1. Controller responsible for data processing

When you visit the website (https://www.aliadra.com/), the user data listed below is collected and processed. The site is operated by Ali Adra, Am Emplkeller 28, 85435 Erding, Germany, who is therefore the controller responsible for this data and its processing within the meaning of data protection law.

2. Types of data and how they are processed

a. Accessing the website

When you access our website, our web servers temporarily store the following data (log files):

3. Instagram, TikTok, Twitter, LinkedIn

Our site does not use plugins provided by these social networks. No automatic transfer of user data to the operators of these platforms takes place on our pages.
The logos are merely links to the respective external pages.

4. Newsletter subscription

You can subscribe to a regular newsletter on our homepage. The newsletter contains general information on stroke. For this we only need an email address. You will first receive an email due to your registration containing a link that you must click to confirm your subscription (double opt-in). This helps prevent misuse of email addresses. You also have the option to be addressed by your real name in the newsletter (personalized newsletter). To do so, simply provide your first and last name. We process both your email address and your name solely for the purpose of sending you the newsletter.

5. Data transfers to third countries

Some of our service providers transfer personal data to the USA. On 10 July 2023, the European Commission adopted an adequacy decision for the protection level of personal data under the EU-U.S. Data Privacy Framework (Art. 45 DSGVO).

If a transfer to third countries is not possible on the basis of an adequacy decision under Art. 45 DSGVO, we have taken steps to ensure an adequate level of data protection for the transfer, for example by concluding Standard Contractual Clauses. These are contracts prescribed by the European Commission under which the parties commit to appropriate data protection standards for data transfers. The service provider thereby gives specific guarantees to protect the data.

We may also carry out data processing on the basis of consent. If we obtain consent, you will be specifically informed about the data processing.

6. Sharing data with processors

We engage service providers for specialized tasks (e.g., IT services for our systems, maintenance of IT infrastructure). These providers may also gain access to data.

We have concluded data processing agreements with these providers (Art. 28 DSGVO) to ensure the best possible protection of the data. We have carefully selected these providers. They process personal data only on our behalf and strictly in accordance with our instructions on the basis of the relevant contracts.

7. Legal basis for storage

The legal basis for storing the data mentioned above is, as applicable, Art. 6 Abs. 1 lit. a and f DSGVO. The legitimate interest referred to in lit. f arises from the necessity to display the website and provide the functions described above to users. The legitimate interest for using Google Analytics in anonymized form lies in the continuous improvement of our site. Neither we nor Google can draw conclusions about a person based on this user data.

When logging in to any restricted-access area, we process the login data you provide on the basis of Art. 6 Abs. 1a DSGVO.

8. Secure data transmission

Our website uses SSL encryption. You can recognize this by the “HTTPS” in the address bar. SSL encryption is transport encryption that prevents third parties from viewing the data.

9. Communication

If users send us an email, we use the email address and any personal data and information contained in the email solely to handle the relevant request. For content requiring special protection, we recommend sending the email in encrypted form only.

10. Your rights

a. Right of access, Art.15 DSGVO

Data subjects have the right to obtain information at any time, free of charge, about the personal data we store. The information includes:

• The purposes of processing;

• The categories of personal data processed;

• The recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organizations;

• Where possible, the envisaged storage period for the personal data, or, if not possible, the criteria used to determine that period;

• The existence of the right to rectification or erasure of personal data or restriction of processing by the controller or to object to such processing;

• The existence of a right to lodge a complaint with a supervisory authority;

• Where the personal data is not collected from the data subject, any available information as to its source;

• The existence of automated decision-making, including profiling, referred to in Article 22 paragraphs 1 and 4, and, at least in those cases, meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for the data subject.

• The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.

• You withdraw your consent on which the processing is based according to Article 6 paragraph 1 point a or Article 9 paragraph 2 point a, and there is no other legal ground for the processing.

• You object to the processing pursuant to Article 21 paragraph 1 and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21 paragraph 2.

• The personal data has been unlawfully processed.

• The personal data must be erased for compliance with a legal obligation in the European Union or Member State law to which the controller is subject.
  

• The personal data has been collected in relation to the offer of information society services referred to in Article 8 paragraph 1.
  

• The accuracy of the personal data is contested by you for a period that enables us to verify the accuracy of the personal data;

• The processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead;

• We no longer need the personal data for the purposes of the processing, but you or we need it for the establishment, exercise or defense of legal claims; or

• You have objected to processing pursuant to Article 21 paragraph 1 pending verification whether our legitimate grounds override yours.