Last updated: April 2026

Privacy Policy

1. Introduction

1.1. This Privacy Notice explains how we collect and process personal data when you use: a) our website at https://getalto.com; and b) our profiles on social media platforms. Personal data means any information that can be related to an identified or identifiable natural person, such as a name, email address, or IP address.

1.2. The controller within the meaning of Art. 4 para. 7 EU General Data Protection Regulation (GDPR) responsible for data processing on this website is: Hive Technologies GmbH, Karl-Liebknecht-Str. 14, 10178 Berlin, Germany, email: hello@getalto.com

1.3. Our appointed Data Protection Officer is: heyData GmbH, Kantstr. 99, 10627 Berlin, Germany, website: www.heydata.eu, email: datenschutz@heydata.eu.

2. Legal Bases for Processing

Where we process personal data, we do so on one or more of the following legal bases under the GDPR:

• a) Art. 6(1)(a) GDPR: You have provided your consent to the processing for one or more specific purposes;
• b) Art. 6(1)(b) GDPR: processing is necessary for the performance of a contract with you or for pre-contractual measures taken at your request;
• c) Art. 6(1)(c) GDPR: processing is necessary to comply with a legal obligation to which we are subject;
• d) Art. 6(1)(f) GDPR: processing is necessary for the purposes of our legitimate interests, except where such interests are overridden by your interests or fundamental rights.

The specific legal basis applicable to each processing activity is identified in Section 3 below.

3. Personal Data We Collect and Purposes of Processing

3.1. Website Visits: When you visit this website, our hosting provider automatically collects standard server log data, including your IP address, browser type, operating system, referring URL, and the date and time of your visit. This data is processed on the basis of our legitimate interest in ensuring the technical operation and security of the website (Art. 6(1)(f) GDPR) and is deleted as soon as it is no longer required for that purpose, unless statutory retention obligations require otherwise.

3.2. Contact Form: When you submit the contact form on this website, we collect the information you provide (such as your name, company name, email address, and any other details you include in your message). Certain fields in the contact form are required in order for us to respond to your enquiry or initiate a business relationship. Where fields are marked as mandatory, failure to provide the requested data means we may be unable to process your enquiry or enter into a contract with you. All other fields are voluntary. We use this data exclusively to respond to your enquiry and, where applicable, to initiate and manage our business relationship with you. The legal basis for this processing is Art. 6(1)(b) GDPR (processing necessary for pre-contractual measures taken at your request and, where a contract is concluded, for the performance of that contract) and, to the extent the processing goes beyond responding to your enquiry, Art. 6(1)(f) GDPR (our legitimate interest in managing business communications). Personal data collected through the contact form is deleted as soon as it is no longer required for the purpose for which it was collected. Where you enter into a contract with Hive, personal data related to that contractual relationship is retained for its duration and thereafter for as long as required under applicable statutory retention obligations, including commercial and tax law requirements.

3.3. Cookies and Analytics: This website uses cookies for analytics purposes. Analytics cookies are only set after you provide explicit consent via the cookie banner. We use one functional cookie (user_consent) to remember your preferences.

3.4. Newsletter: We offer product updates to which you may subscribe on this website. We process the email address and any other information you provide solely for the purpose of sending updates, on the basis of your consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time by clicking the unsubscribe link in any email or by contacting us at the address above. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

4. General Retention Policy

Unless stated otherwise in this Privacy Notice, personal data we collect is deleted as soon as it is no longer required for the purpose for which it was collected and no statutory retention obligations require us to retain it. Where data cannot be deleted because it is required for other legally permissible purposes, its processing is restricted, meaning it is blocked and not processed for other purposes. This applies in particular to data that must be retained for commercial or tax law reasons, such as business correspondence and accounting records.

5. Disclosure of Personal Data

Your data may be shared with the following categories of recipients where necessary:

• a) Hosting and infrastructure providers: who host this website and process data on our behalf as processors under Article 28 GDPR;
• b) Email and communication service providers: used to manage and respond to enquiries;
• c) Public authorities: where we are required to disclose data by applicable law.

6. Data Transfers Outside the EEA

Where we transfer personal data to service providers or other third parties outside the European Economic Area (“EEA”), we ensure that an appropriate level of data protection is maintained as follows:

• a) Where the European Commission has adopted an adequacy decision for the recipient country, the transfer is made on that basis pursuant to Art. 45(3) GDPR;
• b) Where no adequacy decision exists, transfers are made on the basis of standard contractual clauses adopted by the European Commission pursuant to Art. 46(2)(b) GDPR, which form part of our contracts with the relevant third parties.

7. Automated Decision-Making

This website does not use automated decision-making processes, including profiling, that produce legal or similarly significant effects on you within the meaning of Art. 22 GDPR. Should this change, we will update this Privacy Notice and inform you separately where required by law.

8. Data Subject Rights

Under applicable data protection law you have the following rights in relation to your personal data:

• a) Right of access (Art. 15 GDPR): you may request confirmation of whether we process your data and obtain a copy;
• b) Right to rectification (Art. 16 GDPR): you may request correction of inaccurate or incomplete data;
• c) Right to erasure (Art. 17 GDPR): you may request deletion of your data where the legal basis for processing no longer applies;
• d) Right to restriction (Art. 18 GDPR): you may request that we restrict processing of your data in certain circumstances;
• e) Right to data portability (Art. 20 GDPR): you may request your data in a structured, commonly used, machine-readable format;
• f) Right to object (Art. 21 GDPR): where processing is based on legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time on grounds relating to your particular situation;
• g) Right to withdraw consent (Art. 7(3) GDPR): where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at hello@getalto.com. You also have the right to lodge a complaint with a supervisory authority.

9. Third-Party Tools and Service Providers

We use the following third-party tools on this website. Where these tools process personal data, the details are set out below.

10. Changes to This Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or applicable law. The current version is always available at this URL. Material changes will be communicated where required by applicable law.