Privacy Policy

Data Controller Information

vortexbloom AG is the data controller responsible for your personal data. We are registered in Germany under company registration number HRB846925 and are located at Lindenstraße 61, 20665 Hamburg, Germany. For any privacy-related enquiries, you can contact us at privacy@vortexbloom.world or call +49 40 9609127.

Data Collection

We collect various types of personal data to provide our auto financing services effectively. The data we collect includes:

• Personal identification information (name, address, date of birth, contact details)
• Financial information (income, employment details, credit history, banking information)
• Vehicle information (make, model, year, purchase price, intended use)
• Technical data (IP address, browser type, device information, website usage patterns)
• Communication records (emails, phone calls, chat logs, form submissions)
• Marketing preferences and consent records

How We Use Your Information

We use the collected personal data for various legitimate business purposes. How we use your information includes:

• Processing and assessing loan applications and creditworthiness
• Providing customer service and responding to enquiries
• Managing existing loan accounts and relationships
• Complying with legal obligations and regulatory requirements
• Detecting and preventing fraud, money laundering, and other financial crimes
• Improving our services and website functionality
• Marketing our services (with your consent)
• Conducting business analytics and risk assessment

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds: performance of contract (loan agreements and services), legitimate interests (risk assessment, fraud prevention, business operations), legal obligation (regulatory compliance, anti-money laundering), and consent (marketing communications, optional services). You have the right to withdraw consent at any time where we rely on consent as the legal basis.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our cookie usage, please refer to our Cookie Policy.

Data Sharing and Disclosure

We may share your personal data with trusted third parties for legitimate business purposes:

• Credit reference agencies for creditworthiness assessment
• Banking partners and financial institutions
• Legal and professional advisors
• Regulatory authorities when required by law
• Service providers (IT support, customer service, marketing)
• Fraud prevention agencies

We ensure all third parties are bound by appropriate data protection agreements and only process data for specified purposes.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Loan application data is typically retained for 7 years after the loan is fully repaid or declined, in accordance with German financial regulations. Marketing data is retained until you withdraw consent or for 3 years from last interaction. Technical data and website analytics are typically retained for 2 years. Some data may be retained longer if required by law or for legitimate business interests such as fraud prevention.

Your Rights

Under GDPR and German data protection law, you have several important rights regarding your personal data:

• Right of access: Request copies of your personal data
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request deletion of your data in certain circumstances
• Right to restrict processing: Limit how we use your data
• Right to data portability: Transfer your data to another provider
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for marketing or optional processing

To exercise these rights, contact us at privacy@vortexbloom.world. We will respond within one month of receiving your request.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption of sensitive data, secure data transmission protocols, regular security assessments, access controls and authentication systems, and staff training on data protection. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

International Data Transfers

We primarily process data within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other approved transfer mechanisms under GDPR.

Contact Information

For any questions about this Privacy Policy or our data processing practices, please contact us:

• Email: privacy@vortexbloom.world
• Phone: +49 40 9609127
• Post: vortexbloom AG, Data Protection Officer, Lindenstraße 61, 20665 Hamburg, Germany

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the relevant data protection authority. In Germany, this is the Federal Commissioner for Data Protection and Freedom of Information (BfDI) or your local state data protection authority.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website and updating the "last updated" date. For material changes that affect your rights, we may provide additional notice via email or other communication methods.

Additional Information

This Privacy Policy applies to all personal data processing activities conducted by vortexbloom AG. It should be read in conjunction with our Terms of Service and Cookie Policy. If you have any questions about our privacy practices or need clarification on any aspect of this policy, please don't hesitate to contact us using the contact information provided above.