Privacy policy
The information not yet included on this page is currently in preparation or pending official application, and will be added upon completion.
Controller (GDPR Art. 4(7))
Sole trader (Einzelunternehmen) with no entry in the commercial register; there is therefore neither a register court nor an HRB number.
The email address is the direct contact channel. Under DDG §5, a telephone number is not strictly required where another equally efficient means of contact is offered and answered promptly.
Data protection officer
Appointing a data protection officer is only required under BDSG §38 from 20 people regularly processing personal data. This threshold is not met; beyond technical server logs, no personal data is processed.
Hosting and server logs
A data processing agreement under GDPR Art. 28 is in place with both providers. As both are US-domiciled companies, the data transfer additionally relies on the EU Standard Contractual Clauses (GDPR Art. 46, Implementing Decision (EU) 2021/914) as an appropriate safeguard.
Our hosting provider records technical access data in server logs, namely IP address, time of access, requested URL and browser identification. This is technically necessary for the server to respond and to defend itself against attacks. We do not export, analyse or independently store these logs, and we do not extend the retention period the host applies by default to our plan; after that period, the data is deleted automatically. The legal basis is our legitimate interest in the secure operation of the service (Art. 6(1)(f)).
What this site stores on your device
Two technically necessary settings are stored, both set by you and both solely about how the site is displayed to you. One entry in local storage, finmela.theme, stores the chosen light or dark appearance. One cookie, finmela.lang, stores the chosen language so that the bare address does not redirect you back to the language your browser reports. Both settings are technically necessary to provide the function you requested, contain no personal data and are never transmitted to third parties; consent is therefore not required under TTDSG §25(2). This site loads no third-party scripts, fonts or analytics tools, and sets no other cookies.
Where the interest rates come from
The interest rates shown are retrieved server-side from the Deutsche Bundesbank statistics interface, not by your browser. The Bundesbank therefore receives no data about you — neither your IP address nor any request from you.
Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR); the competent authority is named below.
You have the right to lodge a complaint with this authority at any time (GDPR Art. 77).