Data Privacy

1. Controller

Dr. Mischa Paterna, Hamburg, Germany, is the controller for the processing of personal data on this website. You can reach the controller at mischa.paterna@alcarna.com.

2. Hosting

This website is hosted by a third-party hosting provider that acts as a processor. Technical processing data (see “Server log files” below) may be collected and stored on the provider’s servers for the purpose of enabling and securing the operation of the website.

3. Server log files

When you visit this website, the provider’s servers automatically collect and store information such as your IP address, browser type and version, operating system, referring URL, date and time of access, and the requested URL. This processing is based on our legitimate interest in the technically error-free presentation and security of the website (Art. 6(1)(f) GDPR). The data is kept for a limited period and deleted thereafter.

4. Contact form

When you submit the contact form, the information you provide (name, email, company and message) is processed for the purpose of responding to your enquiry. Processing is based on your consent (Art. 6(1)(a) GDPR) and our legitimate interest in handling incoming business enquiries (Art. 6(1)(f) GDPR). The data is sent by email to the controller and used solely to answer your request and, where applicable, to follow up on the conversation. The data is deleted once it is no longer required, unless statutory retention obligations apply.

The form includes a simple arithmetic check and a hidden technical field (honeypot) to protect against automated spam submissions. No third-party CAPTCHA service is used and no personal data is shared with such a service.

5. Cookies & analytics

This website does not use cookies that require consent under the GDPR or the German Telecommunications-Telemedia Data Protection Act (TTDSG). Only technically necessary processing may take place where required to operate the site. No advertising or cross-site-tracking cookies are set.

6. External links

This website links to external websites (for example LinkedIn). When you follow such a link, the operators of those external sites are responsible for their own data processing. Please refer to their respective privacy policies.

7. Your rights

You have the right to information, rectification, erasure, restriction of processing, data portability and objection with regard to the processing of your personal data. Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. You also have the right to lodge a complaint with a supervisory data protection authority.

8. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or manipulation, including encrypted transmission (HTTPS) where supported by the hosting infrastructure.