Privacy policy

This is a courtesy translation. The German version is legally binding.

1. General information

Protecting your personal data matters to us. We process personal data solely in accordance with the applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR) and the relevant German data protection legislation.

In this privacy policy, we inform you which personal data is collected when you visit our website, the purposes for which it is processed, and the rights you have in this regard. Personal data is any information that can be attributed directly or indirectly to a specific person.

2. Controller

The data processing on this website is carried out by the website operator:

Boomer Finance GmbH
Hirschparkstraße 8, 82031 Grünwald
Managing directors: Claus Gillen, Olaf Neuenfeldt, Charles Neus
Email: info@boomerfinance.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

3. How we collect your data and what we use it for

On the one hand, we receive personal data directly from you, for example when you contact us by email or submit information via the contact form. In addition, certain technical information is collected automatically when you visit our website (browser, operating system, date and time of access, IP address and other technically necessary connection data). This data is used to provide our website securely and properly.

Some of the data is collected to ensure that the website is provided without errors. We use data from the contact form to process your enquiry.

4. Hosting

This website is hosted by Google. The pages are delivered via Firebase Hosting, a worldwide network of servers that provides the website quickly and securely. The contact form is processed via Google Cloud Run in Frankfurt am Main. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit the website, Google processes technical data that is necessary to deliver and secure the website (IP address, date and time of access, page requested, browser and operating system). This data is stored in server log files and deleted after 30 days at the latest.

We have concluded a data processing agreement with Google pursuant to Art. 28 GDPR. A transfer of data to the USA cannot be ruled out; Google is certified under the EU-U.S. Data Privacy Framework. The processing is based on our legitimate interest in providing our website securely and reliably (Art. 6(1)(f) GDPR).

5. Cookies, fonts and local storage

This website does not set any cookies. There is no tracking, and no marketing or analytics services are used.

Fonts are loaded locally from our server; no connection is made to the servers of Google Fonts or other font providers.

The Financial Wellbeing Check-Up on this website evaluates your answers solely within your browser. Your answers are not transmitted to us.

In your browser’s local storage we only keep what you choose yourself: your language and your choice between light and dark display, so that the website appears that way on your next visit. If you close the note pointing to the German version, your browser remembers this for the current session. This storage is strictly necessary for the function you requested (Section 25(2) no. 2 TDDDG). You can delete these entries in your browser at any time.

6. Financial Wellbeing Index (external tool)

The Financial Wellbeing Index on the “Check-Up” page is a questionnaire provided by our service provider and runs on its servers (app.vitascore.tools). It is only loaded once you press “Start the Index now”. Until then there is no connection to that provider; merely visiting the page does not transmit any data to it.

When you start the Index, your answers are transmitted to the provider and evaluated there. The Index does not require you to register or to give your name. An email address is only transmitted if you use the “send by email” function in the tool itself to send yourself your result.

The legal basis is your consent, which you give by pressing “Start the Index now” (Art. 6(1)(a) GDPR). You can stop the Index at any time. The processing within the tool is additionally governed by the provider’s privacy policy, which is linked in the questionnaire.

The provider of the Index is Karsten Kreh (vitascore), Schwanthalerstr. 141, 80339 Munich, Germany, email: info@vitascore.tools. You can withdraw your consent at any time with effect for the future by closing the questionnaire; the provider deletes answers already transmitted on request.

7. Contact form and enquiries by email

If you contact us via the contact form or by email, your enquiry, including all personal data arising from it (name, email address, telephone number, enquiry), is stored and processed by us for the purpose of dealing with your request. We do not pass this data on without your consent.

The processing is based on Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary for taking pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6(1)(a) GDPR) and on our legitimate interest in handling the enquiries addressed to us effectively (Art. 6(1)(f) GDPR).

The data you submit remains with us until you ask us to delete it, withdraw your consent to its storage, or the purpose for storing the data no longer applies. Mandatory statutory provisions, in particular retention periods, remain unaffected.

The details from the contact form are passed via our server at Google Cloud Run in Frankfurt (see section 4) to the email delivery service Resend, which delivers them as an email to our mailbox. The provider is Plus Five Five, Inc. (Resend), USA. We have concluded a data processing agreement with Resend pursuant to Art. 28 GDPR; Resend is certified under the EU-U.S. Data Privacy Framework. A hidden field and a limit on the number of messages protect the form against automated misuse; for this, your IP address is processed briefly in the server’s memory and not stored.

8. SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the browser’s address bar changing from “http://” to “https://” and by the padlock symbol in your browser bar.

9. Storage period

Unless a more specific storage period is stated in this privacy policy, your personal data remains with us until the purpose for processing it no longer applies. If you make a justified request for erasure or withdraw your consent, your data will be erased unless we have other legally permissible grounds for storing it.

10. Legal bases

Where you have consented to the data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR. Where the data processing is necessary for the performance of a contract or for pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. We also process your data where this is necessary to comply with a legal obligation, on the basis of Art. 6(1)(c) GDPR. Data processing may also take place on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

11. Your rights

Within the framework of the applicable statutory provisions, you have the right at any time to obtain, free of charge, information about your stored personal data, its origin and recipients, and the purpose of the data processing, as well as the right to rectification, erasure or restriction of the processing of this data. You may withdraw any consent you have given at any time with effect for the future. You also have the right to data portability and the right to lodge a complaint with a supervisory authority.

Right to object (Art. 21 GDPR): Where we process your data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. An informal note to info@boomerfinance.de is sufficient.

The supervisory authority responsible for us is:
Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA)
Promenade 18, 91522 Ansbach
Email: poststelle@lda.bayern.de, Website: www.lda.bayern.de

12. External links

This website contains links to external third-party websites over whose content we have no influence. When you click on external links, you leave our website. The respective provider or operator is always responsible for the content of the linked pages.

13. Validity and amendment of this privacy policy

This privacy policy is the currently valid version. As our website and services develop, or as a result of changes to legal or regulatory requirements, it may become necessary to amend this privacy policy. The current version can be accessed on this page at any time.