Last updated: 16 September 2026
This English version is a convenience translation. Only the German version of this privacy policy (Datenschutzerklärung) is legally binding; in case of discrepancies, the German version prevails.
The controller responsible for the processing of personal data on this website within the meaning of Art. 4 (7) GDPR is:
Alchemist Media Labs GmbHWe have appointed a data protection officer. You can reach them at: datenschutz@alchemist.ml
We process the personal data of users of our website only to the extent necessary to provide a functional website, our content and our services, or where you have given your consent.
The legal bases are in particular Art. 6 (1) (a) GDPR (consent), Art. 6 (1) (b) GDPR (contract and pre-contractual measures), Art. 6 (1) (c) GDPR (legal obligation) and Art. 6 (1) (f) GDPR (legitimate interests).
Where information is stored on your terminal equipment or read from it, for example through cookies or comparable technologies, this is done on the basis of your consent pursuant to Section 25 (1) TDDDG (German Telecommunications Digital Services Data Protection Act). Consent is not required where the storage or access is strictly necessary for us to provide the digital service you have expressly requested (Section 25 (2) no. 2 TDDDG).
Personal data is deleted as soon as the purpose of storage no longer applies and no statutory retention obligations prevent deletion, for example under Section 257 HGB (German Commercial Code) or Section 147 AO (German Fiscal Code).
This website is hosted externally. The hosting provider processes the data on our behalf on the basis of a contract pursuant to Art. 28 GDPR.
When you access the website, your browser automatically transmits information that is stored in server log files:
This processing is carried out on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in providing the website in a technically error-free and secure manner and in defending against attacks. The log files are deleted after 30 days, unless they are required for longer to investigate a specific security incident.
For security reasons, this website uses SSL/TLS encryption (Art. 32 GDPR). You can recognise an encrypted connection by the "https://" prefix in your browser's address bar.
We use cookies and comparable technologies. When you first visit the website, we ask via a consent banner which categories you agree to. Services that are not technically necessary are only loaded after you have given your consent.
Your selection is stored in the "cookie_consent" cookie so that the banner does not reappear on every page view. The legal basis is Section 25 (2) no. 2 TDDDG in conjunction with Art. 6 (1) (c) GDPR, as we are required to demonstrate consent pursuant to Art. 7 (1) GDPR. Storage period: 6 months.
You may withdraw or change your consent at any time with effect for the future by opening the cookie settings via the "Cookie settings" link in the footer (Art. 7 (3) GDPR). The lawfulness of processing carried out before withdrawal remains unaffected.
An overview of the cookies used, including provider, purpose and storage period, can be found in the cookie settings.
If you contact us by email, we process your email address, your name (if provided) and the content of your message in order to handle your enquiry.
The legal basis is Art. 6 (1) (b) GDPR where your enquiry is aimed at concluding or performing a contract, and otherwise Art. 6 (1) (f) GDPR. Our legitimate interest lies in responding to incoming enquiries.
We delete the data as soon as the enquiry has been conclusively dealt with, unless statutory retention obligations apply.
You can sign up on our website for our waiting list or our newsletter in order to be informed about product news. Your email address is a mandatory field.
We use the double opt-in procedure: after signing up, you will receive an email containing a confirmation link. You will only be added to the distribution list after confirming. We store the time of sign-up and confirmation as well as the IP address in order to be able to demonstrate consent (Art. 7 (1) GDPR in conjunction with Art. 6 (1) (c) and (f) GDPR).
The legal basis for sending the newsletter is your consent pursuant to Art. 6 (1) (a) GDPR and Section 7 (2) no. 2 UWG (German Act Against Unfair Competition). You may withdraw your consent at any time via the unsubscribe link in every email or by sending us a message.
For distribution we use rapidmail, a service of rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg im Breisgau, Germany. rapidmail processes the data on our behalf on the basis of a contract pursuant to Art. 28 GDPR. The data is stored on servers in Germany.
Where activated, we analyse whether newsletters have been opened and which links have been clicked in order to improve our content. This analysis is covered by your consent.
After you unsubscribe, we delete your email address from the distribution list. We may store it in a blocklist in order to prevent future mailings and to document consent previously given (Art. 6 (1) (f) GDPR).
We use Google Tag Manager, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
Google Tag Manager is a tool that allows us to integrate and manage tracking and analytics code ("tags") on the website. It does not itself create user profiles and does not set its own cookies for analytics purposes. When it loads, however, your IP address is transmitted to Google, and transmission to Google LLC in the USA cannot be ruled out.
We only load Google Tag Manager after you have given your consent. The legal basis is Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. Services integrated via Tag Manager are only triggered if you have consented to the relevant category.
Google LLC is certified under the EU-US Data Privacy Framework. Transfers to the USA are therefore covered by an adequacy decision of the European Commission (Implementing Decision C(2023) 4745 of 10 July 2023, Art. 45 GDPR).
Further information: https://policies.google.com/privacy
With your consent, we use Google Analytics 4, a web analytics service provided by Google (provider as stated in section 9).
Google Analytics enables us to analyse usage behaviour on our website, such as pages accessed, time spent, where visitors came from, approximate location (at country or city level), device, browser and interactions. For this purpose, cookies or identifiers are stored on your terminal equipment, in particular "_ga" and "_ga_<container ID>", with a storage period of up to 24 months.
According to Google, IP addresses are not logged or stored in Google Analytics 4. Google does, however, use the IP address briefly to derive location data.
We have concluded a data processing agreement with Google pursuant to Art. 28 GDPR. Data retention in Google Analytics is set to 14 months. Google signals and the link to Google Ads are deactivated.
The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. You may withdraw your consent at any time via the cookie settings.
Regarding data transfers to the USA, see section 9.
Further information: https://support.google.com/analytics/answer/6004245
With your consent, we use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland ("Meta").
The Meta Pixel allows us to track the behaviour of visitors after they have reached our website by clicking on an advertisement on Facebook or Instagram (conversion measurement). It also allows us to show targeted advertising to visitors of our website on Meta's platforms (remarketing) and to build audiences for advertising campaigns. For this purpose, cookies or identifiers are stored on your terminal equipment, in particular "_fbp" (storage period of up to 90 days), and data such as your IP address, browser information, pages accessed and events triggered is transmitted to Meta. If you are logged in to a Meta service, Meta may assign the visit to your user account.
Where "Advanced Matching" is activated, data entered on our website, such as your email address, is additionally transmitted to Meta in hashed form in order to match it with Meta user accounts.
We and Meta are joint controllers for the collection of data on our website and its transmission to Meta (Art. 26 GDPR; cf. CJEU, judgment of 29 July 2019, C-40/17 – Fashion ID). We have concluded an agreement with Meta in this respect (the "Controller Addendum"), available at https://www.facebook.com/legal/controller_addendum. Under that agreement, Meta is responsible in particular for fulfilling data subject rights with regard to the data stored by Meta; however, you may also assert your rights against us. Any further processing after transmission is the sole responsibility of Meta.
The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. You may withdraw your consent at any time via the cookie settings.
Data may be transferred to Meta Platforms, Inc. in the USA. Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework (adequacy decision, see section 9).
Further information:
https://www.facebook.com/privacy/policy
Ad preferences at Meta:
https://www.facebook.com/adpreferences
We only disclose personal data to the extent described in this policy, permitted by law, or where you have given your consent. Recipients are in particular our hosting provider, rapidmail, Google and Meta, as well as, where applicable, tax advisors and public authorities where we are obliged to do so.
We do not carry out automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
Under the GDPR, you have the following rights:
The supervisory authority responsible for us is:
Der Hamburgische Beauftragte für Datenschutz und InformationsfreiheitYou may also contact the supervisory authority of your place of residence or place of work.
Where we process your data on the basis of Art. 6 (1) (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation (Art. 21 (1) GDPR). We will then no longer process the data unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
Where your data is processed for direct marketing purposes, you may object at any time without giving reasons (Art. 21 (2) and (3) GDPR).
We will amend this privacy policy if our data processing or the legal situation changes. The version published on the website at the relevant time applies.