Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website is:

LOANCOS GmbH
Eschersheimer Landstraße 50–54
60322 Frankfurt am Main
Deutschland
Email: support@loancos.org
Phone: +49 89 210 28850

2. Scope of this Policy

This Privacy Policy explains how LOANCOS GmbH ("we", "us", or "our") collects, processes, stores, and shares personal data when you visit our website at loancos.org, contact us, or use our informational services. It applies in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

3. Data We Collect

We may collect and process the following categories of personal data:

• Contact data: Name, email address, telephone number, company name, submitted when you use our contact form or communicate with us directly.
• Usage data: IP address, browser type, operating system, referring URLs, pages visited, and time spent on pages, collected automatically when you visit our website.
• Communication data: The content of messages you send to us via email or our contact form.
• Cookie data: Information set and read by cookies and similar technologies as described in our Cookie Policy.

4. Legal Basis for Processing

We process personal data on the following legal bases under Article 6 GDPR:

• Consent (Art. 6(1)(a) GDPR): Where you have given us explicit consent, for example, when submitting the contact form or accepting optional cookies.
• Legitimate interests (Art. 6(1)(f) GDPR): For the operation of our website, including security, analytics, and fraud prevention, where our interests are not overridden by your rights.
• Legal obligation (Art. 6(1)(c) GDPR): Where processing is required to comply with applicable law.
• Pre-contractual measures (Art. 6(1)(b) GDPR): Where processing is necessary to respond to your enquiry with a view to entering into a business relationship.

5. How We Use Your Data

We use the personal data we collect for the following purposes:

• To respond to your enquiries and provide the information you have requested.
• To operate, maintain, and improve the functionality and security of our website.
• To comply with our legal and regulatory obligations.
• To analyse website usage in aggregate form in order to improve our online presence.

We do not sell, rent, or otherwise transfer your personal data to third parties for marketing purposes.

6. Data Sharing

We may share your personal data with:

• Service providers: Third-party providers that assist us in operating our website or delivering our services, acting as data processors under appropriate contractual safeguards.
• Competent authorities: Where required by law, court order, or regulatory obligation, we may disclose personal data to competent authorities.

All third-party data processors are bound by data processing agreements and are required to implement appropriate technical and organisational security measures.

7. International Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, including the use of Standard Contractual Clauses approved by the European Commission, or other legally recognised transfer mechanisms.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Contact form data is generally retained for 24 months, after which it is deleted or anonymised unless a longer retention period applies for legal or regulatory reasons.

9. Your Rights

Under the GDPR, you have the following rights in relation to your personal data:

• Right of access (Art. 15 GDPR): To obtain a copy of the personal data we hold about you.
• Right to rectification (Art. 16 GDPR): To request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17 GDPR): To request deletion of your personal data in certain circumstances.
• Right to restriction (Art. 18 GDPR): To request that we limit the processing of your data in certain circumstances.
• Right to data portability (Art. 20 GDPR): To receive your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR): To object to processing based on our legitimate interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at support@loancos.org. We will respond within the timeframe required by applicable law.

10. Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority. In Germany, this is the Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI) or the supervisory authority in your EU member state of residence.

11. Website Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. Our website uses TLS encryption for data transmitted between your browser and our servers.

12. Links to Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies independently.

13. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted on this page with a revised date. We encourage you to review this policy periodically.

14. Contact

For any questions or requests regarding this Privacy Policy or the processing of your personal data, please contact us at:

LOANCOS GmbH
Eschersheimer Landstraße 50–54
60322 Frankfurt am Main
Deutschland
Email: support@loancos.org