Privacy Policy
This policy describes how we collect, use, and protect personal data on this website, in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
Last updated: 16 April 2026
1. Controller
The data controller responsible for processing on this website is: Alpha Nex Digital Solutions GmbH Hohenzollerndamm 120 14199 Berlin, Germany Email: info ( at ) fintum-mi.com
2. Data we process
We process personal data only where there is a legal basis. The specific processing activities are described below. We collect data directly from you — not from third-party sources.
3. Contact form (Request a Demo)
When you submit the contact form on this site, we process the data you provide (first name, last name, business email, organisation, role). Legal basis: Art. 6(1)(b) GDPR — performance of pre-contractual measures at your request. Recipients: our internal team and our email service provider Resend (see section 7). Retention: until your inquiry is resolved, then archived for legitimate business records for up to 24 months. If you tick the optional marketing-consent box, we additionally process your email address to send you product updates. Legal basis: Art. 6(1)(a) GDPR — consent. You can withdraw this consent at any time with effect for the future via the unsubscribe link in every email or by writing to the controller above. Retention for this purpose: until withdrawal.
4. Server logs
Our hosting provider automatically logs technical information when you visit the site (IP address, timestamp, user agent, requested URL, referer). Legal basis: Art. 6(1)(f) GDPR — legitimate interest in site operation and security. Retention: 14 days, except where required for security investigation.
5. Rate-limit data
To protect our contact form against abuse, we store a keyed HMAC-SHA-256 pseudonym of the requester's IP address for up to 15 minutes in an internal Redis cache. The raw IP is never persisted. Legal basis: Art. 6(1)(f) GDPR — legitimate interest in preventing automated abuse.
6. Analytics (PostHog)
If you accept analytics via the cookie banner, we use PostHog to collect aggregated usage statistics (pages visited, approximate region, device type). Your IP address is processed for analytical purposes. Session recordings and autocapture are disabled, and the Do-Not-Track browser signal is respected. PostHog processes data on our behalf within the EU under a data processing agreement (Art. 28 GDPR). Legal basis: Art. 6(1)(a) GDPR — consent. You can withdraw consent at any time via the cookie settings link in the footer; on withdrawal, the PostHog session is reset and capturing stops.
7. Recipients and international transfers
Resend processes our transactional email within the EU. PostHog processes analytics data within the EU. Our Redis cache and application hosting operate in Germany. Where a residual transfer to a third country may occur (e.g. administrative access by a provider's non-EU parent entity), it is secured by EU Standard Contractual Clauses under Art. 46 GDPR. We do not share data with any other third parties.
8. Your rights
Under the GDPR you have the right to: (a) access your personal data, (b) rectification of inaccurate data, (c) erasure, (d) restriction of processing, (e) data portability, (f) objection to processing based on legitimate interest, (g) withdraw consent at any time, (h) lodge a complaint with a supervisory authority. To exercise any of these rights, contact us at info ( at ) fintum-mi.com.
9. Supervisory authority
You may lodge a complaint with your local data protection authority. A list of German state authorities is available at https://www.bfdi.bund.de.
10. Cookies and local storage
We use the following cookies on this site: • fintum_consent — strictly necessary, first-party, stores your cookie-banner choice ("accepted" or "rejected"). Lifetime: 12 months. Set without consent as permitted under § 25 (2) TDDDG. • ph_<project>_posthog — analytics, first-party, set by PostHog to distinguish anonymous visitors and sessions. Lifetime: 12 months. Set only after you accept analytics in the cookie banner. • ph_<project>_posthog_window — analytics, first-party, set by PostHog to scope a browser tab/session. Lifetime: session. Set only after you accept analytics. No other cookies, local storage entries, or tracking pixels are used. You can reset your consent choice at any time via the cookie settings link in the footer; rejecting analytics clears the PostHog cookies on your next page load.