Privacy Policy

1. Data Protection at a Glance

General Information

The following information provides a brief overview of how your personal data is handled when you visit this website. Personal data is any information that can identify you personally. Detailed information on data protection can be found in the full privacy policy below.

Data Collection on This Website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. You can find their contact details in the section “Responsible Party” below.

How do we collect your data?

Some data is collected when you voluntarily provide it, for example, when you fill out a contact form.

Other data is collected automatically by our IT systems when you visit the website, primarily technical data (e.g., browser type, operating system, or time of access). This data is collected automatically as soon as you access the website.

What do we use your data for?

Some data is collected to ensure the website is error-free. Other data may be used to analyse user behaviour. If contracts are concluded or initiated via the website, the data transmitted will also be processed for contract offers, orders, or other requests.

Your Rights Regarding Your Data

You have the right to obtain information about the origin, recipients, and purpose of your stored personal data free of charge at any time. You also have the right to request correction or deletion of your data. If you have given consent to data processing, you may withdraw it at any time. Furthermore, you have the right to request the restriction of processing under certain circumstances. You also have the right to lodge a complaint with the relevant supervisory authority.

For any questions regarding data protection, you may contact us at any time.

Analysis Tools and Third-Party Tools

Your browsing behaviour may be statistically analysed when visiting this website, primarily using analysis programs. Detailed information about these programs is provided in the full privacy policy below.

2. Hosting

We host our website content with the following provider:

External Hosting

This website is hosted externally. Personal data collected on this website is stored on the servers of the hosting provider. This may include IP addresses, contact requests, meta and communication data, contract data, contact information, names, website access data, and other data generated via the website.

External hosting is carried out to fulfil contracts with potential and existing customers (Art. 6(1)(b) GDPR) and in our legitimate interest in providing a secure, fast, and efficient online service (Art. 6(1)(f) GDPR). If consent is requested, processing is carried out solely on the basis of Art. 6(1)(a) GDPR and §25(1) TDDDG for cookies or device access; consent can be revoked at any time.

The host processes data only to the extent necessary to provide its services and follows our instructions regarding these data.

Hosting Provider:

Homepage Helden GmbH Poststraße 20, 20354 Hamburg, Germany

Data Processing Agreement

We have concluded a data processing agreement (DPA) with the above service provider, ensuring that personal data of website visitors is processed only according to our instructions and in compliance with GDPR.

3. General Information and Mandatory Information

Data Protection

We take the protection of your personal data seriously. We treat your personal data confidentially and in accordance with legal data protection regulations and this privacy policy.

When you use this website, various personal data are collected. This privacy policy explains which data we collect and for what purpose.

Please note that data transmission over the Internet (e.g., via email) can have security gaps. Complete protection against access by third parties is not possible.

Responsible Party

The responsible party for data processing on this website is:

EPP-Riskmanagement GmbH Flughafenstraße 54, Building A, 22335 Hamburg, Germany Tel.: +49 (0)40-6077960-20 E-Mail: info@epp-riskmanagement.com

The responsible party is the natural or legal person who decides individually or jointly on the purposes and means of processing personal data.

Storage Duration

Unless otherwise specified, your personal data will be stored until the purpose of processing has been fulfilled. If you request deletion or withdraw consent, your data will be deleted unless legally permissible reasons require retention (e.g., tax or commercial law obligations).

Legal Basis of Data Processing

Depending on the context, we process data based on:

Consent (Art. 6(1)(a) GDPR),
Contractual necessity (Art. 6(1)(b) GDPR),
Legal obligations (Art. 6(1)(c) GDPR),
Legitimate interests (Art. 6(1)(f) GDPR).

Data Protection Officer:

mybreev GmbH Lawyer Frederike Scholz Bahnhofstr. 1c, 41747 Viersen, Germany Tel.: +49 2162 / 1065549 E-Mail: externer-datenschutzbeauftragter@mybreev.com

Recipients of Personal Data

We share personal data only if required to fulfil contracts, legally obliged (e.g., tax authorities), or under legitimate interest, and only under contracts ensuring GDPR compliance.

Withdrawal of Consent

You may revoke consent for data processing at any time. The legality of prior processing remains unaffected.

Right to Object and Direct Marketing

You have the right to object to data processing for reasons specific to your situation or for direct marketing purposes at any time (Art. 21 GDPR).

Complaints to Supervisory Authority

You may lodge complaints with the relevant supervisory authority, especially in the EU member state of your residence, workplace, or the location of the alleged violation.

Right to Data Portability

You may request your data in a machine-readable format and transfer it to another controller, if technically feasible.

Right to Access, Correction, and Deletion

You may request access, correction, or deletion of your data at any time, free of charge.

Right to Restrict Processing

You may request restriction in cases such as disputed data accuracy, unlawful processing, or legal claims.

SSL / TLS Encryption

This site uses SSL/TLS encryption to protect your data. The presence of “https://” and a padlock in the browser address bar indicates an encrypted connection.

4. Data Collection on This Website

Cookies

We use cookies to improve your experience. Session cookies are deleted after your visit; persistent cookies remain until manually deleted. Third-party cookies may also be used for services such as payment processing. Cookies can be disabled in your browser.

Server Log Files

The provider collects server log files automatically, including browser type, OS, referrer URL, hostname, time, and IP address. These are stored to ensure website functionality and optimisation.

Contact Forms and Communication

Data submitted via forms, email, phone, or fax is stored for processing requests and is not shared without consent.

5. Analytics and Advertising

Matomo

This website uses the open-source web analytics service Matomo, which allows anonymous tracking of site usage. IP addresses are anonymised, and no cookies are stored unless consented. Matomo is hosted by:

Homepage Helden GmbH Poststraße 20, 20354 Hamburg, Germany

You can opt out of Matomo analytics via the provided checkbox on the site.

6. Plugins and Tools

Google Fonts (Local Hosting)

We use Google Fonts for consistent typography. Fonts are hosted locally, so no connection to Google servers is made.

More info: Google Fonts FAQ | Google Privacy Policy