AALVAA Media, Inhaber Adam Sims
Am Hochacker 4
85630 Grasbrunn
Germany
E-mail: legal@aalvaa.com
Contact form: aalvaa.com/contact — messages receive an immediate automated acknowledgement and a prompt personal reply, enabling fast electronic contact and direct communication (§ 5 (1) no. 2 DDG; cf. ECJ C-298/07).
USt-IdNr. gemäß § 27a UStG: DE342019878 · Tax No. (Steuernummer): 146/196/62246
Adam Sims, Am Hochacker 4, 85630 Grasbrunn
We are not willing or obliged to participate in dispute-resolution proceedings before a consumer arbitration board (Verbraucherschlichtungsstelle). The EU Commission’s online dispute-resolution (ODR) platform is no longer operated as of July 2024.
As a service provider we are responsible for our own content under § 7 (1) DDG. Under §§ 8–10 DDG we are not obliged to monitor transmitted or stored third-party information. We have no influence over the content of external links; the respective provider is responsible. On notification of any legal violation we will remove the content or link without delay.
All content, footage, films and graphics on this site are protected by copyright. Any reproduction, editing, distribution or exploitation beyond the limits of copyright law requires the prior written consent of AALVAA Media.
AALVAA Media, Inh. Adam Sims, Am Hochacker 4, 85630 Grasbrunn, Germany · legal@aalvaa.com · contact form.
A Data Protection Officer (Datenschutzbeauftragter) is, to our assessment, not legally mandatory for our size and activities under § 38 BDSG — to be confirmed in legal review. For any privacy matter, contact us at the address above.
We process personal data on the following bases (Art. 6 (1) GDPR): (a) your consent; (b) performance of a contract or pre-contractual steps; (c) compliance with a legal obligation (e.g. tax/commercial law); (f) our legitimate interests (secure, functional delivery of the site and services). Where we rely on (f), you may object under Art. 21 GDPR.
This site and its services run on Cloudflare (Pages, Workers, the D1 database and R2 storage). To deliver the site securely, Cloudflare processes connection data — including your IP address, the requested resource, timestamp, user-agent and referrer — for a short period. Basis: Art. 6 (1)(f) (security and operation). Cloudflare is a processor (see § Processors).
If you create an account (client, athlete, team or crew), we store your name, e-mail address, a securely hashed password, your role and any club/team affiliation, plus the content you create in your area (quotes, orders, meeting notes). Sessions use a signed token. Basis: Art. 6 (1)(b). Data is kept while your account is active and deleted on request (subject to statutory retention below).
To produce tax-compliant quotes, orders and invoices we process company/billing details, billing country, VAT ID and order line items. Basis: Art. 6 (1)(b) and (c). Invoices and booking records are retained for the statutory commercial and tax periods (up to 10 years, §§ 147 AO, 257 HGB, GoBD).
Card payments are handled by Stripe Payments Europe, Ltd. (Ireland), with onward processing by Stripe, Inc. (USA). We never receive or store your full card details. Stripe processes payment and transaction data as an independent controller/processor under its own terms. Basis: Art. 6 (1)(b).
Transactional e-mails (invoices, payment reminders/Mahnungen, order confirmations) are sent via Resend (EU region). We process the recipient address and message content for this purpose. Basis: Art. 6 (1)(b), (f).
Some optional features — parsing pasted meeting transcripts into notes, and AI form-fill / AI edit drafts — send the text you provide to Anthropic PBC (USA) via the Claude API to generate a result. Basis: Art. 6 (1)(b)/(f) or your consent where offered.
Owned media made available in your area may be hosted on Google Drive (Google Ireland/LLC). Access is restricted by role and tag. When you stream or download such media, your request reaches Google. Basis: Art. 6 (1)(b).
Public portfolio pages may embed YouTube and Vimeo players and display social-media view counts. We store the view number when a link is added (or refresh it via the platform’s official API/oEmbed) — we do not scrape and we store no personal data of viewers. Embedded players are only loaded with your consent (see Cookies), because loading them transmits your IP address to Google/Vimeo and may set their cookies. We embed YouTube only in its privacy-enhanced mode (youtube-nocookie.com), so Google sets no cookies until you actually start playback, and the embed is loaded only after your consent / Einwilligung (Art. 6 (1)(a) GDPR), which you can withdraw at any time via “Privacy choices”.
The site remembers your light/dark preference in your browser. The optional “Sun” auto-theme uses your browser’s Geolocation API only with your explicit permission to compute your local sunrise/sunset; the coordinates are used in your browser and cached in your browser’s local storage (AALVAA_GEO) — they are not transmitted to us. Basis: Art. 6 (1)(a). You can revoke this in your browser at any time.
All typefaces are self-hosted from our own domain — no font request is sent to Google or any other third party (in line with German case law, LG München I, 3 O 17493/20). No consent is required for fonts.
For crew we engage, we process contact details, working days, contracts, invoices, expense receipts and payment details to administer the engagement and meet legal obligations. Expense data may be imported from crew sheets. Access is restricted to administrators/the Purser’s Office. Basis: Art. 6 (1)(b), (c), (f). Crew receive a separate engagement/privacy note. Records are kept for the statutory periods.
Where a class/organiser runs their event on the AALVAA platform and enters data about their competitors/members, the organiser is the controller for that data and AALVAA acts as a processor on their behalf under a separate data-processing agreement (Auftragsverarbeitungsvertrag, Art. 28 GDPR). Athletes may include minors — organisers are responsible for the corresponding legal basis (incl. parental consent where required).
No advertising trackers, no analytics/marketing cookies, no profiling, no automated decision-making with legal effect (Art. 22 GDPR), and no sale of personal data.
We use the following service providers. Where data is transferred outside the EU/EEA (notably the USA), this is safeguarded by EU Standard Contractual Clauses (SCC) and/or certification under the EU–US Data Privacy Framework (DPF). Data-processing agreements (AVV) are to be concluded/verified with each before go-live.
| Provider | Purpose | Location / safeguard |
|---|---|---|
| Cloudflare | Hosting, Workers, D1 database, R2 storage, CDN | EU + USA · DPF/SCC |
| Stripe Payments Europe | Card payments | Ireland + USA · DPF/SCC |
| Resend | Transactional e-mail | EU region |
| Anthropic (Claude) | AI notes / form-fill | USA · SCC, no training on inputs |
| Google (Drive · Fonts · YouTube) | Media, fonts, embeds | EU/USA · DPF (fonts being self-hosted) |
| Vimeo | Embedded video | USA · SCC (consent-gated) |
| Webflow CDN | Temporary hero image only | USA — to be removed/self-hosted |
We set no advertising or analytics cookies. We use your browser’s local storage only for the functions you request — this is strictly necessary and requires no consent under § 25 (2) TDDDG:
The following require your prior consent (§ 25 (1) TDDDG + Art. 6 (1)(a) GDPR) and are loaded only after you agree: embedded YouTube/Vimeo players and the optional geolocation auto-theme. (Fonts are self-hosted and need no consent.) A consent banner manages these choices and lets you change them at any time.
You have the right to access (Art. 15), rectification (16), erasure (17), restriction (18), data portability (20) and objection (21). Where processing is based on consent, you may withdraw it at any time (Art. 7 (3)) with effect for the future. To exercise any right, contact legal@aalvaa.com or use our contact form.
You may lodge a complaint with a supervisory authority. Our competent authority is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany — www.lda.bayern.de.
Quotes produced via this site are non-binding estimates until confirmed in writing. Prices are in EUR. VAT per German law: 19% for German clients; reverse charge (Art. 196 Dir. 2006/112/EC, § 13b UStG) for EU businesses with a valid VAT ID; supplies outside the EU not subject to German VAT (§ 3a Abs. 2 UStG), recipient settles local taxes.
Crew travel, transfers, accommodation and food are additional and payable by the organiser. A weather-related fee may apply to non-studio work; in unsafe conditions we may adapt or suspend services in good faith without affecting agreed amounts. Our equipment and crew carry appropriate insurance; the organiser is responsible for a safe site and legally required H&S, employer’s and public-liability cover for all crew on site, plus equipment cover for breaches of site/venue security.
Footage is supplied with a non-transferable editorial licence for the organiser, its competitors and members to publish content related to the event. Music is licensed within approved-platform scope. Any commercial/advertising/endorsement use needs a separate written licence and may incur fees.
Overdue invoices follow the German reminder process (Zahlungserinnerung · 1./2. Mahnung). Default interest under § 288 BGB may apply.