Insurance for Expats
Privacy

Privacy Policy

Information on how your personal data is handled when you visit this website.

1. General Information

The following notice provides an overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

2. Data Controller

The party responsible for data processing on this website is:

Mona Anbari

Weilerstr. 19

73635 Rudersberg

Germany

Phone: +49 251 20811155370

E-Mail: hello@insurance-for-expats.com

3. Your Rights

Under the applicable statutory provisions, you have the right at any time to:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)

You also have the right to withdraw any consent given at any time, with effect for the future.

Right to lodge a complaint with the supervisory authority:

State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg)

4. Hosting and Content Delivery

This website is operated using the website builder provided by Hostinger.

When you access the website, the following data is automatically processed:

  • IP address
  • Date and time of the request
  • Browser type and operating system
  • Referrer URL

This processing serves the technical provision of the website and ensures system security.

Legal basis: Art. 6(1)(f) GDPR

A data processing agreement pursuant to Art. 28 GDPR has been concluded.

5. Use of Cookies and Consent Management

This website uses cookies. Technically necessary cookies are set on the basis of Art. 6(1)(f) GDPR.

All other cookies (e.g. for analytics and marketing purposes) are set exclusively after your explicit consent pursuant to Art. 6(1)(a) GDPR.

Consent is obtained via a cookie consent tool and can be withdrawn at any time.

6. Contacting Us

If you contact us (e.g. by e-mail, phone, or form), your details will be processed to handle your inquiry.

Legal bases:

  • Art. 6(1)(b) GDPR (contract / inquiry)
  • Art. 6(1)(f) GDPR (legitimate interest)

7. Forms (Jotform)

I use Jotform Inc. for online forms. Data is stored on servers within the European Union (e.g. Frankfurt am Main).

Data processed:

  • Name
  • Contact details
  • Insurance details
  • Health data, where applicable

Purpose:

  • Processing inquiries
  • Preparing consultations

Legal bases:

  • Art. 6(1)(b) GDPR
  • Art. 6(1)(a) GDPR
  • Art. 9(2)(a) GDPR (for health data)

Note: Jotform is a company headquartered in the USA. Despite storage within the EU, it cannot be ruled out that data may be transferred to US authorities. A data processing agreement has been concluded.

8. Appointment Scheduling (Calendly)

I use Calendly LLC for scheduling appointments.

Data processed:

  • Name
  • E-mail address
  • Appointment details

Legal basis: Art. 6(1)(b) GDPR

A transfer of data to the USA cannot be ruled out.

9. Communication (Google Workspace)

I use services provided by Google Ireland Limited (e.g. Gmail, Drive).

Legal bases:

  • Art. 6(1)(b) GDPR
  • Art. 6(1)(f) GDPR

A transfer of personal data to the USA cannot be ruled out.

10. Analytics and Marketing Tools

Meta Pixel

This website uses the Meta Pixel provided by Meta Platforms Ireland Limited.

Purpose:

  • Analyzing user behavior
  • Optimizing advertising measures

Legal basis: Art. 6(1)(a) GDPR (consent)

Use only occurs after consent is given via the cookie consent tool. Consent can be withdrawn at any time.

Google Analytics

This website uses Google Analytics.

  • IP anonymization is enabled
  • Data processing only takes place after consent

Legal basis: Art. 6(1)(a) GDPR

11. Data Sharing as Part of Brokerage Activities

As part of my activities as an insurance broker, data is shared with:

  • Fonds Finanz Maklerservice GmbH
  • VEMA Versicherungsmakler Genossenschaft eG
  • Kassensuche GmbH

Data is shared exclusively for the performance of a contract (Art. 6(1)(b) GDPR) or on the basis of your consent.

12. Processing of Special Categories of Personal Data

Health data may be processed as part of the consultation. This occurs exclusively on the basis of your explicit consent or for the establishment, exercise, or defense of legal claims.

Legal bases:

  • Art. 9(2)(a) GDPR
  • Art. 9(2)(f) GDPR

Without this data, consultation in certain areas is not possible.

13. Retention Period

Your personal data is only stored for as long as necessary to fulfill the respective purposes. Beyond that, data is retained where statutory retention periods apply (in particular commercial and tax law retention periods of up to 10 years).

14. SSL/TLS Encryption

For security reasons, this website uses SSL/TLS encryption (HTTPS).