Privacy policy

Draft — not legally complete

This page is a scaffold. Every field marked TODO must be filled with the operator's real details before the site goes live; a German commercial site without a complete Impressum breaches TMG §5.

Controller (GDPR Art. 4(7))

Controller (GDPR Art. 4(7))
TODO

Data protection officer

Data protection officer
TODO

Required from 20 employees processing personal data, or by risk (BDSG §38).

Hosting and server logs

Hosting and server logs
TODO

Name the host and whether a processing agreement (GDPR Art. 28) is in place, plus what the server logs and for how long.

What this site stores on your device

Two preferences are stored, both set by you and both about how the site looks to you. One entry in local storage, finmela.theme, remembers the light or dark appearance. One cookie, finmela.lang, remembers your language so the bare address does not send you back to the one your browser reports. Both are strictly necessary for the function you asked for, hold no personal data and are never transmitted to anyone, so neither needs consent (TTDSG §25(2)). The site loads no third-party scripts, fonts or analytics, and sets no other cookies.

Where the interest rates come from

Rates are fetched from the Deutsche Bundesbank statistics API by our server, not by your browser. The Bundesbank therefore receives no data about you — no IP address, no request of yours.

Your rights

Access (Art. 15), rectification (16), erasure (17), restriction (18), portability (20) and objection (21), plus the right to complain to a supervisory authority (Art. 77). Name the competent authority for the operator's state here.

Your rights
TODO