Privacy Policy — European Union (GDPR)
This Privacy Policy explains how AlienTools GmbH ("we", "us", "our") collects, uses, and shares personal data when you visit our website or purchase from our shop, in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and applicable national law.
1. Controller
AlienTools GmbH
Plauener Str. 163-165, Geb. 2, Aufg. B, 2.OG
13053 Berlin, Germany
Email: info@alien-tools.com
Phone: +49 30 549 09787
For full company details see our Imprint.
2. Categories of Personal Data Processed
- Identification & contact data: name, email address, billing and shipping address, telephone number, company name (where applicable).
- Order & payment data: products ordered, order amount, payment method, transaction reference (we do not store full card numbers).
- Account data: account credentials, order history, A.L.F. loyalty points balance.
- Communication data: emails and messages exchanged with customer service.
- Technical data: IP address, browser type, device type, operating system, referring URL, pages visited, timestamps.
- Marketing preferences: newsletter subscription status, communication preferences.
3. Purposes & Legal Bases
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Processing your order, payment, and shipment | Art. 6(1)(b) — performance of contract |
| Customer service & warranty handling | Art. 6(1)(b) — performance of contract |
| Compliance with tax, accounting, and commercial-law retention obligations | Art. 6(1)(c) — legal obligation |
| Account management and login | Art. 6(1)(b) |
| Newsletter and marketing communications | Art. 6(1)(a) — consent |
| Fraud prevention and IT security | Art. 6(1)(f) — legitimate interest |
| Anonymous web analytics | Art. 6(1)(a) — consent (cookie banner) |
4. Recipients & Transfers
We share personal data only as needed to fulfil the purposes above:
- Payment processors: Stripe, PayPal, and bank partners for payment processing.
- Logistics partners: DHL, UPS, FedEx, and Deutsche Post for shipping.
- IT service providers: hosting, email, customer service, analytics under data-processing agreements.
- Tax advisors and auditors under professional confidentiality.
- Authorities where required by law.
Transfers to recipients outside the EU/EEA are made on the basis of adequacy decisions, EU Standard Contractual Clauses, or other lawful transfer mechanisms.
5. Retention
We retain personal data only as long as necessary for the purposes described, or as required by tax, commercial, and product-liability law (typically 6–10 years for transactional records under German HGB and AO).
6. Your Rights (GDPR Art. 12–22)
- Right of access — confirmation of whether we process your data and a copy thereof.
- Right to rectification — correction of inaccurate data.
- Right to erasure ("right to be forgotten") — subject to retention obligations.
- Right to restriction of processing.
- Right to data portability in a structured, machine-readable format.
- Right to object to processing based on legitimate interests, including direct marketing.
- Right to withdraw consent at any time, without affecting the lawfulness of prior processing.
- Right to lodge a complaint with the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit) or your local supervisory authority.
Exercise your rights by emailing info@alien-tools.com.
7. Cookies and Web Analytics
For details on cookies and similar technologies, see our Cookie Policy.
8. Security
We use industry-standard technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
9. AlienTools Invader (browser game)
You can play our browser game at alien-tools.com/play without an account. We only process personal data if you enter the leaderboard or claim the reward for beating the game.
Leaderboard. When you enter the leaderboard we store the name you type (up to 10 characters — a nickname is fine), the country you choose (optional), your score, the level you reached, the date, your shot accuracy and the number of chips you collected. Your leaderboard entry is public: anyone can see your name, country flag, score, level, date, shot accuracy and chips collected. To prevent abuse we also store a shortened, salted fingerprint of your IP address (not the address itself), which is deleted after 7 days. Leaderboard entries are not linked to shop accounts and stay on the leaderboard until you ask us to remove them.
Reward for beating the game. If you claim the one-time discount code, we use your email address to create the code in our shop and to make sure each person can win only once. We store the email address, the code, the shop it was created in, your country, your score and the date. As on the leaderboard, we also store a salted fingerprint of your IP address to prevent abuse; it is deleted after 7 days. Your email address is deleted 30 days after the code expires (codes are valid for 90 days, so at most about four months), and at the same time it is removed from the code’s record in our shop. After that we keep only a one-way fingerprint of the address (a salted SHA-256 hash), which cannot be turned back into your address and is used solely to recognise a second claim. We do not use your email address for newsletters or advertising, and we do not pass it on.
- Showing your leaderboard entry — Art. 6(1)(b) GDPR (providing the game feature you chose to use)
- Issuing the reward you claimed — Art. 6(1)(b) GDPR (performance of the promotion)
- Preventing repeat claims (email fingerprint) — Art. 6(1)(f) GDPR (legitimate interest in a fair, one-per-person reward)
- Abuse prevention (IP fingerprint) — Art. 6(1)(f) GDPR (legitimate interest in IT security)
You don’t have to enter the leaderboard or claim the reward to play. To have your leaderboard entry removed, or for any other request under section 6, write to info@alien-tools.com.
10. Updates
We may update this Privacy Policy from time to time. The current version is always available on this page.
Last revised: 2026-09-23