Legal
Privacy Policy.
This English translation is provided for convenience only. In the event of any discrepancy between the German and the English version, the German version shall prevail.
Last updated: October 2026
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Finais Consulting UG (haftungsbeschränkt)
Am Steinernen Stock 1, 60320 Frankfurt am Main, Germany
Registered office: Bad Breisig, Germany
Represented by the Managing Directors Benedikt Winkler and Tim Brück
Phone: +49 151 11640393
Email: info@finais.de
We are not legally required to appoint a data protection officer. If you have any questions about data protection, please use the contact details above.
2. Hosting and server log files
This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA ("Vercel"). When you access the website, Vercel automatically processes information transmitted by your browser (server log files). This includes in particular: IP address, date and time of access, page or file requested, referrer URL, amount of data transferred, HTTP status code, and browser type and operating system.
The processing serves to deliver the website, to ensure its stability and security and to prevent misuse. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in providing the website in a technically error-free and secure manner. The log files are stored only for as long as necessary for these purposes and are then deleted.
We have concluded a data processing agreement with Vercel pursuant to Art. 28 GDPR. Personal data may be transferred to the USA in this context. Vercel is certified under the EU-US Data Privacy Framework; the transfer is based on the adequacy decision of the European Commission (Art. 45 GDPR). In addition, Vercel has agreed to the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR).
3. Contact form and contacting us
If you send us an enquiry or an appointment request via the contact form, we process the data you enter: name, email address, company, phone number, your message and, where applicable, your preferred appointment. Mandatory fields are marked in the form. The same applies to data you provide to us by email or phone.
The form data is transmitted to our mailbox via the email delivery service Plus Five Five, Inc. ("Resend"), 2261 Market Street #5039, San Francisco, CA 94114, USA. Resend processes the data as a processor pursuant to Art. 28 GDPR on the basis of a data processing agreement and stores it in the USA. Resend is certified under the EU-US Data Privacy Framework; the transfer is based on the adequacy decision of the European Commission (Art. 45 GDPR) and additionally on the Standard Contractual Clauses (Art. 46(2)(c) GDPR).
The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or to pre-contractual measures; otherwise Art. 6(1)(f) GDPR, based on our legitimate interest in answering enquiries. We delete your data once the enquiry has been fully dealt with, unless statutory retention obligations apply. Documents relevant under commercial and tax law are retained for six or ten years respectively pursuant to Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO).
4. Cookies and local storage
This website sets no cookies and does not integrate any third-party analytics, marketing or tracking services. Fonts are loaded from our own server; no data is transmitted to third parties in the process.
Only the following technically necessary entries are stored in your browser's local storage: your language selection (German or English), so that the website is displayed in the language you have chosen; a note that you have closed the storage notice, so that it does not appear again; and, for the duration of the session, a note that the navigation animation has already been played. This storage is strictly necessary to provide the service you have expressly requested and is therefore permitted without consent under Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). The entries contain no personal data and are not transmitted to us. You can delete them at any time via your browser settings.
5. Recipients
Your data is only passed on to third parties where this is necessary for the purposes stated here, in particular to our hosting provider Vercel (section 2), to the email delivery service Resend (section 3) and to providers operating our email mailboxes, each acting on our behalf as a processor pursuant to Art. 28 GDPR, or where we are legally obliged to do so.
6. Your rights
Subject to the statutory provisions, you have the right to access the personal data we hold about you (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR). Where processing is based on your consent, you may withdraw it at any time with effect for the future (Art. 7(3) GDPR). To exercise your rights, a message to info@finais.de is sufficient.
7. Right to object
Where we process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation (Art. 21(1) GDPR). We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
8. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR). The supervisory authority responsible for our registered office is:
The State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz), Hintere Bleiche 34, 55116 Mainz, Germany, www.datenschutz.rlp.de
9. Obligation to provide data and automated decision-making
You are under no legal or contractual obligation to provide us with personal data. Without the information in your enquiry, however, we cannot process it. No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
10. Data security and changes
This website is transmitted in encrypted form via HTTPS. We will amend this privacy policy if the legal situation or our data processing changes. The version published here applies.