Privacy Notice (public domain)

Website (public domain)

Frankfurt am Main, 02.11.2022

The Website « » is a service of Loanboox GmbH (in the following «operator») (Frankfurt am Main district court: HRB129079).

This privacy policy Website (public domain) governs the privacy-related rights and obligations of the operator and visitors of the publicly accessible area of the website «».

Visitors to the website (public domain) who choose to use our service register as users of the platform (authorized access). The registration as a user is based on the General Terms and Conditions (GTC), which can be viewed during the registration process.

Data protection and data security are a top priority for us. We adhere strictly to the applicable data protection laws in Federal Republic of Germany. We protect all data using the highest confidentiality and security standards. We employ technical and organisational security measures to protect personal data adequately against unauthorised access, manipulation, loss and destruction. All data and transactions are transmitted using SSL encryption and resides on servers in Switzerland in a highly secure data centre. Our technical and organisational security measures are reviewed at regular intervals and adapted to technological progress.

Please read this Data Privacy Policy carefully before you use our site and services.

This Data Privacy Policy does not apply to websites of third party providers which can be accessed through the Loanboox Website. Loanboox GmbH has no influence on how these companies comply with data protection requirements.

Data collection

The term “data processing” used here includes any step in the handling of personal data from the collection to the storage and use to the deletion. We process personal data of visitors in connection with different processes for different purposes. For details on data, purposes, legal bases, possible submissions and recipients, please refer to the following.

Unless specifically stated, we store personal data only as long as necessary to fulfill the purposes pursued. In some cases, the legislator provides for the retention of personal data, for example in tax or commercial law. In these cases, the data will be stored by us only for these legal purposes, but not otherwise processed and deleted after expiration of the statutory retention period.

Technical provision of the website

The IP addresses of users, the web pages visited, the date and time and the browser software used are recorded automatically when users access our website.

Use of cookies

We use cookies on our website. These are small text files that are stored on the visitor’s device. It records how our website is used so we can analyse, manage, develop and improve our services.

Visitors can determine through personal settings whether to accept or disable cookies or other tracking technology or whether to be warned prior to the use of such technology. For more information please use the help function of your browser. The blocking or deactivation of such features can restrict or preclude the use of the platform.

Jetpack for WordPress

Our public website is created and operated using WordPress software from Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. With the Jetpack extension, we are able to use features offered online by and WooCommerce.

We use Jetpack’s Stats feature to analyse the use and correct functioning of our website. This analysis involves submitting the IP address, user (if logged in), username (if logged in), user agent, visited URL, referring URL, time, browser language and country code to an Automattic server in Ireland. Important: Loanboox does not have access to this information and receives aggregated statistics, such as the number of visitors to a page. Automattic’s log files are kept for 28 days and are used exclusively for the operation of this feature.

The following activities are recorded for analysis: Views of pages, posts, videos (if provided via, clicks on outbound links, referring URLs and search terms, and country.

Automattic’s privacy policy can be found at the following address:


This website uses SalesViewer® technology from SalesViewer® GmbH on the basis of the website operator’s legitimate interests (Section 6 paragraph 1 lit.f GDPR) in order to collect and save data on marketing, market research and optimisation purposes.

In order to do this, a javascript based code, which serves to capture company-related data and according website usage. The data captured using this technology are encrypted in a non-retrievable one-way function (so-called hashing). The data is immediately pseudonymised and is not used to identify website visitors personally

The data stored by Salesviewer will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them.

The data recording and storage can be repealed at any time with immediate effect for the future, by clicking on in order to prevent SalesViewer® from recording your data. In this case, an opt-out cookie for this website is saved on your device. If you delete the cookies in the browser, you will need to click on this link again.


On our website we use Timify from TerminApp GmbH, Balanstraße 73, 81541 Munich, Germany, so that visitors of the website can book an appointment with us. To do so, visitors must provide their e-mail address, first and last name and mobile phone number. Visitors with a Timify customer account can log in using their login data. We need this information so that we can make an appointment with the visitor. With the help of the registration data Timify creates pseudonymous user profiles for the purpose of analysis and evaluation of the booking behaviour. The personal data stored by the visitor in his Timify account are available for the duration of the existence of the user account with Timify and are stored for this duration. Apart from this, however, the data will be deleted at the latest 10 years after the last appointment booking or login to the customer account. The information on data protection of Timify can be found here:

Google Analytics

On our website (public domain) we use Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Cookies are saved on website visitors’ computers which allow an analysis of the visitors’ use of the Website.

The information generated by the cookie about the use of the public part of our website is, as a rule, transferred to a Google server in the USA and stored there. We use the service on our website with activated IP anonymization. This means that on our website, your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and therefore anonymised. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. In our behalf, Google will use this information to evaluate the use of the website, to compile reports on website activity, and to provide further services related to the use of the website and the Internet to us as operator of the website.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the installation of cookies by setting your browser software accordingly. However, some features of our website may not work if the use of cookies is disabled.

In addition, the collection of data generated by the cookies and related to the use of the website (including the IP address of the visitor) to Google and the processing of this data by Google can be prevented by downloading and installing the browser plug-in available under the following link :

In the protected area (after login with authorized access by Loanboox users) Google Analytics will not be used and the tool has no access to user behaviour.

Google Captcha

To protect against abusive requests via online form, we use the reCAPTCHA service provided by Google Inc. (Google). Users may be asked to prove that they are a human user and not an automated, computerised process that is abusing the form provided. The reCAPTCHA service involves the user’s IP address and (potentially) other items of data required being sent to Google. The user’s reCAPTCHA input will be sent to Google, where it will be processed. If IP address anonymization has been activated for this website, however, Google will shorten your IP address beforehand within EU member states or other states that are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information in order to assess your reCAPTCHA response. The IP address sent by your browser as part of the reCAPTCHA service will not be aggregated with other data held by Google. These other items of data are covered instead by Google’s separate privacy policy. For further information about Google’s privacy policy, see:

Google Tag Manager

This website uses Google Tag Manager. Google Tag Manager is a system by which marketers can administer website tags using an interface. The Tool Tag Manager itself, which implements the tags, is a cookie-free domain and collects no personal data itself. The tool enables the release of other tags that may be able to collect data on their own. Google Tag Manager does not access these data. If a deactivation is undertaken at the domain or cookie level, it remains in force for all the tracking tags that have been implemented with the Google Tag Manager.

YouTube PlugIn

Videos of the company YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, a company of Google Inc., Amphitheater Parkway, Mountain View, CA 94043, USA, are embedded on

Embedding videos is deployed under the option provided by YouTube «privacy-enhanced mode».

When visitors visit a page which has an embedded video, a connection is made to the YouTube servers and the content is displayed on the website by communication to the browser of the visitor.

According to YouTube, the «privacy-enhanced mode » will only send data to the YouTube server, in particular which web pages visitors visited, when the visitor views the video. If visitors are logged into YouTube at the same time, this information will be assigned to the visitor’s YouTube account.

More information about YouTube data handling can be found at the following link:

Application e-mails

Loanboox sends application e-mails (e.g. Confirmation of registration) through the outgoing mail server hosted by Microsoft Azure and the SendGrid component. SendGrid is a product of SendGrid, Inc., 1401 Walnut, Boulder, CO 80302, USA.

Data stored (e-mail address, name, IP address, date and time of registration, if applicable) will be transmitted to a server of these providers. Personal data may not be used for purposes other than sending e-mails on behalf of Loanboox.

For more information about Microsoft Azure’s privacy policies, please visit: 

For more information about SendGrids privacy policies please visit:


On our website, we offer visitors to receive information about our offers by newsletter. After the visitors have provided us with their email address, we will send you product information and news from time to time.

Loanboox uses the SendGrid component to send and analyze click- and open rates for the newsletter. A product of SendGrid, Inc., 1401 Walnut, Boulder, CO 80302, USA.

Data stored (e-mail address, name, IP address, date and time of registration, if applicable) will be transmitted to a server of SendGrid. Personal data may not be used for purposes other than sending e-mails on behalf of Loanboox by those providers.

For more information about SendGrids privacy policies please visit:


Contact form

At, visitors have the opportunity to contact Loanboox via a contact form. To this end, it is necessary that the visitors submit their personal data to us.

The personal data provided by the visitors via online form are processed for personal address, for forwarding to the correct contact person as well as for processing and answering the request. Any further processing will only take place with the express consent of the visitor.

Candidate data

Visitors can send us applications via the contact options. The data transmitted to us in the context of an on-line application, are used by us exclusively for the processing of the respective application. Use of the data for other purposes not connected with the application, in particular transmission to third parties, does not take place. After the completion of the application process and the expiration of the associated legal deadlines, we delete the application data.

Affected rights

As affected by the processing visitors can make use of the rights listed below. To assert these rights, please contact the contact options listed in No. 5.


Visitors are entitled to ask for information. In this case, we will promptly inform you of all personal data processed by the relevant visitor, including the information available on the origin of the data, the purpose and categories of personal data processed, the parties involved in the collection and the data recipients.

Rectification and deletion

Visitors are entitled to correct incorrect data.

All personal data of a website visitor shall be deleted unless deletion is not possible due to a legal or contractual duty of retention. Anonymised data of members will continue to be held in our database and processed for statistical and analytical purposes.

Anonymised data of members will continue to be held in our database and processed for statistical and analytical purposes.

Opposition to data processing

Furthermore, the persons affected are entitled to object to data processing that is not based on a contractual relationship or consent.

Revocation of consent

The person affected has the right at any time to revoke a given consent (for example in the context of sending the newsletter) with effect for the future.

Complaint to a regulatory authority

In addition, data subjects have the right to lodge a complaint with a data protection supervisory authority. The regulatory authority responsible for Loanboox GmbH is:

Country Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia PO Box 20 04 44 40102 Dusseldorf

P:0211/38424-0 Fax: 0211/38424-10 E-mail:

Security notice

For the secure transmission of information, we provide an encrypted upload option for visitors on the Loanboox website. We cannot guarantee confidentiality for transmissions by other means (e.g. by email). The internet, websites and the electronic transmission of data are considered fundamentally insecure with regard to confidentiality and data security. Unauthorised third parties may be able to access information that is exchanged through the above channels, and data can be damaged or changed in content. We assume no liability for the security of data transmitted electronically.

Changes to the data privacy policy

We reserve the right to amend this Privacy Notice at any time. The current version of the Privacy Notice published on the website applies.


If you have any questions about data protection or asserting your rights, you can contact or

Loanboox GmbH
Mainzer Landstr. 33
60329 Frankfurt am Main