Privacy policy

1. Introduction
The protection of personal data is integral to our service. This privacy policy explains how FESTGELD Prosperität GmbH collects, processes, and safeguards personal data when you access our website or use our services.

2. Data controller
The controller within the meaning of applicable data protection laws is FESTGELD Prosperität GmbH. For privacy-related enquiries, please contact: privacy@festgeldprosperitat.com

3. Collection and processing of personal data
We collect and process personal data when you interact with our website or services, including registration, account opening, or contact with us. Categories of data processed may include:

Contact information (name, email address, phone number, address)
Identification data for account verification (in accordance with applicable regulations such as the German Anti-Money Laundering Act (GwG))
Financial information (bank details, transaction-related data)
Technical data (IP address, browser type, device information)
Usage data (interaction with the website, navigation patterns, session data)

4. Purposes of processing
Personal data is processed for the following purposes:
Providing and operating our services
Establishing and managing contractual relationships
Complying with legal and regulatory obligations (including GwG and securities supervision requirements)
Communicating with users regarding accounts, services, or enquiries
Maintaining system security and preventing fraudulent or unauthorised activity
Continuous improvement of our website and service functionality

5. Legal basis for processing
Processing is carried out in accordance with the EU General Data Protection Regulation (GDPR) on the basis of:
Art. 6(1)(b) GDPR – processing necessary for the performance of a contract
Art. 6(1)(c) GDPR – processing necessary for compliance with a legal obligation
Art. 6(1)(f) GDPR – processing based on legitimate interests
Art. 6(1)(a) GDPR – processing based on consent, where applicable

6. Data retention
Personal data is stored only for as long as necessary to fulfil the purposes described in this policy or to comply with applicable legal obligations. Statutory retention periods, in particular under commercial and tax law, may require retention for up to 10 years.

7. Rights of data subjects
Under applicable data protection law you have the following rights:

Right of access to your personal data
Right to rectification of inaccurate or incomplete data
Right to erasure (subject to legal restrictions)
Right to restriction of processing
Right to data portability
Right to object to processing based on legitimate interests
Right to withdraw consent at any time, where processing is based on consent

8. Cookies and tracking technologies
Our website uses cookies and similar technologies to ensure proper functionality and improve the user experience.
Essential cookies are required for the website to operate. Analytical cookies are only used with your consent to understand usage and improve performance. You can manage cookie settings via your browser or a consent tool.

9. Disclosure to third parties
Personal data is only shared with third parties where necessary and within a controlled framework:
To fulfil contractual obligations (e.g. partner banks, service providers)
Where required by applicable law or supervisory authorities
With your explicit consent
All external service providers are contractually required to meet data protection requirements

10. Contact and supervisory authority
If you have questions about privacy or the processing of your personal data, you may contact us at any time: [company email]. You also have the right to lodge a complaint with the competent data protection supervisory authority.