Privacy Policy

Last updated: January 2026

FinanzWissen ("we", "us", "our"), Kaiserstraße 42, 60311 Frankfurt am Main, Germany, is the data controller within the meaning of the General Data Protection Regulation (GDPR) for all personal data processed through this website and our financial education services. We take the protection of your personal data seriously and process it exclusively in accordance with the GDPR and the German Federal Data Protection Act (BDSG).

For any questions about this Privacy Policy or to exercise your data subject rights, please contact us at [email protected] or by post at FinanzWissen, Kaiserstraße 42, 60311 Frankfurt am Main, Germany.

1. Categories of Personal Data We Process

Depending on how you interact with us, we may process the following categories of personal data:

• Contact data: name, email address, telephone number and message content when you submit our contact form or contact us by email or phone.
• Course and customer data: registration details, course enrolments, progress records, billing name and address, and payment status when you purchase courses, workshops or coaching services.
• Contract and payment data: invoices, order history and transaction records. We do not store full credit card numbers on our systems; payments are processed by external payment service providers.
• Usage data: IP address, browser type, device information, pages visited, referral source, date and time of access, collected through server logs and, subject to your consent, analytics cookies.
• Communication data: records of correspondence, enquiries and responses related to your requests.

2. Purposes and Legal Bases for Processing

We process your personal data only where a legal basis under Art. 6 GDPR applies:

• Performance of a contract (Art. 6(1)(b) GDPR): to provide the courses, workshops, coaching and corporate training you have purchased, to process payments and to administer your customer account.
• Consent (Art. 6(1)(a) GDPR): for non-essential cookies (analytics and marketing), newsletter subscriptions and any other optional processing. You may withdraw your consent at any time with effect for the future.
• Legal obligations (Art. 6(1)(c) GDPR): to comply with commercial and tax retention requirements under German law (in particular the German Commercial Code and Fiscal Code).
• Legitimate interests (Art. 6(1)(f) GDPR): to ensure the security and stability of our website through server log processing, to respond to enquiries in the context of pre-contractual measures, and to defend against legal claims.

3. Contact Form and Enquiries

When you use our contact form, we process the data you provide (name, email address, phone number if given, and your message) solely to respond to your enquiry and, where applicable, to prepare a contractual offer. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and, for general enquiries, our legitimate interest in responding (Art. 6(1)(f) GDPR). Your data will not be used for any other purpose without your consent and will be deleted once your enquiry has been fully resolved, unless statutory retention obligations apply.

4. Cookies and Similar Technologies

Our website uses cookies. Essential cookies are necessary for the website to function (for example, to remember your cookie preferences) and are stored on the basis of Art. 6(1)(f) GDPR and § 25(2) TTDSG. Analytics and marketing cookies are only set with your prior consent in accordance with Art. 6(1)(a) GDPR and § 25(1) TTDSG, which you provide via our cookie consent banner.

You may accept all cookies, reject all non-essential cookies, or save individual preferences. Your choice is stored in a cookie for a period of 180 days so that the banner does not reappear on every visit. You can change or withdraw your consent at any time by clearing your browser cookies, which will cause the banner to be displayed again on your next visit.

5. Web Hosting and Server Logs

Our website is hosted by a professional hosting provider within the European Union. When you visit the website, the server automatically records technical access data (IP address, date and time, requested page, browser and operating system information) in log files. This processing is necessary to deliver the website, ensure its stability and security, and investigate potential misuse (Art. 6(1)(f) GDPR). Log data is deleted after a maximum of 30 days unless longer retention is required for security investigations.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy:

• Enquiry and contact data: until the enquiry is resolved, generally no longer than 6 months after last contact.
• Contract and billing data: 10 years in accordance with § 147 AO and §§ 257, 261 HGB.
• Cookie consent records: up to 180 days.
• Server logs: up to 30 days.

Where retention periods expire, data is deleted or anonymised unless further processing is required for the establishment, exercise or defence of legal claims.

7. Data Recipients and Transfers to Third Countries

We do not sell or rent your personal data. Data may be shared with the following categories of recipients, only where necessary:

• Hosting and IT service providers acting as processors under Art. 28 GDPR data processing agreements.
• Payment service providers processing transactions on our behalf.
• Cloud and email service providers used for communication and course delivery.

Where tools used by us transfer data to countries outside the European Economic Area, such transfers take place only on the basis of appropriate safeguards, in particular the European Commission's Standard Contractual Clauses, together with supplementary technical and organisational measures. Our website hosting is located within the EU.

8. Your Rights as a Data Subject

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): to obtain confirmation of whether we process your data and, if so, a copy of that data and information about the processing.
• Right to rectification (Art. 16 GDPR): to have inaccurate data corrected and incomplete data completed.
• Right to erasure (Art. 17 GDPR): to have your data deleted, subject to statutory retention obligations.
• Right to restriction of processing (Art. 18 GDPR): to restrict processing while a dispute regarding accuracy or legitimacy is resolved.
• Right to data portability (Art. 20 GDPR): to receive your data in a structured, commonly used, machine-readable format and have it transmitted to another controller.
• Right to object (Art. 21 GDPR): to object to processing based on legitimate interests; in such cases we will cease processing unless we can demonstrate compelling legitimate grounds.
• Right to withdraw consent (Art. 7(3) GDPR): to withdraw consent at any time with effect for the future, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within one month of receipt of your request. If your request is complex or you submit multiple requests, we may extend this period by a further two months, in which case we will inform you within the first month.

9. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. For FinanzWissen, the competent authority is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Wiesbaden, Germany.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include TLS/SSL encryption for data transmission, access controls and authorisation concepts, regular security reviews and staff confidentiality obligations. Security measures are reviewed and improved on an ongoing basis in line with technological developments.

11. Data Protection for Minors

Our services are directed at adults and are not intended for children under 16. We do not knowingly collect personal data from children under 16 without the consent of a parent or legal guardian. If you believe a child has provided us with personal data without appropriate consent, please contact us at [email protected] so we can delete the data.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology or legal requirements. The current version published on this page applies. This version is dated January 2026.

13. Contact

FinanzWissen
Kaiserstraße 42
60311 Frankfurt am Main
Germany
Email: [email protected]