Privacy and Cookie Policy

Last updated: 6/17/2025

1. Controller Information

CX-Alliance UG (haftungsbeschränkt) & Co. KG
Friedrichstraße 155
10117 Berlin, Germany

Email: office@cx-alliance.com
Phone: +49 40 696 386 96
Managing Director: Georg Winkler
Tax Number: 1130/144/50423
VAT ID: DE452833346
Commercial Register: HRA 63482 B

2. Data Protection Officer

For questions regarding data protection, please contact us at: office@cx-alliance.com

3. Types of Data We Collect

3.1 Personal Data You Provide

  • Contact information (name, email address, phone number)
  • Company information
  • Communication preferences
  • Information submitted through contact forms or inquiries

3.2 Automatically Collected Data

  • IP address
  • Browser type and version
  • Operating system
  • Referring website
  • Pages visited and time spent
  • Device information
  • Location data (approximate)

4. Legal Basis for Processing

We process your personal data based on:

  • Consent (Art. 6(1)(a) GDPR) – for marketing communications and cookies
  • Contract performance (Art. 6(1)(b) GDPR) – to fulfill our services
  • Legitimate interests (Art. 6(1)(f) GDPR) – for website analytics and business operations
  • Legal obligations (Art. 6(1)(c) GDPR) – for tax and legal compliance

5. How We Use Your Data

We use your personal data to:

  • Provide and improve our services
  • Respond to inquiries and customer support
  • Send marketing communications (with consent)
  • Analyze website usage and performance
  • Comply with legal obligations
  • Protect against fraud and security threats

6. Third-Party Services

6.1 Google Analytics

We use Google Analytics to analyze website traffic and user behavior.

Data collected:

  • Anonymous usage statistics
  • Page views and user interactions
  • Device and browser information
  • Approximate location data

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)
Data retention: 26 months
Privacy Policy: Google Analytics Privacy Policy

6.2 HubSpot (EU)

We use HubSpot for customer relationship management, marketing automation, and analytics.

Data collected:

  • Contact information and communication history
  • Website interaction data
  • Email engagement metrics
  • Lead scoring and behavior tracking

Legal basis:

  • Consent (Art. 6(1)(a) GDPR) for marketing
  • Legitimate interest (Art. 6(1)(f) GDPR) for CRM purposes

Data location: EU servers
Data retention: As per our retention policy or until consent withdrawal
Privacy Policy: HubSpot Privacy Policy

7. Cookie Policy

7.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website. They help us provide you with a better browsing experience.

7.2 Types of Cookies We Use

Essential Cookies

  • Purpose: Website functionality and security
  • Legal basis: Legitimate interest
  • Duration: Session or up to 1 year
  • Can be disabled: No (required for website operation)

Analytics Cookies

  • Purpose: Website performance analysis
  • Provider: Google Analytics
  • Legal basis: Consent
  • Duration: Up to 2 years
  • Can be disabled: Yes

Marketing Cookies

  • Purpose: Personalized marketing and lead tracking
  • Provider: HubSpot
  • Legal basis: Consent
  • Duration: Up to 2 years
  • Can be disabled: Yes

Functional Cookies

  • Purpose: Remember your preferences
  • Legal basis: Consent
  • Duration: Up to 1 year
  • Can be disabled: Yes

7.3 Managing Cookies

You can manage cookie preferences through:

  • Our cookie consent banner
  • Browser settings
  • Third-party opt-out tools

Browser Instructions:

8. Data Sharing and Transfers

8.1 When We Share Data

We may share your data with:

  • Service providers (Google, HubSpot)
  • Legal authorities (when required by law)
  • Business partners (with consent)

8.2 International Transfers

Data may be transferred outside the EU to:

  • Google (USA): Adequacy decision and Standard Contractual Clauses
  • HubSpot: EU-based processing with adequacy safeguards

9. Data Retention

We retain personal data for:

  • Contact data: 3 years after last contact
  • Analytics data: 26 months (Google Analytics)
  • Marketing data: Until consent withdrawal
  • Legal obligations: As required by law

10. Your Rights Under GDPR

You have the right to:

  • Access your personal data
  • Rectify incorrect information
  • Erase your data (“right to be forgotten”)
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent at any time

To exercise these rights, contact us at: office@cx-alliance.com

11. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption in transit and at rest
  • Access controls and authentication
  • Regular security assessments
  • Staff training on data protection

12. Complaints

If you believe we have not handled your personal data properly, you can:

  1. Contact us directly at office@cx-alliance.com
  2. Lodge a complaint with the supervisory authority:

Berlin Data Protection Authority
Friedrichstr. 219
10969 Berlin, Germany
Phone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de

13. Changes to This Policy

We may update this privacy policy periodically. We will notify you of significant changes by:

  • Posting the updated policy on our website
  • Sending email notifications (for substantial changes)
  • Updating the “Last updated” date

14. Contact Information

For questions about this privacy policy or our data practices:

Email: office@cx-alliance.com
Phone: +49 40 696 386 96
Address: CX-Alliance UG (haftungsbeschränkt) & Co. KG
Friedrichstraße 155
10117 Berlin, Germany

This privacy policy complies with the EU General Data Protection Regulation (GDPR) and German data protection laws. It was last updated on [DATE].

CX-Alliance 2025