Privacy policy
This page is a scaffold. Every field marked TODO must be filled with the operator's real details before the site goes live; a German commercial site without a complete Impressum breaches DDG §5.
Controller (GDPR Art. 4(7))
Sole trader (Einzelunternehmen); no entry in the commercial register, so no register court or HRB number.
Email is the direct contact channel. A telephone number is not required where another equally efficient means of contact is offered and answered.
Data protection officer
One is not required here: the BDSG §38 threshold is 20 people regularly processing personal data, and this site processes none beyond server logs.
Hosting and server logs
A processing agreement under GDPR Art. 28 is in place with both.
Our host records technical access data in server logs — IP address, time, requested URL and browser identification. This happens on every website; it is what makes a server able to answer and to defend itself against attacks. We do not export, analyse or store these logs ourselves, and we do not extend the retention the host applies by default to our plan, after which they are deleted automatically. The legal basis is our legitimate interest in operating and securing the service (Art. 6(1)(f)).
What this site stores on your device
Two preferences are stored, both set by you and both about how the site looks to you. One entry in local storage, finmela.theme, remembers the light or dark appearance. One cookie, finmela.lang, remembers your language so the bare address does not send you back to the one your browser reports. Both are strictly necessary for the function you asked for, hold no personal data and are never transmitted to anyone, so neither needs consent (TTDSG §25(2)). The site loads no third-party scripts, fonts or analytics, and sets no other cookies.
Where the interest rates come from
Rates are fetched from the Deutsche Bundesbank statistics API by our server, not by your browser. The Bundesbank therefore receives no data about you — no IP address, no request of yours.
Your rights
Access (Art. 15), rectification (16), erasure (17), restriction (18), portability (20) and objection (21), plus the right to complain to a supervisory authority (Art. 77). Name the competent authority for the operator's state here.
You may complain to this authority at any time (GDPR Art. 77).