Privacy Policy

1. CONTROLLER RESPONSIBLE FOR DATA PROCESSING
S&V Consulting
Avenida de Cibeles 13
Benalmadena, Malaga, Spanien
E-Mail: info (at) s-v.consulting

Controller within the meaning of:
General Data Protection Regulation (GDPR)
LOPDGDD
TTDSG

2. HOSTING AND TECHNICAL PROVISION
Hosting by: IONOS
Server location: Deutschland (EU)

Processed data:
IP address (shortened)
Date/time
Browser/OS
Referrer

Legal basis: Art. 6(1)(f) GDPR
Data processing agreement pursuant to Art. 28 GDPR

3. SSL/TLS ENCRYPTION
This website uses HTTPS encryption for the secure transmission of personal data.

4. CONTACT (FORM / EMAIL / WHATSAPP)
Processed data:
Name
Email
Phone number (optional)
Message content

Legal bases:
Art. 6(1)(b) GDPR
Art. 6(1)(f) GDPR

WhatsApp via: WhatsApp Ireland Ltd.
Note: Data may be transferred to Meta

5. APPOINTMENT BOOKING
Appointment management via BookingPress.
Purpose:
Appointment organization
Customer communication

Legal basis: Art. 6(1)(b) GDPR

6. NEWSLETTER
Newsletter distribution via Brevo mail marketing.
Double opt-in
Unsubscription possible at any time

Legal basis: Art. 6(1)(a) GDPR

7. COOKIES AND CONSENT MANAGEMENT
Only the following are used:
Technically necessary session cookies
Analytics and marketing cookies (only with consent)
Legal bases:
Art. 6(1)(a) GDPR
§25 TTDSG
No persistent cookies without consent

8. ANALYTICS AND MARKETING
Google Analytics
Provider: Google LLC
IP anonymization
Data transfer to the USA (SCC / possibly EU-US Data Privacy Framework)
Legal basis:
Consent

Google Tag Manager
Management of tracking tags, no independent storage of personal data

Meta Pixel (Facebook/Instagram)
Provider: Meta Platforms Inc.
Purpose:
Conversion tracking, remarketing
Legal basis:
Consent

LinkedIn Insight Tag
Provider: LinkedIn Corporation
Legal basis:
Consent

9. SOCIAL MEDIA BUTTONS
Facebook, Instagram, LinkedIn
Data transfer only after active click

10. GOOGLE MAPS
Provider: Google LLC
When loading the map, the IP address may be transmitted to Google.
Legal basis:
Consent

11. GOOGLE FONTS (LOCAL)
Fonts are stored locally.
No connection to Google servers

12. WEBSITE TRANSLATOR
When used, content may be transmitted to external translation services (only after activation by the user).
Legal basis:
Consent

13. DATA TRANSFER TO THIRD COUNTRIES
When using Google, Meta, or LinkedIn, data may be transferred to the USA.
Safeguards:
Standard contractual clauses (Art. 46 GDPR)
Possibly EU-US Data Privacy Framework

14. STORAGE PERIOD
Data will be deleted as soon as the purpose no longer applies and no legal retention obligations exist.

15. PROCESSING OF SPECIAL CATEGORIES OF DATA (ART. 9 GDPR)
In the context of consulting on health insurance, health data may be processed.
Processing is carried out exclusively:
– with explicit consent
– for the purpose of preparing offers and arranging contracts
– only to insurers or their service providers
– subject to professional confidentiality

All data is treated confidentially and only shared to the extent necessary.

Storage period:
Consulting data: up to 10 years (commercial and tax law obligations)

16. DATA SUBJECT RIGHTS
You have the right to:
– Access
– Rectification
– Erasure
– Restriction
– Data portability
– Objection
– Withdrawal of consent
Complaint to:
BfDI
Agencia Española de Protección de Datos

17. RECORD OF PROCESSING ACTIVITIES (ART. 30 GDPR)
Website operation
Data: IP, log files
Purpose: Security, operation
Legal basis: Art. 6(1)(f)

Contact inquiries
Data: Name, email, content
Purpose: Communication
Legal basis: Art. 6(1)(b)

Appointment booking
Tool: BookingPress
Purpose: Appointment organization

Newsletter
Provider: Brevo
Legal basis: Consent

Marketing & analytics
Google Analytics
Meta Pixel
LinkedIn Tag

Insurance consulting
Possibly health data
Legal basis: Art. 6(1)(b), Art. 9(2)(a)