Privacy Policy

Taswiq Media (Einzelunternehmen)

Karim Azzaoui

Taunusanlage 8

60329 Frankfurt am Main

Email: info@antragsbruder.de

We process personal data in compliance with the principles of data minimisation, purpose limitation, transparency and security of processing pursuant to Art. 5 GDPR. We only collect the data required to handle your request.

• Contact details (name, email address, optionally phone number)
• Documents you submit and their contents (e.g. official correspondence)
• Information you provide as part of your request
• Technical usage data when visiting our website (e.g. server log data)

We process your data to handle your request and to provide our services (Art. 6(1)(b) GDPR), on the basis of your consent (Art. 6(1)(a) GDPR), and to safeguard legitimate interests, such as ensuring the operation of our website (Art. 6(1)(f) GDPR).

Your data is only disclosed to the extent necessary to process your matter, where legally required, or where you have consented. We do not sell your data to third parties.

We store your data only as long as necessary to handle your request and to fulfil statutory retention obligations. It is then deleted or anonymised.

• Profile data (name, email, details in your profile): until you delete your account.
• Case data (facts recorded, assessment results, actions): until you delete it or your account; without activity it is deleted 24 months after the last change.
• Uploaded documents: until you delete them; in addition, no later than 12 months after upload.
• Document information including automatically recognised text (for scanned documents): as long as the document itself, at most 12 months.
• Contact requests submitted via the form: 6 months after processing is completed.
• Invoice and payment records: 10 years (statutory retention, Section 147 AO, Section 257 HGB).
• Technical access logs of our hosting providers: a few days, then deleted automatically.
• Statutory retention duties and the assertion of legal claims may exceptionally delay deletion; in that case the data is blocked for other purposes.

You can delete your account, case data and documents yourself at any time under Account & data.

We use strictly necessary cookies only. When you sign in, our authentication service stores a session cookie (name starts with sb-, contains the session token); it keeps you signed in until you sign out and is deleted on sign-out or when the session expires. The legal basis is strictly necessary storage under Section 25(2) no. 2 TDDDG, which does not require consent. Statistics cookies are set only with your consent (see the Google Analytics section); there are no ad networks and no profiling. Server logs of our hosting providers (Vercel, Supabase) necessarily contain IP addresses and are deleted automatically after a short period.

You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to the processing of your data. You may also withdraw consent already given at any time with effect for the future. Please contact us at info@antragsbruder.de.

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

We employ technical and organisational measures to appropriately protect your data. You can find more about our principles on our Security & Privacy page.

With your consent we use Google Analytics 4 for audience measurement (provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). Nothing is loaded without consent. Legal basis: consent, Art. 6(1)(a) GDPR, Section 25(1) TDDDG. Google Analytics 4 does not store IP addresses; data is processed in the EU. Transfers to the USA are based on the EU-US Data Privacy Framework. Cookies (e.g. _ga) last up to 2 years, data is deleted after 14 months. Google Analytics runs only on public information pages (e.g. home, guides, FAQ, contact, legal); it is disabled on calculators, application and check flows, share links, sign-in and the account. The page address is sent without parameters. You can withdraw consent at any time via "Cookie settings" in the footer. More: https://policies.google.com/privacy

We use service providers for operation and delivery: Vercel (hosting), Supabase (database and login) and Resend (email delivery). They process data on our behalf (Art. 28 GDPR); some are based in the USA. For transfers to the USA we rely on the EU Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR). Requests from the contact form are sent to our mailbox by email and kept there until the case is closed – not in a database of ours. The contact form does not ask for health, medical certificate or ID data.

We update this privacy policy whenever our processing activities or the legal framework change.