Privacy policy

Here you can find out which data is processed when you visit this website and send a request, for what purpose, and what rights you have.

This is an English translation for your convenience. The German version (Datenschutzerklärung) is legally binding.

1. Controller

Eduard Kaiser
kaiserlichberaten (sole proprietorship)
Burckhardtstraße 2
01307 Dresden, Germany
Phone: +49 172 4419312
Email: info@kaiserlichberaten.de

My business is not legally required to appoint a data protection officer.

2. The key points in brief

• This website does not set any cookies.
• There are no analytics, tracking or marketing services.
• Fonts, images and scripts are not loaded from third-party servers.
• The server immediately encrypts the data sheet so that only I can open it.
• WhatsApp and online booking are only linked. Data is only transferred when you tap the link yourself.
• I only use data from the request form to answer your request.

3. Hosting and server log files

This website is hosted by: STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. A data processing agreement under Art. 28 GDPR is in place with the provider.

When you open the website, the server automatically processes technical data transmitted by your browser:

• IP address
• date and time of access
• page or file accessed
• browser type, operating system and previously visited page (referrer)

This data is necessary to deliver the website and ensure its security. The legal basis is my legitimate interest under Art. 6 (1) (f) GDPR. STRATO stores the log files with the full IP address for 7 days. After that, the IP address is anonymised and the log files remain available for up to 6 weeks.

4. Request form

If you send a request via “Request a call”, I process the following information:

• whether your request is private or for a business
• the selected topics and the preferred way of talking
• your name
• your phone number and/or email address
• your message, if you write one
• the language version of the website you used

I use this information to contact you and arrange a conversation. The legal basis is Art. 6 (1) (b) GDPR (steps prior to a possible contract) and, for general enquiries, my legitimate interest in answering them under Art. 6 (1) (f) GDPR.

The form transmits your details to the web server in encrypted form. From there they are sent as an email to my inbox info@kaiserlichberaten.de. STRATO logs the sending of this email and keeps these logs for a maximum of 6 months. Please do not include health data or other particularly sensitive information in the free text field. We should discuss such topics in person.

5. Data sheet

If you fill in the data sheet on this website, I process the following details:

• title, name, date and place of birth, nationality and marital status
• address, email address, phone number, living situation and the year of your driving licence
• name, date of birth and, if given, occupation of your partner, as well as the name and date of birth of your children
• employment status, occupation, employer, income, share of desk work and the type of your health insurance
• your bank details
• your answer (yes or no) as to whether there is anything about your health that we should talk about
• your message, if you write one

I use these details to advise you, arrange insurance for you and keep your customer file. The legal basis is Art. 6(1)(b) GDPR. I use the details about your partner and children to assess your family’s needs (Art. 6(1)(b) and (f) GDPR). Please let them know.

Your answer about your health is health data. I only process it with your explicit consent (Art. 9(2)(a) GDPR), which you give in the form. You can withdraw it at any time with effect for the future; an informal message is enough.

How I protect your details: they are transmitted to the web server in encrypted form and immediately encrypted there with a key that only I hold. The encrypted file is stored outside the publicly accessible area of the server. I download it, transfer the details to my customer file and then delete the file from the server. By email I only receive a notice with your name, not the details themselves.

Section 10 applies to the storage period.

6. Contact by email or phone

If you contact me by email or phone, I process your details to handle your request. The legal bases are the same as for the request form.

My email inbox is operated via Microsoft 365 (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). A data processing agreement is in place with Microsoft. Processing in the USA cannot be ruled out. Microsoft is certified under the EU-US Data Privacy Framework, for which there is an adequacy decision of the EU Commission (Art. 45 GDPR).

7. Contact via WhatsApp

This website links to WhatsApp. No WhatsApp program code is embedded, so no data is transferred to WhatsApp when the page loads. Only when you tap a WhatsApp link does WhatsApp open, and the provider’s privacy policy applies.

The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, a company of the Meta group. WhatsApp processes, among other things, your phone number, communication metadata and device information. A transfer to the USA cannot be ruled out. Meta is certified under the EU-US Data Privacy Framework. Message content is end-to-end encrypted.

If you write to me via WhatsApp, I process your message and your phone number to answer your request (Art. 6 (1) (b) and (f) GDPR). Please do not send me health data, contract documents or other sensitive information via WhatsApp; we will agree on another way for that. Using WhatsApp is voluntary: you can always reach me by phone, email or via the request form.

More information: WhatsApp privacy policy

8. Online booking

For online appointment booking I use Microsoft Bookings, a Microsoft 365 service. The booking link takes you to a Microsoft page. No data is transferred to Microsoft when this website loads.

If you book an appointment, I process the information you provide there, usually name, email address, phone number, preferred appointment and possibly a message. I use it to hold the appointment and to inform you of changes. The legal basis is Art. 6 (1) (b) GDPR.

Microsoft processes this data on my behalf (Microsoft Ireland Operations Limited, address see above). The data processing agreement mentioned in section 6 applies. Microsoft’s privacy notices also apply on the booking page itself.

9. Facebook page

I run a business page on Facebook (“kaiserlichberaten - Eduard Kaiser”). Facebook is not embedded on this website. No data is transferred to Facebook when you visit this website.

Facebook is provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. When you visit my Facebook page, Meta processes your data according to its own privacy policy, including with cookies and regardless of whether you are logged in to Facebook. A transfer to the USA cannot be ruled out. Meta is certified under the EU-US Data Privacy Framework.

Meta provides me with aggregated statistics on how the page is used (“Page Insights”). I cannot draw conclusions about individual people from them. Meta and I are jointly responsible for these statistics under Art. 26 GDPR. The details are set out in Meta’s joint controller agreement. Under it, Meta takes primary responsibility and fulfils data subject rights. You can, however, also exercise your rights with me; I will then forward them to Meta.

If you write to me or comment via the Facebook page, I process your information to reply to you. The legal basis for running the page and communicating is my legitimate interest in a presence and in exchanging with interested parties (Art. 6 (1) (f) GDPR), and for enquiries about a possible contract Art. 6 (1) (b) GDPR. Please do not send me health data or contract documents via Facebook.

More information: Meta privacy policy · Joint controller agreement (Page Insights) · Information about Page Insights

10. Storage period

I delete requests once they have been dealt with and there is no further purpose. If the request leads to advice or a contract, the statutory retention periods apply, in particular under commercial and tax law and the documentation obligations for insurance and financial investment intermediaries.

11. Disclosure of data

I do not pass on data from your request to third parties, except to the service providers named above for hosting, email, booking and, where applicable, WhatsApp. If advice or brokerage follows later, I will inform you separately which data is transferred to whom for this purpose, for example to insurers or product providers.

12. Your rights

You have the right to:

• access to your stored data (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on legitimate interests (Art. 21 GDPR)

An informal message to info@kaiserlichberaten.de is sufficient.

You can also lodge a complaint with a data protection supervisory authority. The authority responsible for me is:
Die Sächsische Datenschutz- und Transparenzbeauftragte (Saxon Data Protection and Transparency Commissioner)
Maternistraße 17
01067 Dresden, Germany
www.datenschutz.sachsen.de

13. Encryption

This website uses TLS encryption. You can recognise it by the padlock symbol and “https://” in your browser’s address bar.

14. No automated decisions

I do not make automated decisions or carry out profiling within the meaning of Art. 22 GDPR.

As of: October 2026