ALTIVATE

Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website is:

Kalle van der Heyd
Altivate
Steigerwaldstraße 12
91456 Diespeck
Germany

Email: michael@altivate.site

If you have any questions regarding this Privacy Policy or the processing of your personal data, you may contact us using the email address above.

2. General Information

We take the protection of your personal data seriously.

Personal data means any information relating to an identified or identifiable natural person. This may include, for example, your name, email address, IP address, information submitted through our contact form, or technical information generated when you use this website.

We process personal data only where permitted under applicable data protection law, in particular the General Data Protection Regulation (“GDPR”).

Depending on the processing activity, the legal basis may include:

  • Article 6(1)(a) GDPR — your consent;

  • Article 6(1)(b) GDPR — processing necessary to take steps at your request before entering into a contract or to perform a contract;

  • Article 6(1)(c) GDPR — compliance with a legal obligation;

  • Article 6(1)(f) GDPR — processing necessary for our legitimate interests, provided these interests are not overridden by your rights and freedoms.

3. Contact Form and Enquiries

Our website provides a contact form that allows you to contact Altivate, request information, submit a property or accommodation link, request a quotation, or enquire about our services.

When you use the contact form, we may process the following information:

  • your name;

  • your email address;

  • your property website, Airbnb listing, or other accommodation link;

  • the content of your message;

  • any additional information you voluntarily provide;

  • technical information related to the submission, such as the date and time of the request and, where technically processed, your IP address.

We use this information solely to process and respond to your enquiry, assess your project, communicate with you, and, where requested, prepare an individual quotation.

If your enquiry relates to a potential or existing business relationship, the processing is based primarily on Article 6(1)(b) GDPR.

For other general enquiries, processing may be based on our legitimate interest in responding to enquiries and operating our business under Article 6(1)(f) GDPR.

We do not sell the personal data submitted through our contact form.

Storage period

We retain enquiry data only for as long as necessary to process and respond to your enquiry.

If no contractual relationship is established, the correspondence will generally be deleted once it is no longer required, unless continued storage is necessary for legal, accounting, tax, documentation, or legal-claims purposes.

If your enquiry results in a contractual relationship, relevant correspondence and transaction data may be retained for the applicable statutory retention periods.

4. Website Hosting and Framer

This website is created and hosted using services provided by:

Framer B.V.
Rozengracht 207B
1016 LZ Amsterdam
The Netherlands

Framer provides the technical infrastructure required to publish and operate this website.

When you access the website, technical data may be processed automatically, including:

  • your IP address;

  • browser type and version;

  • operating system;

  • device information;

  • date and time of access;

  • requested pages or files;

  • referring website;

  • technical log and security information.

This processing is necessary to display the website correctly, ensure its stability and security, detect abuse, and maintain reliable operation.

The legal basis is Article 6(1)(f) GDPR, based on our legitimate interest in providing a secure, functional, and reliable website.

Framer states that it acts as a processor where it processes personal data on behalf of its customers and provides a Data Processing Addendum designed to comply with Article 28 GDPR. Framer also uses Amazon Web Services infrastructure.

Where personal data is transferred outside the European Economic Area, appropriate safeguards under applicable data protection law are used.

Further information is available in Framer's own Privacy Statement.

5. Vimeo Video Embedding

This website contains an embedded video hosted by Vimeo.

The Vimeo player is used to display an example of an Altivate cinematic property walkthrough directly on this website.

When a Vimeo video is loaded or played, information may be transmitted to Vimeo. This can include:

  • your IP address;

  • browser and device information;

  • information about the page on which the video is embedded;

  • video playback and interaction data;

  • identifiers associated with cookies or similar technologies.

Vimeo's embedded player may use cookies for purposes including player functionality, preferences, security, bot prevention, and analytics. Vimeo documents, for example, cookies relating to player preferences, analytics identifiers, and security functionality.

Privacy-friendly Vimeo configuration

Where technically possible, we use Vimeo's privacy-enhancing settings, including its Do Not Track (DNT) parameter.

According to Vimeo, enabling DNT prevents the Vimeo player from setting new non-essential cookies during the relevant viewing session. Certain cookies required for secure operation of the player may still be used. Cookies already present in the user's browser from previous Vimeo visits may also still be transmitted.

Where required by law, the Vimeo player should only be activated after the visitor has given the necessary consent.

Under German law, storing information on a user's device or accessing information already stored on the device generally requires consent unless the access is strictly necessary for a service explicitly requested by the user.

For this reason, we may use a consent-based or click-to-load implementation for Vimeo.

If the Vimeo player is blocked before consent, you may be asked to approve the loading of external Vimeo content before the video becomes available.

6. Cookies and Similar Technologies

We aim to keep the use of cookies and tracking technologies on this website to a minimum.

At present, we do not intentionally use advertising or behavioural tracking technologies such as Google Analytics, Meta Pixel, advertising retargeting tools, or similar marketing trackers.

Technically necessary cookies or similar technologies may be used where required for the operation, security, or functionality of the website.

Non-essential cookies or similar technologies will only be used where the legally required consent has been obtained.

This may include technologies used by embedded third-party content such as Vimeo.

If additional analytics, advertising, tracking, or marketing services are added to this website in the future, this Privacy Policy and, where required, the website's consent mechanism will be updated accordingly.

7. Server Log Data

When you visit this website, technical information may be automatically recorded by the hosting infrastructure.

This may include:

  • IP address;

  • date and time of access;

  • requested URL;

  • browser type;

  • operating system;

  • referring website;

  • HTTP status information;

  • device and network information.

This information is processed for technical operation, security, error diagnosis, prevention of misuse, and protection against attacks.

The legal basis is Article 6(1)(f) GDPR, based on our legitimate interest in operating a secure and reliable website.

Log data is retained only for as long as necessary for these purposes, subject to the applicable technical and security practices of the hosting provider.

8. Recipients of Personal Data

Personal data may be shared with service providers only where necessary for the operation of this website or the provision of our services.

Depending on the circumstances, recipients may include:

  • Framer as website and hosting provider;

  • Vimeo as provider of the embedded video;

  • email service providers used to receive and respond to enquiries;

  • technical service providers where necessary for website operation, maintenance, or security.

Where a service provider processes personal data on our behalf, appropriate data processing arrangements are used where required by law.

We do not sell personal data.

9. International Data Transfers

Some service providers used on this website may process personal data outside the European Union or European Economic Area.

Where a transfer to a third country takes place, such transfer will only be made where a valid legal mechanism applies, for example:

  • an adequacy decision by the European Commission;

  • participation in an applicable approved data transfer framework;

  • Standard Contractual Clauses;

  • another legally recognised safeguard.

Framer's current Data Processing Addendum provides for appropriate mechanisms for international transfers, including adequacy decisions and Standard Contractual Clauses where applicable.

10. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected.

The applicable retention period depends on the type of information and the purpose of processing.

In particular:

Contact enquiries: retained until the enquiry has been fully processed and no further communication is reasonably expected, unless further storage is legally required or justified.

Contract-related information: may be retained for longer periods where necessary to fulfil contractual, accounting, tax, or other statutory obligations.

Technical log data: retained in accordance with the operational and security requirements of the relevant hosting provider.

Consent records: may be retained for as long as necessary to demonstrate compliance with applicable consent requirements.

Data may also be retained where necessary for the establishment, exercise, or defence of legal claims.

11. Your Data Protection Rights

Under the GDPR, you may have the following rights:

  • the right to obtain information about the processing of your personal data;

  • the right of access to your personal data;

  • the right to rectification of inaccurate or incomplete data;

  • the right to erasure;

  • the right to restriction of processing;

  • the right to data portability where applicable;

  • the right to object to certain processing;

  • the right to withdraw consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

12. Right to Object

Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation.

If you object, we will stop processing the relevant personal data unless compelling legitimate grounds for the processing exist which override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defence of legal claims.

Where personal data is processed for direct marketing purposes, you may object to such processing at any time.

13. Withdrawal of Consent

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.

You may withdraw consent through the privacy or cookie settings provided on the website, where available, or by contacting us at:

michael@altivate.site

14. Contact and Data Protection Requests

For questions about this Privacy Policy or to exercise your rights under applicable data protection law, please contact:

Kalle van der Heyd
Altivate
Steigerwaldstraße 12
91456 Diespeck
Germany

Email: michael@altivate.site

Please provide sufficient information to allow us to identify and process your request.

Where necessary, we may request additional information to verify your identity before responding to a data protection request.

15. Data Security

We use appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, alteration, unauthorised access, disclosure, or destruction.

The website is provided using encrypted HTTPS connections.

Our website and hosting providers also implement technical and organisational security measures to protect the systems used to provide their services.

16. Automated Decision-Making

We do not use personal data collected through this website for automated decision-making or profiling within the meaning of Article 22 GDPR.

17. Changes to This Privacy Policy

We may update this Privacy Policy if our website, services, technical infrastructure, third-party services, or applicable legal requirements change.

The current version published on this website applies.

Last updated: August 2026.

Last updated: August 2026.