Privacy Notice

 

Below we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behavior. We have taken extensive technical and operational security measures to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological advances.

 

Person responsible in accordance with Art. 4 Para. 7 of the EU General Data Protection Regulation (GDPR)

Franz Leeb
Reinekestrasse 4
81545 Munich

Telephone: 089 / 74999997
Fax: 089 / 74 999998

Email: info@franzleeb-versicherungsmakler.de

 

Contact details for the data protection officer

You can reach our data protection officer at:

info@franzleeb-versicherungsmakler.de or our postal address (Reinekestrasse 4, 81545 Munich) with the addition “the data protection officer”.

3. Purpose of processing

We generally only process our users’ personal data to the extent that this is necessary to provide a functional website and our content and services. Our users’ personal data is generally only processed with the user’s consent. An exception applies in cases where prior consent cannot be obtained for actual reasons and the processing of the data is permitted by law. If you have given us your consent to do so, we will use the data collected for the purposes explained under points 9, 10, 11 and 12 for customer care. This means that we store your data for information purposes and, for example, use it in the event of repeated contact or an emerging business relationship in order to be able to respond to your concerns. The legal basis for the processing of your data is Art. 6 Paragraph 1 Letter a of GDPR. We delete the data collected in this context after storage is no longer necessary or restrict processing if statutory retention periods exist.

4. Legal basis for processing

If we obtain consent from the data subject for the processing of personal data, Art. 6 Paragraph 1 Letter a of the EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data that is necessary to fulfill a contract to which the data subject is a party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. If the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) (d) GDPR serves as the legal basis. If processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) (f) GDPR serves as the legal basis for processing.

 

5. Recipients of personal data

In order for us to be able to act as a broker for you, it is essential that we collect, save and pass on data from you to third parties. We do this, for example, when we record your risk situation and pass this data on to various insurers in order to receive offers that are suitable for you. For this purpose, we also use broker service providers and professional comparison programs from corresponding service providers. It is often also necessary for us to request data concerning you from third parties. These are primarily insurers and pools, but data from doctors, tax consultants or lawyers may also be required, for example. We must therefore also agree to the respective data protection regulations of integrated third parties on your behalf. Health data is only collected if it is necessary for the brokerage of life, health or accident insurance (personal insurance), or for the processing of benefits and claims.

6. Data deletion and storage period

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to further store the data for the conclusion or fulfillment of a contract.

 

7. Your rights as a data subject and complaint

You have the following rights with regard to the personal data concerning you:

7.1. General rights

You have a right to information, correction, deletion, restriction of processing, objection to processing and data portability. If processing is based on your consent, you have the right to revoke this consent with effect for the future.

7.2. Rights in data processing based on legitimate interests

According to Art. 21 Para. 1 GDPR, you have the right to object at any time to the processing of personal data concerning you based on Art. 6 Para. 1e GDPR (data processing in the public interest) or on Article 6 Para. 1f GDPR (data processing to protect a legitimate interest) for reasons arising from your particular situation. This also applies to profiling based on this provision. In the event of your objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. However, we would like to point out as a precaution that we can no longer work for you from this point onwards.

7.3. Right to object to direct advertising

If we process your personal data in order to conduct direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising in accordance with Art. 21 Para. 2 GDPR; this also applies to profiling insofar as it is associated with such direct advertising. If you object to processing for the purpose of direct advertising, we will no longer process your personal data for these purposes.

7.4. Right to complain to a supervisory authority

In the event of violations of data protection law, the person concerned has the right to complain to the responsible supervisory authority. The responsible supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

7.5. Right to information, blocking, deletion

Within the framework of the applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if applicable, a right to correction, blocking or deletion of this data. You can contact us at any time at the address provided in the imprint if you have any questions about this or other questions on the subject of personal data.

7.6. Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request that the data be transferred directly to another responsible party, this will only be done if it is technically feasible.

 

8. Collection of personal data when visiting our website

If you use the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you would like to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security. The legal basis for this is Art. 6 Para. 1 f GDPR: IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code and the amount of data transferred in each case.

8.1. Data security through SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the website operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you send to us cannot be read by third parties.

8.2. Contacting us by email or contact form

When you contact us by email or via our contact form, the data you provide will be stored by us in order to answer your questions. If we request input via our contact form that is not required for contact, we have always marked it as optional. This information helps us to specify your request and to process your request better. This information is provided expressly on a voluntary basis and with your consent, Art. 6 Para. 1 a GDPR. If this information relates to communication channels (e.g. email address, telephone number), you also agree that we may contact you via this communication channel to answer your request. You can of course revoke this consent at any time with effect for the future. We delete the data collected in this context once storage is no longer required, or restrict processing if statutory retention periods apply.

8.3. Newsletter

8.3.1. General information

With your consent in accordance with Art. 6 Para. 1 a GDPR, you can subscribe to our newsletter, with which we inform you about news and our current offers. We use the so-called double opt-in procedure to register for our newsletter. This means that after you register, we will send you an email to the email address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will remain blocked and will be automatically deleted after one month.

In addition, we store the IP addresses you used and the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data. The only mandatory information required to send the newsletter is your email address, title and surname. Providing other data is voluntary. After your confirmation, we will save your email address for the purpose of sending you the newsletter. The legal basis is Art. 6 Para. 1 a GDPR.

You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in each newsletter e-mail or by contacting the data protection officer specified above.

8.3.2. Newsletter tracking

We would like to point out that we can evaluate your user behavior when the newsletter is sent. For this evaluation, the e-mails sent contain so-called web beacons or tracking pixels that are stored on our website. For the evaluations, we link the data mentioned and the web beacons with your e-mail address and an individual ID. Links received in the newsletter also contain this ID. The data is only collected pseudonymously, i.e. the IDs are not linked to your other personal data, and direct personal reference is excluded. If you have deactivated the display of images in your e-mail program by default, tracking is not possible. In this case, the newsletter will not be displayed in full and you may not be able to use all functions. If you display the images manually, the above-mentioned tracking will take place. You can revoke tracking at any time by unsubscribing from the newsletter.

8.4. Use of cookies:

When you use our website, cookies are stored on your computer. Cookies are small text files that are stored on your hard disk and associated with the browser you use; they allow certain information to be sent to the location that placed the cookies. Cookies cannot run programs or transmit viruses to your computer. They are designed to make the Internet more user-friendly and effective overall.This website uses the following types of cookies, the scope and functionality of which are explained below:

Transient cookies

These cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This means that your computer can be recognized when you return to our website. Session cookies are deleted when you log out or close the browser.

Persistent cookies

These cookies are automatically deleted after a specified period of time, which can vary depending on the cookie. You can delete the cookies at any time in the security settings of your browser.

Flash cookies

The Flash cookies used are not recorded by your browser, but by your Flash plug-in. We also use HTML5 storage objects that are stored on your device. These objects store the required data regardless of the browser you use and do not have an automatic expiration date. If you do not want Flash cookies to be processed, you must install an appropriate add-on, e.g. “Better Privacy” for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using private mode in your browser. We also recommend that you regularly delete your cookies and browser history manually.

8.5. Preventing cookies

You can configure your browser settings according to your wishes and, for example, reject the acceptance of third-party cookies or all cookies. We would like to point out that you may then not be able to use all the functions of this website.

8.6. Legal basis and storage period

The legal basis for possible processing of personal data and their storage period vary and are presented in the following sections.

9. Website analysis

For the purposes of analyzing and optimizing our websites, we use various services, which are presented below. For example, we can analyze how many users visit our site, which information is most in demand or how users find the offer. Among other things, we collect data about which website a data subject came to a website from (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. This helps us to design and improve our offers in a user-friendly way. The data collected in this way is not used to personally identify individual users. Anonymous or at most pseudonymous data is collected. The legal basis for this is Art. 6 Para. 1 f GDPR.

 

Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). Use includes the Universal Analytics operating mode. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus to analyze a user’s activities across devices.

Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. Our legitimate interest in data processing also lies in these purposes. The legal basis for the use of Google Analytics is Section 15 Paragraph 3 TMG and Art. 6 Paragraph 1 f GDPR. The data we send and linked to cookies, user IDs (e.g. user ID) or advertising IDs is automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month. Further information on terms of use and data protection can be found at https://policies.google.com/?hl=de.

You can prevent cookies from being saved by setting your browser software accordingly; However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the link https://tools.google.com/dlpage/gaoptout?hl=de. Opt-out cookies prevent your data from being collected in the future when you visit this website. To prevent Universal Analytics from collecting data across different devices, you must opt ​​out on all systems used.