantage (Art. 21 (2) GDPR). After your objection we record no further events for your link and delete the interest signals already recorded. Only the record of whether and when platform access was requested is retained, because that step belongs to pre-contractual dealings and does not rest on a legitimate interest.
You can object using the “Turn off measurement” link in the footer of your personalised page and in the access dialog, or informally at contact@alvantiq.com. The objection applies across all devices because it is tied to your link and not to a cookie.
Like any URL, the token may additionally appear in technically necessary server logs kept by the hosting provider.
Contact form
On the general page the access button opens a form. We process only what you enter yourself: your name and email address (required), institution and message (optional). Technically we add the time of submission, the language version and an IP address truncated to the network segment (IPv4 /24, IPv6 /48) — the latter solely to limit abusive bulk submissions; it is deleted after seven days. We do not use a third-party captcha.
The legal basis is Art. 6 (1) (b) GDPR (pre-contractual steps at your request), otherwise Art. 6 (1) (f) GDPR in answering your enquiry. The data is deleted once its purpose no longer applies, at the latest after three years, unless statutory retention duties require otherwise.
Recipients. Your details are stored in a database operated by Neon Inc. in the Frankfurt am Main region and delivered by email to our contacts. Delivery is handled by Plus Five Five, Inc. (Resend), 2261 Market Street #5039, San Francisco, CA 94114, USA, using the sending infrastructure of Amazon Web Services, Inc. in the Ireland region. We keep a second email provider set up as a fallback: Sendinblue SAS (Brevo), Paris, France, with processing in the European Union. It sends only if delivery through Resend is not set up. A data processing agreement under Art. 28 GDPR is in place with all three providers. Neon and Resend are US companies; access by US authorities cannot be entirely ruled out even where the data is held in Frankfurt am Main or in Ireland. Transfers rely on the European Commission's standard contractual clauses; Resend is additionally certified under the EU-US Data Privacy Framework. Resend's sub-processors are established in the United States.
Requesting the preview
On the public website the preview form asks for your name, institution and email address. On institutional pages the institution is taken from the link. We automatically send the preview link and also show a direct link in the confirmation window.
Your request. We store these three details together with the time, the language version and your institution's identifier. We use them to send you the link and to answer questions about your request, for example if the link does not work or you ask us something about the preview. We do not use them for advertising. The legal basis is Art. 6 (1) (b) GDPR (steps taken at your request). The data is deleted once its purpose no longer applies, at the latest after three years. You can ask us to delete it earlier at any time, informally at contact@alvantiq.com. Recipients are the same as for the contact form.
Abuse protection and technical details. With each request we also store an IP address truncated to the network segment (IPv4 /24, IPv6 /48), so that we can limit repeated requests from the same network; it is removed after seven days. We also store technical details of the request: the page and button used, the referring hostname, coarse device class and browser family. They show us which parts of the website lead to requests and help us find errors in the form; they are kept with the request and deleted with it. The legal basis for both is Art. 6 (1) (f) GDPR. Our legitimate interest is protecting the form against abuse and improving our service. You may object to this part of the processing at any time on grounds relating to your particular situation (Art. 21 (1) GDPR), informally at contact@alvantiq.com.
Optional newsletter box. Below the email field there is an unticked box for the Alvantiq newsletter. Your preview does not depend on it. If you tick it, you give a separate consent to the newsletter, described under “Newsletter” below: we send you a separate email with a confirmation link, and you are only subscribed once you confirm. The preview email contains no newsletter confirmation. We note in your preview request that you ticked the box, so our team can see it. For the newsletter we use only your email address and language version from the form, not your name or institution. The newsletter entry is kept separately and has no reference to your preview request, to your institution's link or to the measurement described above.
Until 5 August 2026 the address was used at this point solely for that single delivery and was not stored. Anyone who requested the link before that date is not affected by the storage.
Contact by email
Personal contact links open your local email application. Only when you send the email do we process its contents to handle your request and follow-up questions. The legal basis is Art. 6 (1) (b) GDPR for pre-contractual steps, otherwise Art. 6 (1) (f) GDPR.
Data is deleted when its purpose no longer applies unless statutory retention duties require otherwise.
Optional external AI services
The “Review with ChatGPT”, “Review with Claude”, “Review with Perplexity” and “Review with Copilot” buttons are optional external links. A connection to the selected provider is made only after your click. A prepared review prompt, including the public address of this page, is passed to the provider as a URL parameter and also copied to your clipboard as a fallback. Depending on the service and session, the review starts immediately or opens prefilled. The prompt contains no content from the personalised URL parameter. Alvantiq does not send it server-side and receives neither your input nor the service's response.
The external provider independently processes connection data generated by the visit, such as IP address, browser and device information, as well as any content you enter or submit there, under its own terms. If you are signed in, the provider may associate the use with your account. Information about retention, international transfers and your rights is available in the privacy notices of OpenAI, Anthropic, Perplexity and Microsoft. Do not add confidential or personal information there.
Newsletter
Two ways to sign up. You can subscribe in the footer of the website, or by ticking the optional box when you request the preview. In both cases the legal basis is your consent under Art. 6 (1) (a) GDPR in conjunction with § 7 (2) no. 2 UWG, and the same procedure applies.
We use the double opt-in procedure. After you sign up we send you a separate email with a confirmation link; you are only subscribed once you confirm. If you do not confirm, the unconfirmed entry is deleted after seven days.
What we store. Your email address, the language version, the exact wording you agreed to and the times of sign-up and confirmation. We keep this as proof of your consent for as long as you are subscribed. For sign-ups in the footer we additionally store an IP address truncated to the network segment (IPv4 /24, IPv6 /48) as part of the sign-up record and to be able to trace misuse, such as sign-ups of other people's addresses; it is removed after seven days (Art. 6 (1) (f) GDPR). Sign-ups through the preview form store no IP address in the newsletter entry.
You may unsubscribe at any time, via the unsubscribe link in every newsletter email, via your email client's unsubscribe function, or informally at contact@alvantiq.com. This does not affect the lawfulness of processing before you unsubscribed. Afterwards we keep a minimal record: your email address, the language version, the wording you agreed to and the times of sign-up, confirmation and withdrawal. It lets us demonstrate that you consented and that we respect your withdrawal (Art. 6 (1) (c) and (f) GDPR in conjunction with Art. 7 (1) GDPR). We delete it after the end of the third calendar year following the year in which you unsubscribed.
Recipients are the same as for the contact form: the database at Neon in Frankfurt am Main and email delivery through Resend, or through Brevo if we fall back to that provider. We do not measure the success of individual messages, such as whether you opened an email or clicked a link.
Microsoft Clarity
Only with your consent. If you agree to measurement, we load Microsoft Clarity. The service records your visit — mouse movement, clicks, scrolling — and produces heatmaps and replayable sessions from it. Without your consent the script is not loaded, not even in an inactive state.
The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. Recordings are processed on Microsoft servers, including outside the European Union. Transfers rely on the European Commission's standard contractual clauses; Microsoft is additionally certified under the EU-US Data Privacy Framework. The legal basis is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.
Masking is switched off. By default Clarity obscures input fields and content it recognises as sensitive; for this project we lifted that default on 6 August 2026. What you type into a form is therefore recorded as well — name, institution and email address in the access dialog, including whether you tick the newsletter box, likewise in the contact form and the newsletter field. Those entries are legible in the replayed session. If you would rather they were not, please do not consent to measurement — without your consent none of it is loaded.
You may withdraw your consent at any time via “Cookies” in the footer; no script is loaded after that. What Microsoft already received during a running session cannot be recalled from here — that requires a deletion request directly to Microsoft.
Local fonts and cookies
Fonts are served locally. No marketing cookies are used, and without your consent no third-party service is loaded either. The cookies we set are: alvantiq-messung (your privacy decision, one year, permissible without consent under § 25 (2) no. 2 TDDDG), alvantiq-vid (recognition, six months, only with your consent) and alvantiq-admin-session (internal administration area under /admin only, irrelevant to visitors of this page). After consent, Microsoft Clarity additionally sets its own cookies (_clck, _clsk) — see the section above. Details on reach measurement are in “Personalised link and reach measurement”.
Your rights
Within the statutory framework, you have rights to access, rectification, erasure, restriction, portability and objection under Art. 15 to 21 GDPR. Where processing is based on your consent, you may withdraw it at any time with effect for the future (Art. 7 (3) GDPR). Contact contact@alvantiq.com.
Complaint
You may lodge a complaint with a data protection authority. Our competent authority is the Hessian Commissioner for Data Protection and Freedom of Information, datenschutz.hessen.de.
Last updated: September 2026 · version 2026-09-v6 (v7 with Clarity) (referenced in the consent record)