Privacy Policy

Almato takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and this privacy policy.

The use of our website is usually possible without providing personal data. As far as personal data (such as name, address or e-mail address) is collected on our website, this is done on a voluntary basis, when possible. This data will not be passed on to third parties without your express consent.

We would like to point out that data transmission on the internet (e.g. during communication by e-mail) may have security gaps. We cannot guarantee complete protection of your data against access by any third parties.


The data controller in the sense of Article 4 (7) of the General Data Protection Regulation (GDPR) is:


Almato AI GmbH
Reinsburgstraße 27
70178 Stuttgart


Almato is part of DATAGROUP.



If you use the website purely for information purposes, i.e. if you do not log on to, register, or provide us with any other information to use the website, we do not collect any personal data, apart from data which your browser sends to enable you to visit the website. The purpose of this data collection is to enable you to visit the website and to ensure that the website functions properly. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. This is:

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Data volume transmitted
  • Website from which the request comes
  • Browser
  • Operating system and its interface
  • Language and version of the browser software.

In order to facilitate an informational use of the website by you, we use cookies (see Section 5) on the website, by means of which personal data are processed.

Unless otherwise is stated in this Data Privacy Policy, we will only store your data for as long as is necessary for the purposes for which they were collected or processed, unless longer storage periods are required by law. Your personal data will therefore be deleted after your request has been processed unless otherwise has been agreed or required by law.

In the course of processing personal data we use subcontractors and conclude contracts with these processors in accordance with the requirements of Art. 28 GDPR.


Personal data that you provide to us by email, telephone, mail or contact form will of course be treated confidentially. We will use your data exclusively for the purpose of dealing with the enquiry. The lawful basis for the data processing is Article 6 (1f) of the GDPR. The legitimate interest on the part of Almato results from the interest to answer inquiries from our customers, business partners and interested parties and thus to maintain and promote customer satisfaction.

Transfer of your data to third parties outside DATAGROUP is excluded in principle. Data may be processed on our behalf by data processors in exceptional cases. These data processors have been carefully selected, are audited by us and are bound by contract in accordance with Article 28 of the GDPR. Furthermore, it may be necessary for us to forward inquiries to other companies within DATAGROUP, if this is necessary for processing.

All personal data provided by you in the context of enquiries will be deleted or safely anonymised no later than 90 days after the final response on your enquiry has been given. The storage period of 90 days is explained by the fact that it can happen from time to time that you have to contact us again after a reply on the same matter and have to be able to refer to the previous correspondence. Experience has shown that there are usually no further questions to our response after a period of 90 days.


The companies of DATAGROUP process the contact details of customers, stakeholders, suppliers and other business partners for communication by email, telephone, fax or mail. The lawful basis for the data processing is Article 6 (1f) of the GDPR. The legitimate interest of Almato and DATAGROUP arises from the interest to establish or conduct business relationships with customers, stakeholders, suppliers and other business partners by maintaining personal contact with contact persons.

As a basic principle, we do not disclose personal data to any third parties outside of DATAGROUP. Within DATAGROUP, data is shared, amongst others, to establish or conduct business relationships. Data may be processed on our behalf by data processors in exceptional cases. These processors have been carefully selected, are audited by us and are bound by contract in accordance with Article 28 of the GDPR.

Personal data for the purpose of conducting business relationships is stored as long as there is a legitimate interest.


Some of the webpages use so-called cookies. Cookies do not cause damages to your computer and do not contain viruses. Cookies are used to make our offer more user-friendly, more efficient and more secure. Cookies are small text files that are stored by your browser on your computer.

Most of the cookies used by us are so-called “session cookies”. They will be deleted automatically after the end of your visit. Other cookies remain on your terminal device until they are deleted by you. These cookies enable us to recognise your browser on your next visit.

You can adjust your browser to be informed when cookies are placed, to individually allow cookies, accept cookies in certain cases or to generally exclude them as well as to activate an automatic deletion of cookies when the browser is closed. The deactivation of cookies may restrict the functionality of this website.

The legal basis for data processing by so-called “necessary cookies” is Art. 6 (1f) GDPR. Necessary cookies enable basic functions and are necessary for the proper functioning of the website. We have a legitimate interest in making the website as user-friendly as possible.

Types of Cookies
5.1 Required cookies
These cookies are required to enable core site functionality.

5.2 Functional cookies
These cookies allow us to analyse site usage so we can measure and improve performance.

5.3 Advertising Cookies

Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.


In order to optimize the user experience of our website, we use web tracking technology such as Google Analytics, LinkedIn etc. Respective data is stored in pseudonymous usage profiles (your IP addresses is stored in anonymized form). Pseudonymous usage profiles will not be (re-)combined with personal data.

When you visit our website for the first time or if necessary, again, we will ask whether you agree that we

  • process usage data in pseudonymous usage profiles (tracking) for advertising, market research, web analysis and website improvement purposes, and
  • we use cookies for this and other purposes that are not required for the technical provision of the website.

When visiting our websites, you will be asked in a cookie layer whether you consent to our using of any advertising cookies or function cookies (tracking mechanisms), respectively.

You can restrict your consent to the setting of cookies in whole or in part by configuring your browser settings accordingly and deactivating the setting of cookies in whole or in part.

  1. YouTube videos

On some subpages of our website, we embed YouTube videos.

Calling up these subpages leads to the reloading of YouTube content. In this context, YouTube also receives your IP address, which is technically necessary to retrieve the content. In principle, we have no influence on the further data processing by YouTube, which is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. However, when embedding the videos, we activated the extended data protection mode offered by YouTube. The use of YouTube and the resulting transmission of your IP address happens in the interest of an attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 (1f) GDPR. Further information on the handling of user data can be found in YouTube’s privacy policy:

The storage period of the cookie is max 13 months.

  1. Rights of data subjects

According to Article 15 (1) of the GDPR you have the right to have access to your personal data that has been collected and stored by Almato free of charge upon request.

If the statutory requirements are given, you also have the right to be informed (Article 16 GDPR) about your personal data, to have your personal data erased (Article 17 GDPR) or to restrict the processing of your personal data (Article 18 GDPR).

Provided that the data processing is based on Article 6 1e) or 1f) of the GDPR you have the right to object under Article 21 of the GDPR. Provided that you object to the data processing, it will be stopped in the future unless the responsible person can provide compelling legitimate grounds for a further processing that override the data subject’s interest in the conflict.

Provided that you have given us the processed data yourself, you have the right to data portability under Article 20 of the GDPR.

Provided that the data processing is based on a consent in accordance with Article 6 (1a) or Article 9 (2a) of the GDPR you can revoke the consent at any time with effect for the future without affecting the lawfulness of the previous processing.

In any of the cases above, for further questions or in the event of a complaint, please contact our data protection officer in writing or by email.

Additionally, you have the right to complain to the data protection supervisory authority. The competent data protection supervisory authority is determined by the federal state in which you reside or in which the data controller has its head office.

  1. No obligation to make personal data available

Unless otherwise specified in the previous chapters, the provision of personal data is not required by law or by contract or necessary for signing a contract. You are not obligated to provide any personal data, if no contrary information has been given before. If you do not provide your personal data, this may possibly mean that we cannot answer your contact request or that a participation in the application procedure or a participation in an event is not possible.

  1. Contact details of the data protection office

For further information or any suggestions on the topic of data protection please contact our internal data protection officer:


Dr. iur. Christian Borchers
Datenschutz Süd GmbH
Wörthstraße 15
97082 Würzuburg