Data security

Consent may be revoked at any time.

Our hosting provider(s) will process your data only to the extent necessary to fulfill their service obligations and in accordance with our instructions regarding these data. We use the following hosting provider: Strato

Commissioned Data Processing

We have concluded a Data Processing Agreement (DPA) with the above-mentioned service provider. This is a contract required by data protection law that ensures the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

3. General Notes and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations as well as this Privacy Policy. When you use this website, various personal data are collected. Personal data are data by which you can be personally identified. This Privacy Policy explains which data we collect and what we use them for. It also explains how and for what purpose this happens. Please note that data transmission over the Internet (e.g., communication by e-mail) may have security gaps. Complete protection of data against access by third parties is not possible.

Note on the Responsible Controller

The controller responsible for data processing on this website is:

Günay Edgü
Dunantstr. 11
50354 Hürth
Phone: +49 176 47 68 60 40
E-mail: guenay.edgue@financeprojectbuddy.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g., names, e-mail addresses, etc.).

Storage Duration

Unless a more specific storage period has been stated within this Privacy Policy, your personal data will remain with us until the purpose for the data processing ceases to apply. If you assert a legitimate request for erasure or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., retention periods under tax or commercial law); in the latter case, deletion will occur after these reasons no longer apply. If you have consented to data processing, we process your personal data on the basis of Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, insofar as special categories of data pursuant to Art. 9 (1) GDPR are processed. In the event of explicit consent to the transfer of personal data to third countries, data processing is also based on Art. 49 (1) (a) GDPR. If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), processing is additionally based on § 25 (1) TDDDG. Consent may be revoked at any time. If your data are necessary for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 (1) (b) GDPR. Furthermore, we process your data where this is necessary for compliance with a legal obligation under Art. 6 (1) (c) GDPR. Data processing may also take place on the basis of our legitimate interests pursuant to Art. 6 (1) (f) GDPR. The relevant legal bases applicable in each individual case are explained in the following sections of this Privacy Policy.

Recipients of Personal Data

In the course of our business activities, we work with various external entities.
In some cases, this also requires the transmission of personal data to such external parties. We transfer personal data to external entities only where this is necessary for the fulfillment of a contract, where we are legally obliged to do so (e.g., transfer of data to tax authorities), where we have a legitimate interest pursuant to Art. 6 (1) (f) GDPR, or where another legal basis permits the transfer of data. When using processors, we only transfer personal data of our customers on the basis of a valid data processing agreement. In cases of joint processing, a joint processing agreement is concluded.

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your explicit consent.
You may withdraw consent you have already given at any time. An informal message by e-mail to us is sufficient for this purpose. The legality of the data processing carried out prior to the withdrawal remains unaffected by the withdrawal. Right to Object to Data Collection in Special Cases and to Direct Advertising (Art. 21 GDPR)

IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 (1) (E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RELEVANT LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 (1) GDPR).
WHERE YOUR PERSONAL DATA ARE PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL THEREAFTER NO LONGER BE USED FOR THE PURPOSE OF DIRECT ADVERTISING (OBJECTION PURSUANT TO ART. 21 (2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or the place of the alleged infringement.
The right to lodge a complaint exists without prejudice to any other administrative or judicial remedies.

Right to Data Portability

You have the right to receive data that we process automatically on the basis of your consent or in fulfillment of a contract, in a commonly used, machine-readable format, and to have those data transmitted to yourself or to a third party. Where you request the direct transfer of the data to another controller, this will be carried out only where technically feasible.

Access, Deletion, and Rectification

Within the framework of the applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, their origin, recipients, and the purpose of data processing, and, where applicable, a right to rectification or deletion of these data. For this purpose and for any further questions regarding personal data, you may contact us at any time using the address provided in the legal notice (Impressum).

Right to Restriction of Processing

You have the right to request restriction of the processing of your personal data.
You may contact us at any time for this purpose.
The right to restriction of processing exists in the following cases:
• If you contest the accuracy of your personal data stored with us, we usually need time to verify this.nFor the duration of this verification, you have the right to request the restriction of processing of your personal data.

• If the processing of your personal data was or is unlawful, you may request restriction of data processing instead of deletion.
• If we no longer need your personal data, but you require them for the establishment, exercise, or defense of legal claims, you have the right to request restriction of processing instead of deletion.
• If you have objected pursuant to Art. 21 (1) GDPR, a balancing of your interests an ours must be carried out.
• As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of processing of your personal data.
• If you have restricted the processing of your personal data, such data—apart from their storage—may only be processed with your consent, for the establishment, exercise, or defense of legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the change in the browser’s address line from “http://” to “https://” and by the lock symbol in your browser bar. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Objection to Promotional E-mails

The use of contact details published within the scope of the legal notice obligation for sending unsolicited advertising and informational materials is hereby rejected. The operators of these pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

4. Data Collection on This Website

Contact Form

When you send us inquiries via the contact form, your information from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions.
We do not pass on these data without your consent.

The processing of these data takes place on the basis of Art. 6 (1)(b) GDPR, provided that your request is related to the performance of a contract or is necessary to carry out pre-contractual measures.

In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6 (1)(f) GDPR) or on your consent (Art. 6 (1)(a) GDPR), insofar as this has been requested; consent can be revoked at any time.

The data you enter in the contact form will remain with us until you request deletion, withdraw your consent to storage, or the purpose for data storage no longer applies (e.g., after completion of processing your request). Mandatory legal provisions — in particular retention periods — remain unaffected.

Inquiry by E-mail or Telephone

If you contact us by e-mail or telephone, your inquiry, including all personal data resulting from it (name, inquiry), will be stored and processed by us for the purpose of handling your matter. We do not pass on these data without your consent. The processing of these data is based on Art. 6 (1)(b) GDPR, provided that your inquiry is related to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in the efficient handling of inquiries addressed to us (Art. 6 (1)(f) GDPR) or on your consent (Art. 6 (1)(a) GDPR), insofar as this has been obtained; consent may be withdrawn at any time. The data transmitted by you via contact inquiries will remain with us until you request deletion, revoke your consent to storage, or the purpose for storage no longer applies (e.g., after your inquiry has been fully processed). Mandatory statutory provisions — especially legal retention periods — remain unaffected.

5. Commissioned Data Processing