Privacy Policy

We need your data to:

• Prepare and broker insurance offers
• Conclude insurance contracts
• Forward information to the respective insurance companies
• Administer your insurance policy

In the event of a claim, we forward your data to the responsible insurer for:

• Claims notification and handling
• Communication with experts/loss adjusters (if required)
• Settlement of the claim

Note on health data: As a rule, we do not process health data. If, in the course of a claim notification, you voluntarily provide information about injuries or health consequences, this information will be forwarded solely to the insurer for the purpose of handling the claim. The legal basis is the performance of a contract (Art. 6(1)(b) GDPR).

To handle your enquiries, we use:

• Email and support requests via our tool Missive
• Telephone calls (see note below)

Telephone calls: As a rule, we do not record calls. In exceptional cases, a recording may be made for quality or training purposes; you will be informed at the start of the call and may object to the recording (opt-out).

To fulfil legal obligations and to protect against fraud, we process your data for:

• Screening against sanctions lists (legal obligation)
• Fraud prevention by cross-checking with publicly available sources
• Anti-money laundering
• Meeting regulatory requirements

We use technical data to:

• Ensure website security
• Analyse user behaviour (privacy-friendly via Plausible Analytics)
• Measure the reach of our advertising (Google Ads conversion measurement, only with your consent)
• Improve our online services
• Error reporting and performance monitoring via Sentry

Your personal and contract-related data are transmitted to the respective insurers with whom your contract is concluded.

If you were referred to us by an independent insurance broker, we share the following information with them:

• Conclusion of the insurance contract
• Insurance premium and term
• Contract changes or termination

This disclosure is based on legitimate interests for the settlement of remuneration claims.

• Amazon Web Services (AWS): Hosting of our systems in Frankfurt am Main
• Stripe: Payment processing and invoicing (name, email, address and payment data)
• Plausible Analytics: Privacy-friendly website analytics (no cookies, EU servers)
• Google Tag Manager / Google Analytics: Loading of our analytics and marketing tags and enhanced website analytics (only with your consent)
• Google Ads: Conversion measurement for our advertisements (only with your consent)
• Google Workspace: Email mailboxes and documents
• Google Maps: Map display and geocoding of the location you search for on the partner page
• Sentry: Error reporting and performance monitoring to improve our services
• Missive: Email and customer service tool for managing your requests

Where required by law, to:

• Financial Market Authority (FMA)
• Tax authorities
• Law enforcement authorities

Our primary database is hosted with AWS in Frankfurt. No data is transferred outside the EU.

For payment processing and invoicing, the following data are transferred to Stripe:

• Name and address (for proper invoicing)
• Email address (for payment confirmations)
• Payment data (credit card/bank details)

The transfer is based on Standard Contractual Clauses and PCI-DSS compliance.

We use several Google services. Google Tag Manager loads our analytics and marketing tags. Without your consent these services set no cookies. Only if you select "Accept all" do Google Analytics and Google Ads receive pseudonymised usage and conversion data. Google Workspace processes our emails and documents, including your messages to us. Google Maps receives the location you enter on our partner page. Transfers to the USA are based on Standard Contractual Clauses.

For error reporting we use Sentry. We transfer technical error messages, performance data and, in the browser whenever an error occurs, a recording of the page interaction (Session Replay) in which text input and media are masked. Login tokens are removed from all transferred addresses. Transfers to the USA are based on Standard Contractual Clauses.

For email communication and customer service we use Missive (Heliom Inc., Canada). Your requests (name, email address, message content) are processed. The data are hosted outside the EU. The transfer is based on appropriate safeguards pursuant to Art. 46 GDPR.

You can request a free copy of all data we store about you. For additional copies, we may charge a reasonable fee.

You can request the correction of inaccurate data or the completion of incomplete data.

You can request deletion of your data insofar as no statutory retention obligations or other grounds justify continued processing.

You can request restriction of processing, e.g., if you contest the accuracy of the data.

You can receive your data in a structured, commonly used and machine-readable format or have it transmitted directly to another controller.

You have the right to object at any time to processing based on legitimate interests. This applies in particular to direct marketing.

You can withdraw consent at any time with future effect.

For your protection, we may require identity verification for access requests.

We will respond to your requests without undue delay and at the latest within one month.

These cookies are strictly necessary for operating the website:

• Session cookies for user identification
• Storing cookie preferences

If you select "Accept all", we additionally activate:

• Google Analytics: For detailed website statistics and user behaviour
• Google Ads: Conversion measurement for our advertisements and storage of the advertising click ID for 30 days

If you select "Essentials only", these services stay disabled and any advertising click ID passed along is discarded.

Plausible Analytics (always active)

• Uses no cookies
• Stores no personal data
• Hosts all data in the EU
• GDPR-compliant without additional consent

Google Analytics and Google Ads (only with consent)

• Loaded via Google Tag Manager and activated only if you select "Accept all"
• Use cookies for detailed analysis and conversion measurement
• Anonymised IP addresses
• Data transfers to the USA

Sentry captures technical errors both in the frontend (browser) and in the backend of our system:

• Technical error messages, stack traces and performance data
• In the browser, whenever an error occurs, a recording of the page interaction (Session Replay) in which text input and media are masked
• Helps improve the stability of our services

You can adjust your cookie settings at any time via our cookie banner. Alternatively, you can manage cookies in your browser settings or enable "Do Not Track".