Privacy Policy

1. Data protection at a glance

General information

The following information gives you an overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you. You will find detailed information on data protection in our privacy policy, linked below.

Data collection on this website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Their contact details are given in the section "Information on the responsible body" of this privacy policy.

How do we collect your data?
First, your data is collected because you provide it to us, for example when you enter data in a contact form.

Other data is collected automatically, or with your consent, by our IT systems when you visit the website. This is mainly technical data (for example, your internet browser, operating system or the time the page was accessed). This data is collected automatically as soon as you access this website.

What do we use your data for?
Some data is collected to ensure the website functions correctly. Other data may be used to analyse your user behaviour. If contracts can be concluded or initiated via the website, the data transmitted will also be processed for contractual offers, orders or other enquiries.

What rights do you have regarding your data?
You have the right to obtain free information at any time about the origin, recipients and purpose of the processing of your personal data. You also have the right to request the correction or deletion of this data. If you have given consent to the processing of your data, you may withdraw this consent at any time with effect for the future. In certain circumstances, you also have the right to request restriction of the processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time with any questions regarding data protection and related matters.

Analytics tools and third-party tools

When you visit this website, your browsing behaviour may be statistically analysed. This analysis is mainly carried out using so-called "analytics" programs.

Detailed information on these analytics programs is provided in the privacy policy below.

2. Hosting

We host the content of our website with the following provider:

IONOS

The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (hereinafter IONOS). When you visit our website, IONOS collects various log files, including your IP address. For more information, please see the IONOS privacy policy: https://www.ionos.de/terms-gtc/terms-privacy.

The use of IONOS is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring the best possible presentation of our website. If consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Article 25(1) of the German eDDDG directive, insofar as the consent includes the storage of cookies or access to information on the user's device (for example, device fingerprinting) within the meaning of the eDDDG directive. Consent can be withdrawn at any time.

Order processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This contract, which is mandatory under data protection law, ensures that the service provider processes the personal data of visitors to our website only in accordance with our instructions and in compliance with the GDPR.

3. General information and mandatory disclosures

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data that can be used to identify you. This privacy policy explains which data we collect and how we use it. It also explains how and why we do so.

Please note that data transmission over the internet (for example, when communicating by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information on the responsible body

The body responsible for data processing on this website is:

Kallenberger-Finanz, financial and insurance broker eK
Prinz-Eugen-Weg 24
88400 Biberach an der Riß, Germany
Phone: 0151 28943474
Email: info@kallen-berger.com

The responsible body is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (for example, names, email addresses, etc.).

Storage period

Unless a more specific storage period is stated in this privacy policy, your personal data will be stored until the purpose of the processing no longer applies. If you submit a legitimate request for deletion or withdraw your consent to the processing of your data, the data will be deleted, provided we have no other legally valid basis for storing it (for example, statutory retention periods under tax or commercial law). In the latter case, the data will be deleted once these grounds no longer apply.

General information on the legal basis for data processing on this website

If you have consented to the processing of your data, we process your personal data on the basis of Article 6(1)(a) GDPR or, where special categories of personal data within the meaning of Article 9(1) GDPR are processed, on the basis of Article 9(2)(a) GDPR. In the case of explicit consent to the transfer of personal data to third countries, processing is also carried out on the basis of Article 49(1)(a) GDPR. If you have consented to the storage of cookies or to access to information on your device (for example, by fingerprinting), processing is also carried out on the basis of Section 25(1) of the German Telemedia Act (TMG). You can withdraw your consent at any time. If your data is required for the performance of a contract or for pre-contractual measures, we process it on the basis of Article 6(1)(b) GDPR. Furthermore, where necessary to comply with a legal obligation, we process your data on the basis of Article 6(1)(c) GDPR. Processing may also be based on our legitimate interests under Article 6(1)(f) GDPR. Information on the legal bases applicable in each individual case is provided in the following sections of this privacy policy.

Recipients of personal data

In the course of our business, we work with various external partners. This sometimes involves transferring personal data to these partners. We only disclose personal data to external partners where this is necessary to perform a contract, where we are legally obliged to do so (for example, disclosing data to tax authorities), where we have a legitimate interest in the disclosure under Article 6(1)(f) GDPR, or where another legal basis permits the transfer. When we engage processors, we only transfer our clients' personal data on the basis of a valid data processing agreement. In the case of joint processing, a joint processing agreement is concluded.

Withdrawal of your consent to data processing

Many data processing operations are only possible with your explicit consent. You may withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Right to object to data processing in particular cases and to direct marketing (Art. 21 GDPR)

If the processing of your data is based on Article 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation; this right also applies to profiling based on these provisions. The specific legal basis for each processing operation is stated in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims (objection under Article 21(1) GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to such processing; this right also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will no longer be processed for direct marketing purposes (objection under Article 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of a breach of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or the place of the alleged infringement. This right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to receive the data that we process automatically on the basis of your consent or in performance of a contract, for yourself or for a third party, in a commonly used, machine-readable format. If you request the direct transfer of this data to another controller, this will only be done where technically feasible.

Information, correction and deletion

In accordance with applicable law, you have the right to request free information about your stored personal data, its origin, its recipients and the purpose of its processing, as well as the right to have it corrected or deleted. You can contact us at any time with any questions regarding your personal data.

Right to restriction of processing

You have the right to request restriction of the processing of your personal data. You can contact us at any time to do so. The right to restriction of processing applies in the following cases:

If you contest the accuracy of the personal data we have stored, we will generally need time to verify it. During this period, you have the right to request restriction of the processing of your personal data.
If the processing of your personal data was or is unlawful, you may request restriction of the use of the data instead of its deletion.
If we no longer need your personal data but you need it for the establishment, exercise or defence of legal claims, you have the right to request restriction of the processing of your personal data instead of its erasure.
If you have objected to the processing of your data under Article 21(1) GDPR, a balancing of your interests and ours must be carried out. Pending this balancing, you have the right to request restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data may, apart from being stored, only be processed with your consent or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State.

SSL or TLS encryption

This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address bar of your browser changes from "http://" to "https://" and a padlock symbol appears.

When SSL or TLS encryption is enabled, the data you send to us cannot be read by third parties.

Objection to promotional emails

Using the contact details published in the legal notice to send unsolicited advertising and information materials is expressly prohibited. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited advertising, in particular by spam email.

4. Data collection on this website

Cookies

Our website uses "cookies". Cookies are small data files that are harmless to your device. They are stored temporarily (for the duration of a session) or permanently (persistent cookies). Session cookies are automatically deleted when you leave our site. Persistent cookies remain stored on your device until you delete them yourself or your browser deletes them automatically.

Cookies may come from us (first-party cookies) or from third-party companies (third-party cookies). Third-party cookies enable the integration of certain services of third-party companies within websites (for example, payment processing cookies).

Cookies serve various functions. Many of them are technically essential, as certain features of the website would not work without them (for example, the shopping cart or the display of videos). Other cookies may be used to analyse user behaviour or for advertising purposes.

Cookies required for electronic communication, for providing certain functions you have requested (for example, the shopping cart function) or for optimising the website (for example, audience measurement cookies) ("necessary cookies") are stored in accordance with Article 6(1)(f) GDPR, unless stated otherwise. The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimised provision of its services. If consent to the storage of cookies and similar recognition technologies has been requested, processing is carried out exclusively on the basis of that consent (Article 6(1)(a) GDPR and Article 25(1) of the ePrivacy Directive); you may withdraw your consent at any time.

You can set your browser to inform you when cookies are placed, to allow cookies only in certain cases, to accept them in certain cases or to refuse them altogether, and to delete them automatically when you close your browser. Disabling cookies may limit the functionality of this website.

If other cookies and services are used on this website, you will find this information in this privacy policy.

CCM19

Our website uses the CCM19 software to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies, and to document this in accordance with data protection regulations. The provider of this technology is Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, Germany (hereinafter "CCM19").

When you visit our website, a connection is established with the CCM19 servers to obtain your consent and other information relating to cookie use. CCM19 then stores a cookie in your browser to associate your consent, given or withdrawn, with your account. The data collected in this way is stored until you request its deletion, you delete the CCM19 cookie yourself, or the purpose of its storage no longer applies. Statutory retention obligations remain unaffected.

CCM19 is used to obtain the consent legally required for the use of cookies. The legal basis for this processing is Article 6(1)(c) GDPR.

Server log files

The website provider automatically collects and stores information in server log files, which your browser automatically transmits to us. This information includes:

Browser type and version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address

This data will not be combined with other data sources.

This data is collected in accordance with Article 6(1)(f) GDPR. The website operator has a legitimate interest in ensuring the technical operation and optimisation of its website; for this purpose, server log files must be recorded.

Contact form

If you send us enquiries via the contact form, the information you enter, including your contact details, will be stored in order to process your enquiry and to contact you again if necessary. We will not share this data without your consent.

The processing of this data is based on Article 6(1)(b) GDPR if your enquiry is related to the performance of a contract or necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in efficiently handling the enquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), if obtained; you may withdraw your consent at any time.

Data you enter in the contact form will be stored until you request its deletion, withdraw your consent to its storage, or the purpose of its storage no longer applies (for example, after your enquiry has been processed). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

Enquiries by email, telephone or fax

When you contact us by email, telephone or fax, your enquiry, including any personal data arising from it (name, subject of the enquiry), will be stored and processed by us for the purpose of answering it. We will not share this data without your consent.

Data you transmit to us via contact forms will be stored until you request its deletion, withdraw your consent to its storage, or the purpose of its storage no longer applies (for example, after your enquiry has been processed). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

Communication via WhatsApp

We use the instant messaging service WhatsApp, among other means, to communicate with our clients and other third parties. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

Communications are end-to-end encrypted (peer-to-peer), which prevents WhatsApp and third parties from accessing their content. However, WhatsApp has access to the metadata generated during communication (for example, the sender, the recipient and the time). It is important to note that, according to WhatsApp, the personal data of its users is shared with its parent company in the United States, Meta. For more information on data processing, please see the WhatsApp privacy policy: https://www.whatsapp.com/legal/#privacy-policy.

The use of WhatsApp is based on our legitimate interest in communicating with our clients, prospects and other business and contractual partners as quickly and efficiently as possible (Article 6(1)(f) GDPR). If consent has been requested, processing is carried out exclusively on the basis of that consent, which can be withdrawn at any time with effect for the future.

Exchanges you have had with us via WhatsApp will be stored until you request their deletion, withdraw your consent to their storage, or the purpose of their storage no longer applies (for example, after your enquiry has been processed). Mandatory statutory provisions, in particular retention periods, remain unaffected.

The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards for data processing in the United States. Any company certified under the DPF undertakes to comply with these standards. For more information, please see: https://www.dataprivacyframework.gov/participant/7735.

We use WhatsApp in its "WhatsApp Business" version.

Data transfers to the United States are governed by the European Commission's standard contractual clauses. More information is available here: https://www.whatsapp.com/legal/business-data-transfer-addendum

We have configured our WhatsApp accounts so that they do not automatically synchronise data with the address book of the smartphones used.

We have concluded a data processing agreement (DPA) with the above-mentioned provider.

5. Analytics and advertising tools

Matomo

This website uses the open-source web analytics service Matomo.

With Matomo, we collect and analyse data on how visitors use our website. This allows us, among other things, to determine the date and time of page views and their geographic origin. We also collect various log files (IP address, referring site, browser and operating system used), so we can measure whether visitors carry out certain actions (clicks, purchases, etc.).

The use of this analytics tool is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise its website and advertising. If consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) of the German Telemedia Act (TMG), insofar as the consent includes the storage of cookies or access to information on the user's device (for example, device fingerprinting) within the meaning of the TMG. Consent can be withdrawn at any time.

IP address anonymisation

We use IP address anonymisation for our Matomo analyses. This means your IP address is shortened before analysis, so that it can no longer be uniquely associated with you.

Cookie-free analysis

We have configured Matomo so that it does not store any cookies in your browser.

Hosting

We host Matomo with the following third-party provider:

Olaf Hunck - HunckMedia, Gmünder Straße 13, 73550 Waldstetten, Germany
analyticor.de

6. Plugins and tools

Google Fonts (local hosting)

This website uses Google Fonts, provided by Google, for uniform display of fonts. Google Fonts are installed locally. No connection to Google's servers is established.

More information on Google Fonts is available at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy.

7. Audio and video conferencing

Information technology

We use, among other things, video conferencing tools to communicate with our clients. The tools we use are listed below. When you communicate with us by video or audio conference over the internet, your personal data is collected and processed by us and by the provider of the video conferencing tool concerned.

Conferencing tools collect all data you provide to access them (email address and/or telephone number). They also process the duration of the conference, the start and end times of your participation, the number of participants and other contextual information relating to the communication process (metadata).

In addition, the provider of the tool processes all technical data required to manage online communications. This includes in particular IP addresses, MAC addresses, device identifiers, device type, operating system type and version, client version, camera type, microphone or speaker type, and connection type.

All content exchanged, uploaded or made available via the tool will also be stored on the provider's servers. This content includes in particular cloud recordings, instant messages, voice messages, uploaded photos and videos, files, whiteboards and any other information shared while using the service.

Please note that we do not have full control over the data processing carried out by the tools used. Our options are largely determined by each provider's privacy policy. You will find further information on data processing by the conferencing tools in their respective privacy policies, which we have listed below.

Purpose and legal basis

Video conferencing tools are used to communicate with our current or prospective business partners, or to provide certain services to our clients (Article 6(1)(b) GDPR). Their use also aims to simplify and speed up communication with us or our company (legitimate interest within the meaning of Article 6(1)(f) GDPR). Where consent has been requested, the use of the tools concerned is based on that consent, which can be withdrawn at any time with effect for the future.

Storage period

Data we collect directly via video conferencing tools will be deleted from our systems as soon as you request it, withdraw your consent to its storage, or the purpose of its storage no longer applies. Cookies remain stored on your device until you delete them. Statutory retention periods remain unaffected.

We have no control over how long the operators of the conferencing tools retain your data for their own purposes. For further details, please contact the operators of the conferencing tools directly.

Conferencing tools used

We use the following conferencing tools:

Zoom

We use Zoom. This service is provided by Zoom Communications Inc., 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA. For more information on data processing, please see Zoom's privacy policy: https://www.zoom.com/de/trust/privacy/privacy-statement/.

Data transfers to the United States are carried out in accordance with the European Commission's standard contractual clauses. More information is available here: https://www.zoom.com/de/trust/privacy/privacy-statement/.

Microsoft Teams

We use Microsoft Teams. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Detailed information on data processing can be found in the Microsoft Teams privacy statement: https://privacy.microsoft.com/en-us/privacystatement.