Data Privacy Statement
In the following we provide you with information about how we collect personal data when you use our website. Personal data is all data which relates to you personally, such as your name, your address, your email addresses and your user behaviour. Personal data is all data which relates to you personally, such as your name, your address, your email addresses and your user behaviour. We have put extensive technical and operational precautions in place to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security procedures are regularly reviewed and updated to keep pace with technological developments.
1 Controller for data processing
The controller pursuant to Art. 4 (7) EU General Data Protection Regulation (GDPR) is:
ALBIS Distribution GmbH & Co. KG
Mühlenhagen 35
20539 Hamburg
Phone: +49 (0) 40 78 10 50
Email: info@albis.com
2 Contact details of the Data Protection Officer
You can contact our external Data Protection Officer at dataprotection@albis.com or by post at our postal address with the addition “Data Protection Officer”.
3 Your rights
With regard to your personal data, you have the rights to access, rectification, erasure, restriction of processing, as well as data portability, and you may revoke any consent given at any time with effect for the future. In addition, you may object to processing based on Art. 6 (1) (e) or (f) GDPR; this also applies to profiling based on those provisions. If we process data for direct marketing purposes, you may object to this processing at any time; in that case, no further processing will take place for such purposes. Where solely automated decisions (including profiling) are made which significantly affect you, you have the rights pursuant to Art. 22 GDPR. Finally, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). To exercise your rights, please contact us using the contact details provided in this Privacy Policy.
4 Collection of personal data when visiting our website
When you visit our website purely for information purposes, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data which are technically necessary for us to display our website to you and to ensure stability and security. The legal basis for this is Art. 6 (1) (f) GDPR:
IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, respectively transmitted data volume, website from which the request originates, browser, operating system and its interface, language and version of the browser software.
ALBIS Distribution GmbH & Co. KG cannot assign these data to specific individuals. These data are not combined with other data sources; the data are also deleted after statistical evaluation and are used solely to improve the attractiveness, content and functionalities of our web pages.
5 Contact by email or contact form
When you contact us by email or via a contact form, the data you provide (your email address and your name as well as your message text) are stored by us in order to answer your questions. Where our contact form requests entries that are not required to contact you, these are always marked as optional. Such information serves to specify your inquiry and to facilitate the handling of your request. Providing this information is expressly voluntary and based on your consent, Art. 6 (1) (a) GDPR. If such information concerns communication channels (for example email address, telephone number), you also consent to us contacting you via these communication channels, if necessary, in order to respond to your request. You may of course revoke this consent at any time with effect for the future.
We delete the data arising in this context once storage is no longer necessary or restrict processing if statutory retention obligations exist.
6 Newsletter
6.1 General information
With your consent pursuant to Art. 6 (1) (a) GDPR, you can subscribe to our newsletter, with which we inform you about our current offers.
The dispatch and administration of the newsletter are handled by a service provider. We use a service provider because this ensures that emails are reliably sent and are less likely to end up in your spam filter. In addition, the use of the service provider allows us to optimize the subscription and unsubscription process. The service provider is used on the basis of our legitimate interests pursuant to Art. 6 (1) (f) GDPR and is obliged to comply with the GDPR. Our service provider, a company based in the USA, uses several data centers in Europe. The data do not leave the European Economic Area.
To register for our newsletter, we use the so-called double opt-in procedure. This means that after you register, we send an email to the email address provided in which we ask you to confirm that you wish to receive the newsletter.
We also store the IP addresses you used and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.
The only mandatory information for sending the newsletter is your email address and your language preference. After your confirmation, we store your email address and your language preference for the purpose of sending you the newsletter. The legal basis is Art. 6 (1) (a) GDPR.
You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in every newsletter email or by sending a contact request to the Data Protection Officer named above.
However, your registration data will be stored for a further 3 years so that we can prove the consent you have given, which we are required to do by law. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. The processing of these data is restricted to the purpose of possible defense against claims. You can request complete deletion at any time, provided that the former existence of consent is confirmed at the same time.
6.2 Newsletter tracking
We inform you that when sending the newsletter we evaluate your user behavior. For this evaluation, the emails sent contain so-called web beacons or tracking pixels that are stored on our website. For the evaluations, we link the aforementioned data and the web beacons with your email address and an individual ID. Links contained in the newsletter also contain this ID.
Using the data thus obtained, we create a user profile in order to tailor the newsletter to your individual interests. In doing so, we record when you read our newsletters, which links you click in them and draw conclusions from this about your personal interests.
The information is stored for as long as you have subscribed to the newsletter. After unsubscribing, we store the data in a purely statistical and anonymous form.
Such tracking is also not possible if you have deactivated the display of images in your email program by default. In this case, the newsletter will not be displayed to you in full and you may not be able to use all functions. If you display the images manually, the tracking described above will take place.
7 Applications
You can apply to our company electronically, in particular by email or web forms. We will of course use your information exclusively to process your application and will not pass it on to third parties. Please note that emails sent without encryption are not protected against unauthorized access.
You can also apply online to our company via our application portal. Your online application will be transmitted directly to the HR department via an encrypted connection and will of course be treated confidentially. We will of course use your information exclusively to process your application and will not pass it on to third parties. Further information on data processing in the context of the application process can be found in the privacy policy of our application portal.
If you have applied for a specific position and this position has already been filled, or if we consider you to be equally or even more suitable for another position, we would like to forward your application within the company. Please inform us if you do not agree to such forwarding.
Your personal data will be deleted immediately after completion of the application process, or after a maximum of 6 months, unless you have expressly given us your consent for longer storage of your data or an employment contract has been concluded. The legal basis is Art. 6 (1) (a), (b) and (f) GDPR as well as Section 26 BDSG (German Federal Data Protection Act).
8 Digital signature
We use the DocuSign software of DocuSign Inc., 221 Main St., Suite 1000, San Francisco, CA 94105, USA (“DocuSign”) for the digital signature of contracts and documents. For this purpose, DocuSign processes the data you enter when using the service as well as usage data of your end device and transaction-related data. DocuSign stores all personal data on servers within the EU. The legal basis is Art. 6 (1) (b) and (f) GDPR. We have concluded a data processing agreement with DocuSign via Telekom Deutschland GmbH. Further information on data processing by DocuSign can be found in DocuSign’s privacy policy. In order to ensure a high level of data protection and so-called adequate safeguards, DocuSign has adopted binding corporate rules pursuant to Art. 47 GDPR, which you can view here.
9 Use of cookies
Our website uses cookies and comparable technologies (hereinafter jointly referred to as “cookies”) in order to ensure technical functionality and – if you consent – to analyze usage or to tailor content to your interests.
Cookies are small data sets that are stored on your end device and contain certain information, such as your language settings, log-in information, visit duration. On a subsequent visit, this information can be retrieved in order to provide you with an improved user experience.
Types of cookies:
Technically necessary cookies: These are strictly required for the operation of the website (e.g. for navigation or access to secure areas).
Functional cookies: These enable certain comfort functions to be provided, such as saving settings or automatically filling in forms.
Analytics and statistics cookies: These collect information about the use of our website in order to improve its performance and content.
Marketing and tracking cookies: These are used to tailor content and advertising to your interests.
Furthermore, a distinction is made between:
Session cookies: These are stored only for the duration of your visit and deleted after closing the browser.
Persistent cookies: These remain stored beyond the session and are automatically deleted after a certain period.
First-party cookies: These are set directly by us.
Third-party cookies: These are set by third-party companies, e.g. by analytics tools or advertising networks.
The processing of personal data by means of cookies is generally based on:
For technically necessary cookies: Art. 6 (1) (f) GDPR and Section 25 TDDDG (legitimate interest in the operation, security and optimization of the website).
For all other cookies: Art. 6 (1) (a) GDPR and Section 25 TDDDG (consent).
You can adjust or revoke your cookie settings at any time via our consent management tool. You can also delete or block cookies via your browser settings. Please note that disabling cookies may restrict or disable certain functions of the website.
Further information on the cookies we use can be found in this Privacy Policy or in our cookie banner.
10 Google Analytics
If you have given your consent, Google Analytics 4, a web analytics service provided by Google LLC, is used on this website. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Google Analytics uses cookies that enable an analysis of your use of our websites. The information generated by the cookies about your use of this website is generally transmitted to a Google server in the USA and stored there.
In Google Analytics 4, IP anonymization is activated by default. Due to IP anonymization, your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.
During your website visit, your user behavior is recorded in the form of “events”. On our behalf, Google will use this information to evaluate your pseudonymous use of the website and to compile reports on website activities. The reports provided by Google Analytics serve to analyze the performance of our website.
Possible recipients of the data are:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor pursuant to Art. 28 GDPR),
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA,
Alphabet Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google LLC is certified under the EU-U.S. Data Privacy Framework. As Google servers are distributed worldwide and data transfers to third countries (for example to Singapore) cannot be completely ruled out, we have also concluded the EU Standard Contractual Clauses with the provider.
The data sent by us and linked to cookies are automatically deleted after 14 months. The maximum lifetime of Google Analytics cookies is 2 years. Deletion of data whose retention period has been reached takes place automatically once a month.
The legal basis for this data processing is your consent pursuant to Art. 6 (1) (a) GDPR and Section 25 (1) sentence 1 TTDSG. You can revoke your consent at any time with effect for the future by calling up the cookie settings and changing your selection. The lawfulness of processing based on consent before its revocation remains unaffected.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google as well as the processing of these data by Google by:
not granting your consent to the setting of the cookie, or
downloading and installing the browser add-on to deactivate Google Analytics.
Further information on the terms of use of Google Analytics and on data protection at Google can be found at
https://marketingplatform.google.com/about/analytics/terms/de/ and
https://policies.google.com/?hl=de.
11 Data transfer
Your data will generally not be transferred to third parties unless we are legally obliged to do so, the data transfer is necessary for the performance of a contractual relationship, or you have previously expressly consented to the transfer of your data.
Where external service providers may come into contact with your personal data, we ensure within the framework of data processing agreements pursuant to Art. 28 GDPR that they comply with the provisions of data protection laws to the same extent. Please also observe the respective data protection information of the providers. The respective provider is responsible for the content of third-party services, although we check the services for compliance with legal requirements within the scope of what is reasonable.
12 Data security
We have taken extensive technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted in line with technological progress.
To secure our online forms and protect against misuse by automated access (bots), we use the Cloudflare Turnstile service, offered by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.
Turnstile checks whether an entry is made by a natural person or abusively by automated programs. For this purpose, various technical information about the accessing device is evaluated (e.g. IP address, user agent, referrer, timestamp, browser characteristics, TLS fingerprint and interactions with the website). This processing is carried out exclusively for the purpose of preventing spam and attacks on our website.
Data processing is based on Art. 6 (1) (f) GDPR (legitimate interest). Our legitimate interest lies in defending against abusive automated access as well as protecting our IT systems.
We have concluded a data processing agreement (Data Processing Addendum, DPA) with Cloudflare pursuant to Art. 28 GDPR. Insofar as data are transferred to the USA, this is based on the Standard Contractual Clauses (SCC) of the European Commission pursuant to Art. 46 (2) (c) GDPR. Cloudflare is also certified under the EU-U.S. Data Privacy Framework. Further information can be found in Cloudflare’s Privacy Policy: https://www.cloudflare.com/de-de/privacypolicy/
Status as of February 2026