Privacy Policy
Last updated: January 2026
KlarBudget ("we", "us", "our") takes the protection of your personal data seriously. This Privacy Policy explains what personal data we collect when you visit klarbudget.com or use our services, why we process it, on what legal basis, how long we keep it, and what rights you have under the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
1. Data Controller
The controller responsible for the processing of your personal data is:
KlarBudget
Leopoldstraße 47
80802 München, Germany
Email: [email protected]
Phone: +49 711 387 6427
2. Categories of Personal Data We Collect
2.1 Data provided directly by you
- Contact form data: name, email address, phone number (optional), and the content of your message.
- Newsletter data: email address, where you have subscribed to our communications.
- Client account data: company name, billing details, contact persons and financial planning data you upload to the platform.
2.2 Data collected automatically
- IP address (shortened where possible), date and time of access, requested pages, referrer URL, browser type and version, operating system.
- Cookie and similar technology data, as described in our Cookies Policy.
3. Purposes and Legal Bases of Processing
We process your personal data only where a legal basis under Art. 6 GDPR applies:
- Consent (Art. 6(1)(a) GDPR): for optional cookies, marketing communications and newsletters. You may withdraw consent at any time with effect for the future.
- Contract performance and pre-contractual measures (Art. 6(1)(b) GDPR): to respond to your quote requests, provide our budget allocation services, manage your account and process payments.
- Legal obligations (Art. 6(1)(c) GDPR): to comply with commercial and tax retention obligations under the German Commercial Code (HGB) and the Fiscal Code (AO).
- Legitimate interests (Art. 6(1)(f) GDPR): to ensure the security and stability of our website, analyse usage in aggregate form, and defend against legal claims.
4. Cookies and Similar Technologies
We use technically essential cookies required for the operation of the website. Optional analytics and marketing cookies are set only after you have given your consent via our cookie banner. You may change or withdraw your cookie preferences at any time. Detailed information on the cookies we use, their providers and retention periods is available in our Cookies Policy.
5. Disclosure to Third Parties and Transfers Outside the EEA
Your personal data is processed by our team and, where necessary, by carefully selected service providers acting as processors under Art. 28 GDPR (e.g. hosting providers, email delivery services, accounting tools). We do not sell your data.
Where data is transferred to countries outside the European Economic Area, such transfers occur only on the basis of an adequacy decision of the European Commission or appropriate safeguards such as the EU Standard Contractual Clauses, together with supplementary technical and organisational measures.
6. Retention Periods
We store personal data only as long as necessary for the purposes described:
- Contact form enquiries: up to 12 months after the correspondence has been concluded, unless a business relationship follows.
- Contract and billing data: 6 to 10 years as required by German commercial and tax law.
- Server log files: typically 7 to 30 days.
- Cookie consent records: up to 12 months.
Where longer retention is required by law or necessary for the establishment, exercise or defence of legal claims, we will restrict processing accordingly.
7. Data Security
We maintain technical and organisational measures appropriate to the risk, including TLS encryption for data in transit, encryption of stored data, access controls, regular security reviews and staff confidentiality obligations. Our platform infrastructure is operated in accordance with recognised information security standards.
8. Your Rights as a Data Subject
Under the GDPR you have the right to:
- Access your personal data (Art. 15 GDPR);
- Rectification of inaccurate data (Art. 16 GDPR);
- Erasure of your data (Art. 17 GDPR);
- Restriction of processing (Art. 18 GDPR);
- Data portability (Art. 20 GDPR);
- Object to processing based on legitimate interests (Art. 21 GDPR);
- Withdraw consent at any time (Art. 7(3) GDPR).
To exercise any of these rights, contact us at [email protected]. We will respond within one month of receipt of your request.
You also have the right to lodge a complaint with a supervisory authority, in particular the Bavarian State Office for the Supervision of Private-Sector Data Protection (BayLDA), which is responsible for our registered office.
9. Data Protection in Application Procedures and Business Relationships
Where you provide financial or business data as part of an engagement with KlarBudget, we process such data strictly for the agreed purposes, under the relevant service agreement and, where applicable, a data processing agreement. Client data is never used for our own marketing purposes without separate consent.
10. Changes to This Privacy Policy
We may update this Privacy Policy to reflect legal or technical developments. The current version is always available on this page. Material changes will be communicated on our website or, where required, by email.
11. Contact for Data Protection Matters
For questions, requests or complaints regarding the processing of your personal data, please contact:
KlarBudget
Leopoldstraße 47, 80802 München, Germany
Email: [email protected]
Phone: +49 711 387 6427