Last updated: August 11, 2026

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Aleef Technologies GmbH

Grabenstraße 179

47057 Duisburg

Germany

Email: info@aleeftechs.com

Phone: +49 203 72812786

Represented by:

Muhammad Junaid Akram, Managing Director

2. General Information

We take the protection of your personal data seriously.

We process personal data in accordance with applicable data protection laws, in particular the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable German data protection legislation, including the Federal Data Protection Act (BDSG).

Personal data means any information relating to an identified or identifiable natural person.

This Privacy Policy explains what personal data we process when you visit our website, contact us, apply for a position, or otherwise interact with our website.

3. Accessing Our Website and Server Log Files

When you visit our website, certain technical information is automatically transmitted by your browser to our web server.

This may include:

● IP address

● date and time of access

● requested page or file

● amount of data transferred

● browser type and version

● operating system

● referrer URL

● information about the successful retrieval of the requested resource

● other technically necessary information

This information is processed primarily to:

● technically provide the website

● ensure website stability and security

● detect and prevent attacks, misuse and technical errors

● maintain and improve the technical operation of our website

Where possible, IP addresses contained in server logs are shortened or otherwise processed in a manner that reduces their ability to directly identify individual users.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and technically reliable operation of our website.

Storage period: Server log data is generally retained for a maximum of 7–14 days, unless longer retention is necessary for the investigation of security incidents, technical problems or other legitimate purposes.

4. Hosting

Our website is hosted by:

Namecheap, Inc.

United States

As part of hosting and operating the website, technical data may be processed on our behalf, including IP addresses, server logs and other information technically required to deliver the website.

Where the hosting provider processes personal data on our behalf, such processing is carried out in accordance with applicable data protection requirements and, where required, under an appropriate data processing agreement pursuant to Art. 28 GDPR.

Where personal data is transferred to a country outside the European Economic Area (EEA), we ensure that the requirements of Chapter V GDPR are complied with, including the use of an adequacy decision or appropriate safeguards such as Standard Contractual Clauses where applicable.

5. Email Communication

We use Microsoft 365 for business email services.

Email services are provided by:

Microsoft Ireland Operations Limited

Ireland

When you contact us by email, the information contained in your message, including your email address and any personal data you voluntarily provide, is processed for the purpose of handling and responding to your enquiry.

Legal basis: Art. 6(1)(b) GDPR where the communication is necessary to take steps prior to entering into a contract or to perform a contract, or Art. 6(1)(f) GDPR for general business communication.

Where Microsoft processes personal data on our behalf, appropriate contractual and data protection safeguards are used.

6. Contacting Us

If you contact us through email, telephone or another communication channel provided on our website, we process the information you provide to us.

Depending on the nature of your enquiry, this may include:

● name

● company

● email address

● telephone number

● job title

● information contained in your message

● other information you voluntarily provide

We use this information to:

● respond to your enquiry

● communicate with you

● provide requested information

● prepare or perform a contract

● handle business enquiries and potential business relationships

Legal basis: Art. 6(1)(b) GDPR where the enquiry relates to a contract or pre-contractual measures, and Art. 6(1)(f) GDPR for general business communication.

We retain enquiry-related information only for as long as necessary for the relevant purpose or as required by statutory retention obligations.

7. Applications and Recruitment

If you apply for a position with us by email or through our website, we process the personal data you provide as part of the application process.

This may include:

● name

● contact information

● CV

● employment history

● qualifications

● certificates

● references

● other information contained in your application documents

We process this information for the purpose of carrying out the application and recruitment process.

Legal basis: § 26 BDSG and, where applicable, Art. 6(1)(b) GDPR.

Applications may be made available internally to employees or departments involved in the recruitment process.

Applications may also be transmitted via our business email systems, including:

● info@aleeftechs.com

● hr@aleeftechs.com

Unless a longer retention period is legally permitted or you have provided consent for longer retention, application data will generally be deleted no later than six months after completion of the application process.

8. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Cookies are small text files that may be stored on your device when you visit a website.

We distinguish between technically necessary technologies and analytics technologies.

Technically necessary technologies

Certain cookies or similar technologies may be necessary to provide the website, maintain security, remember technical preferences or enable essential website functionality.

These technologies may be used without consent where they are strictly necessary for providing a service or functionality that you have requested, subject to applicable law.

Analytics technologies

We use Google Analytics and Microsoft Clarity to understand how visitors interact with our website and to improve its usability, functionality and performance.

Where consent is legally required, these analytics technologies are activated only after the appropriate consent has been obtained.

You can accept or reject optional analytics technologies through our cookie-consent mechanism. You can also withdraw or change your consent at any time through the privacy or cookie settings available on our website.

9. Google Analytics

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics helps us understand how visitors use our website, including information about website visits, pages viewed, interactions and technical information about the devices and browsers used to access our website.

Google Analytics may use cookies and similar technologies to collect and analyse this information.

Where required, Google Analytics is used only after obtaining the visitor’s consent.

Legal basis: Art. 6(1)(a) GDPR.

You may withdraw your consent to analytics processing at any time through our cookie-consent settings.

Further information about Google’s processing of personal data can be found in Google’s privacy documentation.

10. Microsoft Clarity

We use Microsoft Clarity, a web analytics and behavioral analysis service provided by Microsoft, to understand how visitors use our website and to improve its usability, functionality and user experience.

Clarity may process information about interactions with our website, including:

● pages visited

● clicks

● scrolling behavior

● interactions with website elements

● technical information about the device and browser

● session information

● other information generated through interaction with the website

Clarity may use cookies and similar technologies, including first-party cookies, to understand visitor sessions and interactions.

Where consent is legally required, Clarity is activated only after obtaining the visitor’s consent.

Legal basis: Art. 6(1)(a) GDPR.

You may withdraw or change your consent at any time through our cookie-consent settings.

Further information about Microsoft’s processing of personal data is available in Microsoft’s privacy documentation.

11. Google Fonts

Our website uses fonts provided through Google Fonts.

The fonts are currently loaded from Google’s servers rather than being hosted locally on our own server.

When a page containing a Google Font is loaded, your browser may establish a connection to Google’s servers to retrieve the required font files. In connection with this request, technical information such as your IP address and browser information may be transmitted to Google.

Google may process this information in accordance with its applicable privacy policy.

Where required by applicable law, Google Fonts will be loaded only after the appropriate consent has been obtained.

Legal basis: Art. 6(1)(a) GDPR where consent is required.

Note: If Google Fonts are subsequently configured to be hosted locally on our own server, this section will be updated accordingly.

12. Data Processing and Service Providers

We use external service providers to operate and maintain our website and business communication systems.

Depending on the service, these providers may process personal data on our behalf.

Current providers include:

Where required under Art. 28 GDPR, we enter into appropriate data processing agreements with processors.

Where personal data is transferred outside the EEA, we ensure that an appropriate legal transfer mechanism under Art. 44 et seq. GDPR is in place.

13. Data Transfers to Third Countries

Some of the service providers we use may be based outside the European Economic Area or may process data internationally.

Where personal data is transferred to a third country, we ensure that the requirements of Chapter V GDPR are fulfilled.

Depending on the relevant provider and circumstances, this may include:

● an adequacy decision adopted by the European Commission

● Standard Contractual Clauses approved by the European Commission

● another legally recognized transfer mechanism

The applicable safeguards may vary depending on the service and provider.

14. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected.

We may retain data for longer where:

● statutory retention obligations apply

● the data is required to establish, exercise or defend legal claims

● another legally permitted reason for retention exists

Once the relevant purpose has expired and no legal retention obligation applies, the data will be deleted or appropriately anonymized.

15. Your Rights Under the GDPR

Subject to the applicable legal requirements, you have the following rights:

Right of access — Art. 15 GDPR

You may request information about whether we process your personal data and, where applicable, obtain a copy of that data.

Right to rectification — Art. 16 GDPR

You may request correction of inaccurate or completion of incomplete personal data.

Right to erasure — Art. 17 GDPR

You may request deletion of your personal data where the legal requirements are met.

Right to restriction of processing — Art. 18 GDPR

You may request restriction of processing where the legal requirements are met.

Right to data portability — Art. 20 GDPR

Where applicable, you may request to receive personal data that you have provided to us in a structured, commonly used and machine-readable format.

Right to object — Art. 21 GDPR

You may object to processing based on Art. 6(1)(e) or Art. 6(1)(f) GDPR where the legal requirements are met.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights, contact us using the contact details provided in Section 1.

16. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

The competent supervisory authority for our registered office in North Rhine-Westphalia is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)

Kavalleriestraße 2–4

40213 Düsseldorf

Germany

Website: https://www.ldi.nrw.de

You may also lodge a complaint with another competent supervisory authority where permitted under Art. 77 GDPR, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.

17. Data Security

We use appropriate technical and organizational security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or unauthorized access.

Our website uses TLS/SSL encryption to protect data transmitted between your browser and our website.

However, no method of transmission over the Internet or method of electronic storage can guarantee absolute security.

18. Automated Decision-Making and Profiling

We do not use personal data collected through this website for automated decision-making that produces legal effects concerning you or similarly significantly affects you.

We do not conduct profiling for such purposes.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, services, technical systems, legal requirements or data processing activities.

The current version of the Privacy Policy will always be published on this page.

Last updated: August 11, 2026

20. Contact

If you have questions about this Privacy Policy or the processing of your personal data, please contact:

Aleef Technologies GmbH

Grabenstraße 179

47057 Duisburg

Germany

Email: info@aleeftechs.com

Phone: +49 203 72812786

Managing Director: Muhammad Junaid Akram