← back to the home page

Privacy policy

Last updated: 23 October 2026 · Deutsche Fassung

1. Controller

Florian Lange, Gohliser Str. 20 (registered business address), office: Hermsdorfer Str. 13A, 01159 Dresden, Germany
Email: florian.lange@projekt1030.de · Phone: +49 173 7321243

2. General

This policy informs you, in accordance with Art. 13 GDPR, about the nature, scope and purpose of the processing of personal data on this website. The legal bases are in particular Art. 6 (1) (a) GDPR (consent), Art. 6 (1) (b) GDPR (contract or pre-contractual measures) and Art. 6 (1) (f) GDPR (legitimate interest).

3. Hosting (Netlify)

This website is hosted by Netlify (Netlify, Inc., 512 2nd Street, San Francisco, CA 94107, USA). When you visit the site, technically necessary data (including IP address, date and time, requested resource, amount of data transferred, HTTP status, referrer, browser type) is processed in server log files to ensure the operation and security of the site (Art. 6 (1) (f) GDPR). Netlify generally stores this log data for around 30 days. A data processing agreement is in place. For transfers to the USA, Netlify relies on the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. Netlify's EU representative is VeraSafe Ireland Ltd.

4. Fonts (Bunny Fonts)

For display we use Bunny Fonts (Bunny.net, operated by BunnyWay d.o.o., Slovenia/EU). The fonts are delivered in a privacy-friendly way via EU servers; no cookies are set and, according to the provider, no personal data is stored for advertising purposes (Art. 6 (1) (f) GDPR).

5. Cookies, tracking and audience measurement

This website sets no cookies and uses no analytics, tracking or audience-measurement tools (no Google Analytics or similar) and no social media plugins. A consent banner is therefore not required.

6. Contact form ("Free first call")

When you submit the form, we process the data you provide:

To prevent spam, a technical method (hidden field, "honeypot") is used; no additional personal data is evaluated in the process. The purpose of the processing is to handle your enquiry and to arrange a free first consultation. The legal basis is your consent (Art. 6 (1) (a) GDPR) and Art. 6 (1) (b) GDPR (pre-contractual measures). Form submissions are processed via Netlify Forms (see section 3). Colleagues of our office Projekt 1030 may access enquiries for processing. We delete enquiry data at the latest 6 months after the last contact if no mandate follows; otherwise statutory retention periods apply.

7. Contact by phone, email and WhatsApp

If you contact us by phone or email, or if we contact you after you have submitted the form, we process the contact details and the content of the communication in order to handle your enquiry (Art. 6 (1) (a) and (b) GDPR). If you contact us via WhatsApp, the service is provided by WhatsApp Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (part of Meta); data may be transferred to the USA. We do not use WhatsApp for contract documents.

8. Recording of phone and video consultations (§ 18a FinVermV)

Where investment advice on financial investments is provided by phone or video, we are legally required to record the conversation (§ 18a FinVermV). We inform you before the recording starts. Recordings are retained for 10 years. You can request a copy of the recording.

9. Local browser storage

Your choice of occupational group (employee, civil servant or self-employed) on the German page is stored only in your browser (localStorage) so that the page can show the matching content. No data is transferred to us. You can delete this entry at any time via your browser settings.

10. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" in the address bar and the padlock symbol in your browser. When encryption is active, the data you transmit cannot be read by third parties.

11. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw any consent you have given at any time with effect for the future.

12. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority, for example: Der Sächsische Datenschutzbeauftragte (Saxon Data Protection Commissioner), Devrientstraße 5, 01067 Dresden · www.saechsdsb.de