Privacy Policy

Introduction

infinion GmbH ("we", "our", or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website infinion.pro or use our accounting services.

As a German company operating under registration number HRB534918, we comply with the General Data Protection Regulation (GDPR) and German Federal Data Protection Act (BDSG). infinion serves as the data controller for the personal information we collect about you.

Data We Collect

The data we collect includes information you provide directly to us and information automatically collected when you interact with our services. This data collection enables us to provide professional accounting services and maintain our client relationships effectively.

Personal Information You Provide

• Contact details (name, email address, phone number, postal address)
• Company information (business name, registration details, VAT numbers)
• Financial information necessary for accounting services
• Communication records and correspondence
• Service preferences and requirements

Automatically Collected Information

• Website usage data and analytics
• IP address and browser information
• Device and connection information
• Cookies and similar tracking technologies

How We Use Your Information

We use of your data is governed by legitimate business interests and legal obligations. How we use your information depends on the services you request and your relationship with infinion.

Service Delivery

• Providing accounting, bookkeeping, and tax services
• Processing financial transactions and maintaining records
• Ensuring compliance with German tax and accounting regulations
• Communicating about your account and services

Business Operations

• Managing client relationships and providing customer support
• Improving our services and developing new offerings
• Conducting business analysis and market research
• Maintaining security and preventing fraud

Legal Compliance

• Meeting regulatory reporting requirements
• Responding to legal requests and court orders
• Maintaining records as required by German law
• Protecting our legal rights and interests

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: To fulfil our accounting service agreements
• Legal Obligation: To comply with German tax and accounting laws
• Legitimate Interest: To operate our business and improve our services
• Consent: Where you have provided explicit consent for specific processing

Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• With German tax authorities as required by law
• With regulatory bodies for compliance purposes
• With professional service providers bound by confidentiality obligations
• With your explicit consent for specific purposes
• To protect our legal rights or in response to legal process

Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Data retention periods vary based on the type of information and applicable legal requirements.

• Client financial records: 10 years as required by German commercial law
• Tax-related documents: 10 years as required by German tax law
• Communication records: 7 years for business correspondence
• Website analytics: 26 months maximum
• Marketing data: Until consent is withdrawn or contact is lost

Your Rights

Under GDPR and German data protection law, your rights include the ability to control how your personal information is processed. You have the following rights regarding your personal data:

• Access: Request a copy of your personal data we hold
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your data (subject to legal obligations)
• Restriction: Limit how we process your information
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the information provided below. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Access controls and authentication systems
• Regular security assessments and updates
• Employee training on data protection
• Secure document storage and disposal procedures

International Transfers

Your personal data is primarily processed within the European Union. If we transfer data outside the EU, we ensure appropriate safeguards are in place, such as:

• European Commission adequacy decisions
• Standard contractual clauses approved by the European Commission
• Binding corporate rules for multinational organisations
• Certification schemes and codes of conduct

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your website experience and analyse usage patterns. For detailed information about our cookie practices, please refer to our Cookie Policy.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us using the information below. Our team is available to address your privacy concerns and assist with any requests.

You also have the right to lodge a complaint with the German data protection authority (Bundesbeauftragte für den Datenschutz und die Informationsfreiheit) if you believe we have not handled your personal data appropriately.