Privacy
Privacy notice
Last updated: 30 October 2026. This website uses no cookies or advertising tracking. The following notice describes hosting and the planned form delivery through IONOS. You can fill in the form. Delivery readiness is checked before transmission; if it is unavailable, no form entries are transmitted.
Controller
TAXORA Steuerberatung – Ralf Panzer, German tax adviser Max-Planck-Str. 13b 86179 Augsburg Germany Telephone: +49 821 999 75 09 3 Email: info@taxora-steuerberatung.de Privacy enquiries may be sent to the email address stated above.
Hosting, email and processing on our behalf
The following provider is intended for the planned hosting, domain and email services: IONOS SE Elgendorfer Straße 57 56410 Montabaur Germany IONOS processes the personal data required for the services actually commissioned on our behalf. Before the website goes live, the commissioned services and the data processing agreement under Article 28 GDPR must be checked. According to IONOS, that agreement is included in its terms for contracts entered into on or after 19 July 2022. The actual contract and account configuration are decisive.
Server logs and IONOS WebAnalytics
The planned IONOS web hosting involves technically necessary access data. According to its product-specific information, IONOS processes the referrer, requested page or file, browser type and version, operating system, device type, access time and an anonymised IP address. The IP address is initially transmitted to establish the connection and is then anonymised as described in the product information. Proxy requests may include additional forwarded connection information; actual logging depends on the plan and configuration. IONOS states that WebAnalytics tracking and logging are enabled by default. Analysis uses server logs or pixel technology without cookies for statistical evaluation and technical optimisation. For visitor data collected by the web-hosting product, IONOS specifies retention for eight weeks and no disclosure to third parties. The actual configuration will be checked against these statements before publication. The legal basis for the necessary processing is Article 6(1)(f) GDPR. Our legitimate interests are the secure, stable and reliable operation and technical optimisation of the website. Use for advertising or personal user profiles is not planned.
No cookies, advertising tracking or embedded external content
The website sets no cookies. Form entries are not saved in Local Storage or Session Storage. Apart from the IONOS statistics described above, no further analytics services, advertising or cross-site trackers, social media plugins, external maps, videos, web fonts or CAPTCHA services are embedded. To protect the form, we use server-side validation, a hidden additional field, short-lived signed form tokens and limits on sending attempts. The IP address received by the server is transformed into a verification value using a secret key. The protection file contains that value, counters, timestamps and token verification values, but no form content or raw IP address. The legal basis is Article 6(1)(f) GDPR, reflecting our legitimate interest in preventing abuse. The current design uses no storage or access technologies requiring consent under section 25(1) TDDDG; no cookie banner is therefore planned. Changes will be reassessed before use.
Enquiry form and email delivery
When you submit the form, your details are sent over HTTPS to the IONOS web server, validated there and forwarded by authenticated SMTP to info@taxora-steuerberatung.de. You do not need to open your own email application. If delivery is unavailable, no form entries are transmitted. An error appears after you attempt to submit, and your entries remain on the page. You can contact us directly by email. A success message appears only after the email server accepts the message; this does not confirm final delivery. We process your role, company or organisation, country of establishment, contact person, business email, optional telephone number, reporting year, approximate total quantity, audit reason, product categories, preferred processing and additional information. Required fields are needed to assess and answer the enquiry; telephone number and message are optional. Please do not submit tax records, bulk personal data or particularly confidential information. The purpose is to answer your enquiry and prepare a possible audit engagement. The legal basis is Article 6(1)(b) GDPR where the enquiry concerns a contract with you, or otherwise Article 6(1)(f) GDPR based on our legitimate interest in handling business enquiries. Submission does not create an engagement. No separate form database is created. The message is processed and stored in the email mailbox; the provider may also generate technical server and email logs. Form entries are not stored in cookies, Local Storage or Session Storage. Entries following an unsuccessful send remain only on the open page. No automatic acknowledgement is sent to the entered address.
Contact by email or telephone
If you contact us by email or using a telephone number we have provided, we process the contact details and content you share to deal with your request and communicate with you. The legal basis is Article 6(1)(b) GDPR where the purpose is to prepare or perform a contract or professional engagement with you. Other business enquiries, particularly those made on behalf of an organisation, are processed under Article 6(1)(f) GDPR; our legitimate interest is dealing with business matters. Legally required retention is based on Article 6(1)(c) GDPR. Messages that do not lead to an engagement are deleted once communication is complete and no statutory or legitimate grounds require further retention. Ordinary emails are not necessarily end-to-end encrypted. Particularly confidential records or extensive personal data should therefore be sent only after prior agreement.
Recipients of personal data
Within the firm, access to personal data is limited to people who need it for the relevant enquiry or engagement. Where necessary, data may be disclosed to IONOS as the commissioned hosting, domain and email provider, contracted IT providers, registered DIVID examiners or other professionals bound by confidentiality, and authorities, courts or other public bodies where legally required. Processors are engaged in accordance with Article 28 GDPR. Enquiry data is not disclosed for third-party advertising, and personal data is not sold.
Transfers outside the European Union
According to IONOS product-specific information, visitor data collected through web hosting is not transferred to third countries outside the European Union. The website does not embed services whose intended purpose is to transmit visitor or form data to recipients outside the EU or the European Economic Area. If subcontractors outside the EU or EEA are used for other parts of the services, Articles 44–49 GDPR must be observed, in particular an adequacy decision or appropriate safeguards such as standard contractual clauses. The actual provider and contract configuration must be checked before operation begins.
Encryption and data security
Form submission is configured for HTTPS. The web server sends the message to the IONOS mail server over a TLS-encrypted connection. This does not provide automatic end-to-end email encryption. Particularly confidential documents should therefore be exchanged only through a separately agreed secure channel. Technical credentials are held on the server outside the publicly accessible website directory. We use appropriate technical and organisational measures against loss, alteration, unauthorised access and disclosure. Internet data transmission cannot be completely protected.
Retention periods
Enquiries and emails are retained only as long as needed to handle them, unless statutory retention duties, professional requirements or legitimate reasons justify longer storage. Further retention may be necessary to establish, exercise or defend legal claims. Our own technical protection data is used solely for sending limits: IP verification values and related timestamps for 15 minutes, used token verification values for 30 minutes and a general sending counter for one hour. Expired entries are removed on the next request to the form endpoint. These periods do not cover the provider’s separately described hosting and email logs.
Your rights
Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. Where processing is based on consent, you may withdraw it at any time with effect for the future. For processing based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. Processing will then cease unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or processing serves to establish, exercise or defend legal claims. To exercise your rights, send a message to the email address stated under “Controller”.
Right to complain
You may complain to a data protection supervisory authority if you consider the processing of your personal data unlawful. The authority responsible for the firm's location is: Bayerisches Landesamt für Datenschutzaufsicht Promenade 18 91522 Ansbach Germany You may also contact another supervisory authority competent for you.
No automated decision-making
No decision based solely on automated processing, including profiling within the meaning of Article 22 GDPR, takes place in connection with the website or the handling of enquiries. Local required-field checks do not decide whether an engagement or assignment is accepted.
Updates to this privacy notice
This notice is adapted to changes in technical processing, service providers and legal requirements. The version published on this website applies.