Privacy Policy
Last updated: September 2026
Finsoul Network Germany takes the protection of personal data seriously.
This Privacy Policy explains how we collect and process personal data through our website and related business activities, the legal grounds on which processing may take place, how long data may be retained, and the rights available to individuals under applicable data protection law.
This policy is intended to reflect the requirements of the General Data Protection Regulation (GDPR) and applicable German data protection and telecommunications rules.
Controller
The controller responsible for data processing is:
Finsoul Network Germany
Email: info@finsoulnetwork.com
General Information About Data Processing
We process personal data only where this is necessary for a defined business, contractual, technical or legal purpose.
Depending on the activity involved, processing may be based on:
- Consent
- Performance of a contract
- Steps taken before entering into a contract
- Compliance with a legal obligation
- Legitimate interests pursued by Finsoul Network Germany or a third party
- Other legal grounds permitted under the GDPR
The specific legal basis depends on the circumstances of the processing.
Personal Data We May Collect
We may process personal data including:
- Name
- Company name
- Job title
- Business address
- Email address
- Telephone number
- Information contained in enquiries
- Information relating to consulting engagements
- Contractual and business correspondence
- IP address
- Browser type
- Device information
- Website usage data
- Server log information
We aim to limit data collection to information reasonably necessary for the relevant purpose.
Server Log Files
When you visit our website, technical information may automatically be transmitted by your browser and recorded in server logs.
This information may include:
- IP address
- Date and time of access
- Requested page or file
- Browser type and version
- Operating system
- Referring website
- Host name or device information
Server log data may be processed for website security, technical operation, troubleshooting and protection against misuse.
Contact Forms
If you contact us using a website form, we process the information you provide so that we can review and respond to your enquiry.
The legal basis may depend on the nature of the enquiry.
Where the enquiry relates to a potential contract or consulting engagement, processing may be necessary in order to take steps prior to entering into a contract.
For other business enquiries, processing may be based on our legitimate interest in responding to relevant communications.
Email and Telephone Enquiries
When you contact Finsoul Network Germany by email or telephone, we may process your contact information and the content of the communication.
We may retain correspondence where necessary for:
- Responding to your request
- Managing a business relationship
- Preparing an engagement
- Meeting documentation requirements
- Establishing or defending legal claims
Legal Bases Under the GDPR
Depending on the processing activity, we may rely on legal bases including:
Article 6(1)(a) GDPR – Consent: Where you have voluntarily agreed to specific processing.
Article 6(1)(b) GDPR – Contract: Where processing is necessary for a contract or pre-contractual steps.
Article 6(1)(c) GDPR – Legal obligation: Where processing is required by law.
Article 6(1)(f) GDPR – Legitimate interests: Where processing is necessary for a legitimate business interest and those interests are not overridden by your rights and freedoms.
Cookies and Similar Technologies
Our website may use cookies and similar technologies.
Some technologies may be technically necessary for the website to function correctly. Others may be used for analytics, preferences, embedded content or marketing purposes.
Where consent is legally required, non-essential technologies will be used only after valid consent has been obtained.
Consent may be managed through a cookie banner or consent management platform.
Necessary Cookies
Necessary cookies may be used to:
- Maintain website functionality
- Provide security
- Store technical preferences
- Maintain consent settings
- Prevent misuse
These technologies may be used where they are strictly necessary for the service requested by the user.
Non-Essential Cookies
Non-essential technologies may include:
- Analytics cookies
- Advertising or marketing cookies
- Tracking technologies
- Social media integrations
- Embedded third-party content
Where legally required, these technologies will not be activated until the user has provided valid consent.
Cookie Consent Management
Where a consent management tool is used, your cookie preferences may be stored so that the website can remember your choices.
Consent may be withdrawn or changed at any time using the relevant consent settings available on the website.
Current consent platform, if applicable: [insert platform]
Website Analytics
We may use analytics services to measure website performance and understand how visitors interact with our content.
Analytics may collect information including:
- IP address
- Device information
- Browser information
- Pages viewed
- Session information
- Referral source
- Website interaction data
Analytics provider, where applicable: [Google Analytics / Matomo / other provider]
Where consent is required, analytics will be activated only after consent has been provided.
Embedded Content and Third-Party Services
Our website may contain third-party technologies or embedded services such as:
- Video platforms
- Maps
- Captcha services
- Social media integrations
- Analytics tools
- Communication systems
- Marketing technologies
These services may process personal data or establish connections with third-party servers.
Where legally required, such services will be blocked until appropriate consent is given.
Service Providers and Processors
We may use external service providers to support our website and business operations.
These may include:
- Website hosting providers
- IT support providers
- Cloud service providers
- CRM providers
- Communication providers
- Professional advisers
- Analytics providers
- Website developers and administrators
Where service providers process personal data on our behalf, appropriate contractual arrangements may be implemented as required under the GDPR.
Recipients of Personal Data
Personal data may be shared with:
- Companies within the wider Finsoul Network
- Service providers acting on our behalf
- Professional advisers
- Regulators
- Courts
- Government authorities
- Other recipients where disclosure is legally required
We do not sell personal data.
International Data Transfers
Some service providers or Finsoul Network entities may be located outside Germany or the European Economic Area.
Where personal data is transferred to a country outside the EEA, we aim to ensure that the transfer is supported by a valid legal mechanism.
This may include:
- An adequacy decision
- Standard Contractual Clauses
- Other safeguards recognised under the GDPR
Additional technical or organisational protections may be implemented where appropriate.
Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected or where retention is required by law.
Retention periods may depend on:
- Contractual obligations
- Tax rules
- Commercial law requirements
- Accounting obligations
- Statutory limitation periods
- Legal claims
- Business administration needs
When personal data is no longer required, it is deleted, anonymised or otherwise securely handled where appropriate.
Data Security
We implement appropriate technical and organisational measures designed to protect personal data from:
- Accidental loss
- Unauthorised access
- Unlawful disclosure
- Alteration
- Destruction
- Improper processing
Measures may include access controls, system security, secure communications and internal organisational safeguards.
Your Rights Under the GDPR
Depending on the circumstances, you may have the following rights:
Right of access: You may request information about the personal data we process about you.
Right to rectification: You may request correction of inaccurate or incomplete personal data.
Right to erasure: You may request deletion of personal data where the legal requirements are met.
Right to restriction: You may request restriction of processing in certain circumstances.
Right to data portability: You may request personal data in a structured, commonly used and machine-readable format where applicable.
Right to object: You may object to certain processing carried out on the basis of legitimate interests.
Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time for future processing.
Right to Object
Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you may object at any time to processing for those purposes.
Withdrawal of Consent
Where processing is based on consent, you may withdraw that consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before the consent was withdrawn.
Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that your personal data has been processed unlawfully.
The appropriate supervisory authority may depend on the location of the controller or the circumstances of the processing.
Automated Decision-Making
Finsoul Network Germany does not currently intend to use solely automated decision-making producing legal or similarly significant effects unless clearly disclosed and permitted under applicable law.
Direct Marketing
Where we send marketing communications, we will do so only where legally permitted.
Where consent is required, communications will be sent only after appropriate consent has been obtained.
Recipients may unsubscribe from marketing communications at any time.
Third-Party Links
Our website may contain links to websites operated by third parties.
Finsoul Network Germany is not responsible for the data protection practices, content or security of external websites.
You should review the privacy information provided by the relevant third party before submitting personal data.
Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in:
- Legal requirements
- Website functionality
- Business practices
- Technology
- Third-party services
- Data processing activities
The latest version will always be made available on this page.