Privacy Policy of FuBIS
Privacy Policy
The Funk Group attaches great importance to the protection of personal data and respects your desire for privacy. In the following, we inform you about the collection of personal data when using our website. If you have any questions about the handling of your personal data, please contact our Data Protection Officer.
Data Controller
The responsible body within the meaning of the General Data Protection Regulation (GDPR) is:
Funk Group GmbH
International Insurance Broker and Risk Consultants
Valentinskamp 20
20354 Hamburg
Telephone +49 40 35914-0
Fax +49 40 35914-407
Email contact: welcome@funk-gruppe.de
Contact Option for the Data Protection Officer
You can reach our Data Protection Officer at datenschutz@funk-gruppe.de or at our postal address with the addition "Data Protection Officer".
Data Processing When Accessing the Website
As a result of your access to our website, the following technical information (log file data) is collected by us:
Operating system of the device with which you visit our website
Browser (type, version & language settings)
The amount of data retrieved
The current IP address of the device with which you visit our website
Date and time of access
The URL of the previously visited website (referrer)
The URL of the page (or sub-page) that you access on the website
The Internet service provider of the accessing system
The collection of this data is technically necessary to display our website to you and to ensure stability and security. We (and our hosting service provider) usually do not know who is behind an IP address. We do not combine the data listed above with other data. However, we reserve the right to check the log files subsequently if we become aware of concrete indications of illegal use.
The legal basis for the processing of data is Art. 6 (1) (f) GDPR. Our legitimate interest follows from the above-mentioned purposes of data processing.
Newsletter
General Information
You can subscribe to a newsletter on this website. The legal basis for sending the newsletter is your consent in accordance with Art. 6 (1) (a) GDPR.
To subscribe to our newsletter, we use the "double opt-in" procedure. This means that after your registration we will send you an email to the email address provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will not be stored.
The only information we need to send the newsletter is your email address. After your confirmation, we will save your email address for the purpose of sending you the newsletter and until consent is revoked. We also store your current IP address at the time of registration, the time of registration and the confirmation for up to three years after registration (limitation period). The purpose of this procedure is to be able to prove your registration in case of doubt and, if necessary, to clarify any misuse of your personal data. The legal basis for logging the registration is our legitimate interest in accordance with Art. 6 (1) (f) GDPR on proof of previously given consent, see also Art. 7 (1) GDPR.
You can revoke your consent to receiving the newsletter and unsubscribe from the newsletter at any time. You can declare your revocation by clicking on the link provided in each newsletter email or by sending an email to welcome@funk-experts.de.
Newsletter Tracking
We would like to point out that we evaluate your user behaviour when sending the newsletter to determine whether and when the newsletter was opened. For this analysis, the emails sent contain "web beacons" or tracking pixels, which are stored on our server and loaded when the newsletter is opened. Technical information such as browser type, time of opening and IP address are transmitted. For evaluation purposes, we link the above data and web beacons to your email address and an individual ID. Links received in the newsletter also contain this ID and allow us to analyse your click behaviour.
The data is processed pseudonymously, so the IDs are not linked directly to your other personal data. The legal basis for this data processing is your consent, Art. 6 (1) (a) GDPR.
You may revoke your consent with future effect at any time. In this case, the revocation includes the entire newsletter, since a separate revocation of the tracking is unfortunately not technically possible. To do this, simply click on the unsubscribe link provided in each email.
Such tracking is also not possible if you have deactivated the display of images in your email settings by default. In this case, the newsletter will not be shown correctly and you may not be able to use all functions. The above-mentioned tracking will occur when you display the images manually.
The information from the tracking is stored for as long as you have subscribed to the newsletter. After logging out, the data is anonymised and used for purely statistical purposes.
The data provided when registering for the newsletter will be used to distribute the newsletter until such time as you cancel your subscription, when said data will be deleted.
As a processor, we use the European provider Brevo (formerly: sendinblue) to send our newsletter. Brevo has its server location in Germany.
Use of Cookies
Cookies are data that are stored on your computer by a website you visit and allow your browser to be identified. Cookies transmit information to the body that uses the cookie. Cookies can store various information, such as your language setting, the duration of your visit to our website or the entries you made there. This prevents you from having to re-enter the required form data each time you use it, for example. The information stored in cookies can also be used to identify preferences and to align content according to areas of interest.
There are different types of cookies: session cookies are data sets that are only temporarily stored in the working memory and are deleted when you close your browser. Persistent cookies are automatically deleted after a specified duration, which may differ depending on the cookie. With this type of cookie, the information can also be stored in text files on your computer. However, you can also delete these cookies at any time via the settings of your browser.
First-party cookies are set by the website you are currently visiting. Only this website may read information from these cookies. Third-party cookies are set by organisations that are not operators of the website you are visiting. These cookies are used, for example, by marketing companies.
The legal basis for possible processing of personal data using cookies and their storage duration may vary. If you have given us your consent, the legal basis is Art. 6 (1) (1) (a) GDPR. Insofar as the data processing takes place on the basis of our overriding legitimate interests, the legal basis is Art. 6 (1) (f) GDPR. The stated purpose then corresponds to our legitimate interest.
We use cookies to ensure the proper operation of the website, to provide basic functionalities, to measure reach and – with your consent – to tailor our services to preferred areas of interest.
You can always find details of the cookies and similar technologies used on our consent management platform.
You can delete cookies already stored on your device at any time. If you want to prevent the storage of cookies, you can do this via the settings in your Internet browser. You can find instructions for common browsers here: Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Google Chrome mobile, Microsoft Edge browser, Safari, Safari mobile. Alternatively, you can also install "ad blockers". Please note that some of our website features may not work if you have disabled the use of cookies.
When visiting our website, all users of our website will also be informed by an information banner about our use of cookies and referred to this Privacy Policy. As a user, you will also be asked for your consent to the use of certain cookies. You may revoke your consent with future effect at any time by calling up our consent management platform (the round icon with the fingerprint at the bottom left of our website) and removing the tick behind the processing to which you have consented.
Google Analytics
If you have given your consent, this website uses Google Analytics, a web analysis service provided by Google LLC. The responsible body for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Extent of Processing
Google Analytics uses cookies which enable your use of our website to be analysed. The information about your use of this website, which is automatically collected using cookies, is generally transmitted to and stored in a Google server in the USA.
We use the user ID function. Through user ID, we can assign a unique, permanent ID to one or more sessions (and the activities within these sessions) and analyse user behaviour across devices.
In Google Analytics 4, the anonymisation of IP addresses is enabled by default. Due to IP anonymisation, your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will full IP addresses be transferred to a Google server in the USA and truncated there. The IP address provided by your browser in the framework of Google Analytics will not be combined with other data from Google.
During your website visit, your user behaviour is recorded in the form of "events". Examples of events:
Page views
First visit to the website
Start of the session
Your "click path", interaction with the website
Scrolls (whenever a user scrolls to the end of the page (90%))
Clicks on external links
Internal searches
Interaction with videos
Viewed/clicked ads
In addition, the following is recorded:
Your approximate location (region)
Your IP address (truncated)
Technical information about your browser and the devices you use (e.g., language setting, screen resolution)
Your Internet provider
The referrer URL (through which website/promotional medium you arrived at this website)
Purposes of Processing
On behalf of the operator of this website, Google will use this information to evaluate your use of the website and to compile reports on website activities. The reports provided by Google Analytics are used to analyse the performance of our website and the success of our marketing campaigns.
Recipient
Recipients of the data are/can be:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor pursuant to Art. 28 GDPR)
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Alphabet Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Data Processing Outside the EU/EEA
Google Ireland's parent company, Google LLC, is based in California, USA. Transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out.
In the event that data is processed outside the EU/EEA and there is no level of data protection corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish an adequate level of data protection.
In addition, data transfers to the USA have been considered harmless since the European Commission's adequacy decision of 10 July 2023 if the recipient has been certified according to the Data Privacy Framework (DPF). This is the case with Google LLC.
Storage Period
The data sent by us and linked to cookies will be automatically deleted after 14 months. When data reaches the end of the retention period, it is erased automatically once a month.
Legal Basis
The legal basis for this data processing is your consent in accordance with Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG (Germany's Telecommunications Digital Services Data Protection Act). You can revoke your consent at any time with effect for the future by accessing our consent management platform and changing your selection there.
Revocation
You can revoke your consent at any time with effect for the future by accessing our consent management platform via the round button at the bottom left of each page and changing your selection there. The lawfulness of the data processing which took place between consent and revocation of consent will remain unchanged.
Alternatively, you can prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser so that all cookies are rejected, functionality on this and other websites may be restricted. Furthermore, you can also prevent the entering of data generated by the cookie about the use of the website (including your IP address) to Google as well as the processing of these data by Google, by
a. Not giving your consent to the setting of the cookie or
b. Downloading and installing the browser add-on for deactivating Google Analytics HERE.
Further information on Google Analytics terms of use and data protection at Google can be found at https://marketingplatform.google.com/about/analytics/terms/gb/
Google Tag Manager
We use the "Google Tag Manager" of Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter: "Google") on our website.
The Google Tag Manager makes it easier for us to integrate and manage our tags. Tags are small code elements that can be used, among other things, to measure traffic and visitor behaviour, to record the impact of online advertising and social channels, to set up remarketing and targeting, and to test and optimise websites. The Google Tag Manager itself does not collect any personal data with the exception of your IP address. This can also be transmitted to Google's parent company in the USA. Such data processing in the USA as a "third country" has been considered harmless since the European Commission's adequacy decision of 10 July 2023, as Google LLC has been certified in accordance with the Data Privacy Framework (DPF).
The legal basis for the processing of data is the protection of legitimate interests in accordance with Art. 6 (1) (f) GDPR. Our legitimate interest lies in the fast and uncomplicated integration and management of various tools on our website.
Further information on Google Tag Manager can be found at: https://www.google.com/intl/de/tagmanager/use-policy.html.
Google Ads
We use the Google Ads service, an online advertising program of Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter: "Google").
This means that we place advertisements within the framework of the Google search engine and (via the Google AdSense network or Google Ad Manager) on third-party websites that enable this if users use certain keywords specified by us in their search. In addition, we can also display our advertisements on the basis of interest via information available from Google about website visitors (user profiles).
For interest-based advertising, an analysis of online user behaviour is necessary. Google uses cookies to perform this analysis. When you click on an ad or visit our website, Google sets a cookie on your computer. These cookies have a duration of 90 days. The information collected by means of the respective cookie is used to be able to specifically address the visitor in a later search. Further information on the cookie technology used can also be found in Google's notes on website statistics and in the data protection policy. With the help of this technology, Google and we as customers receive information that a user has clicked on an ad and has been redirected to our websites. The information obtained in this way is used exclusively for statistical evaluation for ad optimisation. We do not receive any information that personally identifies visitors. Your IP address will be transmitted to Google. Since we use Google's IP masking on this website as part of the use of Google Analytics, your IP address will be anonymised. The statistics provided to us by Google include the total number of users who have clicked on one of our ads and, if applicable, whether they have been redirected to a page on our website with a conversion tag. Based on these statistics, we can trace the search terms for which our advertisement was clicked particularly often and which advertisements lead to contact by the user via the contact form.
Further information on data protection in the framework of Google Ads can be found at: https://policies.google.com/technologies/ads?hl=en.
If you do not want the processing, you can prevent the storage of the cookie required for these technologies, for example, via your browser's settings. In this case, your visit is not included in the user statistics.
You also have the option of selecting the types of Google ads via the ad setting (https://adssettings.google.com/authenticated?hl=en) or deactivating interest-based ads on Google.
The legal basis for this data processing is your consent in accordance with Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG (Germany's Telecommunications Digital Services Data Protection Act). You can revoke your consent at any time with effect for the future by accessing our consent management platform and changing your selection there.
Further information on data protection in the framework of Google Ads can be found at: https://policies.google.com/technologies/ads?hl=en
Insofar as data processing in the USA as a "third country" takes place as part of the service, such data processing has been considered harmless since the European Commission's adequacy decision of 10 July 2023, as Google LLC has been certified in accordance with the Data Privacy Framework (DPF).
Google Ads Remarketing
We use the Google Ads Remarketing of Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter: "Google") on our website.
Through these functions, we have the possibility, in particular, to place advertisements for previous visitors to our website, in which, for example, products are advertised that the visitors have previously viewed on our website. We can therefore display interest-based advertising to users of our website on other websites within the Google advertising network (as a "Google Ad" in the context of Google search or on other websites). This is done by using cookies and other technologies (e.g., fingerprinting), on the basis of which Google forms pseudonymous user profiles. This can also lead to a cross-device linking of information, and interest-based advertising can be played out to you on another device (e.g., tablet), for example, depending on your usage behaviour on one device (such as your mobile phone).
However, we, as the operator of the website, do not receive any information that could personally identify you as a visitor to our website.
The legal basis for this data processing is your consent in accordance with Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG (Germany's Telecommunications Digital Services Data Protection Act). You can revoke your consent at any time with effect for the future by accessing our consent management platform and changing your selection there.
Further information on data protection in the framework of Google Ads Remarketing can be found at: https://policies.google.com/technologies/ads?hl=en
Insofar as data processing in the USA as a "third country" takes place as part of the service, such data processing has been considered harmless since the European Commission's adequacy decision of 10 July 2023, as Google LLC has been certified in accordance with the Data Privacy Framework (DPF).
Google Conversion Tracking
We use the Google conversion tracking of Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter: "Google") on our website.
With the help of this technology, Google and we as customers receive information that a user has carried out certain actions on our website, e.g., has viewed certain content after clicking on one of our ads on our website or has taken out an insurance policy. The information obtained in this way is used exclusively for statistical evaluation for ad optimisation. We do not receive any information that personally identifies visitors. Google uses cookies or similar recognition technologies for identification.
The legal basis for this data processing is your consent in accordance with Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG (Germany's Telecommunications Digital Services Data Protection Act). You can revoke your consent at any time with effect for the future by accessing our consent management platform and changing your selection there.
Further information on data protection in the framework of Google conversion tracking can be found at: https://policies.google.com/technologies/ads?hl=en
Insofar as data processing in the USA as a "third country" takes place as part of the service, such data processing has been considered harmless since the European Commission's adequacy decision of 10 July 2023, as Google LLC has been certified in accordance with the Data Privacy Framework (DPF).
Hotjar
We use the Hotjar web analysis service of Hotjar Ltd. (St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta).
We use Hotjar to better understand the needs of our users and to optimise the offer and the experience on this website. With the help of Hotjar's technology, which also includes the setting of cookies on your devices, we get a better understanding of our users' experiences (e.g., how much time users spend on which pages, which links they click, what they like and what they don't like, etc.). This in turn helps us to align our offer with the feedback of our users.
For these purposes, the user behaviour (mouse movements, clicks, scroll height, etc.) on our website is measured, recorded and evaluated using Hotjar, sometimes also via the collection of direct feedback from users, and played back to us in the form of "heat maps", conversion funnels and other representations. In addition, information is collected about previously visited websites, your home country, devices used including screen size, operating systems and browsers. The IP address of the end device is only collected and stored in an anonymous manner. The data collected is transmitted via an encrypted connection to servers located in Ireland (EU) and stored there in the form of pseudonymised user profiles.
Most data (recording, heat map data, etc.) is kept for 365 days from the date of creation. The responses recorded by the feedback tools will be deleted immediately after the purpose has ceased to apply.
Further information on the cookies used can be found at: https://help.hotjar.com/hc/en/articles/6952777582999-Vom-Hotjar-Tracking-Code-gesetzte-Cookies.
Further information on Hotjar's compliance with data protection can be found at: https://www.hotjar.com/legal/policies/privacy/.
The legal basis for this data processing is your consent, Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG (Germany's Telecommunications Digital Services Data Protection Act). You can revoke your consent at any time with effect for the future by accessing our consent management platform and changing your selection there.
Cloudflare
To increase the transmission speed, we use a content delivery network (CDN) from CloudFlare Inc., 101 Townsend St, San Francisco, CA 94107 USA ("Cloudflare") for our website.
When you visit our website, Cloudflare collects the following data: name of the retrieved website, file, date and time of retrieval, amount of data transferred, message about successful retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider. This data is collected automatically in order to be able to display the content of the website to you.
The legal basis for the processing of data is the protection of our legitimate interests in accordance with Art. 6 (1) (f) GDPR. These legitimate interests lie in increasing the performance of our website and thereby increasing user satisfaction.
In the context of this service, personal data may be transferred to the United States, which is to be regarded as a "third country" within the meaning of the GDPR. However, such data processing in the USA has been considered harmless since the European Commission's adequacy decision of 10 July 2023, as CloudFlare Inc. has been certified in accordance with the Data Privacy Framework (DPF).
You can find further information in the provider's privacy policy at https://www.cloudflare.com/security-policy/.
Fastly
To increase the transmission speed, we use a content delivery network (CDN) from Fastly Inc., General Counsel, 475 Brannan St., Suite 300 San Francisco, CA 94107, USA ("Fastly").
When you visit our website, Fastly collects the following data: name of the retrieved website, file, date and time of retrieval, amount of data transferred, message about successful retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider. This data is collected automatically in order to be able to display the content of the website to you.
The legal basis for the processing of data is the protection of our legitimate interests in accordance with Art. 6 (1) (f) GDPR. These legitimate interests lie in increasing the performance of our website and thereby increasing user satisfaction.
In the context of this service, personal data may be transferred to the United States, which is to be regarded as a "third country" within the meaning of the GDPR. However, such data processing in the USA has been considered harmless since the European Commission's adequacy decision of 10 July 2023, as Fastly Inc. has been certified in accordance with the Data Privacy Framework (DPF).
You can find further information in the provider's privacy policy at
Usercentrics (consent management platform)
Usercentrics is a consent management platform that enables websites to protect the privacy of users and to comply with data protection requirements when it comes to cookies and tracking. "Usercentrics" is an offer from the provider Usercentrics GmbH, Rosental 4, 80331 Munich, hereinafter referred to as "Usercentrics".
Through "Usercentrics", we inform our website visitors about the use of cookies and similar technologies on our website and enable them to make a decision about their use at any time.
If the visitor gives their consent to the use of the cookies or other technologies they have selected, the following data is automatically logged:
Opt-in and opt-out data
Date and time of consent
User agent of the end user's browser
The provider's URL
The consent ID
Consent type
Template version
Banner language
The corresponding information is stored in the local storage on the user's device in order to automatically restore the corresponding cookie status (consented or not consented to use) on future page views. The consent data (consent and revocation of consent) is stored for three years. The data will then be deleted immediately.
The legal basis for temporary storage of data is Art. 6 (1) (c) in conjunction with Section 25 (1) TDDDG and Art. 7 (1) GDPR.
Further information on Usercentrics can be found at:
Getting in Contact
You have the option of contacting one of our customer service representatives by phone or email at any time. You can also use a corresponding contact form to contact us via our website. When you contact us, the data you provide (e.g., your email address, your request, your name and your telephone number, if applicable) will be stored by us in order to answer your questions. The legal basis in this respect is Art. 6 (1) (f) GDPR. Our legitimate interest lies in enabling your requests to be processed as quickly and easily as possible.
If we use our contact form to request information that is not required to establish contact, it will always be marked as optional. These details help us answer your inquiry and to improve the processing of your request. This information is provided expressly on a voluntary basis and with your consent, Art. 6 (1) (1) (a) GDPR. If this includes information on additional communication channels (e.g., email address, telephone number), you also agree that we may contact you via this communication channel in order to respond to your request. You can, of course, revoke this consent at any time with effect for the future.
In addition, we will contact you by email to provide you with necessary insurance-relevant information and to ask questions. We are obliged to do so under insurance law. We process your data on the basis of the legitimate interest within the meaning of Art. 6 (1) (f) GDPR. For this purpose, your data will be transmitted to the service provider Sendinblue. The servers are located in Germany.
Your data, which we have received as part of your requests, will be deleted as soon as it is no longer needed to achieve the purpose of its collection, your request is completely processed and no further communication with you is required or desired by you.
As the body responsible for data protection, we have implemented numerous technical and organisational measures to ensure the most complete protection of the personal data processed via our website. Nevertheless, Internet-based data transmissions can always have security gaps. Absolute protection cannot be guaranteed; in any case, the sending of unencrypted emails is not secure. We therefore ask you not to send sensitive data by unencrypted email, but to use either encrypted communication channels (such as our contact form) or the postal service.
Storage Period
If we have not already informed you specifically about the storage period with regard to individual data processing, the following applies: We only store your personal data for as long as necessary for the respective processing purposes and then delete it immediately, insofar as there are no legal retention obligations to delete it.
Data Security
We have extensive technical and operational safeguards in place to protect your data from accidental or intentional manipulation, loss, destruction, or access by unauthorised persons. Our safety procedures are regularly checked and adapted with the latest technological advancements.
In particular, our website uses SSL or TLS encryption to ensure the security of data processing. You can recognise an encrypted connection by the fact that the address line of the browser contains an "https://" instead of an "http://", as well as the lock symbol in your browser line.
Data Transfer
We generally process your data for contractual purposes. In this context, the recipients of your data may be:
the companies of the Funk Group, insurers (with whom your contract is concluded), experts (in particular for the assessment of claims and service cases) and IT service providers (e.g., hosting service providers, maintenance service providers).
Your Rights
You have the following rights towards us regarding your personal data:
General Rights
You have a right to access, rectification, cancellation, restriction of processing, objection to processing and data transferability. If processing is based on your consent, you have the right to withdraw this consent with effect for the future.
Rights in data processing according to the legitimate interest
In accordance with Art. 21 (1) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 (1) (e) GDPR (data processing in the public interest) or on Art. 6 (1) (f) GDPR (data processing to protect a legitimate interest); this also applies to profiling based on this provision. If you object, we will no longer process your personal data unless compelling legitimate grounds for the processing override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Rights Related to Direct Advertising
If we process your personal data in order to carry out direct advertising, you have the right pursuant to Art. 21 (2) GDPR to object at any time to the processing of personal data concerning you for the purpose of such advertising, including profiling in so far as it is related to such direct marketing.
In the event of your objection to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
Right to File a Legal Complaint with a Supervisory Authority
You also have the right to lodge a complaint to a data protection supervisory authority concerning our processing of your personal data.
The supervisory authority responsible for us:
The Hamburg Commissioner for Data Protection and Freedom of Information of the Free and Hanseatic City of Hamburg – Corporation under public law, Ludwig-Erhard-Str 22, 7. OG, 20459 Hamburg