Privacy Notice
for www.althom.de
Last updated: August 2026
1. Overview and scope
Protecting your personal data is important to us. This Privacy Notice explains how ALTHOM GmbH processes personal data when you visit www.althom.de, including its German- and English-language pages, contact us or apply for a position with us.
Personal data means any information relating to an identified or identifiable natural person, such as an IP address, name, contact details or information contained in application documents.
2. Controller
ALTHOM GmbH
Schnackenburgallee 117
22525 Hamburg
Deutschland
Phone: +49 (40) 40 41 30 79 802
E-Mail: info@althom.de
Represented by its Managing Director: Alkiviadis Thomas
3. Data Protection Officer
You can contact our Data Protection Officer at:
Stavros Limitsios
ALTHOM GmbH
Schnackenburgallee 117
22525 Hamburg
Deutschland
Phone: +49 (0) 40 41 30 79 807
E-Mail: limitsios@althom.de
4. General legal bases
We process personal data only where there is a legal basis. Depending on the processing activity, we rely in particular on:
• your consent under Article 6(1)(a) GDPR; you may withdraw consent at any time with effect for the future.
• steps taken at your request before entering into a contract or performance of a contract under Article 6(1)(b) GDPR.
• compliance with legal obligations under Article 6(1)(c) GDPR.
• our legitimate interests under Article 6(1)(f) GDPR, in particular in providing a secure, stable and user-friendly website and responding to enquiries.
Where information is stored on or accessed from your device, section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) also applies. We use non-essential cookies and comparable technologies only with your consent.
5. Website delivery and server logs
Whenever you access our website, your browser sends technical data required by the web server. This may include your IP address, date and time of access, the page or file requested, volume of data transferred, referrer URL, browser type and version, operating system and request status information.
We process this data to deliver the website, ensure stability and security, detect attacks and misuse and analyse technical errors. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website.
Log data is deleted or anonymised once it is no longer needed for these purposes. It may be retained for longer where necessary to investigate a security incident or comply with legal obligations. We use service providers acting on our instructions for hosting and technical operation.
6. Website search
If you use the search function, we process the search term you enter and the technical data generated when the page is accessed in order to provide relevant results. The search term may form part of the requested URL and server logs. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is to provide convenient navigation of our website.
7. Contacting us
If you contact us by email, telephone or another channel, we process the information you provide, typically your name, contact details, the content of your enquiry and communication data. We use this information to respond to and document your request.
Where your enquiry relates to a contract or pre-contractual steps, the legal basis is Article 6(1)(b) GDPR. In other cases, we process the data under Article 6(1)(f) GDPR; our legitimate interest is to respond appropriately to business enquiries. Where statutory retention requirements apply, storage is based on Article 6(1)(c) GDPR.
We delete enquiry data once the matter has been fully resolved and no statutory retention requirement or legitimate reason for further storage applies.
8. Job applications
If you apply for a position with us, we process the data you submit as part of your application. This includes, in particular, identification and contact data, CV, qualifications, certificates, salary expectations, availability, interview notes and any other information you voluntarily provide.
We process this data to decide whether to establish an employment relationship on the basis of section 26(1) of the German Federal Data Protection Act (BDSG) in conjunction with Article 6(1)(b) GDPR. Where special categories of personal data are involved, section 26(3) BDSG and Article 9(2) GDPR additionally apply. We process data required to comply with legal obligations under Article 6(1)(c) GDPR.
Where required by the advertised position or recruitment process, application data may be shared within the ALTHOM group, in particular with ALTHOM Engineering E.P.E. in Greece, and with carefully selected recruitment service providers. Access is limited to persons involved in the selection process.
After the recruitment process has ended, we generally delete application data no later than six months afterwards unless legal obligations, pending proceedings or other legitimate reasons require longer retention. We retain data for a candidate pool only with your separate consent and for the period specified at that time. You may withdraw that consent at any time with effect for the future.
9. Cookies, similar technologies and consent management
Our website may use cookies and similar technologies. Cookies are small text files stored on your device. Strictly necessary technologies may be used where required to provide a digital service expressly requested by you. The subsequent processing of personal data is generally based on Article 6(1)(f) GDPR.
Analytics, marketing and embedded third-party content are activated only after you consent through the consent management tool. The legal bases are section 25(1) TDDDG and Article 6(1)(a) GDPR. You may change or withdraw your selection at any time through the cookie settings available on the website. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
The consent management tool stores your choice so that it can be respected on later page views. The technologies in use, providers, purposes and storage periods are also displayed in the cookie settings.
10. Google Tag Manager
We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Tag Manager is used to manage and control the activation of other website tags. It does not itself create usage profiles; however, Google processes technically necessary HTTP request data and diagnostic data. According to Google, standard Tag Manager HTTP logs are deleted within 14 days.
We load Google Tag Manager only after you have given your consent. The legal bases are section 25(1) TDDDG and Article 6(1)(a) GDPR. The additional services activated via Tag Manager depend on your selection. It currently manages the LinkedIn Insight Tag.
Further information: Google Tag Manager data privacy and security
11. LinkedIn Insight Tag
With your consent, we use the LinkedIn Insight Tag provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn partner ID 4395009 is integrated into our website.
The service helps us analyse website use, measure the effectiveness of LinkedIn advertising campaigns, attribute conversions and create advertising audiences. Data sent to LinkedIn may include the URL and referrer, IP address, date and time, device and browser characteristics, page and event data and cookie or other online identifiers. If you are signed in to LinkedIn, LinkedIn may associate your visit with your account. LinkedIn may process the data for its own purposes as described in its privacy information.
The legal bases are section 25(1) TDDDG and Article 6(1)(a) GDPR. Retention is governed by LinkedIn's rules and your consent selection. You may withdraw your consent at any time through the cookie settings. LinkedIn members can also manage advertising preferences in their LinkedIn account.
Further information: LinkedIn Privacy Policy
Information about the service: LinkedIn Insight Tag
12. Google Maps
We embed Google Maps on our contact page. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Maps are loaded only after you have given your consent. When a map is loaded, Google technically receives information including your IP address, browser and device information, date and time, the page visited and, where applicable, location or account information. Google may use cookies and similar technologies and process the data for its own purposes.
The purpose is to display our locations and make route planning easier. The legal bases are section 25(1) TDDDG and Article 6(1)(a) GDPR. You may withdraw your consent at any time through the cookie settings. Alternatively, you may use the address shown in the contact section without loading a map.
Further information: Google-Datenschutzerklärung
13. ShortPixel Adaptive Images / CDN
We use ShortPixel Adaptive Images and the ShortPixel Content Delivery Network (CDN), provided by ID SCOUT SRL, Str. Transilvaniei nr. 2, Camera 5, Bl. 5, Ap. 19, Sector 1, 010798 Bucharest, Romania, to deliver images in an optimised and fast manner. When an optimised image is requested, a connection is made to ShortPixel servers. Data processed may include the IP address, date and time, requested image file, referrer and browser and device information.
The purpose is to provide our website efficiently, with reduced bandwidth requirements and stable image delivery. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is in short loading times and reliable image display. ShortPixel acts as a processor when providing the service.
Further information: ShortPixel Privacy Policy
14. External links and social media
Our website contains links to external websites and to our profiles on social networks, in particular LinkedIn and Facebook. Merely viewing our pages does not establish a connection to a social network through an ordinary link. Only when you click a link do you leave our website, and the relevant provider processes data under its own responsibility. Please review the privacy information of the destination provider.
15. Recipients and processors
Within ALTHOM GmbH, personal data is accessible only to teams that need it for the relevant purpose. Data may also be disclosed to affiliated companies, hosting and IT providers, communications providers, recruitment providers, web analytics and marketing providers, professional advisers or public authorities where necessary and legally permitted.
Service providers that process personal data solely on our instructions are contractually bound in accordance with Article 28 GDPR. We disclose data for a recipient's own purposes only where there is a legal basis and you have been informed accordingly.
16. International transfers
When Google and LinkedIn services are used, processing by group companies or service providers outside the European Economic Area, particularly in the United States, cannot be ruled out. Where a recipient in the United States is certified under the EU-U.S. Data Privacy Framework, transfers may be based on the European Commission's adequacy decision under Article 45 GDPR. Otherwise, providers use appropriate safeguards, in particular Standard Contractual Clauses under Article 46 GDPR, supplemented by additional safeguards where necessary.
Despite these safeguards, international transfers may involve residual risks, particularly in relation to access by public authorities. Further details are available in each provider's privacy information.
17. Retention
Unless a specific period is stated in this Privacy Notice, we retain personal data only for as long as necessary for the relevant purpose. We then delete or anonymise the data unless statutory retention requirements, evidentiary interests, the establishment, exercise or defence of legal claims or valid consent justify longer storage.
18. Your rights
Subject to the applicable statutory conditions, you have the following rights in particular:
• access to the personal data we process about you under Article 15 GDPR.
• rectification of inaccurate data or completion of incomplete data under Article 16 GDPR.
• rectification of inaccurate data or completion of incomplete data under Article 16 GDPR.
• erasure of your data under Article 17 GDPR.
• restriction of processing under Article 18 GDPR.
• objection to processing based on Article 6(1)(e) or (f) GDPR under Article 21 GDPR.
• withdrawal of consent at any time with effect for the future under Article 7(3) GDPR.
To exercise your rights, please contact info@althom.de or our Data Protection Officer. To prevent unauthorised disclosure, we may request reasonable proof of your identity.
19. Specific information on your right to object
Where we process your personal data on the basis of legitimate interests under Article 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation. We will then no longer process the data unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.
You may object to processing for direct marketing purposes at any time without giving reasons.
20. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is, in particular:
The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str. 22
20459 Hamburg
Deutschland
Telefon: +49 (0) 40 428 54-4040
E-Mail: mailbox@datenschutz.hamburg.de
Online: www.datenschutz-hamburg.de
You may also contact the supervisory authority at your habitual residence or place of work.
21. Data security
We use appropriate technical and organisational measures to protect personal data against loss, manipulation and unauthorised access. The website is transmitted in encrypted form using HTTPS. Nevertheless, no transmission of data over the internet can be completely risk-free.
22. Pflicht zur Bereitstellung und automatisierte Entscheidungen
Providing personal data is generally neither a statutory nor contractual requirement. However, certain information may be necessary to respond to an enquiry or process an application; without that information, we may not be able to handle your request. We do not use solely automated decision-making, including profiling, within the meaning of Article 22 GDPR in connection with this website.