Privacy Policy

Privacy policy for fintract.io

of fino data services GmbH

§ 1 Preamble

This privacy policy of fino data services GmbH, Universitätsplatz 12, 34127 Kassel, Germany, intends to inform you as a user what personal data will be collected and processed by us. Fino is responsible for the processing of your data in the context of the use of our website under the German Data Protection Regulation (Datenschutzgrundverordnung).

§ 2 Person responsible and contact data protection representative

fino data services GmbH
Universitätsplatz 12
D – 34127 Kassel

Represented by: Florian Christ, Björn Kahle

Please contact the data protection officer in case of questions regarding your data or data protection in general. He will also be at your disposal in case of complaints. You can reach the data protection officer by e-mail at privacy@finodata.com or the address in the imprint.

§ 3 Collection and use of personal data for the technical provision of the website

3.1. The data collected during your visit to our website is subject to the principle of data avoidance and data economy. Nevertheless, when you call up our website, data is automatically sent to our website server by the internet browser you use (so-called log files) and stored for a maximum period of two weeks. These include: the name of the files retrieved, the date and time of the retrieval, the amount of data transferred, any error messages, if applicable operating system and browser software of the end device, the website from which the web offer is visited, as well as general information about the usage behavior of the website. The legal basis for collecting and processing of this data is according to Art. 6 para. 1 p. 1 lit. f. DSGVO is our legitimate interest in:

a) investigation of possible server problems

b) analysis of technical errors

c) maintaining the website

d) ensuring system security

e) protection against misuse (e.g. detection and defense against hacker attacks)

f) analyzing the collected data on a pseudonymous statistical basis

g) the optimization of the website.

For the operation of our website, we use the following services and service providers: WP Engine (web hosting, data center location: Belgium), Irongate House, 22-30 Duke’s Place, London, EC3A 7LP United Kingdom.

§ 4 Use of Cookies

4.1. We use cookies on our website. Cookies are small text files that are stored on your computer and saved by your browser. Generally, we use session cookies, which are automatically deleted at the end of your visit or use of our application. Cookies cannot cause any damage to the end devices used and in particular, do not contain viruses or other malware.

4.2. Through your browser settings, you can prevent cookies from being set or be automatically informed before a cookie is set so that you can refuse this in individual cases. However, in this case it may be that parts of our services do not function or do not function optimally. Cookies are used to optimise the use of our website, so that, for example, session cookies can be used to track whether you have already visited individual sub-pages of the website. These are only stored on your terminal device for a temporary period in order to improve the user-friendliness of the website. If you visit our website again, it will automatically be recognised that you have visited it before and which language settings and entries you have made. This means that repeated entries can be avoided.

4.3. Our website uses different types of cookies. On the one hand, technical cookies are required to display the website, and on the other hand, we use cookies for statistical and marketing purposes. You can find more detailed information in the list in the cookie manager (information window that appears at the beginning of the website visit).

4.4. Legally, the setting of technically required cookies on our website is based on our legitimate interest pursuant to Art. 6 para. 1 p. 1 lit. f. DSGVO. We obtain your voluntary consent, which can be revoked at any time, for technically non-mandatory cookies via the Cookie Manager in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO. By adjusting the setting in the Cookie Manager, you can revoke or adjust your consent to data processing based on cookies set at any time.

4.5. Unless stated otherwise, it is safe to assume that no cookies are stored.

§ 5 Analysis and improvement of the website

5.1. Using reach measurement or web analysis, visitor flows to our website as well as the behavior, interests, and demographic data of our website visitors can be evaluated as pseudonymized data. This enables us to find out which segments require optimization. In addition to range measurement, test procedures can be used. In this way, various website versions can be tested and optimized. For this purpose, user profiles can be created and stored in a file (so-called cookie) or similar procedures can be used for the same purpose.

5.2. For this purpose, information such as website content viewed, websites accessed, browser and operating system used as well as activity and usage times may be stored. Depending on the respective consent of the user, location data may also be affected by this. We use an IP masking procedure to store the IP addresses of website users, whereby the IP address is pseudonymised by shortening it. In principle, no clear data (e.g. name, e-mail address) of the visitors are stored, but pseudonyms, so that we do not know the actual identity of the users.

5.3. Our legal basis for processing your data is Art. 6 para. 1 sentence 1 lit. a DSGVO, if we ask for your consent to use the respective third party provider. Otherwise, the legal basis for data processing is our legitimate interest in providing efficient, user-friendly and economical services in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO.

a) Types of data processed: meta and communication data (e.g. IP address, device information), usage data (e.g. access time, web pages visited, content accessed).

b) Data subjects: Users (e.g. users of the online services, visitors to the websites).

c) Purpose of the processing: reach measurement, tracking, evaluation of visitor actions, targeted marketing, profiling.

d) Legal basis of processing: Art. 6 para. 1 p. 1 lit. f DSGVO (our legitimate interest) and Art. 6 para. 1 p. 1 lit. a DSGVO (consent).

5.4. Zur For the purpose of analysis and optimisation of the website, the external service or service provider Google Analytics is used. By using Google Analytics data, we can improve our online offer and carry out targeted marketing measures based on the interests of our users.

Google Analytics: We use Google Analytics as a universal analytics for online marketing and web analysis. Universal Analytics is a method of user analysis based on a pseudonymous user ID, so that a pseudonymous user profile is created consisting of information from the use of different end devices (so-called cross-device tracking).

Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Website: https://support.google.com/analytics/answer/2790010?hl=de&ref_topic=6010376) https://marketingplatform.google.com/intl/de/about/analytics/

Privacy policy: https://policies.google.com/privacy

Opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=de

§ 6 Online-marketing

6.1. We process your data within the scope of online marketing. The online marketing measures include, in particular, the marketing of advertising space, the mapping of advertising content according to user interests, and the determination of its effectiveness. For this purpose, user profiles are created and stored in a file (so-called cookie) or similar procedures are used for the same purpose.

6.2. The content of the user profiles may include information such as websites accessed, website content viewed, social networks used, browser and operating system used, or usage times. Depending on the respective consent of the user, location data may also be affected by this. For the storage of the IP addresses of the website users, we use an IP masking procedure, whereby the IP address is pseudonymized by shortening. In principle, no clear data (e.g. name, e-mail address) of the visitors are stored, but pseudonyms, so we do not know the actual identity of the users.

6.3. The aforementioned details of the user profiles are stored in the cookies or by comparable procedures. In principle, the cookies can also be used, read, analysed or stored later on other websites with the same procedure for online marketing.

6.4. In case you as a user of our website are also a member of a social network that uses the same procedures for online marketing and links your profile with the above-mentioned information, your clear data can be assigned to the user profile. Regulations deviating from this can be made by the user directly with the provider of the social network, e.g. by consent during the registration process.

6.5. In general, we only have access to aggregated information in order to be able to assess the success of our promotional ads. By measuring conversion, we can analyse which marketing measure has led to a conversion, i.e. the conclusion of a contract. Conversion measurement does not take place for any other purposes.

6.6. The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. a DSGVO, insofar as we ask for your consent to the use of the respective third-party providers. Otherwise, the legal basis for data processing is our legitimate interest in providing efficient, user-friendly, and economical services by Art. 6 para. 1 sentence 1 lit. f DSGVO.

a) Types of data processed: meta and communication data (e.g. IP address, device information), usage data (e.g. access time, web pages visited, content accessed), location data.

b) Data subjects: Users (e.g. users of the online services, visitors to the websites), customers, employees, interested parties, communication partners).

c) Purpose of the processing: evaluation of visitor actions, tracking, targeted marketing, profiling, remarketing, measurement of conversion and reach, cross-device tracking, targeting, click tracking.

d) Legal basis of processing: Art. 6 para. 1 p. 1 lit. f DSGVO (our legitimate interest) and Art. 6 para. 1 p. 1 lit. a DSGVO (consent).

e) Security measures: IP masking

f) Opt-out / objection option: more detailed information is available in the data protection notices of the respective providers. In principle, you can deactivate cookies in the settings of your browser. However, we would like to point out that this may restrict the function of our offer, which is why we recommend the following opt-out options:

Europe: https://www.youronlinechoices.eu.

USA: https://www.aboutads.info/choices.

Canada: https://www.youradchoices.ca/choices

Cross-territory: https://optout.aboutads.info.

6.7. The following services and service providers are used:

a) Google Analytics: We use Google Analytics as a universal analytics for online marketing and web analysis. Universal Analytics is a method of user analysis based on a pseudonymous user ID, so that a pseudonymous user profile is created consisting of information from the use of different end devices (so-called cross-device tracking).

Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Website: https://support.google.com/analytics/answer/2790010?hl=de&ref_topic=6010376) https://marketingplatform.google.com/intl/de/about/analytics/

Privacy policy: https://policies.google.com/privacy

Opt-out / objection option: https://tools.google.com/dlpage/gaoptout?hl=de

§ 7 Contacting

7.1. If you wish to contact us (e.g. via email, contact form, telephone, social media, or chat), your details and personal data will be transmitted to us and processed by us to answer the inquiry or to be able to carry out the requested measures. To contact us by email, we require a valid email address and your name. To use the contact form, we require your name, e-mail address, and telephone number. All additional information is provided voluntarily and is not obligatory. Your data will be processed based on your consent or for the establishment, implementation, and processing of contractual relationships with us under Art. 6 para. 1 p. 1 lit. a, b DSGVO and exclusively to be able to process, manage and respond to your inquiry including pre-contractual measures. The data is deleted automatically as soon as your inquiry has been dealt with and there are no further reasons for storage (e.g. subsequent cooperation).

7.2. We use the following service providers for support and communication with you:

a) Zoho Desk (Zoho Corporation B.V., Hoogoorddreef 15, 1101 BA, Amsterdam, The Netherlands)

§ 8 Communication via e-mail, post or telephone for advertising purposes

8.1. If required, we process personal data for advertising purposes. Promotional communication takes place via various channels (e.g. e-mail, post, or telephone). Types of data processed: contact data (e.g. e-mail address, telephone number), inventory data (e.g. name, address).

  • Data subjects: Communication partner
  • Purpose of processing: direct marketing
  • Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a DSGVO), Legitimate Interests (Art. 6 para. 1 sentence 1 lit. f DSGVO).

8.2. The recipient may revoke the consent given or object to promotional communication at any time.

8.3. Data required to prove consent may be stored by us for up to three years after revocation or objection based on our legitimate interest before we delete it. This data is only processed for a possible defense against a claim. In the event of confirmed consent, an individual deletion request is possible at any time.

Encrypted transmissions of personal data

All data traffic between your browser or terminal device and the server used by this service is encrypted. A modern transmission method, TLS protocol (Transport Layer Security protocol), is used for this purpose. This ensures that all data is transmitted in encrypted form and is protected from manipulation and unauthorized access by third parties during transmission.

§ 10 Rights of the affected parties

10.1. We guarantee your right to informational self-determination and the protection of your personal rights when using our services. You can request information about your stored data free of charge at any time in accordance with Art. 15 DSGVO. In addition, you may, under certain circumstances, exercise your rights under Articles 16 to 18 and 21 DSGVO: Correction or deletion of your stored data, restriction of the processing of your stored data, objection to the processing of your stored data, right of revocation of a consent once granted for the collection, processing and use of your personal data with effect for the future as well as your right to data portability. For this purpose, please contact the contact options given in the imprint. You have the right to lodge a complaint with a supervisory authority at any time if you are of the opinion that the processing of your personal data has been carried out unlawfully.

§ 11 Other links to external providers

Insofar as links are provided to the websites of other providers, this data protection declaration does not apply to their content. What data the operators of these sites may collect is beyond our knowledge and sphere of influence.

Kassel, 08.12.2022