Privacy

1. Controller

Responsible for data processing:

2. Collection and storage of personal data

2.1 Visiting the website

When you access our website, the browser used on your device automatically sends information to our website's server. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the file accessed
• Website from which access is made (referrer URL)
• Browser used and, where applicable, your computer's operating system and the name of your access provider

We process the above data for the following purposes: ensuring a smooth connection to the website, ensuring convenient use of our website, evaluating system security and stability, and for other administrative purposes.

The legal basis for the data processing is Art. 6(1)(f) GDPR. Our legitimate interest follows from the purposes of data collection listed above.

2.2 Hosting

This website is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). When the website is accessed, Vercel processes the access data mentioned above on our behalf. This is based on a data processing agreement; for transfers to the USA, Vercel relies on the EU-US Data Privacy Framework and/or standard contractual clauses. The legal basis is Art. 6(1)(f) GDPR (secure and efficient provision of the website).

2.3 Contact form and email contact

If you contact us via the form on the website or by email, the data you provide will be stored by us for the purpose of processing your enquiry and in case of follow-up questions. We do not pass on this data without your consent.

To send form messages by email, we use the service Resend (Resend, Inc., USA). The data is processed exclusively to deliver your message to us.

This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry relates to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR).

The data you enter in the contact form remains with us until you ask us to delete it, revoke your consent to its storage or the purpose for storing the data no longer applies. Mandatory statutory provisions – in particular retention periods – remain unaffected.

2.4 Digital assistant “Sara”

On our website, you can ask questions to our AI-powered assistant Sara. Your chat entries are transmitted to and processed by the service Anthropic (Anthropic, PBC, USA) in order to generate a response. Please do not enter any sensitive data in the chat, such as health information or contract numbers. The answers are non-binding and do not replace personal advice.

If you request a call back via the chat, your name and contact details are processed in the same way as for the contact form (see 2.3). The legal basis is Art. 6(1)(f) GDPR or, for enquiries relating to a contractual relationship, Art. 6(1)(b) GDPR.

3. Disclosure of data

Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if:

• you have given your express consent to this in accordance with Art. 6(1)(a) GDPR
• disclosure is necessary under Art. 6(1)(f) GDPR for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed
• there is a legal obligation for disclosure under Art. 6(1)(c) GDPR
• this is legally permissible and necessary under Art. 6(1)(b) GDPR for the performance of contractual relationships with you

In the course of our activity as an intermediary, your data may be passed on to insurance companies for the purpose of preparing offers and administering contracts.

4. Cookies and local storage

This website does not use any tracking or marketing cookies. Technically necessary information (e.g. whether the intro animation has already been shown) is stored exclusively locally in your browser for the duration of the session. With a modern web browser, you can monitor, restrict or prevent this storage at any time.

The legal basis is Art. 6(1)(f) GDPR and/or § 25(2) TDDDG.

5. Rights of data subjects

You have the right:

• pursuant to Art. 15 GDPR, to request information about your personal data processed by us
• pursuant to Art. 16 GDPR, to request without delay the correction of inaccurate or the completion of your personal data stored by us
• pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us
• pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data
• pursuant to Art. 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request its transfer to another controller
• pursuant to Art. 7(3) GDPR, to withdraw your consent once given at any time by notifying us
• pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority

Right to object: Where your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data on grounds relating to your particular situation.

6. Data security

During your visit to the website, we use the widely used TLS method in conjunction with the highest level of encryption supported by your browser. We also take appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties.

7. Currency and amendment of this privacy policy

This privacy policy is current as of October 2026. As a result of the further development of our website and services, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed and printed out on the website at any time.

8. Further information

Further information on data processing can be found on the website beratung.devk.de/vtp/frankfurt-am-main/nelson-da-silva-fortio – or you can request it in writing.