Privacy policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

C&N Vermögensverwaltung GmbH
Elbestraße 7
26135 Oldenburg
Germany

Phone: +49 151 42504926
E-mail: kontakt@cnvermögensverwaltung.com

Represented by the Managing Director Christian Ludes. A data protection officer has not been appointed; the statutory requirements for a mandatory appointment are not met.

2. General information on data processing

We process personal data of our users only to the extent necessary to provide a functioning website as well as our content and services, or where you have given your consent. The legal bases are in particular Article 6 (1) (a), (b) and (f) GDPR.

3. Hosting and server log files

This website is hosted by Strato GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. A data processing agreement pursuant to Article 28 GDPR is in place with the host.

Each time the website is accessed, the system automatically collects data and information from the accessing system:

• IP address of the requesting computer
• date and time of access
• name and URL of the file retrieved
• volume of data transferred
• notification of successful retrieval
• browser type and version, operating system
• referrer URL (the previously visited page)

Processing is based on Article 6 (1) (f) GDPR. Our legitimate interest lies in the technically faultless delivery and the security of our website. The log files are deleted after seven days at the latest.

4. Contact form and getting in touch

You can send us a message using the contact form on this website. The fields you complete are transmitted: name, company, e-mail address, telephone number, subject and your message. Name, e-mail address and message are mandatory; without them we cannot deal with your enquiry.

The data is transmitted to our web server over an encrypted connection, processed there by a script and forwarded directly by e-mail to our mailbox. The data is not stored in a database. Your IP address is not included in the message; it only appears in the server log files described in section 3. After the message has been sent, your details remain in our e-mail mailbox.

If you contact us by e-mail or telephone instead, your details will likewise be stored by us in order to process the enquiry and in case of follow-up questions.

The legal basis is Article 6 (1) (b) GDPR where your enquiry serves the initiation or performance of a contract, otherwise Article 6 (1) (f) GDPR (legitimate interest in answering enquiries) or Article 6 (1) (a) GDPR where you have given your consent.

We delete the data as soon as it is no longer required to achieve the purpose for which it was collected and no statutory retention obligations prevent deletion.

5. Cookies

This website does not use any cookies for analysis, marketing or tracking purposes. No web analytics and no tracking services are used.

6. Fonts (Google Fonts)

To display fonts consistently, this website uses the font „Manrope“ via the Google Fonts service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When a page is accessed, your browser loads the required font files from Google's servers. Your IP address is transmitted to Google in the process; a transfer to third countries cannot be excluded.

The legal basis is Article 6 (1) (f) GDPR; our legitimate interest lies in the consistent presentation of our corporate design. Further information is available at policies.google.com/privacy.

Note: alternatively, the font files can be stored locally on our own web server. In that case the connection to Google would no longer apply and this section could be deleted.

7. Recipients and disclosure

Your data is only passed on to third parties where this is necessary to perform a contract, where there is a legal obligation, where you have given your consent, or where a processing relationship pursuant to Article 28 GDPR exists (for example with our host).

8. Your rights

You have the following rights against us with regard to the personal data concerning you:

• right of access (Article 15 GDPR)
• right to rectification (Article 16 GDPR)
• right to erasure (Article 17 GDPR)
• right to restriction of processing (Article 18 GDPR)
• right to data portability (Article 20 GDPR)
• right to object to processing (Article 21 GDPR)
• right to withdraw consent given (Article 7 (3) GDPR)

An informal message to kontakt@cnvermögensverwaltung.com is sufficient to exercise your rights.

9. Right to lodge a complaint with a supervisory authority

Without prejudice to any other legal remedy, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for our company is:

Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5, 30159 Hannover, Germany
lfd.niedersachsen.de

10. Data security

This website uses SSL/TLS encryption. You can recognise an encrypted connection by the „https://“ in your browser's address bar and by the padlock symbol.

11. Validity of this policy

This privacy policy is currently valid and dated September 2026. As our website develops or due to changed legal requirements, it may become necessary to amend it.