Data Privacy

Thank you for visiting my website. The secure handling of your data is particularly important to me. I would therefore like to inform you in detail about the use of your data when visiting my website.

Responsible body

The responsible body is Dr. Uwe Glässner. Contact by Mail at info@predict-fi.com. You can find additional contact information in the legal notice.

Please read this privacy policy carefully. You are hereby informed about the processing of personal data of persons using this website.

Personal data is any data by which you could be personally identified. These individual details include, for example, your name or your contact details, such as telephone number, address and e-mail address, but also your network address (IP address).

In the following, the EU’s General Data Protection Regulation will be abbreviated as DSGVO. The official abbreviation is DS-GVO, but it is a bit more bulky.

What data is collected on this website?

During the mere informational use of this website, i.e. if you do not register or otherwise transmit information to me, only such data is collected that your browser transmits to my server for technically necessary reasons. When you access my website, the following data is collected, which is technically necessary to display the website to you:

1. IP address (network address)

• Address of the website you came from
• Address of the retrieved files
• Date and time of a retrieval
• as well as operating system and browser version of your terminal device, if applicable

The collection of data initially only means that I (usually actually only my server) can factually gain knowledge of this data. Collecting data does not mean that data is stored. However, some of the data just mentioned are stored in log files. This does not include the IP address. IP addresses are stored, if at all, only for specified purposes and for a specified duration. The duration is a maximum of five days, unless otherwise specified. The purposes are only those that are in my legitimate interest to ensure the operation of this website. This includes the defense against malicious attacks or excessive use of my offer.

If your network address would not be transmitted to my server, it would not even know to whom to show the web page. This is analogous to a letter: If the sender is missing, the recipient cannot reply.

When using this data, I do not draw any conclusions about your person. Rather, the information collected is only required for the following purposes:

• Ensuring a smooth connection setup of the website
• Ensuring a comfortable use
• evaluation of system security and stability
• other administrative purposes.

I reserve the right to perform statistical evaluations of anonymized data records. This means for example: I would like to know which post on my website was accessed how often.

I do not perform a so-called fingerprinting, because it would be tantamount to tracking your activities. Fingerprinting is the evaluation of your digital fingerprint, which can be derived from the above-mentioned data that are transmitted when you visit a website.

The legal basis for my data processing is Art. 6 para. 1 f DSGVO. The legitimate interest follows in this respect from the purposes for data collection listed above. The anonymously collected data of the server log files are always stored separately from any personal data provided by a data subject. A combination is not possible.

2. Cookies

On this website we only use technically required cookies. On the simulator page we create one session cookie plus a local session-memory which stores the input data of your analysis for the duration of the session (you can find further details in section 3). On pages where comments are allowed (e.g. Blog posts) a cookie will be created when you post a comment. This cookie allowes e.g. to edit your comment within the first 15min after creating it.

3. Input- and Result-Data of the Simulator

I am aware that you might consider the financial input data as well as the simulator result data to contain particularly sensitive information. Therefore I would like to explain the processing of this data in a bit more detail.

To make the use of the simulator easier, the input data of your analysis is stored in the URL of your own browser for the duration of the browser session until you close the browser window or tab. The URL is structured as follows: The address of the simulator is https://simulator.predict-fi.com/en followed by a query-string, which contains the currently used tabs and subtabs of the simulator in the format e.g. “?tab1=swr&tab22=exact”. After that there is a hash-string with the format “#eyJob…” which contains the input data of the simulator. On the server we log the address of the simulator together with the query-string to allow a statistical analysis of the most-used functions of the simulator. However, the actual input data contained in the hash-string is never logged and never stored anywhere else on the server.

The result data of the simulator is only stored on the server during the actual processing of the calculation and will be immediately deleted afterwards. This is ensured because the result data is only transmitted back to the browser and is stored nowhere else. Furthermore the simulator is executed within an isolated so called Docker-container, which does not exchange data with the actual host system. This double provision ensures that no result data reaches the actual server and therefore prevents any storage of such data there. Neverthelesse you can always download the result data as Excel file if you want to compare the numbers with your own results. Additionally you can store the current state of the analysis as a bookmark in your own browser and continue your analysis when you reload this bookmark.

With these measures I want to make sure that you keep this particularly sensitive information always under your own control. Since the use of the simulator is possible anonymously and without registration, a combination of input and result data could only be done to your IP address. As described above, this IP address will be deleted after the specified duration and only stored for the desribed specific purposes.

If you want to make sure that all data including local data is deleted after finalizing your analysis, it is sufficient to close the browser window or the browser tab and delete the local copies of any downloaded file on your computer.

4. Hosting of this Webseite

In the context of processing on my behalf, a third-party provider located within a country of the European Union provides the services for hosting and displaying the website for me and provides infrastructure services, computing capacity, storage space and database services, maintenance services and security services for this purpose. In doing so, I or my hosting provider process all data that accrue in the context of the use of my website. This is inventory data, content data, usage data, meta and communication data of interested parties and visitors to my online offer.

The processing is based on my legitimate interest in an efficient and secure provision of this online offer (Art. 6 para. 1 f DSGVO in conjunction with Art. 28 DSGVO).

5. Your Comments on contributions

Comments can be entered voluntarily for individual contributions. This allows a discussion of the contribution. The only mandatory field is the comment. Name and e-mail address can be entered voluntarily to enable communication with you as the commenter. Your information will only be used to contact you regarding your comment and further resulting communication with you. For example, I may write to you, weighing your interests and mine, if you address your email address and if I find your comment particularly good or worthy of discussion.

6. Communication via E-Mail

If you have contact with me via email, the processing of the email adress is necessary for technical reasons and therefore due to legimiate interest. The same holds true when I email you and did receive your email address either from you or through a public source. Your email address and the content of your email will not be passed on to third parties, except you wanted this or explicitly gave your permission or it is necessary due to other legal reasons.

How long will your data be stored?

The data processed by me will be processed, deleted or its processing restricted by me in accordance with Art. 17 and Art. 18 DSGVO. As a matter of principle, I store your personal data, which is generated during the use of this website, only as long as this is necessary for the above-mentioned purposes. However, if the deletion conflicts with legal retention obligations, the processing of the data will only be restricted, i.e. they will be blocked for further use and cannot be processed for other purposes.

The following record and retention obligations are particularly relevant: 6 years in accordance with Section 257 (1) HGB (for commercial books, inventories, opening balances, annual financial statements, commercial letters, accounting vouchers, etc.), 10 years in accordance with Section 147 (1) AO (books, records, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.). In addition, personal data may be retained for the period during which claims may be asserted against me (statutory limitation period of three or up to thirty years).

Purpose of processing your data and legal basis

I process the data that is generated by visiting this website or using the contact options offered in accordance with the provisions of the DSGVO and the Federal Data Protection Act (BDSG). Depending on the request for which you contact me via the website, there are different legal bases for this. The specific legal basis for data processing depends on the context in which and the purpose for which I receive your data. As a rule, the legal basis for data processing results from the following possibilities:

Art. 6 (1) a DSGVO serves as the legal basis for processing operations in which I obtain consent for a specific processing purpose. Consent given can be revoked at any time.

If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, the processing is based on Art. 6 (1) b DSGVO.

If I am subject to a legal obligation by which the processing of personal data becomes necessary, such as for compliance with tax obligations, the processing is based on Art. 6 (1) c DSGVO.

Ultimately, processing operations could be based on Art. 6 (1) f DSGVO. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to protect my legitimate interests or those of a third party, provided that the interests, fundamental rights and freedoms of the data subject are not overridden.

Disclosure of your personal data to third parties?

IP addresses are automatically transmitted to the server where the website is operated when you visit a website. A transfer of these IP addresses to third parties inevitably occurs whenever a third party component (a script, an image, a font, any other digital resource) is embedded on the website. Which components are embedded on this website is listed in this privacy policy. The recipients of your IP address or categories of recipients can also be derived from this.

A transfer of your personal data to third parties for purposes other than those listed below does not take place. I will only pass on your personal data to third parties if:

• you have given your express consent to do so in accordance with Art. 6 (1) a DSGVO,
• the disclosure is necessary according to Art. 6 para. 1 f DSGVO for the assertion, exercise or defense of legal claims and there is no reason to believe that you have an overriding legitimate interest in not disclosing your data,
• in the event that there is a legal obligation for disclosure pursuant to Art. 6 (1) c DSGVO, as well as
• this is legally permissible and necessary according to Art. 6 para. 1 b DSGVO for the processing of contractual relationships with you.

Which data protection rights do you have?

You have the right to:

• According to Art. 15 DSGVO, to request information about your personal data processed by me. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it was not collected from me, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;
• in accordance with Art. 16 DSGVO, to immediately request the correction of incorrect or completion of your personal data stored by me;
• pursuant to Art. 17 DSGVO, to request the deletion of your personal data stored by me, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;
• pursuant to Art. 18 DSGVO, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and I no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO;
• pursuant to Art. 20 DSGVO, to receive your personal data that you have provided to me in a structured, common and machine-readable format or to request that it be transferred to another controller;
• in accordance with Art. 7 (3) DSGVO, to revoke your consent once given to me at any time. This has the consequence that I may no longer continue the data processing based on this consent for the future; and
• pursuant to Art. 77 DSGVO, you have the right to complain to a supervisory authority, without prejudice to any other administrative or judicial remedy. As a rule, you can contact the supervisory authority of your usual place of residence or place of work or the place of the alleged infringement for this purpose, if the data subject believes that the processing of personal data concerning him or her violates the DSGVO.

Revocation of your consent

If you consented into a specific data procession, like a newsletter, this can be revoked at any time.

Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.

Links to other websites

This website may contain links to third-party websites or to other websites of my own. If you follow a link to one of these websites, I advise you that these websites have their own privacy policies and that I do not accept any responsibility or liability for these policies. Please review these privacy policies before voluntarily providing any personally identifiable information to these websites.

Only when you click on an external link, data is transferred to the link destination. This is technically necessary due to the protocol on which the Internet is based (TCP – Transfer Control Protocol). The transmitted data are in particular: Your IP address, the time at which you clicked on the link, the page on which you clicked on the link, as well as other information mentioned under Paragraph II No. 1 of this notice.

Individual links may involve a data transfer to non-European countries. As a result, it may be possible that foreign third parties, authorities or intelligence services receive connection data. If you do not want the mentioned data to be transmitted to the link destination or to the mentioned third parties or to be tapped by others, do not click on the link.

Changes to this privacy policy

This privacy policy can change if the legal situation or this online offer or the type of data collection changes. However, this only applies with regard to statements on data processing. If the user’s consent is required or if components of the data protection declaration contain a regulation of the contractual relationship with users, the data protection declaration will only be changed with the user’s consent.

Therefore, please inform yourself about this data protection declaration if necessary, especially if you provide personal data.

Thanks

This privacy protection text is based on templates and very informative insights and information by https://dr-dsgvo.de/ for which I am extremely thankful.