Privacy Policy

General

At Hypofriend, we attach great importance to data security and data protection. As a responsible and reliable partner, we see it as our duty to ensure both the security of data transmission and the completely confidential handling of your personal data.

We require and process your personal data in order to provide you with our website and its functions and to process your inquiries.

In the following, you will find detailed information on how we process your data when you browse our website or send us your data as part of an inquiry.

For the data collection and data processing responsible in the sense of the General Data Protection Regulation is the:

Hypofriend GmbH
Torstrasse 92
10119 Berlin

Your data are always collected, processed and used in compliance with relevant German and European data protection legislation.

Where we use your personal data for a purpose that requires your consent under the law, we will always request your explicit consent. Should you not give your consent, please note that you may be unable to use the service concerned.

If you use our service and/or create a customer account, a contractual relationship arises between you and Hypofriend according to our terms of use. The legal basis for the processing of your data and the transmission of your data to third parties takes place in principle to perform our contractual obligations or to be able to offer you the desired service.

Collection, Processing and Use of Personal Data

a. Visiting our website
You can visit our website and obtain information without having to provide any personal data. You therefore remain basically anonymous while visiting our site.

Connection details provided by your internet browser each time you view a page, such as the date, the time spent on the page or the name of your Internet Service Provider, are used by us without being linked to a person

b. Processing of personal data for registration, mortgage and insurance applications
If you would like to use our services to get advice on mortgages, insurances, certain offers and associated questions, we need the necessary relevant information from you, otherwise we will not be able to help you appropriately.

Please keep in mind that for adequate advice, many factors are considered important. We only want to ask you what is relevant - either because of the decision logic or because the institutions providing the loans or insurance services need or require such information.

We recommend that you register on our website so that you can keep an overview of the data you have provided. In the course of your registration, it is necessary for you to provide your email address and/or telephone number.

In order to provide advice and obtain mortgage and insurance offers, it is necessary to provide and process personal data, in particular:

• Identification information such as first- and surname
• Contact information
• Information needed for qualifying for a loan such as citizenship and whether income taxes are paid in Germany
• Information on the occupational status
• Information on income
• Years till retirement
• Information on co-borrowers
• Marital status, number of children
• Equity capital and homeownership
• Outstanding loans and other financial commitments
• Object information such as location, property type, square meters, number of rooms, year of construction, purchase prices, form of use
• Desired monthly loan payments

c. Processing of personal data by Hypofriend
Hypofriend collects, stores and uses your personal data that we receive from you or about you, to perform and process contracts. This means, for example, the transmission of your request to Hypofriend partners or the provision of offers and possible further queries in your user account.

Where we use third-party service providers, they will receive only the necessary data from us and they are also obliged to protect your personal data.

Your data are passed on to Third Parties only insofar as this is prescribed or permitted by the law, particularly if requested by investigative authorities or if you have given your express permission.

All data which you enter and save on our website are subject to the strictest security regulations. Your data is only transmitted via an encrypted connection. By double-clicking on the lock symbol in the browser’s address bar, you can check at any time that your data is being sent in encrypted form exclusively to a certified web server authorised by us.

By technical and organisational safeguards, we aim to guarantee maximum possible security against unauthorised access and loss, destruction or manipulation of your data.

Your Right to Information, Correction and Deletion

You have the right to request information, free of charge, about the personal data we have stored about you or the data stored under your pseudonym.

Additionally, in those cases prescribed by law, you have the right to the correction of incorrect data, and to have your data blocked or deleted.

Please note that your right to deletion of data may be limited by legal retention obligations that we are required to observe. For example, deletion is not possible in the case of data that we must retain for the purpose of fulfilling our contractual obligations with you, for legally prescribed archiving purposes, for tax reasons, or for evidentiary purposes. Please address any concerns to:

Hypofriend GmbH
Torstraße 92
10119 Berlin

E-Mail: info@hypofriend.de

We may be legally required to request proof of your identity.

Information on Cookies and further Processing of Data

a. Use of cookies
We use cookies to make navigation and use of our website as user-friendly as possible. Cookies are small text files that are deposited on your hard drive when you access our services.

Cookies also serve, for example, to recognize the users of our website and not have to ask them again for their access data each time they visit the website. Cookies are also used to track visitor preferences, which can help to optimize the layout of our website. This enables us to make targeted adjustments of the content of our website to meet your needs and improve our offer to you. Cookies used by us do not store any personal data and do not enable you to be personally identified.

You can deactivate storage of these cookies and delete existing cookies in the system settings of your browser at any time. Any user can view our services without non-essential cookies. However, if you do not accept cookies, this can restrict the available functionality.

b. Use of Google Analytics/Google AdWords

Google-Analytics
This website uses Google Analytics, a web analysis service provided by Google Inc. ('Google'). Google Analytics uses cookies, which enable analysis of your use of the website. Information generated by cookies about your use of this website is normally transmitted to a Google server in the USA and stored there.

However, if IP anonymisation is activated on this website, your IP address will first be shortened by Google within member states of the European Union or in other countries that are signatories of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. Google will use this information on behalf of the provider of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website usage and internet usage for the website provider.

The IP address transmitted by your browser for Google Analytics will not be associated with any other data held by Google. You can prevent these cookies being stored by selecting the appropriate settings in your browser; however, please note that doing so may make you unable to use the full functionality of this website.

You can also prevent the data generated by the cookies about your use of the website (including your IP address) being sent to and processed by Google by downloading and installing the browser plugin available from the following link: http://tools.google.com/dlpage/gaoptout?hl=en

Please note that we also use the extended Google Analytics remarketing and advertising functions, alongside the standard Google Analytics functions. Based on a user's previous visits to our website, the remarketing and advertising functions enable analysis and placement of optimised, interest-based advertising on other websites within the Google Display Network (on Google itself, on Google Ads, or on other websites). Google Analytics uses a third-party cookie from DoubleClick to evaluate data on user browsing habits on various websites. These data can provide information on topics such as demographics and the interests of website users.

DoubleClick cookies do not contain or store any personal user data; this means you cannot be personally identified at any time.

You can prevent these cookies being stored by selecting the appropriate settings in the cookie settings or in your browser. You can also deactivate interest-based advertising on Google and interest-based Google ads (within the Google Display Network) in your browser by going to https://adssettings.google.com or http://www.google.com/settings/ads/onweb/?hl=en and switching the button to 'off', or deactivate ads on http://www.aboutads.info/choices. You can find further information on available settings and Google data protection on https://www.google.com/intl/en/policies/privacy/?fg=1.

Google Remarketing

In addition, this website uses the Google program for interest-based advertising - the so-called Google Remarketing. Third-party providers, including Google, place ads on websites on the Internet and use stored cookies for this on the basis of a user's previous visits to this website. You can also disable Google's use of cookies for these purposes by visiting the Google advertising opt-out page.

Please note that Google has its own privacy policies, of which Hypofriend GmbH is independent. We do not take any responsibility or liability for these policies and procedures.

Google AdWords

This website also uses the online advertising program "Google AdWords" and, as part of Google AdWords, the conversion tracking of Google LLC. We use the offer of Google Adwords to draw attention to our attractive offers with the help of advertising media (so-called Google Adwords) on external websites. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. In this way, we pursue the interest of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.

The cookie for conversion tracking is set when a user clicks on an AdWords advertisement placed by Google.

These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked through the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Clients learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to identify users personally. If you do not want to take part in tracking, you can block this use in your Internet browser under user settings.

c. Use of Facebook Pixel

We use Facebook's Pixel service, provided by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, for online advertising. Here anonymised data on browsing habits is collected. The data collected is only general and technical information of the page visited. These are not linked to or evaluated together with the user's personal data.

You can deactivate this type of data processing by opting out on the following link: http://www.youronlinechoices.com/uk/your-ad-choices. Facebook users can also deactivate this type of data processing on the following link: https://www.facebook.com/settings?tab=ads.

d. Facebook Custom Audiences Pixel
On our website, the pixel variant of Facebook Custom Audiences (without the so-called advanced matching function) is used. This tool is provided by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA. With the help of Facebook Pixel, technical data about your use of our website can be sent to Facebook. If you are registered with Facebook, Facebook can assign the sent data to you based on an automated matching of hash values and show you interest-based advertising on your home page. Such advertising may, for example, be special offers. Facebook assures in the Custom Audience Terms of Use that it will process the collected data exclusively for this advertising purpose in our Custom Audience.

You can find out more about the advertising by Facebook and how you can influence it here under Facebook - Settings for advertisements. As a user of Facebook, you can deactivate the data processing described under the following link https://www.facebook.com/settings?tab=ads.

e. TikTok Pixel

We use TikTok Pixel on our website. TikTok Pixel is an advertisement tool provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland and TikTok Information Technologies UK Limited, WeWork, 125 Kingsway, Londong, WC2B 6NH, United Kingdom ("TikTok"). This is a code that allows us to understand and track your behavior on our website. TikTok uses login or device information to identify users of this website and associate it with a TikTok user account. This data is then used by TikTok to display tailored advertisements and content of interest to its users. The collected data is anonymous and not visible to us and is only used for the purpose of measuring the effectiveness of ad placements. Your data will generally be processed within the EU or the EEA. In the event that a data transfer takes place outside the EU or the EEA, this will take place within the framework of standard contractual clauses in accordance with Art. 46 GDPR.

TikTok's privacy policy can be found here:
https://www.tiktok.com/legal/new-privacy-policy?lang=de-DE

f. Use of Amazon Web Services
We additionally use the Amazon Web Services Cloud, provided by Amazon Web Services, Inc., P.O. Box 81226, Seattle, WA 98108-1226, USA. Website data and databases for the website and Hypofriend app are stored by this service. Amazon Web services processes the data only as commissioned and instructed by Hypofriend GmbH. Data are not transferred outside of Germany for this purpose.

g. Amplitude

We use Amplitude, a digital optimization system, on our website. The service provider is Amplitude Inc, 631 Howard Street, Floor 5, San Francisco, CA 94105, USA ("Amplitude"). Amplitude is an event tracking and product analytics system and uses in particular cookies, which enable analysis of your use of the website. This helps us to understand how you engage with our website. Information generated about your use of this website is normally transmitted to a server and stored there. Amplitude also stores and processes data on servers outside the EU or the EEA. As a basis of data transfer or data processing with recipients from third countries (in particular the USA), Amplitude uses standard contractual clauses in accordance with Art. 46 GDPR.

You can find out more here on Amplitudes Measures on Security and Privacy:
https://amplitude.com/amplitude-security-and-privacy

Amplitude's privacy policy can be found here:
https://amplitude.com/privacy

h. Links to third party websites
On our Internet pages you will find links that refer to Internet pages of third parties. We therefore expressly point out that we have no influence on the content and design of the linked pages. Hypofriend GmbH assumes no responsibility or liability for their policies and procedures. On the servers, to which the external links lead, there can be other privacy policies.

Changes to the Privacy Policy

We reserve the right to modify parts of this privacy policy from time to time to ensure that it always complies with current legal requirements or to implement changes to our services in the privacy policy - for example, when we introduce new services. You will be notified by email of any changes to the privacy policy that require your consent.

As of May 24th 2023.