Privacy Policy

1. Data Controller

The controller for data processing on this website under the GDPR is CommerzCrediet GmbH, Westhafen Tower, Speicherstraße 55, 60327 Frankfurt am Main, Germany, Email: datenschutz@commerzcrediet.de.

Our company data protection officer can be reached at the above postal address marked “To the Data Protection Officer” or directly via email at datenschutz@commerzcrediet.de.

2. Data Protection Officer

Datenschutzbeauftragter der CommerzCrediet GmbH, Speicherstraße 55, 60327 Frankfurt am Main, datenschutz@commerzcrediet.de

3. Server Log Files and Website Hosting

• Every time our website is accessed, our web servers automatically collect technical system data from the accessing device.
• Collected data includes: user IP address, date and time of request, volume of data transferred, file accessed, operating system, browser type and version, and referrer URL.
• The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in delivering reliable connections, technical administration and cyber-security. These logs are never merged with personal data sources and are deleted or anonymised after 14 days.

4. Processing for Loan Enquiries and Pre-assessment

• When submitting a non-binding loan enquiry via our online platform, we collect and process the personal details provided (full name, date of birth, address, email, telephone, employment details, net monthly income, housing status and ongoing liabilities).
• The purpose is to assess your borrowing criteria, identify suitable lending partners and broker the requested credit agreement.
• The legal bases are Art. 6(1)(b) GDPR (pre-contractual steps at the request of the data subject) and Art. 6(1)(a) GDPR (your explicit consent to transmit details to selected partner banks).

5. Credit Scoring and SCHUFA Neutrality

• To prepare concrete loan offers, we forward your enquiry data to verified partner credit institutions upon your consent.
• Crucial notice regarding credit score neutrality: During the rate comparison phase, partner institutions exclusively submit so-called “Konditionenanfragen” (soft rate enquiries). This feature is entirely score-neutral: it does not affect your SCHUFA score and is invisible to other banks.
• Only once you accept a binding loan offer and sign the credit agreement will the lender report the finalized loan to credit bureaus under Art. 6(1)(b) GDPR.

6. Customer Contact and Complaints Management

When contacting us via email, phone or contact form, we process your information to address your enquiry (Art. 6(1)(b) and (f) GDPR).

Customer complaints are documented systematically to satisfy statutory supervisory requirements (§ 34i GewO, MaBV) and maintain internal service quality (Art. 6(1)(c) GDPR).

7. Cookies, Consent Management and Web Analytics

• Our website uses technically necessary cookies to maintain core functions such as language preferences, accessibility configurations and cookie consents (§ 25(2) TDDDG, Art. 6(1)(f) GDPR).
• Analytical and marketing services (such as Google Analytics 4, Google Ads conversion tracking with Google Consent Mode v2) are activated exclusively following your voluntary and explicit consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR).
• You can update or withdraw your consent at any time via the “Cookie settings” link in the footer of this website.

8. Retention Periods and Statutory Archive Requirements

• We process and store your personal data solely for as long as required to fulfil the respective purpose.
• If a loan enquiry does not lead to a signed credit contract, enquiry details are deleted after 6 months, unless extended retention was agreed.
• For completed agreements, statutory commercial and fiscal retention requirements apply under §§ 257 HGB and 147 AO (typically 6 to 10 years).

9. Data Transmission to Third Parties and Processors

Your data is transmitted solely to lending partner banks for credit assessment, to rigorously audited IT processors bound by Art. 28 GDPR agreements, or to competent authorities where legally mandated.

We categorically refuse any commercial sale or transfer of user data for third-party advertising purposes.

10. Your Rights Under the GDPR

• You have the right to obtain confirmation as to whether your personal data is processed, together with free access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR).
• You also hold the right to data portability (Art. 20 GDPR) and the right to object to processing (Art. 21 GDPR).
• You may withdraw any granted consent at any time with future effect without providing justification (Art. 7(3) GDPR).
• You also have the right to lodge a complaint with a competent supervisory authority. The responsible authority for Hesse: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany – www.datenschutz.hessen.de.

11. SSL/TLS Security Architecture

For security reasons and to protect the transmission of confidential loan data, this website employs state-of-the-art 256-bit SSL/TLS 1.3 encryption throughout.