Privacy

Controller

9592 Solutions UG (haftungsbeschränkt), Fährstr. 217, 40221 Düsseldorf, Germany, represented by Christo Wilken. Data-protection questions and requests for access, correction or erasure: [email protected].

Using the site without the form

The content here is available without an account, without a cookie banner and without tracking. No analytics or advertising scripts are loaded and we set no cookies. The checklist keeps its state only in your browser (localStorage); that data never reaches our server. Serving a page does involve the usual connection data at our host (IP address, time, requested address, browser string), which we rely on to deliver the site and fend off attacks (Article 6(1)(f) GDPR).

What the contact form stores

• Name, email address and, if you give one, phone number.
• The topics you tick (private health insurance, occupational disability cover, retirement provision) and the contact channels you choose.
• The exact wording of the consent you ticked, plus the identifier of that wording version.
• Timestamp, the address of the page where you consented, your IP address, browser string and the country your network resolves to.
• The federal state, if you fill that field in.
• If you arrived from a search ad: the click identifier Google appends to the page address. We read it out of the address and nothing else, and use it later to see which ad worked. No advertising script runs and no cookie is set for it.
• The state of the email confirmation (pending, confirmed, withdrawn) with timestamps, and whether the confirmation email could be sent.

Nothing else is stored. The endpoint holds a fixed list of accepted fields and discards everything else before anything is written.

No health data

The form has no field for health data and the endpoint accepts none. Article 9 GDPR data stays entirely with the advising firm.

Legal basis, purpose, recipient

The legal basis is your consent (Article 6(1)(a) GDPR). The purpose is passing your contact details to Deutsche Ärzte Finanz (Service-Center Kai Wilken, Freiburg) so they can approach you about the topics you ticked. Nothing is passed on before you confirm the email we send. We are paid for that referral; the advice comes from Deutsche Ärzte Finanz alone.

Processors

• Cloudflare (Cloudflare, Inc., San Francisco, and Cloudflare Germany GmbH, Munich): hosting, delivery, and the key-value store holding the consent record. A data-processing agreement is in place; transfers to the US run on the European Commission's standard contractual clauses, and Cloudflare is certified under the EU-US Data Privacy Framework.
• Resend (Resend, Inc., USA): sending the confirmation and withdrawal emails, over EU infrastructure (Ireland region). A data-processing agreement is in place; transfers to the US run on the standard contractual clauses.

Open and click tracking is switched off for our emails, so we do not learn whether or when you opened one.

Retention

The consent record is kept for five years so that consent can be evidenced in a dispute (Section 7a UWG), then deleted. A consent that is never confirmed is deleted after 30 days.

Withdrawal

You can withdraw consent at any time, without giving a reason and at no disadvantage. Every email from us carries a withdrawal link that takes effect immediately. After withdrawal your address sits on a suppression list so it is not contacted again, and that list is the only reason we still hold it. Withdrawal does not affect the lawfulness of processing up to that point.

Your rights

Access, rectification, erasure, restriction of processing and data portability. You may also complain to a supervisory authority, in our case the Data Protection Commissioner of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf.