Privacy Policy

Data Protection Declaration

1) Information on the Collection of Personal Data and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data is any data that can be used to personally identify you.

1.2 The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

Alo & Co.
Website: https://aloandco.com
Email: info@aloandco.com

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 For security reasons and to protect the transmission of personal data and confidential content (such as orders or enquiries), this website uses SSL or TLS encryption. You can recognise an encrypted connection by “https://” and the lock symbol in your browser.

2) Data Collection When Visiting Our Website

When using our website for information purposes only, we collect only the data that your browser transmits to our server (“server log files”):

  • Visited website

  • Date and time of access

  • Amount of data transferred

  • Referrer URL

  • Browser type

  • Operating system

  • IP address (anonymised where applicable)

Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in ensuring website stability and functionality. Data is not shared unless there is evidence of unlawful use.

3) Cookies

Our website uses cookies to improve usability and functionality. Cookies are small text files stored on your device.

  • Session cookies are deleted when you close your browser

  • Persistent cookies remain stored for a defined period

Cookies may process personal data and are used in accordance with:

  • Art. 6(1)(b) GDPR (contract fulfilment), or

  • Art. 6(1)(f) GDPR (legitimate interest in functionality and optimisation)

You may configure your browser to notify you of cookies or to disable them. Disabling cookies may limit website functionality.

Browser guides:

  • Internet Explorer

  • Firefox

  • Chrome

  • Safari

  • Opera

4) Making Contact

When contacting us via email or contact form, personal data is collected solely for handling your request.

Legal basis:

  • Art. 6(1)(f) GDPR (legitimate interest), or

  • Art. 6(1)(b) GDPR (contract initiation)

Your data is deleted once your enquiry has been resolved, unless legal retention obligations apply.

5) Customer Account & Contract Processing

Personal data is processed in accordance with Art. 6(1)(b) GDPR for contract fulfilment or account creation.
You may request deletion of your customer account at any time via info@aloandco.com.

Data is retained only as required by tax and commercial law.

6) Use of Data for Direct Advertising

6.1 Newsletter Subscription

We use a double opt-in procedure. Legal basis: Art. 6(1)(a) GDPR.
You may unsubscribe at any time.

6.2 Existing Customers

We may send offers for similar products based on Art. 6(1)(f) GDPR.
You may object at any time.

7) Order Processing

Personal data is shared with:

  • Shipping providers (delivery)

  • Payment providers (payment processing)

Legal basis: Art. 6(1)(b) GDPR.

Payment Providers:

  • PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg

  • SOFORT GmbH / Klarna Group

Each provider processes data under its own privacy policy.

8) Review Reminder

With your explicit consent (Art. 6(1)(a) GDPR), we may send a one-time review reminder email. Consent may be withdrawn at any time.

9) Social Media Plugins (Shariff Solution)

We use privacy-friendly Shariff integrations for:

  • Facebook

  • Instagram

No direct connection is established until you actively click a button.

10) Online Marketing

We use:

  • Google DoubleClick

  • Google Ads Conversion Tracking

Processing is based on Art. 6(1)(f) GDPR (legitimate marketing interest).
You can disable personalised ads via Google settings.

11) Web Analytics

Google Analytics (Universal Analytics) with IP anonymisation is used for statistical analysis.

Legal basis: Art. 6(1)(f) GDPR
You may opt out via browser plugins or cookie settings.

12) Retargeting / Remarketing

  • Facebook Pixel (with consent, Art. 6(1)(a) GDPR)

  • Google Ads Remarketing

You may disable these via browser or ad-preference settings.

13) Rights of the Data Subject

You have the right to:

  • Access (Art. 15 GDPR)

  • Rectification (Art. 16 GDPR)

  • Erasure (Art. 17 GDPR)

  • Restriction (Art. 18 GDPR)

  • Data portability (Art. 20 GDPR)

  • Withdraw consent (Art. 7(3) GDPR)

  • Lodge a complaint (Art. 77 GDPR)

Right to Object

You may object at any time to processing based on legitimate interest or for direct marketing.

14) Duration of Data Storage

Personal data is stored only as long as required by statutory retention periods or contractual necessity. After expiry, data is deleted unless further lawful processing applies.