Privacy Policy
This policy explains which personal data we process when you visit this website or contact us, why we process it, and which rights you have. It is based on the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
Last updated: 8 October 2026
1. Controller
Fintum Market Intelligence GmbH Abt-Plazidus-Str. 24 97359 Schwarzach am Main, Germany Email: info@fintum-mi.com
2. Visiting this website
This website runs on the servers of a hosting provider in the European Union. When you open a page, your browser sends your IP address and other technical data to the server. We need this data to deliver the page. We do not store it in log files. Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is a secure and working website.
3. Contacting us by email
If you email us, we process your email address, your name if you give it, and the content of your message. We use this data to answer your message. Legal basis: Art. 6(1)(b) GDPR if your message relates to a contract or to steps before a contract. In all other cases Art. 6(1)(f) GDPR, because we have a legitimate interest in answering inquiries. Storage: we delete your message once your request is resolved. We keep it longer only if commercial or tax law requires us to (Art. 6(1)(c) GDPR).
4. Demo request form
When you request a demo, we process the details you enter: first name, last name, business email, organisation and role. The form sends these details to our team by email. We use them to contact you about your request. Legal basis: Art. 6(1)(b) GDPR, because you ask us to take steps before a possible contract. If you contact us on behalf of your employer, we also rely on Art. 6(1)(f) GDPR. Our legitimate interest is to answer business inquiries. Storage: we keep your request until it is resolved. After that, we keep it as a business record for up to 24 months (Art. 6(1)(f) GDPR), or longer if commercial or tax law requires us to (Art. 6(1)(c) GDPR). You do not have to provide this data. Without it, we cannot answer your request. To protect the form against automated abuse, we store a pseudonymised value derived from your IP address for no longer than 20 minutes. Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is to prevent spam.
5. Analytics (PostHog)
If you accept analytics in the cookie banner, we use the analytics service PostHog to understand how visitors use this website. The data is stored in the EU. PostHog records which pages you visit, when you leave a page, your device and browser type, and your approximate region. PostHog derives the region from your IP address. We do not link this data to your name or email address. Legal basis: your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw your consent at any time via "Cookie settings" in the footer. Analytics stops immediately. Storage: we keep analytics data for 24 months. After that, it is deleted.
6. Cookies and browser storage
We store the following data on your device: • A cookie that saves your choice in the cookie banner. It is stored for 12 months. This cookie is strictly necessary, so we set it without consent (§ 25(2) No. 2 TDDDG). • With your consent, a PostHog cookie with a random ID. PostHog uses it to recognise repeat visits. It is stored for 12 months. • With your consent, technical PostHog entries in your browser storage. Most of them are deleted when you close the tab. One entry records your analytics choice and stays until you clear your browser data. We do not use any other cookies, tracking pixels or similar technologies.
7. Recipients and transfers outside the EU
We share personal data only with service providers who process it on our behalf under a data processing agreement (Art. 28 GDPR): • a hosting provider, to run this website • an email provider, for our mailboxes • an email delivery service, to send demo requests to our team • an analytics provider, only with your consent (see section 5) Some of these providers are based in the USA or belong to groups based in the USA. Personal data may therefore be processed in the USA. These transfers are based on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework (Art. 45 GDPR) or on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). You can request a copy of the Standard Contractual Clauses from us. We do not sell personal data. We share it with other parties only if the law requires us to.
8. Your rights
You have the right to: • get a copy of the personal data we hold about you (Art. 15 GDPR) • have incorrect data corrected (Art. 16 GDPR) • have your data deleted (Art. 17 GDPR) • restrict how we process your data (Art. 18 GDPR) • receive your data in a portable format (Art. 20 GDPR) • withdraw a consent at any time with effect for the future (Art. 7(3) GDPR) To use these rights, write to info@fintum-mi.com. We do not make decisions about you that are based solely on automated processing (Art. 22 GDPR).
9. Your right to object
Where we process your data based on a legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21(1) GDPR). We then stop processing your data. This does not apply if we can show compelling legitimate grounds that override your interests. It also does not apply if we need the data to establish, exercise or defend legal claims. To object, write to info@fintum-mi.com.
10. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). You can contact the authority where you live or work, or the authority responsible for us: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 18 91522 Ansbach, Germany www.lda.bayern.de
11. Changes to this policy
We update this policy when our website or the law changes. The date at the top of this page shows when we last changed it.