Privacy Policy
This policy explains what personal data we process when you visit fund-box.com and on what legal basis.
Controller
The controller responsible for data processing on this website is Fundbox GbR, Stengelstraße 5, 80805 Munich, Germany. Email: [email protected]. See our Legal Notice for full details.
Hosting
This website is served by our hosting provider on our behalf. The provider processes data strictly to deliver the site (Art. 6(1)(f) GDPR — legitimate interest in a reliable, secure presentation of our site).
Server log files
When you access the site, the server automatically records technical data such as browser type, operating system, referring URL, IP address, and time of access. This is required to deliver the site and ensure its stability and security (Art. 6(1)(f) GDPR), and is not combined with other data sources.
Demo & contact requests
If you submit our demo form, the data you provide (name, company, email, message) is used solely to process your enquiry and is sent by email via our mail provider. The legal basis is Art. 6(1)(b) GDPR (steps prior to a contract) and our legitimate interest in responding (Art. 6(1)(f) GDPR).
Error monitoring (Sentry)
We use Sentry to detect and diagnose technical errors so we can keep the site working. Sentry may process technical data including IP address and browser information. The legal basis is our legitimate interest in a stable, secure website (Art. 6(1)(f) GDPR).
Google Analytics
Subject to your consent, we use Google Analytics to understand how visitors use our site. Analytics cookies and any related data transfer are activated only after you opt in via our cookie banner, and you can withdraw consent at any time with effect for the future. The legal basis is Art. 6(1)(a) GDPR (consent) together with § 25(1) TDDDG. (Details on Google Ireland Ltd., data transfers to the USA, and opt-out — pending legal review.)
Cookies & local storage
We store a small record of your cookie choice and your language preference in your browser's local storage so the site remembers them. These are strictly necessary for the site to function as you've configured it and do not require consent. Non-essential storage (analytics) is set only after you consent.
Your rights
You have the right to access, rectify, erase, restrict and port your data, and to object to processing. Where processing is based on consent, you may withdraw it at any time. You may also lodge a complaint with a supervisory authority. To exercise these rights, contact [email protected].
Data retention
We keep personal data only as long as necessary for the purposes described above or as required by law, after which it is deleted.