{"id":892,"date":"2026-02-11T21:28:52","date_gmt":"2026-02-11T21:28:52","guid":{"rendered":"https:\/\/aleoservices.com\/?page_id=892"},"modified":"2026-02-11T21:31:21","modified_gmt":"2026-02-11T21:31:21","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/aleoservices.com\/index.php\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n

Version note:<\/strong>\u00a0This English version is provided for convenience. The\u00a0German version is binding<\/strong>\u00a0in case of discrepancies.<\/p>\n\n\n\n

1. Controller<\/strong><\/h3>\n\n\n\n

Albina Alijaj<\/strong> (Sole Proprietorship \/ Einzelunternehmen)<\/p>\n\n\n\n

Ludgeristra\u00dfe 112 B, 59379 Selm, Germany<\/p>\n\n\n\n

Email: info@aleoservices.com<\/p>\n\n\n\n

2. Overview of processing<\/strong><\/h3>\n\n\n\n

We process personal data in accordance with the GDPR<\/strong> and applicable cookie rules. \u201cPersonal data\u201d means any information relating to an identified or identifiable person (e.g., name, email, IP address).<\/p>\n\n\n\n

3. Website access data (server logs)<\/strong><\/h3>\n\n\n\n

When you visit the website, technical data is processed automatically (server log files), such as:<\/p>\n\n\n\n

    \n
  • IP address<\/li>\n\n\n\n
  • date\/time of access<\/li>\n\n\n\n
  • requested page\/file<\/li>\n\n\n\n
  • referrer URL<\/li>\n\n\n\n
  • browser\/operating system<\/li>\n\n\n\n
  • status codes and data volume<\/li>\n<\/ul>\n\n\n\n

    Purpose:<\/strong> operating the website, security, troubleshooting, abuse prevention.<\/p>\n\n\n\n

    Legal basis:<\/strong> legitimate interests (Art. 6(1)(f) GDPR).<\/p>\n\n\n\n

    Retention:<\/strong> generally only as long as technically necessary; longer only where needed for security incidents.<\/p>\n\n\n\n

    4. Hosting (Hostinger)<\/strong><\/h3>\n\n\n\n

    Our website is hosted with Hostinger<\/strong>. Hostinger processes data necessary to provide hosting (including server logs).<\/p>\n\n\n\n

    Legal basis:<\/strong> Art. 6(1)(f) GDPR (secure and stable operation) and, where you use account\/platform functions, Art. 6(1)(b) GDPR (performance of contract).<\/p>\n\n\n\n

    Processor agreement:<\/strong> We use a data processing agreement (Art. 28 GDPR) where applicable.<\/p>\n\n\n\n

    International transfers:<\/strong> Depending on server locations\/subprocessors, data may be processed outside the EU\/EEA. Where this occurs, we use appropriate safeguards (e.g., Standard Contractual Clauses) as required by the GDPR.<\/p>\n\n\n\n

    5. Accounts (registration and login)<\/strong><\/h3>\n\n\n\n

    If you create an account, we process in particular:<\/p>\n\n\n\n

      \n
    • email address<\/li>\n\n\n\n
    • password (stored only as a hash; not in plain text)<\/li>\n\n\n\n
    • optional profile\/account information<\/li>\n\n\n\n
    • technical metadata (e.g., account ID, timestamps)<\/li>\n<\/ul>\n\n\n\n

      Purpose:<\/strong> account creation, authentication, providing platform features, security.<\/p>\n\n\n\n

      Legal basis:<\/strong> Art. 6(1)(b) GDPR (contract\/steps prior to contract) and Art. 6(1)(f) GDPR (security).<\/p>\n\n\n\n

      Retention:<\/strong> until you delete your account or we delete it under these terms; longer retention may apply where legally required.<\/p>\n\n\n\n

      6. Marketplace features (listings, bookings, chat, reviews, reports)<\/strong><\/h3>\n\n\n\n

      6.1 Provider listings (services, prices, images)<\/strong><\/h4>\n\n\n\n

      Providers can upload content (service descriptions, prices, images, availability, etc.). This may include personal data depending on the content.<\/p>\n\n\n\n

      Purpose:<\/strong> publishing and managing listings; enabling search and discovery.<\/p>\n\n\n\n

      Legal basis:<\/strong> Art. 6(1)(b) GDPR and\/or Art. 6(1)(f) GDPR (platform operation).<\/p>\n\n\n\n

      6.2 Booking and appointment management (LatePoint)<\/strong><\/h4>\n\n\n\n

      We use a booking\/appointment plugin (e.g., LatePoint<\/strong>). Depending on usage, we may process:<\/p>\n\n\n\n

        \n
      • booking details (service, date\/time, provider)<\/li>\n\n\n\n
      • customer data entered for the booking (e.g., name, contact)<\/li>\n\n\n\n
      • booking status\/administrative information<\/li>\n<\/ul>\n\n\n\n

        Purpose:<\/strong> initiating and managing booking requests between customers and providers.<\/p>\n\n\n\n

        Legal basis:<\/strong> Art. 6(1)(b) GDPR.<\/p>\n\n\n\n

        6.3 Chat between customers and providers<\/strong><\/h4>\n\n\n\n

        If you use chat, we process:<\/p>\n\n\n\n

          \n
        • message content<\/li>\n\n\n\n
        • metadata (participants, timestamps)<\/li>\n<\/ul>\n\n\n\n

          Purpose:<\/strong> communication to arrange services and bookings.<\/p>\n\n\n\n

          Legal basis:<\/strong> Art. 6(1)(b) GDPR.<\/p>\n\n\n\n

          6.4 Reviews<\/strong><\/h4>\n\n\n\n

          If you leave a review, we process:<\/p>\n\n\n\n

            \n
          • review text\/content and rating<\/li>\n\n\n\n
          • reference to the listing\/provider<\/li>\n\n\n\n
          • account identifier\/username (where applicable)<\/li>\n<\/ul>\n\n\n\n

            Purpose:<\/strong> transparency, quality assurance, community functionality.<\/p>\n\n\n\n

            Legal basis:<\/strong> Art. 6(1)(f) GDPR (legitimate interest in a review system) and\/or Art. 6(1)(b) GDPR (part of platform service).<\/p>\n\n\n\n

            6.5 Reports (flagging content)<\/strong><\/h4>\n\n\n\n

            If you report a listing\/content, we process:<\/p>\n\n\n\n

              \n
            • the report content and reason<\/li>\n\n\n\n
            • reference to the reported listing<\/li>\n\n\n\n
            • identifiers of the reporting user (where applicable)<\/li>\n<\/ul>\n\n\n\n

              Purpose:<\/strong> moderation, abuse prevention, enforcement of platform rules, legal compliance.<\/p>\n\n\n\n

              Legal basis:<\/strong> Art. 6(1)(f) GDPR.<\/p>\n\n\n\n

              7. Payments (provider subscriptions)<\/strong><\/h3>\n\n\n\n

              Providers can purchase monthly subscriptions<\/strong>. We process:<\/p>\n\n\n\n

                \n
              • transaction and billing data (amount, time, status)<\/li>\n\n\n\n
              • invoice data where required (e.g., name\/address if collected)<\/li>\n\n\n\n
              • payment references\/IDs<\/li>\n<\/ul>\n\n\n\n

                Payment services:<\/strong> Payments are processed via external payment providers (e.g., Klarna<\/strong> and a credit-card payment processor). We share the data necessary to process the payment with the relevant payment provider.<\/p>\n\n\n\n

                Legal basis:<\/strong> Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(c) GDPR (legal obligations, e.g., accounting\/tax retention where applicable).<\/p>\n\n\n\n

                Retention:<\/strong> statutory retention periods may apply to billing records.<\/p>\n\n\n\n

                8. Google Maps<\/strong><\/h3>\n\n\n\n

                We embed Google Maps<\/strong> to display locations\/maps. When Google Maps loads, data (such as your IP address) may be transmitted to Google, and Google may set cookies or similar technologies.<\/p>\n\n\n\n

                Legal basis:<\/strong> consent (Art. 6(1)(a) GDPR) via your cookie\/consent banner (except where strictly necessary).<\/p>\n\n\n\n

                Withdrawal:<\/strong> you can withdraw consent at any time via cookie settings.<\/p>\n\n\n\n

                9. Cookies and consent management<\/strong><\/h3>\n\n\n\n

                We use cookies and similar technologies:<\/p>\n\n\n\n

                  \n
                • Strictly necessary<\/strong> cookies (e.g., login, security, essential functionality)<\/li>\n\n\n\n
                • Optional<\/strong> cookies\/technologies (e.g., Google Maps) only after consent<\/li>\n<\/ul>\n\n\n\n

                  You can manage your choices through the cookie banner\/settings.<\/p>\n\n\n\n

                  10. Recipients of personal data<\/strong><\/h3>\n\n\n\n

                  Depending on how you use the platform, we may share data with:<\/p>\n\n\n\n

                    \n
                  • hosting provider (Hostinger<\/strong>)<\/li>\n\n\n\n
                  • embedded services (e.g., Google Maps<\/strong>)<\/li>\n\n\n\n
                  • payment providers (e.g., Klarna<\/strong> and credit-card processor)<\/li>\n\n\n\n
                  • IT\/support providers acting as processors<\/li>\n\n\n\n
                  • authorities\/courts where we are legally required to do so<\/li>\n<\/ul>\n\n\n\n

                    11. International transfers including Kosovo (important)<\/strong><\/h3>\n\n\n\n

                    Because Aleo operates as a marketplace, providers may be located outside the EU\/EEA<\/strong>, including Kosovo<\/strong>.<\/p>\n\n\n\n

                    When you (as a customer) communicate with a provider or initiate a booking, we may share relevant personal data with that provider (e.g., your name\/contact details you provide, booking details, chat messages). This can involve a transfer to a \u201cthird country\u201d<\/strong> under the GDPR.<\/p>\n\n\n\n

                      \n
                    • Purpose:<\/strong> enabling communication and service arrangement between customer and provider.<\/li>\n\n\n\n
                    • Legal basis:<\/strong> Art. 6(1)(b) GDPR (contract\/steps prior to contract) and, for moderation\/security, Art. 6(1)(f) GDPR.<\/li>\n\n\n\n
                    • Safeguards:<\/strong> Where we can, we use appropriate safeguards such as Standard Contractual Clauses<\/strong>. Please note that data protection levels in third countries may differ from those in the EU\/EEA, and there may be risks (e.g., enforcement\/access by local authorities under local law).<\/li>\n<\/ul>\n\n\n\n

                      12. Retention<\/strong><\/h3>\n\n\n\n

                      We keep personal data only as long as necessary for the purposes described above or as required by law. After that, we delete or anonymize it.<\/p>\n\n\n\n

                      13. Your rights<\/strong><\/h3>\n\n\n\n

                      Under the GDPR, you have the right to:<\/p>\n\n\n\n

                        \n
                      • access (Art. 15)<\/li>\n\n\n\n
                      • rectification (Art. 16)<\/li>\n\n\n\n
                      • erasure (Art. 17)<\/li>\n\n\n\n
                      • restriction (Art. 18)<\/li>\n\n\n\n
                      • data portability (Art. 20)<\/li>\n\n\n\n
                      • object to processing based on legitimate interests (Art. 21)<\/li>\n\n\n\n
                      • withdraw consent at any time (Art. 7(3)) with effect for the future<\/li>\n<\/ul>\n\n\n\n

                        To exercise your rights, contact: info@aleoservices.com<\/strong><\/p>\n\n\n\n

                        14. Right to lodge a complaint<\/strong><\/h3>\n\n\n\n

                        You have the right to lodge a complaint with a supervisory authority. As the controller is based in Germany, the competent authority is generally the data protection authority in North Rhine-Westphalia (NRW)<\/strong>, Germany.<\/p>\n\n\n\n

                        15. Security<\/strong><\/h3>\n\n\n\n

                        We implement technical and organizational measures to protect data (e.g., TLS\/SSL encryption, access controls, security measures appropriate to risk).<\/p>\n\n\n\n

                        16. Changes to this Privacy Policy<\/strong><\/h3>\n\n\n\n

                        We may update this Privacy Policy if our services, legal requirements, or processing activities change.<\/p>\n","protected":false},"excerpt":{"rendered":"

                        Version note:\u00a0This English version is provided for convenience. The\u00a0German version is binding\u00a0in case of discrepancies. 1. Controller Albina Alijaj (Sole Proprietorship \/ Einzelunternehmen) Ludgeristra\u00dfe 112 B, 59379 Selm, Germany Email: info@aleoservices.com 2. Overview of processing We process personal data in accordance with the GDPR and applicable cookie rules. \u201cPersonal data\u201d means any information relating to an identified or […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-892","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/aleoservices.com\/index.php\/wp-json\/wp\/v2\/pages\/892","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aleoservices.com\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/aleoservices.com\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/aleoservices.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aleoservices.com\/index.php\/wp-json\/wp\/v2\/comments?post=892"}],"version-history":[{"count":4,"href":"https:\/\/aleoservices.com\/index.php\/wp-json\/wp\/v2\/pages\/892\/revisions"}],"predecessor-version":[{"id":897,"href":"https:\/\/aleoservices.com\/index.php\/wp-json\/wp\/v2\/pages\/892\/revisions\/897"}],"wp:attachment":[{"href":"https:\/\/aleoservices.com\/index.php\/wp-json\/wp\/v2\/media?parent=892"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}