Your data. Our rules.
This site sets no cookies and measures nothing. What we do process, why and for how long is set out here, first in brief and then in full.
The essentials in six points.
The full policy follows below. As of 9 November 2026.
- No cookies, no trackingThis site sets no cookies and measures nothing. That is why there is no banner either.
- Everything from our own serverFonts, graphics and scripts load from finovation.eu, not from Google or other providers.
- What we storeOnly what you send us: the details from our forms (message, check-in for brokers, loan request), which reach us by email. And the usual server logs for seven days, with a shortened IP address.
- Where it goesTo no one but us. No disclosure, no sale, no advertising. For technology, email and WhatsApp, four German or European service providers work for us under contract.
- How longUntil your enquiry has been dealt with, at most six months. If it turns into an order, the statutory periods apply.
- Your rightsAccess, rectification, erasure, objection. An email is enough: datenschutz@finovation.eu.
This translation is provided for information only. The German version is the legally binding one.
1. Controller
The controller responsible for the processing of personal data on this website is finovation GmbH, Schlachthofstraße 2, 96450 Coburg, represented by its managing director Michael-Robert Falk. Phone +49 9561 6759380, email info@finovation.eu.
For questions about data protection, you can reach us at datenschutz@finovation.eu or by post at the address given above. No data protection officer has been designated, because the statutory requirements for doing so are not met.
2. Scope
This policy applies to the website finovation.eu including its subpages. Our partner system (crm.finovation.eu), the sending of information material via service.finovation.eu and the subsequent processing of loan requests are subject to separate privacy notices, which you receive there.
3. Hosting and server log files
The website is hosted by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, in a data centre in Nuremberg. A data processing agreement under Art. 28 GDPR is in place with Hetzner. The data does not leave Germany.
Each time the website is accessed, the web server automatically stores a log (log file) with the following details: date and time, page accessed, status code, volume of data transferred, browser type and operating system, and the IP address in shortened form (the last part is removed before storage). This does not allow the data to be attributed to you personally.
The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR). The log files are deleted automatically after seven days.
4. No cookies, no tracking, no embedded content
This website sets no cookies and does not access any storage on your device. There is no audience measurement, no tracking and there are no advertising networks. Fonts, graphics and scripts are loaded exclusively from our own server. Third-party content (maps, videos, reviews, social networks) is not embedded, only linked.
No access to your device within the meaning of § 25 TDDDG (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, German Telecommunications and Digital Services Data Protection Act) takes place. We therefore do not need consent and do not show a cookie banner.
5. Forms and email
When you use one of our forms, we transmit your details to our mailbox info@finovation.eu. For the contact form, these are the subject of your enquiry, name, email address, optionally phone number, and your message. For the check-in for brokers, name, email address, phone number and the preferred time for a callback. For the loan request, additionally the loan amount, term and purpose. The messages are sent via the service of CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, with which a data processing agreement is in place. The form data is not stored on the web server itself.
Our mailbox is operated with Microsoft 365 (Microsoft Ireland Operations Limited, One Microsoft Place, Dublin 18, Ireland), likewise under a data processing agreement and with storage in data centres in the European Union. Where Microsoft transfers data to the USA in individual cases, this is safeguarded by the certification under the EU-US Data Privacy Framework and by the EU standard contractual clauses.
To protect against automated submissions, we check the forms by technical means (hidden field and time check). No data is transmitted to third parties in the process.
The legal basis is the handling of your enquiry as a pre-contractual measure (Art. 6(1)(b) GDPR) and, in all other respects, our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). The same applies if you write to us directly by email.
We delete enquiries as soon as they have been dealt with, at the latest six months after the last contact. If a contract is concluded, we retain the correspondence for the periods required by commercial and tax law (six and ten years respectively).
6. Phone and WhatsApp
When you call us, we process your phone number and the content of the conversation to the extent necessary to deal with your enquiry (Art. 6(1)(b) and (f) GDPR).
For WhatsApp, we use a business number via the service Superchat (SuperX GmbH, Berlin), with which a data processing agreement is in place. Messages are processed in Superchat and are not matched against private contacts. When you click the WhatsApp link and when you write via WhatsApp, WhatsApp Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland) receives your phone number, times and device information; message content is end-to-end encrypted. WhatsApp is the controller for this processing; you will find its privacy notice at whatsapp.com/legal/privacy-policy-eea. If you do not want this, please use phone or email.
The legal basis is your decision to contact us via WhatsApp (Art. 6(1)(b) GDPR) and our legitimate interest in replying through the channel you have chosen (Art. 6(1)(f) GDPR).
7. Links to other providers
Our website contains links to Google Maps (directions), to our Google Business Profile (reviews), to Instagram, TikTok and Facebook, and to the Nexus credit check (Nexus Bonitätscheck) of our partner company Nexus HR UG (de.ajutor-schufa.de). These links do not transmit any data as long as you do not click them. After the click, the privacy notice of the respective provider applies.
The button “Infomaterial anfordern” (request information material) on the trade fair pages leads to service.finovation.eu, the partner login to crm.finovation.eu. finovation GmbH is the controller there as well; you will find the privacy notices for these services on the respective pages.
8. Recipients and processors
Within finovation GmbH, only those members of staff who deal with your enquiry are given access to your data. We use the following processors: Hetzner Online GmbH (hosting), CleverReach GmbH & Co. KG (sending of the form messages), Microsoft Ireland Operations Limited (email mailbox), SuperX GmbH (WhatsApp communication). Agreements under Art. 28 GDPR are in place with all of them. There is no disclosure to other third parties, no sale and no use for advertising purposes.
9. Transfers to third countries
We process your data in Germany and the European Union. A transfer to countries outside the EU may occur in individual cases with Microsoft 365 and with WhatsApp. It is safeguarded by adequacy decisions of the European Commission (EU-US Data Privacy Framework) and EU standard contractual clauses.
10. Retention period
Server log files: seven days. Enquiries via form, email, phone and WhatsApp: until they have been dealt with, at most six months after the last contact. Correspondence relating to contracts: in accordance with the statutory retention periods of six and ten years respectively. After that, we delete the data.
11. Your rights
In relation to us, you have the right of access to your stored data (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing that is based on our legitimate interest (Art. 21). You may withdraw any consent you have given at any time with effect for the future.
To do so, contact datenschutz@finovation.eu or write to our postal address. We usually reply within two weeks, at the latest within one month.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA, Bavarian State Office for Data Protection Supervision), Promenade 18, 91522 Ansbach, www.lda.bayern.de.
12. Security
The connection to our website is encrypted with TLS (recognisable by the padlock in the address bar). Our systems are protected by access restrictions, up-to-date software and regular backups. Access to enquiries is restricted to the members of staff responsible.
13. Changes
We adapt this policy when the technology of the website or the legal situation changes. The version published here at the time applies. As of 9 November 2026.