Privacy Policy

Version: 22 September 2026

Introduction

With this privacy policy, we would like to inform you about the types of your personal data (hereinafter referred to as “data”), the purposes for which we process them, and the scope of such processing. This privacy policy applies to all processing of personal data carried out by us, both in the context of providing our services and particularly on our websites, mobile applications, and external online presences such as our social media profiles (collectively referred to as the “online offering”).

The terms used are not gender-specific.

1. Controller

Company Volker Behrens Business divisions: Alto Extremo / Hifi4you Owner: Volker Behrens Tulpenstr. 9b 45772 Marl Germany

Email: info@alto-extremo.de Phone: +49 172 8065413

2. General Information on Data Processing

We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Personal data includes all information relating to an identified or identifiable natural person.

We process data only:

  • to provide our website
  • to handle inquiries
  • to process contracts
  • to fulfill legal obligations
  • to safeguard legitimate interests

We do not sell data or pass it on for advertising purposes.

3. Collection and Storage of Personal Data When Visiting the Website

When you access our website, the server automatically collects the following data:

  • IP address
  • date and time of access
  • browser type and version
  • operating system
  • referrer URL
  • pages accessed

This data is technically necessary to display the website correctly and ensure system security.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in stable and secure website operation).

The data is not used to identify visitors.

4. Hosting

Our website is hosted by STRATO AG, Pascalstraße 10, 10587 Berlin. A data processing agreement (DPA) according to Art. 28 GDPR is in place.

STRATO processes:

  • IP addresses
  • technical server data
  • error logs

exclusively for the purpose of providing the website.

5. Cookies

Our website uses only technically necessary cookies, such as:

  • session cookies
  • security cookies

These are required for the operation of the website.

We do not use:

  • tracking cookies
  • analytics tools
  • marketing cookies
  • social media plugins

Legal basis: Art. 6(1)(f) GDPR.

6. Contact by Email or Telephone

When you contact us, we process:

  • name
  • email address
  • telephone number
  • content of your message
  • technical transmission data (if applicable)

Purpose: Handling your inquiry and, if applicable, preparing a contract.

Legal basis: Art. 6(1)(b) GDPR (contract initiation) Art. 6(1)(f) GDPR (legitimate interest in communication)

7. Contract Processing

When you order products from us (via email, telephone, or in person), we process:

  • name
  • address
  • email address
  • telephone number
  • ordered products
  • payment information (for invoicing only)

Legal basis: Art. 6(1)(b) GDPR (contract performance).

We store this data for the duration of statutory retention periods (generally 10 years).

8. Data Disclosure

We only disclose personal data when necessary:

  • to shipping service providers (e.g., DHL)
  • to tax consultants (legal obligation)
  • to authorities (only when legally required)

No data is disclosed to third parties for advertising purposes.

9. Data Security

We use technical and organizational measures to protect your data:

  • SSL encryption
  • access restrictions
  • secure server infrastructure
  • regular security updates

10. Deletion of Data

Personal data is deleted when:

  • the purpose of processing no longer applies
  • statutory retention periods have expired
  • you request deletion and no legal obligations prevent it

11. Your Rights as a Data Subject

You have the following rights:

  • right of access (Art. 15 GDPR)
  • right to rectification (Art. 16 GDPR)
  • right to erasure (Art. 17 GDPR)
  • right to restriction of processing (Art. 18 GDPR)
  • right to data portability (Art. 20 GDPR)
  • right to object (Art. 21 GDPR)
  • right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Responsible authority: State Commissioner for Data Protection and Freedom of Information NRW Kavalleriestraße 2–4 40213 Düsseldorf

12. Changes to This Privacy Policy

We reserve the right to update this privacy policy if legal changes require it. The current version is available on our website.