Privacy Policy

 

1. Controller

The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:

Constanze Rieger c/o COCENTER
Koppoldstr. 1
86551 Aichach
Germany

Email: contact@taxadvisormatch.com
Website: taxadvisormatch.com

2. General Information on Data Processing

We process personal data exclusively in accordance with the applicable data protection laws and regulations.

Personal data means any information relating to an identified or identifiable natural person. This may include, in particular, your name, address, email address, telephone number, IP address, as well as information you provide to us in connection with an inquiry, appointment booking, or engagement.

We process personal data in particular for the purpose of providing our online services, communicating with prospective and existing clients, initiating and performing contractual relationships, and providing our research and matching services.

3. Legal Bases for Processing

Where we obtain your consent to process personal data, the processing is carried out on the basis of Art. 6(1)(a) GDPR.

Where processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract, processing is carried out on the basis of Art. 6(1)(b) GDPR.

Where processing is necessary for compliance with a legal obligation, processing is carried out on the basis of Art. 6(1)(c) GDPR.

Where processing is necessary for the purposes of our legitimate interests or the legitimate interests of a third party, and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, processing is carried out on the basis of Art. 6(1)(f) GDPR.

Where consent is required for storing information on your terminal device or accessing information already stored on your terminal device, this is carried out on the basis of Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act). Access that is technically necessary may be carried out on the basis of Section 25(2) TDDDG.

4. Hosting and Provision of the Website

We use FunnelCockpit to create and technically provide our online services.

When you visit our website, the technical operator or hosting provider may process, in particular, the following data:

• IP address,

• date and time of access,

• pages and files accessed,

• amount of data transferred,

• browser type and browser version,

• operating system used,

• referrer URL, and

• information about the requesting provider.

The processing is carried out to ensure the technically secure and reliable provision of the website and to detect and prevent misuse and technical disruptions.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable, and functional operation of our online services.

The template privacy policy provided by FunnelCockpit also provides for hosting and the processing of corresponding server log data.

5. Contacting Us

If you contact us, for example by email, telephone, or via a form provided on our website, we process the data you provide in order to handle your inquiry.

This may include, in particular:

• name,

• email address,

• telephone number,

• content of your message, and

• other information voluntarily provided by you.

If your inquiry relates to an existing or potential contractual relationship, processing is carried out on the basis of Art. 6(1)(b) GDPR.

For other inquiries, processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the appropriate handling and response to inquiries.

The data will be deleted as soon as it is no longer required for processing your inquiry and provided that no statutory retention obligations or other legitimate grounds for continued storage apply.

6. TaxAdvisorMatch Services

TaxAdvisorMatch assists clients in conducting a structured search for a tax advisor or tax advisory firm that may be suitable for their individual circumstances.

For the purpose of providing this service, we process personal data and information that you provide to us, in particular in connection with your inquiry, engagement, or a personal consultation.

This may include, in particular:

• name and contact details,

• information regarding your tax-related matter,

• information regarding your personal or business circumstances,

• information regarding the tax services required,

• information regarding specific professional requirements,

• information regarding international or cross-border matters,

• preferred language of consultation,

• timing requirements,

• preferred form of cooperation, and

• other information required for the search for a suitable tax advisor.

Processing is carried out for the purpose of taking steps prior to entering into a contract and/or performing the contract concluded with you in accordance with Art. 6(1)(b) GDPR.

Disclosure to Tax Advisors and Tax Advisory Firms

Where necessary for the performance of the commissioned research and matching service, relevant information may be disclosed to potentially suitable tax advisors or tax advisory firms.

As a general rule, only information necessary to assess potential professional suitability and the possibility of accepting the engagement will be disclosed.

Where separate consent is required for the disclosure of certain personal information, such information will only be disclosed after such consent has been obtained.

Any further disclosure will only take place where there is a legal basis for doing so.

7. Appointment Scheduling via Calendly

We use the service Calendly, LLC to schedule consultation appointments.

When you book an appointment through Calendly, the data you enter into the booking form is processed. This may include, in particular:

• name,

• email address,

• appointment details,

• time zone,

• answers to questions asked by us, and

• other information voluntarily provided.

The processing serves to organize, prepare, and conduct the requested consultation and is generally carried out on the basis of Art. 6(1)(b) GDPR.

Calendly may also process personal data in the United States. For international data transfers, Calendly's current Data Processing Addendum provides, among other things, provisions relating to the EU-U.S. Data Privacy Framework and other transfer mechanisms.

Further information about the processing of personal data by Calendly can be found in Calendly's Privacy Policy.

8. Online Meetings via Zoom

We use the video conferencing service Zoom to conduct online meetings, consultations, and client meetings.

When using Zoom, personal data may be processed. The specific data processed depends, in particular, on the information you provide before or during an online meeting and on the functions you use.

This may include, in particular:

• name and contact details,

• email address,

• profile and participant information,

• meeting data such as date, time, and duration,

• technical device, network, and connection data,

• IP address,

• audio and video data if a microphone or camera is used,

• chat messages and other content transmitted during the meeting.

Processing is carried out for the organization and conduct of agreed online meetings and for the provision of our services. Where the online meeting relates to an existing or prospective contractual relationship, processing is generally carried out on the basis of Art. 6(1)(b) GDPR.

Where processing is necessary to ensure a secure and functional online meeting, it may also be carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the efficient and secure conduct of our online communications.

Online meetings will not be recorded without prior notice and, where required, your explicit consent.

When using Zoom, personal data may be processed outside the European Union or the European Economic Area. Such data transfers are carried out in compliance with the legal requirements of Art. 44 et seq. GDPR.

Further information about the processing of personal data by Zoom can be found in Zoom's Privacy Policy.

9. Contract and Payment Processing via Digistore24

We use Digistore24 for the sale and processing of our paid services.

Digistore24 operates under a reseller model. When purchasing a service offered through Digistore24, Digistore24 becomes the buyer's contractual partner. Digistore24 handles, in particular, order and payment processing, invoicing, and other tasks associated with the sale.

As part of the ordering process, the following data in particular may be processed:

• name,

• address,

• email address,

• billing information,

• order information,

• payment information, and

• information about the service purchased.

The Digistore24 entity acting as reseller may depend, in particular, on the relevant region. Digistore24 operates various reseller entities for this purpose.

Where we receive personal data from Digistore24, we process such data to the extent necessary to provide the service you have purchased, communicate with you as a client, or comply with legal obligations.

Further information about the processing of personal data by Digistore24 can be found in Digistore24's privacy information.

10. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Cookies are small files or pieces of information that may be stored on or retrieved from a user's terminal device.

Technically necessary cookies and similar technologies may be used where they are required to provide a function expressly requested by the user or to ensure the technically secure operation of the website.

Where cookies or similar technologies are used for analytics, marketing, conversion, or personalization purposes and consent is required, processing will only take place after you have provided the corresponding consent.

You may change or withdraw your consent at any time with effect for the future via the cookie or privacy settings provided on our website.

You can change your cookie settings at any time using the cookie settings provided on the website and withdraw any consent previously given with effect for the future.

11. Google Ads and Conversion Tracking

We use Google Ads and may use related technologies to measure conversions and optimize our advertising campaigns.

If you have consented to the corresponding processing, information may be processed regarding how you arrived at our website and what actions you perform on our website.

This may include, in particular, technical device and browser information, IP address, online identifiers, information about visits to our website, interactions with our online services, and information about defined conversion events.

The processing serves, in particular, to measure the success of our Google advertisements and optimize advertising campaigns.

The use of corresponding non-essential marketing and tracking technologies is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

As part of its Consent Mode, Google uses various consent signals, including signals relating to advertising storage, the transmission of user data for advertising purposes, and personalized advertising.

Further information can be found in Google's Privacy Policy.

12. Meta Ads and Meta Pixel

We use advertising services provided by Meta and may use, in particular, the Meta Pixel or comparable Meta Business Tools for conversion measurement and optimization of our advertising campaigns on Facebook and Instagram.

Subject to your corresponding consent, these technologies can be used, in particular, to determine whether users visit our website after viewing or clicking on an advertisement and perform certain actions there.

The following information may be processed in particular:

• information about website visits and interactions,

• IP address,

• browser and device information,

• online identifiers, and

• information about defined conversion events.

Processing serves to measure the effectiveness of our advertising, optimize advertising campaigns and – where covered by your consent – create and address relevant target audiences.

The processing is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

Further information can be found in Meta's Privacy Policy.

13. X Ads and Conversion Tracking

We use advertising services provided by the platform X and may use, in particular, the X Pixel or corresponding conversion tracking technologies.

Subject to your corresponding consent, this makes it possible to determine whether users visit our website and perform certain actions after viewing or clicking on an advertisement on X.

In particular, information about website visits and interactions, device and browser information, cookies or other online identifiers, and information about conversion events may be processed.

Processing serves, in particular, to measure the success and optimize our advertising campaigns and – where covered by your consent – to create target audiences.

For its conversion tracking and Custom Audience products, X expressly states that advertisers must adequately inform users about data processing and obtain any consent required.

The processing is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

Further information can be found in X's Privacy Policy.

14. Recipients of Personal Data

In the course of our business activities, personal data may be disclosed to external service providers or other recipients where this is necessary for the provision of our services, required by law, or otherwise permitted under data protection law.

These recipients may include, in particular:

• hosting and IT service providers,

• appointment scheduling services,

• sales and payment platforms,

• potentially suitable tax advisors and tax advisory firms,

• communication and administrative service providers,

• providers of advertising, analytics, and conversion technologies, and

• public authorities and other bodies where there is a legal obligation to disclose data.

Where service providers process personal data on our behalf, such processing is carried out in accordance with the legal requirements governing data processing on behalf of a controller.

15. Transfers of Data to Third Countries

When using certain service providers, personal data may be processed outside the European Union or the European Economic Area.

Any such transfer will only take place in compliance with the legal requirements of Art. 44 et seq. GDPR.

The legal basis for such transfers may include, in particular, an adequacy decision by the European Commission, appropriate safeguards such as Standard Contractual Clauses, or other transfer mechanisms provided for by law.

16. Storage Period and Deletion

We store personal data only for as long as necessary to fulfill the respective purpose of processing.

In addition, data may be stored where statutory retention obligations apply or where continued storage is necessary for the establishment, exercise, or defense of legal claims.

Once the purpose of processing no longer applies and any statutory retention periods have expired, the relevant data will be deleted or its processing restricted in accordance with applicable legal requirements.

17. Security

Taking into account the state of the art, the respective risk, and the nature, scope, and purpose of the processing, we implement appropriate technical and organizational measures to protect personal data.

These measures are intended, in particular, to protect the confidentiality, integrity, and availability of personal data and to protect against unauthorized access, loss, alteration, or other unlawful processing.

18. Rights of Data Subjects

Subject to the applicable legal requirements, you have, in particular, the right to:

• obtain information about the personal data we process concerning you,

• have inaccurate data corrected or incomplete data completed,

• request deletion of your personal data,

• request restriction of processing,

• data portability,

• object to certain processing, and

• withdraw consent previously given with effect for the future.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

The FunnelCockpit template also contains these fundamental data subject rights.

19. Withdrawal of Consent

Where data processing is based on your consent, you may withdraw that consent at any time with effect for the future.

The lawfulness of processing carried out on the basis of your consent prior to its withdrawal remains unaffected.

20. Right to Object

Where we process personal data on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right, subject to the applicable legal requirements, to object to such processing on grounds relating to your particular situation.

Where personal data is processed for direct marketing purposes, you may object to such processing at any time.

21. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy where changes to our online services, our services, the service providers we use, or legal requirements make such amendments necessary.

Last updated: August 2026