Data protection is a matter of trust, and your trust is important to us. We strictly observe legal provisions when processing your personal data. With the following privacy notice, we would like to provide you with an overview of the processing of personal data managed by Estably Vermögensverwaltung (hereinafter referred to as EST) and the resulting rights under the provisions of the new EU General Data Protection Regulation (GDPR) and the Data Protection Act (DSG). Which specific data is processed and how it is used depends significantly on the services and products to be provided or agreed upon. Due to banking secrecy, EST is obliged to protect your privacy and confidentiality and, for this reason, implements a variety of technical and organizational data protection measures for all processing of personal data.
Within the scope of our business relationship, we rely on processing personal data that is necessary for the initiation and execution of the business relationship and the fulfillment of the associated legal or contractual obligations, as well as for the provision of services or the execution of orders. Without this data, we will generally not be able to enter into or maintain a business relationship, process an order, or offer services and products.
Should you have any questions regarding individual data processing or wish to exercise your rights as described below under point 5, please contact:
Estably Vermögensverwaltung AG
Schaanerstrasse 29
9490 Vaduz
Liechtenstein
Phone: +423 220 29 70
Siegfried Herzog
CLL Compliance Labs AG
Dr. Grass-Strasse 12
9490 Vaduz
Liechtenstein
Phone: +423 237 90 09
We collect and process personal data that we receive within the scope of our business relationship with our customers. Personal data can be processed at every stage of the business relationship and may differ depending on the group of persons.
In principle, we process personal data provided to us by you through submitted contracts, forms, your correspondence, or other documents. Insofar as necessary for the provision of the service, we also process personal data that arises or is transmitted due to the use of products or services, or that we have legitimately received from third parties (e.g., your custodian bank, the identification service provider Identity TM) or from public bodies (e.g., UN and EU sanction lists). Finally, personal data from publicly accessible sources (e.g., commercial and association registers, press, internet) may be processed.
In addition to customer data, we may also process personal data of other third parties involved in the business relationship, such as data of authorized representatives, agents, or beneficial owners of a business relationship. We ask you to also inform any such third parties about this privacy notice. By personal data, we specifically mean the following categories of data:
We process personal data in accordance with the provisions of the GDPR and the DSG for the following purposes or based on the following legal grounds:
For the fulfillment of a contract or for the implementation of pre-contractual measures within the scope of providing and brokering wealth management, investment advice, and other financial services that can be provided by EST. The purposes of data processing are primarily based on the specific service or product (e.g., securities) and may include, among other things, needs analysis, consulting, wealth management, and the execution of transactions.
For the fulfillment of legal obligations or in the public interest, in particular compliance with legal and regulatory requirements (e.g., compliance with the GDPR, the DSG, the Wealth Management Act and Ordinance, due diligence and anti-money laundering regulations, market abuse regulations, tax laws and agreements, control and reporting obligations, risk management). Should you not provide us with the necessary data, we must fulfill corresponding regulatory obligations and may be forced to terminate the business relationship.
To safeguard legitimate interests of ourselves or third parties for specifically defined purposes, in particular for determining creditworthiness, pursuing claims, product development, marketing and advertising, auditing and risk management, reporting, statistics and planning, prevention and investigation of criminal offenses, video surveillance to safeguard domiciliary rights and to avert danger, and telephone recordings.
Based on your consent, which you have given us for the provision of wealth management services or based on orders, such as the transfer of data to service providers or contractual partners of EST. You have the right to withdraw your consent at any time. This also applies to the withdrawal of declarations of consent given to EST before the GDPR came into effect, i.e., before May 25, 2018.
The withdrawal of consent only applies to the future and does not affect the lawfulness of the data processed until the withdrawal.
We reserve the right to further process personal data collected for one of the above purposes for other purposes if this is compatible with the original purpose or permitted or prescribed by law (e.g., reporting obligations).
Access to your data may be obtained by entities both within and outside of EST. Within EST, only departments or employees may process your data if they need it to fulfill our contractual, legal, and regulatory obligations, as well as to safeguard legitimate interests. In compliance with the relevant legal provisions, other companies, service providers, or vicarious agents may also receive personal data for these purposes. Processors may be companies in the categories of wealth management services, distribution agreements, IT services, logistics, printing services, advice and consulting, as well as sales and marketing. Furthermore, recipients of your data in this context may be other financial service institutions or comparable entities to which we transmit personal data to conduct the business relationship (e.g., custodian banks, brokers, stock exchanges, credit agencies).
In the event of a legal or regulatory obligation, public bodies and institutions (e.g., supervisory authorities, tax authorities, etc.) may also receive your personal data. Data transfer to countries outside the EU or the EEA (so-called third countries) only takes place if
However, these are only countries for which the EU Commission has decided that they have an adequate level of data protection (such as Switzerland) or we apply measures to ensure that all recipients have an adequate level of data protection. In each case, we conduct a risk assessment of the rule of law principles of the state to which the personal data is to be transferred and, in the presence of corresponding risks, supplement the standard data protection clauses with additional clauses or guarantees to effectively ensure the protection of data in the destination country. These standard data protection clauses are available upon request.
We process and store personal data for the entire duration of the business relationship, provided there are no shorter mandatory deletion obligations for specific data.
Furthermore, the duration of storage is determined by the necessity and purpose of the respective data processing. If the data is no longer required for the fulfillment of contractual or legal obligations or to safeguard our legitimate interests (achievement of purpose) or if a given consent is withdrawn, it is regularly deleted, unless further processing is necessary due to contractual or legal retention periods and documentation obligations or for reasons of preserving evidence during the duration of the applicable statutes of limitation.
Our decisions are partly based on automated processing of personal data. There are business areas in which personal data is processed partially automatically. This is done with the aim of evaluating certain personal aspects, insofar as legal and regulatory requirements oblige us (e.g., money laundering prevention), for needs analysis for services and products, and within the scope of risk management.
The determination of a suitable investment strategy is based on your investment objectives (including risk appetite, your risk-bearing capacity, and your knowledge and experience regarding securities). This determination is based on exclusively automated decision-making.
We partially process your data automatically with the aim of evaluating certain personal aspects (profiling). We use profiling, for example, to be able to inform and advise you specifically about products. The evaluation tools used for this purpose enable us to provide needs-based communication and advertising.
With regard to the personal data concerning you, you are entitled to the following data protection rights according to the GDPR (Art. 7, Art. 15 to 21):
The contact details of the Data Protection Office responsible in Liechtenstein are as follows:
Kirchstrasse 8
FL-9490 Vaduz
Principality of Liechtenstein
Phone No. + 423 236 60 90
Email: [email protected]
Requests for information or objections should preferably be made in writing to the Data Protection Officer. He is also available as a contact person for all other data protection matters.
When visiting this website, your surfing behavior can be statistically evaluated. This is mainly done with so-called analysis programs. Detailed information on these analysis programs can be found in the following privacy policy:
We host our content with the following providers:
Hosting with AWS Web Services
We host our CRM software at AWS. The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg (hereinafter: AWS).
When you register on our website using the “Become a customer” button or log in as a customer, your personal data (including name, email address, telephone number) is processed within our CRM software on AWS servers. In the contract with AWS, only regions located in the EU or EEA were explicitly designated as storage locations. AWS, for its part, uses sub-service providers for data processing, in particular Amazon.com Inc. based in Seattle/USA, which is why personal data may be transmitted to the parent company of AWS in the USA.
Data transfer to the USA is based on Art. 45 GDPR. Amazon is a participant in the EU-US Data Privacy Framework (DPF for short), which is why personal data can be transmitted to the USA without having to take additional data protection measures. AWS falls under the Amazon.com, Inc. certification and thus also adheres to the DPF principles. Further details on the obligations for US organizations under the EU-US Data Privacy Framework can be found on the European Commission website (https://ec.europa.eu/commission/presscorner/detail/en/ip_23_3721) and the Data Privacy Framework website (https://www.dataprivacyframework.gov/).
In addition, Amazon uses so-called standard contractual clauses according to Art. 46 GDPR. These are sample templates provided by the EU Commission, which are intended to ensure that data is processed in accordance with the regulations applicable in EU countries. The AWS Data Processing Addendum, which contains the standard contractual clauses, is included in the AWS Service Terms.
AWS acts as a processor for us, which is why a corresponding contract was concluded between Estably and Amazon Web Services EMEA SARL. Amazon Web Services EMEA SARL is therefore not authorized to process personal data of our customers beyond our instructions. You can find the necessary details at: https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/.
Further information can be found in the AWS privacy policy: https://aws.amazon.com/de/privacy/?nc1=f_pr.
The use of AWS is based on Art. 6 Para. 1 lit. a or b GDPR. Your personal data will be stored by AWS for as long as is necessary for the purposes described.
External Hosting
This website is hosted externally. The personal data collected on this website is stored on the servers of the host(s). This may primarily include IP addresses, contact requests, meta and communication data, contractual data, contact details, names, website access, and other data generated via a website.
External hosting is carried out for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 Para. 1 lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our online offer by a professional provider (Art. 6 Para. 1 lit. f GDPR). Insofar as a corresponding consent has been requested, processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a GDPR, provided that the consent includes the storage of cookies or access to information in the user's terminal device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
Our host(s) will only process your data to the extent necessary to fulfill its performance obligations and will follow our instructions regarding this data.
We use the following host(s):
Raidboxes GmbH
Hafenstraße 32
DE – 48153 Münster
Data Processing
We have concluded a Data Processing Agreement (DPA) with the aforementioned provider. This is a contract required by data protection law, which ensures that the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.
We use the Cloudflare service on our website to protect our website from unauthorized access, DDoS attacks, and other threats, as well as to optimize loading speed. The provider is Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, USA (hereinafter “Cloudflare”).
Cloudflare works as a Content Delivery Network (CDN) and security service. Data such as IP addresses, technical information about your terminal device, browser type, and access times are processed and stored on Cloudflare servers in various countries, including the USA.
Data processing is based on Art. 6 Para. 1 lit. f GDPR (legitimate interest in the secure and efficient provision of our website).
Cloudflare Inc. participates in the EU-US Data Privacy Framework (DPF), which makes a transfer of personal data to the USA permissible according to Art. 45 GDPR. Further information on the EU-US Data Privacy Framework can be found on the European Commission website (Link) and at (www.dataprivacyframework.gov).
In addition, Cloudflare uses standard contractual clauses according to Art. 46 GDPR to ensure an adequate level of data protection. Further information on data processing by Cloudflare can be found in the privacy policy: https://www.cloudflare.com/privacypolicy/.
The use of Cloudflare is based on a Data Processing Agreement (DPA), which ensures that your personal data is processed exclusively according to our instructions. The data is only stored for as long as is necessary for the purposes described.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Objection to promotional emails
The use of contact data published within the scope of the imprint obligation for the transmission of not explicitly requested advertising and information materials is hereby contradicted. The operators of the pages explicitly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as through spam emails.
Within the scope of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the data processing and, if applicable, a right to rectification or erasure of this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the address given in the imprint.
contact us at the address provided. Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. For this purpose, you can contact us at any time at the address given in the imprint. The right to restriction of processing exists in the following cases:
If you have restricted the processing of your personal data, this data – apart from its storage – may only be processed with your consent or for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or
legal person or for reasons of an important public interest of the European Union or a member state.
Facebook (Meta Platforms)
Elements of the social network Facebook are integrated on this website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, however, the collected data is also transferred to the USA and other third countries.
An overview of the Facebook social media elements can be found here: https://developers.facebook.com/docs/plugins/?locale=de_DE.
If the social media element is active, a direct connection is established between your terminal device and the Facebook server. Facebook thereby receives the information that you have visited this website with your IP address. If you click the Facebook “Like button” while you are logged into your Facebook account, you can link the content of this website to your Facebook profile. This allows Facebook to assign the visit to this website to your user account. We point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Facebook. Further information on this can be found in Facebook's privacy policy at: https://de-de.facebook.com/privacy/explanation.
Insofar as consent has been obtained, the use of the above-mentioned service is based on Art. 6 Para. 1 lit. a GDPR. Consent can be revoked at any time. Insofar as no consent has been obtained, the service is used on the basis of our legitimate interest in the widest possible visibility in social media.
Insofar as personal data is collected on our website and forwarded to Facebook with the help of the tool described here, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook. The processing by Facebook that takes place after the transfer is not part of the joint responsibility.
The obligations incumbent upon us jointly were set out in a joint processing agreement. The wording of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the data protection information when using the Facebook tool and for the data protection-compliant implementation of the tool on our website. Facebook is responsible for the data security of Facebook products.
Data subject rights (e.g., requests for information) regarding the data processed by Facebook can be asserted directly with Facebook. If you assert the data subject rights with us, we are obliged to forward them to Facebook.
Data transfer to the USA is based on standard contractual clauses according to Art. 46 GDPR as well as on the EU-US Data Privacy Framework (DPF). Meta Platforms, Inc. participates in the EU-US Data Privacy Framework (DPF), which makes a transfer of personal data to the USA permissible according to Art. 45 GDPR.
Further information on the EU-US Data Privacy Framework can be found on the European Commission website (Link) and at (www.dataprivacyframework.gov).
Details on Meta's standard contractual clauses and data processing terms can be found here:
Would you like to opt out of Google Analytics directly? Then simply use this option:
We use the web analysis service Google Analytics on our website to analyze and improve user behavior on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).
Google Analytics uses cookies and similar technologies to analyze user interactions on the website, e.g., pages viewed, duration of stay, click behavior, and more. The information collected is usually transmitted to a Google LLC server in the USA and stored there.
Data processing is based on Art. 6 Para. 1 lit. a GDPR (consent). If you do not give your consent, no analysis by Google Analytics will take place.
Google LLC participates in the EU-US Data Privacy Framework (DPF), so that the transfer of personal data to the USA is permissible pursuant to Art. 45 GDPR. Further information on the EU-US Data Privacy Framework can be found on the European Commission's website (link) and at (www.dataprivacyframework.gov).
In addition, Google uses standard contractual clauses according to Art. 46 GDPR to ensure an adequate level of data protection. Further information on data processing by Google Analytics can be found in Google's privacy policy: https://policies.google.com/privacy.
The use of Google Analytics is based on a Data Processing Agreement (DPA), which ensures that your personal data is processed exclusively according to our instructions. Your data will only be stored for as long as is necessary for the purposes described or until you revoke your consent.
Browser Plugin
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
More information on how Google Analytics handles user data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.
Data Processing
We have concluded a Data Processing Agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Google Analytics E-commerce Tracking
This website uses the “E-commerce Tracking” function of Google Analytics. With the help of E-commerce Tracking, the website operator can analyze the purchasing behavior of website visitors to improve its online marketing campaigns. Information such as orders placed, average order values, shipping costs, and the time from viewing to purchasing a product are recorded. This data can be summarized by Google under a transaction ID assigned to the respective user or their device.
We use the web analysis service Microsoft Clarity to analyze and improve user behavior on our website. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (hereinafter “Microsoft”).
Microsoft Clarity uses cookies and similar technologies to track interactions on our website, e.g., mouse movements, clicks, scrolling, and page navigation. This data is evaluated anonymously to improve the user-friendliness of our website.
Data processing is based on Art. 6 Para. 1 lit. a GDPR (consent) or Art. 6 Para. 1 lit. f GDPR (legitimate interest in the analysis and optimization of our online offer).
Microsoft Clarity stores the collected data both within the EU and in the USA. Data transfer to the USA takes place according to Art. 45 GDPR, as Microsoft Inc. participates in the EU-US Data Privacy Framework (DPF). Further information on this can be found on the European Commission website (Link) and at (www.dataprivacyframework.gov).
In addition, Microsoft uses standard contractual clauses according to Art. 46 GDPR to ensure an adequate level of data protection. Further information on data processing by Microsoft Clarity can be found in the privacy policy at: https://privacy.microsoft.com/en-us/privacystatement.
The use of Microsoft Clarity is based on a Data Processing Agreement (DPA), which ensures that your personal data is processed exclusively according to our instructions.
Google Ads
We use the Google Ads service on our website to draw attention to our offer on external websites and to optimize our advertising measures. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).
Google Ads uses cookies and similar technologies to display targeted advertisements and measure their effectiveness. Through these technologies, Google can process personal data such as your IP address, pages visited, or interactions with ads. The information is usually transmitted to a Google LLC server in the USA and stored there.
Data processing is based on Art. 6 Para. 1 lit. a GDPR (consent). If you do not give your consent, no analysis by Google Ads will take place.
Google LLC participates in the EU-US Data Privacy Framework (DPF), so that the transfer of personal data to the USA is permissible pursuant to Art. 45 GDPR. Further information on the EU-US Data Privacy Framework can be found on the European Commission's website (link) and at (www.dataprivacyframework.gov).
In addition, Google uses standard contractual clauses according to Art. 46 GDPR to ensure an adequate level of data protection. Further information on data processing by Google Ads can be found in Google's privacy policy: https://policies.google.com/privacy.
The use of Google Ads is based on a Data Processing Agreement (DPA), which ensures that your personal data is processed exclusively according to our instructions. Your data will only be stored for as long as is necessary for the purposes described or until you revoke your consent.
Meta Pixel
We use the Facebook Pixel (also called Meta Pixel) on our website to track the behavior of visitors when they have reached our website through a Facebook or Instagram advertisement. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter “Meta”).
The Facebook Pixel enables us to analyze and optimize the effectiveness of Facebook and Instagram advertisements. For this purpose, user data such as IP address, browser information, pages visited, and interactions with our website are recorded and transmitted to servers of Meta Platforms Inc., USA.
Data processing is based on Art. 6 Para. 1 lit. a GDPR (consent). If you do not give your consent, no analysis by the Facebook Pixel will take place.
Meta Platforms Inc. participates in the EU-US Data Privacy Framework (DPF), so that a transfer of personal data to the USA is permissible according to Art. 45 GDPR. Further information on the EU-US Data Privacy Framework can be found on the European Commission website (Link) and at (www.dataprivacyframework.gov).
In addition, Meta uses standard contractual clauses according to Art. 46 GDPR to ensure an adequate level of data protection. Further information on data processing by Meta can be found in the privacy policy at: https://www.facebook.com/privacy/policy.
The use of Facebook Pixel (Meta Pixel) is based on a Data Processing Agreement (DPA), which ensures that your personal data is processed exclusively according to our instructions. Your data will only be stored for as long as is necessary for the purposes described or until you revoke your consent.
Google Tag Manager
We use the Google Tag Manager on our website to centrally manage and efficiently integrate website tags. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).
The Google Tag Manager itself does not collect any personal data. It serves exclusively to manage and play out tracking tags and scripts, which in turn may collect data under certain circumstances. The data processing by these integrated tools is explained separately in the respective sections of this privacy policy.
Data transfers to the USA or other third countries may nevertheless take place if services from Google LLC, USA are integrated via the Google Tag Manager. Google LLC participates in the EU-US Data Privacy Framework (DPF), so that a transfer of personal data to the USA is permissible according to Art. 45 GDPR. Further information on the EU-US Data Privacy Framework can be found on the European Commission website (Link) and at (www.dataprivacyframework.gov).
In addition, Google uses standard contractual clauses according to Art. 46 GDPR to ensure an adequate level of data protection. Further information on data processing by Google can be found in the privacy policy: https://policies.google.com/privacy.
The use of the Google Tag Manager is based on Art. 6 Para. 1 lit. f GDPR (legitimate interest in efficient management and integration of services on our website). Since the Google Tag Manager itself does not store any personal data, no storage of user data by this service takes place.
Google Conversion Tracking
We use Google Conversion Tracking on our website to measure and optimize the success of advertising campaigns. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).
Google Conversion Tracking sets a cookie on your terminal device when you reach our website via a Google ad. The cookie enables us to track whether users perform certain actions on our website (e.g., completed purchases, newsletter sign-ups). This data helps us analyze and improve the effectiveness of our ads.
The collected data is usually transmitted to a Google LLC server in the USA and stored there. Data processing is based on Art. 6 Para. 1 lit. a GDPR (consent). If you do not give your consent, no conversion tracking will take place.
Google LLC participates in the EU-US Data Privacy Framework (DPF), making the transfer of personal data to the USA permissible pursuant to Art. 45 GDPR. Further information on the EU-US Data Privacy Framework can be found on the European Commission's website (link) and at (www.dataprivacyframework.gov).
In addition, Google uses standard contractual clauses according to Art. 46 GDPR to ensure an adequate level of data protection. Further information on data processing by Google Conversion Tracking can be found in Google's privacy policy: https://policies.google.com/privacy.
The use of Google Conversion Tracking is based on a Data Processing Agreement (DPA), which ensures that your personal data is processed exclusively according to our instructions. Your data will only be stored for as long as is necessary for the purposes described or until you revoke your consent.
IP Anonymization
We have activated the IP anonymization function on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Demographic characteristics in Google Analytics
This website uses the "demographic characteristics" function of Google Analytics to show suitable advertisements to website visitors within the Google advertising network. This allows reports to be created that contain statements regarding the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google as well as from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section "Objection to data collection."
Storage duration
Data stored by Google at the user and event level that is linked to cookies, user identifiers (e.g., User ID), or advertising IDs (e.g., DoubleClick cookies, Android advertising ID) is anonymized or deleted after 14 months. Details can be found at the following link: https://support.google.com/analytics/answer/7667196?hl=en
Newsletter data
If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. No further data is collected, or it is collected only on a voluntary basis. We use newsletter service providers, described below, to process the newsletter.
Mailchimp
We use the Mailchimp service to send newsletters and manage our email marketing campaigns. The provider is The Rocket Science Group LLC d/b/a Mailchimp, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (hereinafter "Mailchimp").
When you register for our newsletter, the data you provide (e.g., email address, name) is stored on Mailchimp's servers in the USA. Mailchimp uses this data exclusively for sending and analyzing the newsletters on our behalf.
Data processing is based on Art. 6 Para. 1 lit. a GDPR (consent). If you do not grant or if you revoke your consent, your email address will not be used for sending the newsletter.
Mailchimp participates in the EU-US Data Privacy Framework (DPF), so that the transfer of personal data to the USA is permissible pursuant to Art. 45 GDPR. Further information on the EU-US Data Privacy Framework can be found on the European Commission's website (link) and at (www.dataprivacyframework.gov).
Additionally, Mailchimp uses Standard Contractual Clauses pursuant to Art. 46 GDPR to ensure an adequate level of data protection. Further information on data processing by Mailchimp can be found in the privacy policy: https://mailchimp.com/legal/privacy/.
The use of Mailchimp is based on a Data Processing Agreement (DPA), which ensures that your personal data is processed exclusively according to our instructions. Your data will only be stored for as long as is necessary for the purposes described or until you revoke your consent.
Vimeo
We use plugins from the video portal Vimeo on our website to provide videos. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA (hereinafter "Vimeo").
When you visit one of our pages equipped with a Vimeo video, a connection to Vimeo's servers is established. The Vimeo server is informed which of our pages you have visited. In addition, Vimeo may collect your IP address and technical information (e.g., browser type, operating system, referrer URL), even if you are not logged into Vimeo.
Data processing is based on Art. 6 Para. 1 lit. a GDPR (consent). If you do not grant your consent, the video will not be loaded.
Vimeo participates in the EU-US Data Privacy Framework (DPF), so that the transfer of personal data to the USA is permissible pursuant to Art. 45 GDPR. Further information on the EU-US Data Privacy Framework can be found on the European Commission's website (link) and at (www.dataprivacyframework.gov).
Additionally, Vimeo uses Standard Contractual Clauses pursuant to Art. 46 GDPR to ensure an adequate level of data protection. Further information on data processing by Vimeo can be found in the privacy policy: https://vimeo.com/privacy.
The use of Vimeo is based on a Data Processing Agreement (DPA), which ensures that your personal data is processed exclusively according to our instructions. Your data will only be stored for as long as is necessary for the purposes described or until you revoke your consent.
Google Fonts
We use Google Fonts on our website to ensure a uniform display of fonts. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google").
When you access a page, your browser loads the required fonts directly from Google's servers. In the process, your IP address is transmitted to Google and may be stored in the USA. Google Fonts is used to present our website in an appealing and technically correct manner.
Data processing is based on Art. 6 Para. 1 lit. f GDPR (legitimate interest in a uniform and appealing presentation of our website).
Google LLC participates in the EU-US Data Privacy Framework (DPF), so that the transfer of personal data to the USA is permissible pursuant to Art. 45 GDPR. Further information on the EU-US Data Privacy Framework can be found on the European Commission's website (link) and at (www.dataprivacyframework.gov).
Additionally, Google uses Standard Contractual Clauses pursuant to Art. 46 GDPR to ensure an adequate level of data protection. Further information on data processing by Google Fonts can be found in the privacy policy: https://policies.google.com/privacy.
Alternatively, you can prevent the use of Google Fonts by adjusting the settings in your browser or by using plugins that block the connection to Google servers.
Google Maps
We use the Google Maps service on our website to display geographical information interactively. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google").
When you access a page that contains Google Maps, your IP address and possibly other technical information (e.g., location data, if you have shared it) are transmitted to Google LLC servers in the USA and stored there.
Data processing is based on Art. 6 Para. 1 lit. a GDPR (consent) or Art. 6 Para. 1 lit. f GDPR (legitimate interest in a user-friendly presentation of our online offering).
Google LLC participates in the EU-US Data Privacy Framework (DPF), making the transfer of personal data to the USA permissible pursuant to Art. 45 GDPR. Further information on the EU-US Data Privacy Framework can be found on the European Commission's website (link) and at (www.dataprivacyframework.gov).
Additionally, Google uses Standard Contractual Clauses pursuant to Art. 46 GDPR to ensure an adequate level of data protection. Further information on data processing by Google Maps can be found in the privacy policy: https://policies.google.com/privacy.
The use of Google Maps is based on a Data Processing Agreement (DPA), which ensures that your personal data is processed exclusively according to our instructions. Your data will only be stored for as long as is necessary for the purposes described or until you revoke your consent.
Google reCAPTCHA
We use Google reCAPTCHA on our website to ensure the security of our website and to protect ourselves from spam and abuse. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google").
Google reCAPTCHA uses various characteristics (e.g., IP address, time spent on the website, mouse movements) to automatically check whether the input on our website is made by a human or an automated program. In the process, data is transmitted to Google LLC servers in the USA and processed there.
Data processing is based on Art. 6 Para. 1 lit. f GDPR (legitimate interest in avoiding abuse and spam).
Google LLC participates in the EU-US Data Privacy Framework (DPF), so that the transfer of personal data to the USA is permissible pursuant to Art. 45 GDPR. Further information on the EU-US Data Privacy Framework can be found on the European Commission's website (link) and at (www.dataprivacyframework.gov).
Additionally, Google uses Standard Contractual Clauses pursuant to Art. 46 GDPR to ensure an adequate level of data protection. Further information on data processing by Google reCAPTCHA can be found in the privacy policy: https://policies.google.com/privacy.
The use of Google reCAPTCHA serves exclusively to secure our website and your data. The collected data is only stored for as long as is necessary for the described purpose.
Wordfence
We use the Wordfence security plugin on our website to protect our website from unauthorized access, malware, and other cyberattacks. The provider is Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter "Wordfence").
Wordfence uses cookies, IP addresses, and other technical data to identify and ward off potential security threats. In the process, this data is stored on servers in the USA.
Data processing is based on Art. 6 Para. 1 lit. f GDPR (legitimate interest in securing the website against cyberattacks).
Defiant Inc. participates in the EU-US Data Privacy Framework (DPF), making the transfer of personal data to the USA permissible pursuant to Art. 45 GDPR. Further information on the EU-US Data Privacy Framework can be found on the European Commission's website (link) and at (www.dataprivacyframework.gov).
Additionally, Wordfence uses Standard Contractual Clauses pursuant to Art. 46 GDPR to ensure an adequate level of data protection. Further information on data processing by Wordfence can be found in the privacy policy: https://www.wordfence.com/privacy-policy/.
The use of Wordfence is based on a Data Processing Agreement (DPA), which ensures that your personal data is processed exclusively according to our instructions. Your data will only be stored for as long as is necessary for the described purposes.
We have concluded a Data Processing Agreement (DPA) with the aforementioned provider. This is a contract required by data protection law, which ensures that the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.
Online Marketing and Partner Programs
Affiliate programs on this website
We participate in affiliate partner programs. In affiliate partner programs, advertisements from one company (advertiser) are placed on websites of other companies in the affiliate partner network (publisher). If you click on one of these affiliate advertisements, you will be redirected to the advertised offer. If you subsequently complete a specific transaction (conversion), the publisher receives compensation for this. To calculate this compensation, it is necessary for the affiliate network operator to be able to track which advertisement led you to the respective offer and that you completed the predefined transaction. Cookies or comparable recognition technologies (e.g., device fingerprinting) are used for this purpose.
The storage and analysis of data is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the correct calculation of their affiliate compensation. If a corresponding consent has been requested, processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a GDPR, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
We participate in the following affiliate programs:
Affiliate partner programs:
financeAds GmbH & Co. KG | Karlstraße 9 | 90403 Nuremberg
Adtraction Deutschland GmbH | Oderberger Str. 13 | 10435 Berlin
FinanceQuality.net is a service of Netzeffekt GmbH | netzeffekt GmbH | Agnes-Bernauer-Straße 90 | 80687 Munich
Processing of customer and contract data
We collect, process, and use personal customer and contract data for the establishment, content design, and amendment of our contractual relationships. We collect, process, and use personal data about the use of this website (usage data) only to the extent necessary to enable the user to use the service or for billing purposes. The legal basis for this is Art. 6 Para. 1 lit. b GDPR.
The collected customer data will be deleted after completion of the order or termination of the business relationship and expiry of any existing legal retention periods. Legal retention periods remain unaffected.
[Integrate "Cookie Settings" button of the new cookie plugin here]
