Privacy Policy
.avif)
1. Controller
The controller within the meaning of the General Data Protection Regulation (hereinafter: "GDPR") and other applicable national data protection laws and data protection provisions is:
EinsVest GmbH
c/o IAT Intertax Asset Treuhand GmbH
An der Dammheide 10
60486 Frankfurt am Main
Germany
Phone: +49 6196 95 13 202
Email: info@einsvest.com
2. General Information on Data Processing
The protection of personal data is of particular importance to us. For this reason, we collect and use personal data of users and visitors to our website only to the extent necessary to provide a functional website and our content and services. Personal data means any information relating to an identified or identifiable natural person (hereinafter: "data subject").
The collection and use of personal data of our users is always carried out in accordance with the GDPR and applicable national data protection regulations. Where the processing of personal data is required and such processing is not permitted by statutory provisions, we always obtain the consent of the data subject.
Personal data is not disclosed to third parties as a matter of principle. Disclosure only takes place if: you have expressly consented (Art. 6(1)(a) GDPR); there is a legitimate interest in the disclosure and no reason to assume that you have an overriding legitimate interest in non-disclosure (Art. 6(1)(f) GDPR); a legal obligation exists to do so (Art. 6(1)(c) GDPR); or disclosure is permissible in connection with the fulfilment of a contract with you (Art. 6(1)(b) GDPR).
3. Collection and Storage of Personal Data When Visiting the Website
Each time our website is accessed, information is automatically transmitted to our website server by the browser you are using. The following information is collected and stored until it is automatically deleted:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the file retrieved
- Referrer URL (the website from which access was made)
- Information about the browser type used
- Operating system of your computer
- Name of your internet service provider
This data is stored only temporarily in a so-called log file. This does not include the user's IP address or other data that would allow the data to be attributed to a specific user. This data is not stored together with other personal data of the user. We do not draw any conclusions about the data subject when using this data.
The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing a functional website with correctly delivered content, in optimising our systems, and in providing law enforcement authorities with the information necessary for prosecution in the event of a cyberattack. Once no legitimate interest remains and no statutory retention obligation exists, this data is routinely deleted.
4. External Hosting
Webflow – We use Webflow, a website building system, for our website. The service provider is the US company Webflow, Inc., 398 11th St., Floor 2, San Francisco, CA 94103, USA. Webflow processes data, including data relating to you, in the USA among other locations. Webflow is an active participant in the EU-US Data Privacy Framework, which governs the correct and secure transfer of personal data of EU citizens to the USA. More information is available at:
https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en
In addition, Webflow uses standard contractual clauses (Art. 46(2) and (3) GDPR). Standard contractual clauses are template contracts provided by the European Commission designed to ensure that your data meets European data protection standards even when transferred to and stored in third countries (such as the USA). Through the EU-US Data Privacy Framework and the standard contractual clauses, Webflow undertakes to comply with European data protection standards when processing your relevant data, even where such data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the European Commission. You can find the decision and the corresponding standard contractual clauses at:
https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
Further information on the standard contractual clauses and the data processed through the use of Webflow can be found in Webflow's Privacy Policy at:
https://webflow.com/legal/privacy
Data Processing Agreement – We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract required under data protection law that ensures the provider processes the personal data of our website visitors only on our instructions and in compliance with the GDPR.
5. Cookies
Our website uses cookies. Cookies are small text files that your browser automatically creates and that can be stored on your device. They contain a characteristic string of characters that allows the browser to be uniquely identified when the website is revisited. This does not mean that we thereby gain immediate knowledge of your identity.
The use of necessary cookies serves to ensure our website functions correctly from a technical standpoint. The data processed by these cookies is required for the stated purposes in order to safeguard our legitimate interests and those of third parties pursuant to Art. 6(1)(f) GDPR. Our legitimate interest lies in providing a functional and user-friendly website.
In addition, we use cookies to optimise the user-friendliness of our offering and for statistical recording purposes.
We use session cookies to recognise that you have already visited individual pages of our website. These cookies are automatically deleted when you leave our site. We also use temporary cookies that are stored on your device for a specified period. When you revisit our site, it is automatically recognised that you have been here before and which entries and settings you have made, so that you do not have to enter them again. Data collected includes the frequency of page visits, search terms entered, and use of website functions.
The use of cookies for statistical recording and analysis of our offering, as well as for marketing purposes, is described in more detail in sections 6 et seq. of this Privacy Policy. The legal basis for data processing by cookies for statistical and analytical purposes and for marketing purposes is your consent pursuant to Art. 6(1)(a) GDPR. When visiting our website, you have the opportunity to consent to data processing via cookies for analytical and marketing purposes. This consent is voluntary and may be withdrawn by you at any time. If you do not provide consent, no cookies will be set for marketing or analytical purposes.
You may also configure your browser so that no cookies are stored on your computer, or so that a prompt always appears before a new cookie is created. Completely disabling cookies may, however, mean that you are unable to use all functions of our website.
6. Google Analytics
For the purpose of tailoring and continuously optimising our website, we use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google"). We use tracking measures to statistically record usage of our website in order to analyse and optimise our offering.
Google Analytics enables the website operator to analyse the behaviour of website visitors. The website operator receives various usage data such as page views, session duration, operating systems used, and the user's origin. This data is attributed to the user's respective device. Furthermore, we can use Google Analytics to record, among other things, mouse and scroll movements and clicks. Google Analytics also uses various modelling approaches to supplement collected data sets and employs machine-learning technology in data analysis. Google Analytics additionally uses technologies that enable user recognition for behavioural analysis purposes (e.g. cookies or device fingerprinting).
The legal basis for data processing by Google services such as Google Site Kit and Google Analytics is your consent pursuant to Art. 6(1)(a) GDPR. When visiting our website, you have the opportunity to consent to data processing via cookies for analytical and marketing purposes. This consent is voluntary and may be withdrawn at any time. If you do not consent, no cookies will be set for analytical or marketing purposes.
In this context, pseudonymised usage profiles are created and cookies (see section 5) are used. The information generated by the cookie about your use of this website, including:
- Browser type/version
- Operating system used
- Referrer URL (the previously visited page)
- Hostname of the accessing computer (IP address)
- Date and time of the server request
is generally transferred to and stored on a Google server. Data may also be transferred to Google servers in the USA. Based on Google's certification under the EU-US Data Privacy Framework, the European Commission has determined that Google maintains an adequate level of data protection.
The aforementioned information may also be transferred to third parties where this is required by law or where third parties process this data on a contract basis. Under no circumstances will the IP address transmitted by your browser be combined with other Google data. IP addresses are anonymised so that attribution is not possible (IP masking). Only in exceptional cases will the full IP address be transferred to a Google server in the USA and abbreviated there.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services relating to website and internet usage.
You may prevent the installation of cookies by adjusting your browser settings accordingly; however, please note that in this case you may not be able to make full use of all functions of this website. You may also prevent the collection of data generated by the cookie relating to your use of the website (including your IP address) and the processing of such data by Google by downloading and installing the browser add-on available at:
https://tools.google.com/dlpage/gaoptout?hl=en
Further information on data protection in connection with Google Analytics is available in the Google Analytics Help at:
https://support.google.com/analytics/answer/6004245?hl=en
7. Hotjar
We have integrated the Hotjar service on our website. The provider is Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (https://www.hotjar.com).
Hotjar is a tool for analysing your user behaviour on this website. Hotjar allows us to, among other things, record your mouse and scroll movements and clicks. Hotjar can also determine how long you have hovered with the mouse pointer over a particular area. From this information, Hotjar creates so-called heatmaps, which allow us to see which areas of the website are viewed most frequently by visitors.
We can also determine how long you remained on a page and when you left it. We can also determine at which point you abandoned your input in a contact form (so-called conversion funnels).
Furthermore, Hotjar can be used to obtain direct feedback from website visitors. This function serves to improve the website operator's online offering. The legal basis for this data processing is your consent pursuant to Art. 6(1)(a) GDPR. When visiting our website, you have the opportunity to consent to data processing via cookies for analytical and marketing purposes. This consent is voluntary and may be withdrawn at any time. If you do not consent, no cookies will be set for marketing or analytical purposes.
If you wish to deactivate data collection by Hotjar, please click on the following link and follow the instructions provided:
https://www.hotjar.com/opt-out
Please note that Hotjar must be deactivated separately for each browser and each device.
Further information on Hotjar and the data collected can be found in Hotjar's Privacy Policy at the following link:
https://www.hotjar.com/privacy
8. Contact via the Website or a Contact Form
Our website contains information required by law enabling quick electronic contact with us (in particular an email address) and, where applicable, a contact form.
If you contact us by email or via the contact form, the personal data you voluntarily provide will be automatically stored for the purpose of processing your enquiry or contacting you.
This data will be deleted once no statutory retention obligation remains and it is no longer required for the performance or initiation of a contract. The legal basis for processing data transmitted in the course of sending an email is Art. 6(1)(f) GDPR. The legitimate interest within the meaning of the GDPR is the processing and responding to your enquiry.
Data is deleted as soon as it has been used to achieve the purpose for which it was collected. This is the case when the respective conversation with the user has concluded. A conversation is concluded when it can be inferred from the circumstances that the matter in question has been finally resolved. You have the right to object to the storage of your personal data at any time. To do so, please contact the controller specified in section 1 (in writing, by email, or by telephone). The data from the previous communication will then be deleted and further conversation will not be possible.
9. Rights of Data Subjects
As a data subject, you have the following rights vis-à-vis the controller. To exercise any of these rights, please contact the controller using the contact details provided in section 1.
9.1 Right of Access (Art. 15 GDPR)
You may request information from the controller as to whether personal data concerning you is being processed. Where processing is taking place, you may request information on: the purposes of processing; the categories of personal data processed; the recipients or categories of recipients to whom the data has been or will be disclosed; the intended storage period or the criteria used to determine it; the existence of a right to rectification, erasure, or restriction of processing, or a right to object; the right to lodge a complaint with a supervisory authority; where data is not collected directly from you, all available information on its origin; the existence of automated decision-making including profiling pursuant to Art. 22(1) and (4) GDPR; and transfer of personal data to a third country or international organisation, together with the appropriate safeguards pursuant to Art. 46 GDPR.
9.2 Right to Rectification (Art. 16 GDPR)
You have the right to immediate rectification and/or completion of your personal data by the controller if the personal data concerning you that is being processed is inaccurate or incomplete.
9.3 Right to Erasure (Art. 17 GDPR)
You may request the erasure of personal data we hold about you where: the data is no longer necessary for the purposes for which it was collected or processed; you withdraw your consent and there is no other legal basis for processing; you object pursuant to Art. 21(1) GDPR and no overriding legitimate grounds for processing exist, or you object pursuant to Art. 21(2) GDPR; the personal data has been unlawfully processed; erasure is required to comply with a legal obligation; or the personal data was collected in relation to information society services offered pursuant to Art. 8(1) GDPR. This right to erasure does not apply where processing is necessary for the exercise of the right to freedom of expression and information; for compliance with a legal obligation; for reasons of public interest; or for the establishment, exercise, or defence of legal claims.
9.4 Right to Restriction of Processing (Art. 18 GDPR)
You may request restriction of processing of your personal data where: you contest the accuracy of the data, for the period during which the controller verifies accuracy; the processing is unlawful and you oppose erasure and request restriction instead; the controller no longer needs the data but you require it for the establishment, exercise, or defence of legal claims; or you have objected to processing pursuant to Art. 21(1) GDPR and it has not yet been determined whether the controller's legitimate grounds override yours. Where processing has been restricted, such data may, with the exception of storage, only be processed with your consent or for the establishment, exercise, or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State. You will be informed before any restriction is lifted.
9.5 Right to Data Portability (Art. 20 GDPR)
You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to have it transmitted to another controller.
9.6 Right to Object
Where your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data on grounds relating to your particular situation.
Where the objection relates to direct marketing, you have a general right to object which we will implement without you needing to provide reasons relating to a particular situation.
9.7 Right to Withdraw Consent
You have the right to withdraw any consent you have given us at any time, with the effect that we may no longer continue data processing based on that consent for the future.
9.8 Right to Lodge a Complaint (Art. 77 GDPR)
You have the right to lodge a complaint with a supervisory authority. You may contact the supervisory authority of your place of residence or workplace, or the supervisory authority with jurisdiction over us.
10. Data Security
To protect your data as effectively as possible, we use the SSL (Secure Socket Layer) protocol on our website in conjunction with the highest level of encryption supported by your browser. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed padlock or key icon in the status bar of your browser. We also use appropriate technical and organisational security measures to protect your data against manipulation, loss, destruction, or unauthorised access by third parties.
11. Currency and Amendments to this Privacy Policy
This Privacy Policy is current as of May 2026. Amendments to this statement may become necessary as our website and services develop or due to changes in statutory requirements.