Privacy Policy

Privacy Policy

1. Controller
The controller within the meaning of the General Data Protection Regulation and other data protection provisions is:

Actuarius GmbH
Viehmarkt 5
92318 Neumarkt i.d.OPf.
Germany

Telephone: +49 9181 522 901 0
Email: info@veranto.de

Veranto is a product of Actuarius GmbH.

2. Data protection contact
If you have any questions about data protection or wish to exercise your data protection rights, please contact us:

Email: datenschutz@actuarius.de

3. General information on the processing of personal data
We process personal data only insofar as this is necessary to provide our website and services, you provide us with data in connection with an enquiry or business relationship, a legal obligation exists, we have a legitimate interest in the processing, or you have consented to the processing.

Personal data means any information relating to an identified or identifiable natural person. This may include, in particular, your name, address, contact details, IP address, communication content, technical usage data and information you provide to us in connection with an enquiry or appointment booking.

4. Hosting and server log files
This website is hosted by ALL-INKL.COM – Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.

When you access our website, the web server processes information that is technically necessary. This may include, in particular, the IP address, date and time of access, the page or file accessed, referrer URL, browser type and version, operating system used and technical status information.

The processing is carried out to provide our website securely and reliably, to analyse errors and to detect and prevent misuse and attacks.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and functional operation of our website.

Where ALL-INKL.COM processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Article 28 GDPR.

Server log data is stored only for as long as necessary for the purposes stated. It may be stored for longer where this is necessary to investigate a specific security incident or to comply with legal obligations.

5. SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. An encrypted connection can be identified in particular by the website address beginning with “https://”.

6. Cookies and similar technologies
Our website uses cookies and similar technologies. Some of these technologies are technically necessary to provide the website and functions you have expressly requested. Other technologies, particularly those used for analytics or statistical purposes, are used only if you have given your prior consent.

Where required by law, we obtain your prior consent for cookies that are not technically necessary and for similar access to information on your device. The legal basis for accessing or storing information on your device is Section 25 TDDDG. For services requiring consent, the subsequent processing of personal data is based in particular on Article 6(1)(a) GDPR.

Technically necessary cookies and similar technologies may be used without prior consent insofar as they are strictly necessary to provide a digital service expressly requested by you.

7. Consent management with Real Cookie Banner
We use Real Cookie Banner on this website to manage and document your consent to cookies and similar technologies.

Information about the privacy and cookie settings you have selected is stored for this purpose. This is necessary so that your decision can be documented and taken into account on subsequent visits.

The processing is carried out to fulfil our legal obligations to obtain and document consent on the basis of Article 6(1)(c) GDPR and, additionally, on the basis of Article 6(1)(f) GDPR.

You can change or withdraw your consent and settings at any time with effect for the future via the “Cookie Settings” section provided on the website.

8. Contact by email and telephone
If you contact us by email or telephone, we process the personal data you provide in order to handle and respond to your enquiry.

If your contact relates to the initiation or performance of a contractual relationship, the processing is based on Article 6(1)(b) GDPR. Other business or general enquiries are processed on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in the proper handling of and response to enquiries.

The data will be deleted as soon as it is no longer required to handle the enquiry and no statutory retention obligations or other legitimate grounds require further storage.

9. Contact form
We provide contact forms on our website. When you use a contact form, we process the data you enter. This may include, in particular, your name, email address, company or organisation, telephone number, selected topic and the content of your message.

The data is processed to handle your enquiry, contact you and, where applicable, prepare or conduct a business relationship.

For pre-contractual or contractual enquiries, the legal basis is Article 6(1)(b) GDPR. Other enquiries are processed on the basis of Article 6(1)(f) GDPR. Where you expressly consent to additional processing, Article 6(1)(a) GDPR is the legal basis.

You may withdraw your consent at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.

10. Appointment booking via Calendly
Our website allows you to arrange appointments and introductory consultations via Calendly. The provider is Calendly LLC, USA.

When you use the appointment booking function, the personal data necessary to organise and conduct the appointment is processed. This may include, in particular, your name, email address, requested appointment, information about your company and other information you voluntarily provide during the booking process.

The processing is carried out to arrange, prepare and conduct the appointment you requested. Where the appointment relates to the initiation or performance of a contractual relationship, processing is based on Article 6(1)(b) GDPR. Other appointment bookings may be processed on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in efficient and user-friendly appointment scheduling.

As a rule, Calendly processes personal data in connection with appointment bookings as a processor on our behalf. Calendly’s data protection agreements, including its Data Processing Addendum, apply.

When Calendly is used, personal data may be processed in the USA and, where applicable, other countries outside the European Union or the European Economic Area. Calendly provides appropriate transfer mechanisms for international data transfers in accordance with data protection requirements, in particular the EU-U.S. Data Privacy Framework and, additionally, the European Commission’s Standard Contractual Clauses.

Where Calendly is embedded directly into our website and loading it would establish a connection requiring consent, the service is loaded only after you have given your consent. You may withdraw your consent at any time with effect for the future via our Cookie Settings.

Data processed in connection with an appointment is generally stored only for as long as necessary for scheduling, conducting and following up the appointment and for compliance with any statutory retention obligations.

11. Google Analytics
We use Google Analytics to statistically analyse and improve our website. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, may also be involved in providing the service.

Google Analytics is activated on our website only if you have previously consented to the use of the service through our Cookie Settings.

Google Analytics processes information about the use of our website. This may include, for example, pages viewed, the time and duration of visits, interactions with the website, technical information about the browser and device, approximate location information, referrer information and pseudonymous identifiers.

Google Analytics may use its own cookies or similar identifiers to statistically evaluate repeat visits and interactions.

Google states that individual IP addresses of users from the European Union, Switzerland and the United Kingdom are neither logged nor stored in Google Analytics. The IP address may initially be used to derive approximate location information and then discarded.

The legal basis for accessing or storing information on your device is your consent pursuant to Section 25(1) TDDDG. The legal basis for the subsequent processing of personal data is Article 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future via our Cookie Settings.

The retention period for data collected by Google Analytics is determined by the retention setting configured for our Google Analytics property and the respective processing purpose. Data is deleted as soon as it is no longer required for the respective purpose or the configured retention period has expired.

When Google Analytics is used, personal data may be processed in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework. Where its requirements are met, personal data may be transferred to the USA on the basis of the relevant adequacy decision.

12. Google Fonts
Fonts from Google Fonts are used on our website. Where these fonts are stored locally on our own web server and served from there, retrieving the fonts does not establish a connection to Google’s servers.

On individual pages or in connection with certain functions, Google Fonts may technically be loaded directly from Google’s servers. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google LLC, USA, may also be involved in providing the service.

When Google Fonts is retrieved externally, the browser establishes a connection to Google’s servers. In particular, the IP address of the internet connection used, the requested URL and HTTP header information such as browser and operating system information and the referrer URL are transmitted to Google.

According to Google, the Google Fonts Web API itself does not set or log cookies. Google also states that it does not use information received through Google Fonts to create user profiles or for targeted advertising.

Where Google Fonts is loaded from external Google servers and consent is required, loading occurs only after you have given your prior consent. The legal basis for access or transmission is Section 25(1) TDDDG in conjunction with your consent, and the legal basis for subsequent processing is Article 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future via our Cookie Settings.

Personal data may be processed in the USA in connection with Google Fonts. Google LLC is certified under the EU-U.S. Data Privacy Framework.

13. External links and social networks
Our website contains links to external websites and services of other providers and, where applicable, to social networks.

In the case of ordinary external links, a connection to the respective provider is generally established only when you actively open the relevant link. From that point onwards, further data processing is governed by the privacy provisions of the respective external provider.

The operator of the external website you access is generally responsible for the processing of personal data on that website.

14. Embedded content and external services
Individual pages may include content or services from external providers, such as videos, maps, appointment booking tools or other external media.

Where loading such a service transmits personal data to an external provider or accesses information on your device and consent is required, the service is activated only after you have given your prior consent.

You can view and manage the services currently available that require consent at any time through our website’s Cookie Settings.

15. Recipients of personal data
Personal data may be disclosed to internal departments and service providers that support us in operating our website, providing technical infrastructure, communication, analytics, appointment management or delivering our services.

These recipients may include, in particular, hosting and IT service providers, Google, Calendly and other external services actively selected by you.

Where service providers process personal data exclusively on our behalf, they are engaged on the basis of a data processing agreement pursuant to Article 28 GDPR.

In all other cases, we disclose personal data only where this is permitted or required by law, necessary to perform a contract, based on your consent or supported by another legal basis.

16. Transfers of personal data to third countries
When certain external services are used, personal data may be processed outside the European Union or the European Economic Area.

Such transfers take place only where the legal requirements of Articles 44 et seq. GDPR are met. This may be based, in particular, on an adequacy decision by the European Commission, certification of the recipient under the EU-U.S. Data Privacy Framework, appropriate safeguards such as the European Commission’s Standard Contractual Clauses, or another basis provided for by law.

Where a transfer to a third country depends on your consent, the relevant processing takes place only after you have given that consent.

17. Retention periods
As a rule, we store personal data only for as long as necessary for the respective processing purpose.

Data may be stored for longer, in particular where statutory retention obligations apply, the data is required to establish, exercise or defend legal claims, or another legal basis permits further storage.

Once the processing purpose no longer applies and the relevant statutory retention periods have expired, the data is deleted or anonymised.

18. Legal bases for processing
Where you have given us your consent, processing is based on Article 6(1)(a) GDPR.

Where processing is necessary to perform a contract or take steps prior to entering into a contract, it is based on Article 6(1)(b) GDPR.

Where processing is necessary to comply with a legal obligation, it is based on Article 6(1)(c) GDPR.

Where processing is necessary for the purposes of our legitimate interests or those of a third party and your interests, fundamental rights and freedoms do not override those interests, it is based on Article 6(1)(f) GDPR.

19. Your rights
Subject to the applicable statutory requirements, you have the right to obtain information about the personal data we process concerning you.

You have the right to have inaccurate personal data rectified and incomplete personal data completed.

Subject to the statutory requirements, you have the right to have your personal data erased and to have processing restricted.

Subject to the statutory requirements, you have the right to data portability.

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.

20. Right to object
Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.

Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time without stating reasons.

21. Right to lodge a complaint with a data protection supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes data protection law.

The supervisory authority generally responsible for us is:

Bavarian State Office for Data Protection Supervision
Promenade 18
91522 Ansbach
Germany
Website: www.lda.bayern.de

22. Automated decision-making
No decision-making based solely on automated processing, including profiling, within the meaning of Article 22 GDPR takes place in connection with the use of this website.

23. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy if our website, the services used or legal requirements change.

Last updated: August 2026