Privacy Policy

Last updated: 15 January 2026

EinkommensData ("we", "us", "our"), with registered address at Friedrichstraße 112, 10117 Berlin, Germany, is the data controller within the meaning of Article 4(7) of the General Data Protection Regulation (GDPR). We take the protection of your personal data seriously and process it exclusively in accordance with the GDPR, the German Federal Data Protection Act (BDSG) and other applicable data protection regulations.

This Privacy Policy explains what personal data we collect when you visit our website or use our services, why we process it, on what legal basis, how long we retain it, and what rights you have as a data subject.

1. Data Controller and Contact

The controller responsible for the processing of your personal data is:

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or wish to lodge a complaint, please contact us using the details above. You may also contact our data protection team directly by email at [email protected].

2. Categories of Personal Data We Process

2.1 Data provided by you

• Identification and contact data: name, email address, phone number.
• Content data: the message and any other information you include when contacting us via our contact form, email or telephone.
• Contract data: billing address, company details, VAT identification number, and payment-related information necessary for the performance of our services.

2.2 Data collected automatically

• Technical data: IP address, browser type and version, operating system, device type, and screen resolution.
• Usage data: pages visited, time and date of access, referring page, time spent on pages, and interaction with site content.
• Cookie data: information stored via cookies and similar technologies, subject to your consent as described below.

2.3 Note on our products and services

The income datasets, statistics and reports provided by EinkommensData consist exclusively of anonymized and aggregated data derived from official statistical sources. These datasets do not contain personal data and are not covered by this Privacy Policy. This Privacy Policy applies solely to the processing of personal data of visitors, clients, prospects and business contacts.

3. Purposes and Legal Bases of Processing

3.1 Provision and operation of the website

We process technical and usage data (Art. 6(1)(f) GDPR — legitimate interest) to deliver the website securely and correctly, to ensure its stability, to detect and prevent misuse and security threats, and to optimise its performance.

3.2 Responding to enquiries

When you contact us via the contact form, email or telephone, we process your data (Art. 6(1)(b) GDPR — pre-contractual measures; Art. 6(1)(f) GDPR) to answer your enquiry, prepare offers and communicate with you about our services.

3.3 Performance of contracts

Where you become a client, we process contract and billing data (Art. 6(1)(b) GDPR) to deliver our data services, issue invoices and fulfil our contractual and statutory obligations, including commercial and tax retention duties (Art. 6(1)(c) GDPR).

3.4 Marketing and newsletters

We send electronic marketing communications only with your prior consent (Art. 6(1)(a) GDPR) in accordance with Section 7 of the German Act Against Unfair Competition (UWG). You may withdraw your consent at any time with effect for the future via the unsubscribe link in any message or by contacting [email protected].

3.5 Analytics and cookies

Non-essential cookies and analytics tools are used only on the basis of your consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). Essential cookies necessary for the operation of the website are processed on the basis of Section 25(2) TDDDG and our legitimate interest (Art. 6(1)(f) GDPR).

4. Cookies and Similar Technologies

Our website uses cookies. Cookies are small text files stored on your device that enable certain functions and help us understand how the site is used.

• Essential cookies: required for the operation of the website, including the storage of your cookie preferences. These cannot be disabled.
• Analytics cookies: used only with your consent to measure site traffic and usage patterns in aggregated form.
• Marketing cookies: used only with your consent to measure the effectiveness of marketing activities.

When you first visit our website, a cookie consent banner allows you to accept all cookies, reject all non-essential cookies, or save individual preferences. Your choice is stored for 180 days and can be changed at any time via the cookie banner. Withholding or withdrawing consent does not affect your ability to use our website.

5. Data Retention

We retain personal data only for as long as necessary for the respective processing purpose:

• Enquiry and contact data: for the duration of the correspondence and, where relevant, until 6 months after the last exchange, unless a business relationship follows.
• Contract and billing data: in accordance with the statutory retention periods under Sections 147 and 257 of the German Commercial Code (HGB) and Section 14b of the German Fiscal Code (AO), generally 6 to 10 years.
• Technical log data: generally up to 30 days, unless a longer period is required for security investigations.
• Cookie consent records: 180 days, in order to document compliance with consent requirements.

Where longer retention is required by law or necessary for the establishment, exercise or defence of legal claims, processing continues on the relevant legal basis.

6. Data Sharing and Recipients

We do not sell or rent your personal data. We share data only with carefully selected service providers acting as processors pursuant to Article 28 GDPR, including hosting providers, email delivery services and analytics providers bound by data processing agreements. Data may also be disclosed where required by law or to assert, exercise or defend legal claims. Any transfer of personal data to countries outside the European Economic Area occurs only on the basis of adequate safeguards, in particular the European Commission's Standard Contractual Clauses, together with appropriate technical and organisational measures.

7. Data Security

We implement appropriate technical and organisational security measures in accordance with Article 32 GDPR, including TLS encryption of data in transit, access controls on a need-to-know basis, internal data protection policies, and regular review of our security practices. All data we provide as products is anonymized and aggregated in accordance with GDPR requirements and national statistics law.

8. Your Rights as a Data Subject

Under the GDPR, you have the following rights with respect to your personal data:

• Right of access (Art. 15 GDPR): to obtain information about the data we process concerning you.
• Right to rectification (Art. 16 GDPR): to have inaccurate data corrected and incomplete data completed.
• Right to erasure (Art. 17 GDPR): to have your data deleted, where no statutory retention obligations prevent this.
• Right to restriction of processing (Art. 18 GDPR): to restrict processing in the circumstances defined by law.
• Right to data portability (Art. 20 GDPR): to receive your data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21 GDPR): to object to processing based on legitimate interests; you may object to direct marketing at any time without giving reasons.
• Right to withdraw consent (Art. 7(3) GDPR): to withdraw consent at any time with effect for the future.

To exercise any of these rights, please contact us at [email protected] or write to EinkommensData, Friedrichstraße 112, 10117 Berlin, Germany. We will respond within one month of receiving your request and will verify your identity where necessary.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement. For EinkommensData, the competent authority is the Berlin Commissioner for Data Protection (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal requirements. The version published on this page is the current, binding version. We recommend reviewing this page periodically. This Privacy Policy was last updated in January 2026.