alexsanalytics

Privacy

Privacy policy

Responsible party

Alexander Söllner
Inheidener Straße 69
60385 Frankfurt
Email: kontakt@alexsanalytics.com

Server logs

When you visit this website, our hosting provider Cloudflare automatically records technical access data (including IP address, date/time, page requested, browser type) in server logs. This processing is necessary for the technical operation and security of the website (Art. 6 (1)(f) GDPR) and is automated; providing this data is technically required to visit the site and no separate consent is foreseen for it.

Data processed when purchasing a report

  • Buyer email address (Stripe transmits it after payment)
  • IP-based country of origin (Stripe Tax)
  • Order and download data (report slug, timestamp, download count)

Providing your email address and payment details is required to conclude the contract; without this information the report cannot be delivered. All other information is voluntary.

Newsletter (report alert)

If you sign up for the email notification about new reports, we use double opt-in: after signing up you receive a confirmation email and sending only begins once you confirm. The sole purpose is notifying you of newly published weekly reports. The legal basis is your consent (Art. 6 (1)(a) GDPR). The sending provider is Resend (see processors below). You can withdraw your consent at any time with future effect, e.g. via the unsubscribe link in every email or by message to kontakt@alexsanalytics.com. Unsubscribing has no effect on reports already purchased.

Processors and third-country transfers

  • Stripe Payments Europe, Ltd. (payment processing) — parent company Stripe, Inc. based in the USA; data transfer to the USA is based on EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework.
  • Resend (sending the download link and newsletter emails) — provider with US-based infrastructure/corporate ties; data transfer to the USA is based on EU Standard Contractual Clauses.
  • Cloudflare, Inc. (hosting / CDN / email routing) — US provider; data transfer to the USA is based on EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework.

Data processing agreements under Art. 28 GDPR are in place with all providers listed above. A copy of the respective safeguards (Standard Contractual Clauses) can be requested via the email address above.

Cookies & tracking

We do not use analytics cookies, advertising or social plugins. Payment is handled entirely via Stripe; only data necessary for contract fulfilment is processed. Fonts are loaded exclusively from our own server locally; no connection is made to Google Fonts servers.

Legal basis

  • Art. 6 (1)(a) GDPR (consent, e.g. newsletter)
  • Art. 6 (1)(b) GDPR (contract performance)
  • Art. 6 (1)(f) GDPR (legitimate interest, e.g. fraud prevention, IT security)

Retention period

  • Order data: 10 years (tax retention obligation)
  • Download tokens: 48 hours after generation
  • Newsletter contact data: until consent is withdrawn

Your rights

Under the GDPR you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw any consent given, with future effect (Art. 7 (3) GDPR)
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR), e.g. the Hessian data protection authority

Contact for all requests: kontakt@alexsanalytics.com