Privacy Policy

1) Introduction and contact details of the data controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data means any data by which you can be personally identified.

1.2 The data controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is FinEase Financial Service GmbH, Karlstraße 13, 35641 Schöffengrund, Germany, Tel.: +49 155 / 632 389 76, Email: info@finease-fs.de. The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data collection when visiting our website

2.1 When using our website for informational purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the data that your browser sends to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our website accessed
• Date and time of access
• Amount of data sent in bytes
• Source/referrer from which you reached the page
• Browser used
• Operating system used
• IP address used (if applicable: in anonymised form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files subsequently if there is concrete evidence of unlawful use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller). You can recognise an encrypted connection by the string "https://" and the lock symbol in your browser bar.

3) Hosting & Content Delivery Network

We use a provider for hosting our website and displaying its content that provides its services exclusively on servers within the European Union, either itself or through selected sub-contractors.

All data collected on our website is processed on these servers.

We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorised disclosure to third parties.

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted again when you close your browser (so-called "session cookies"), while others remain on your device for a longer period and allow us to save page settings (so-called "persistent cookies"). In the latter case, you can find out the storage period from the overview in your web browser's cookie settings.

If personal data is also processed by individual cookies we use, processing is carried out in accordance with Art. 6(1)(b) GDPR for the performance of the contract, in accordance with Art. 6(1)(a) GDPR in the case of consent given, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a user-friendly and effective design of your visit.

You can set your browser so that you are informed when cookies are set and can decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact

When you contact us (e.g. via contact form or email), personal data is processed – solely for the purpose of handling and responding to your request and only to the extent necessary for that purpose.

The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations.

6) Data processing when opening a customer account

In accordance with Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. You can see which data is required for opening an account from the input mask of the relevant form on our website.

Deletion of your customer account is possible at any time and can be done by sending a message to the controller's address given above. After deletion of your customer account, your data will be deleted unless all contracts concluded have been fully executed, no statutory retention periods apply and we have no legitimate interest in further storage.

7) Use of customer data for direct marketing

7.1 Subscription to our email newsletter

When you subscribe to our email newsletter, we send you regular information about our offers. The only mandatory information for sending the newsletter is your email address. Providing further data is voluntary and is used to address you personally. For sending the newsletter we use the double opt-in procedure, which ensures that you only receive newsletters once you have expressly confirmed your consent to receive them by clicking on a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6(1)(a) GDPR. We store the IP address entered by your internet service provider (ISP) as well as the date and time of registration in order to be able to trace any misuse of your email address at a later date. The data collected when you subscribe to the newsletter is used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the controller mentioned above. After unsubscribing, your email address will be deleted from our newsletter distribution list without delay, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.

7.2 Sending the email newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to send you regular offers by email for similar goods or services to those already purchased from our range. We do not need to obtain separate consent from you for this in accordance with § 7(3) of the German Unfair Competition Act (UWG). Data processing is carried out solely on the basis of our legitimate interest in personalised direct marketing in accordance with Art. 6(1)(f) GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails.

You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller mentioned at the beginning. You will only incur the transmission costs according to the basic rates. After we receive your objection, the use of your email address for advertising purposes will be discontinued without delay.

7.3 ActiveCampaign

Our email newsletter is sent via this provider: ActiveCampaign, LLC, 150 N. Michigan Ave Suite 1230, Chicago, IL, USA

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when registering for the newsletter to this provider in accordance with Art. 6(1)(f) GDPR so that it can send the newsletter on our behalf.

Subject to your express consent in accordance with Art. 6(1)(a) GDPR, the provider also carries out a statistical analysis of the success of newsletter campaigns by means of web beacons or tracking pixels in the emails sent, which can measure opening rates and specific interactions with the newsletter content. Device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated, but not merged with other data.

You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider that protects our site visitors' data and prohibits disclosure to third parties.

For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

8) Online marketing

8.1 ADCELL Partner Programme Affiliate

We participate in the affiliate programme of the following provider: Firstlead GmbH, Rosenfelder St. 15-16, 10315 Berlin, Germany

In this context, we have placed links on our website that lead to offers on the provider's or third-party websites ("partner sites").

To measure the success of an affiliate link, evaluate orders generated via such a link and account for commission payments, the provider uses cookies and/or similar technologies, which are generally set on the partner sites and for which we are not responsible in terms of data protection. The provider regularly processes the IP address and, where applicable, other device information.

All processing described above, in particular the reading or storage of information on the device you use, only takes place if you have given your express consent for this in accordance with Art. 6(1)(a) GDPR. You can revoke consent you have given at any time with effect for the future by using the cookie consent management options on the partner sites.

8.2 Amazon Affiliate

We participate in the affiliate programme of the following provider: Amazon EU S.a.r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg

In this context, we have placed links on our website that lead to offers on the provider's or third-party websites ("partner sites").

To measure the success of an affiliate link, evaluate orders generated via such a link and account for commission payments, the provider uses cookies and/or similar technologies, which are generally set on the partner sites and for which we are not responsible in terms of data protection. The provider regularly processes the IP address and, where applicable, other device information.

All processing described above only takes place if you have given your express consent in accordance with Art. 6(1)(a) GDPR. You can revoke consent you have given at any time with effect for the future by using the cookie consent management options on the partner sites.

8.3 AWIN Performance Advertising Network Affiliate

We participate in the affiliate programme of the following provider: AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany

In this context, we have placed links on our website that lead to offers on the provider's or third-party websites ("partner sites").

To measure the success of an affiliate link, evaluate orders generated via such a link and account for commission payments, the provider uses cookies and/or similar technologies. The provider regularly processes the IP address and, where applicable, other device information. All processing described above only takes place if you have given your express consent in accordance with Art. 6(1)(a) GDPR. You can revoke consent at any time with effect for the future via the cookie consent management options on the partner sites.

8.4 to 8.9 Further affiliate programmes (Babbel, Booking.com, Check24, Financeads, Sprachenlernen24, Tarifcheck)

We participate in the affiliate programmes of the providers named in the German version of this privacy policy. In each case, we have placed links on our website that lead to offers on the providers' or third-party websites ("partner sites"). To measure success, evaluate orders and account for commission payments, the respective provider uses cookies and/or similar technologies. Processing only takes place if you have given your express consent in accordance with Art. 6(1)(a) GDPR. You can revoke consent at any time with effect for the future via the cookie consent management options on the partner sites.

9) Web analytics

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables analysis of your use of our website.

When you visit the website, Google Analytics 4 sets cookies by default, which are stored on your device as small text modules and collect certain information. This information includes your IP address, which is however truncated by Google to exclude direct identification. The information is transmitted to Google servers and processed there. Transfers to Google LLC in the USA may also occur.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us and provide other services relating to website and internet use. The IP address transmitted by your browser as part of Google Analytics and truncated is not merged with other Google data. Data collected as part of the use of Google Analytics 4 is stored for two months and then deleted.

All processing described above, in particular the setting of cookies on the device used, only takes place if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. Without your consent, Google Analytics 4 will not be used during your visit. You can revoke consent you have given at any time with effect for the future by disabling this service via the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with Google that ensures the protection of our site visitors' data and prohibits unauthorised disclosure to third parties.

Further legal information on Google Analytics 4 can be found at https://business.safety.google/intl/en/privacy/, https://policies.google.com/privacy?hl=en and https://policies.google.com/technologies/partner-sites.

Demographic characteristics: Google Analytics 4 can use the "Demographics" feature to create statistics on the age, gender and interests of site visitors. Data collected cannot be attributed to any specific person and is deleted after two months. Google Signals and UserIDs may be used as extensions; you can disable "Personalised advertising" in your Google account settings. For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework.

10) Retargeting / Remarketing and conversion tracking

10.1 Meta Pixel with advanced matching

We use the "Meta Pixel" service of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta") in advanced matching mode. When a user clicks on an ad we place on Facebook or Instagram, the URL of our linked page is extended by a parameter. This parameter is then stored in the user's browser via a cookie set by our linked page. The cookie also collects specific customer data (e.g. email address) that we collect on our website linked to the Facebook or Instagram ad (e.g. purchases, sign-ups, registrations). We use Meta Pixel to make our ads on Facebook and/or Instagram more effective and to measure conversions. All processing described above only takes place if you have given your express consent in accordance with Art. 6(1)(a) GDPR. You can revoke consent at any time via the Cookie Consent Tool. For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework.

10.2 Google Ads Remarketing

This website uses remarketing technology from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google sets a cookie that enables interest-based advertising based on the pages you visit. Processing only takes place with your express consent in accordance with Art. 6(1)(a) GDPR. You can revoke consent via the Cookie Consent Tool. For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework. Details: https://policies.google.com/technologies/partner-sites.

10.3 Google Ads conversion tracking

This website uses the "Google Ads" online advertising programme and, as part of Google Ads, conversion tracking by Google Ireland Limited ("Google"). We use Google Ads to draw attention to our offers on external websites. The conversion tracking cookie is set when a user clicks on a Google ad. Processing only takes place with your express consent in accordance with Art. 6(1)(a) GDPR. You can revoke consent via the Cookie Consent Tool. Customer match: we may transmit hashed customer data to Google for matching with Google accounts; this only takes place with your express consent. For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework.

10.4 Snap Pixel (Snapchat)

This website uses the conversion tracking technology of Snap Inc., 63 Market Street, Venice, CA 90291, USA. If you came to our website from an ad on the provider's domain, cookies and/or similar technologies may be used to track the success of the ad. Processing only takes place with your express consent in accordance with Art. 6(1)(a) GDPR. For transfers to the USA, the provider relies on the European Commission's standard contractual clauses.

10.5 TikTok Pixel

This website uses the conversion tracking technology of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. If you came to our website from an ad on the provider's domain, cookies and/or similar technologies may be used to track the success of the ad. Processing only takes place with your express consent in accordance with Art. 6(1)(a) GDPR.

11) Page functionality

11.1 Vimeo – 11.2 YouTube – 11.3 Ausgezeichnet.org widget – 11.4 IT-Recht Kanzlei trust widget – 11.5 Trusted Shops Trustbadge – 11.6 Trustpilot – 11.7 werkenntdenBESTEN seal – 11.8 OpenStreetMap – 11.9 Google Customer Reviews

We use plugins or graphic elements from the providers listed in the German version of this privacy policy to display videos, external reviews, trust seals and maps. When you access a page that contains such elements, your browser may establish a direct connection to the provider's servers; certain information including your IP address may be transmitted. Processing is based on consent in accordance with Art. 6(1)(a) GDPR where required, or on our legitimate interest in effective marketing in accordance with Art. 6(1)(f) GDPR. You can revoke consent at any time via the Cookie Consent Tool. For Trusted Shops and certain order-related processing, we are jointly responsible with the provider in accordance with Art. 26 GDPR. For data transfers to the USA, the EU-US Data Privacy Framework applies where the provider has signed up to it.

12) Tools and other

Cookie Consent Tool

This website uses a "Cookie Consent Tool" to obtain valid user consent for cookies and cookie-based applications that require consent. The tool displays an interactive interface on page load on which you can give consent for certain cookies and/or applications by ticking boxes. Consent-required cookies/services are only loaded if you give the corresponding consent. The tool sets technically necessary cookies to store your cookie preferences. We have concluded a data processing agreement with the provider where required. Further information can be found in the tool's interface on our website.

13) Data subject rights

13.1 Under applicable data protection law, you have the following rights vis-à-vis the controller in relation to the processing of your personal data:

• Right of access pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 GDPR;
• Right to erasure pursuant to Art. 17 GDPR;
• Right to restriction of processing pursuant to Art. 18 GDPR;
• Right to be informed pursuant to Art. 19 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to withdraw consent pursuant to Art. 7(3) GDPR;
• Right to lodge a complaint pursuant to Art. 77 GDPR.

13.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF A BALANCING OF INTERESTS (ART. 6(1)(F) GDPR), YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, WE MAY CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING YOUR DATA FOR DIRECT MARKETING PURPOSES.

14) Duration of storage of personal data

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing and, where relevant, the applicable statutory retention period (e.g. commercial and tax retention periods).

Where personal data is processed on the basis of express consent in accordance with Art. 6(1)(a) GDPR, the data in question is stored until you withdraw your consent.

Where statutory retention periods apply to data processed in the context of contractual or quasi-contractual obligations on the basis of Art. 6(1)(b) GDPR, such data is routinely deleted after the retention periods have expired unless it is still required for contract performance or initiation and/or we have no legitimate interest in further storage.

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, it is stored until you exercise your right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or processing serves the assertion, exercise or defence of legal claims.

Where personal data is processed for direct marketing on the basis of Art. 6(1)(f) GDPR, it is stored until you exercise your right to object under Art. 21(2) GDPR.

Unless otherwise indicated in this statement for specific processing situations, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.