Privacy Policy

This Privacy Policy explains how BudgetWerk, as the data controller, processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

1. Data Controller

The controller responsible for the processing of your personal data is:

BudgetWerk
Leopoldstraße 27
80802 München
Germany
Email: info@budgetwerk.com
Phone: +49 69 403 7860

2. Categories of Personal Data We Process

We process the following categories of personal data, depending on how you interact with us:

• Contact data: name, email address, phone number and message content, when you submit our consultation form or contact us directly.
• Usage data: pages visited, time on page, referrer, and approximate location derived from IP address, collected via cookies and analytics tools.
• Technical data: browser type and version, operating system, device type, and screen resolution.
• Client data: financial figures and budget information you voluntarily share during coaching sessions. BudgetWerk never accesses your bank accounts; we only work with numbers you choose to provide.

3. Purposes and Legal Bases for Processing

We process your personal data only where a legal basis under Article 6 GDPR applies:

• Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR): to respond to your enquiries, prepare quotations and deliver budgeting and coaching services.
• Consent (Art. 6(1)(a) GDPR): to place non-essential cookies, and to send you marketing communications. You may withdraw your consent at any time with effect for the future.
• Legitimate interests (Art. 6(1)(f) GDPR): to ensure the security and stability of our website, to defend against legal claims, and to improve our services, provided your interests and fundamental rights do not override these interests.
• Legal obligations (Art. 6(1)(c) GDPR): to comply with commercial and tax retention obligations under German law.

4. Cookies and Similar Technologies

Our website uses cookies. Essential cookies are required for the website to function and are stored on the basis of our legitimate interest in providing a secure, usable website. Analytics and marketing cookies are only set with your prior consent, which you can give, refuse or modify through the cookie banner displayed on your first visit.

Your cookie preferences are stored in a cookie on your device for a period of twelve months so that we do not have to ask again on each visit. You can delete cookies at any time via your browser settings. For full details, please see our Cookies Policy.

5. Web Hosting and Server Log Files

Our hosting provider automatically collects and stores information in server log files, which your browser transmits automatically. These include IP address, date and time of request, timezone, requested page, access status, data volume, referrer URL, browser and operating system. This data is processed on the basis of our legitimate interest in the secure and efficient operation of the website (Art. 6(1)(f) GDPR) and is stored for no longer than 30 days, after which it is deleted or anonymised. Server log data is never merged with other data sources.

6. Data Sharing and Recipients

We do not sell your personal data. We only share data with the following categories of recipients, each bound by data processing agreements where required under Art. 28 GDPR:

• Hosting providers for the operation and maintenance of our website.
• Analytics providers for the anonymous analysis of website usage, only where you have consented.
• Service providers such as email and appointment scheduling tools that support our business operations.
• Professional advisers and public authorities, where we are legally required to disclose data.

7. International Data Transfers

Where personal data is transferred to countries outside the European Economic Area (EEA), such transfers only take place on the basis of an adequacy decision of the European Commission, or appropriate safeguards such as the EU Standard Contractual Clauses, together with additional technical and organisational measures. You may request details of the safeguards applied by contacting info@budgetwerk.com.

8. Storage Periods

We store personal data only for as long as necessary to fulfil the purposes described in this policy:

• Contact and enquiry data: deleted after 6 months unless a business relationship follows.
• Client records and budget documentation: retained for the duration of the engagement and in accordance with statutory retention periods of up to 10 years under §§ 147 AO, 257 HGB.
• Analytics data: retained for a maximum of 14 months.
• Cookie preference data: 12 months.

9. Your Rights Under the GDPR

You have the following rights with regard to your personal data:

• Right of access (Art. 15 GDPR): to obtain confirmation of whether we process your data and, if so, a copy of that data.
• Right to rectification (Art. 16 GDPR): to have inaccurate data corrected and incomplete data completed.
• Right to erasure (Art. 17 GDPR): to have your data deleted where one of the legal grounds applies.
• Right to restriction of processing (Art. 18 GDPR): to restrict processing while a dispute concerning the accuracy or lawfulness of processing is resolved.
• Right to data portability (Art. 20 GDPR): to receive your data in a structured, commonly used and machine-readable format.
• Right to object (Art. 21 GDPR): to object to processing based on legitimate interests; in the case of direct marketing, we will always honour your objection.
• Right to withdraw consent (Art. 7(3) GDPR): to withdraw consent at any time with effect for the future.
• Right to lodge a complaint (Art. 77 GDPR): with a supervisory authority, in particular the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Germany).

To exercise any of these rights, contact us at info@budgetwerk.com or write to BudgetWerk, Leopoldstraße 27, 80802 München, Germany. We will respond within one month of receiving your request.

10. Data Security

BudgetWerk implements appropriate technical and organisational measures in accordance with Art. 32 GDPR, including TLS encryption of data in transit, access controls, internal confidentiality commitments and regular review of our security practices. Client financial information shared during coaching is treated as strictly confidential and stored only in access-restricted systems.

11. Data Protection of Minors

Our services are directed at adults. We do not knowingly collect personal data from persons under 16 years of age. If you believe a minor has provided us with personal data, please contact us at info@budgetwerk.com and we will delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technology or legal requirements. The current version is always available on this page. The last revision date is shown at the top of the document. Where changes materially affect your rights, we will notify you in advance where we hold your contact details.

13. Contact

For any questions about this Privacy Policy or the processing of your personal data, please contact our team at info@budgetwerk.com or by post at BudgetWerk, Leopoldstraße 27, 80802 München, Germany.