Privacy Policy – as of April 2026
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) and the German Telecommunications and Digital Services Data Protection Act (TDDDG) is:
IVA VALUATION & ADVISORY AG
Wirtschaftsprüfungsgesellschaft (Auditing Firm)
Chairman of the Board: WP StB Dipl.-Kfm. Andreas Creutzmann
Savignystrasse 34
60325 Frankfurt am Main
Germany
Phone: +49 (0) 69 999 993 200
E-Mail: info@iva-valuation.de
Website: www.iva-valuation.de
Competent supervisory authority:
Der Hessische Beauftragte fuer Datenschutz und Informationsfreiheit (HBDI)
Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany
Website: datenschutz.hessen.de
2. General Information
As an auditing firm, the protection of personal data is of paramount importance to us. We process personal data only to the extent necessary to provide a functional website and our services, or where another legal basis applies.
This privacy policy applies exclusively to the website www.iva-valuation.de. Affiliated companies (e.g. IVA Digital Asset GmbH) maintain separate privacy policies.
3. Server Log Data / Hosting
When you access our website, our web server automatically collects and stores server log data, including:
- IP address of the requesting device
- Date and time of access
- Name and URL of the file accessed
- Referrer URL (previously visited website)
- Browser type and version, and if applicable, operating system
- Name of the access provider
This data is processed for the technical provision and security of the website and is not used to identify individual users. No merging with other data sources takes place.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and uninterrupted operation of the website). Log data is automatically deleted after a maximum of 30 days.
4. Contact Form and Email Contact
A contact form is available on our website. A valid email address is required; all other information is voluntary. Data is used solely to process your inquiry and is not shared with third parties.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). Data is deleted after your request has been fully processed, unless statutory retention obligations apply.
5. Cookies and Consent Management
Our website uses cookies. A distinction is made between technically necessary cookies and optional cookies (e.g. for analytics purposes).
Technically necessary cookies
These cookies are required for the operation of the website and cannot be disabled. They are used on the basis of Art. 6(1)(f) GDPR and Section 25(2) TDDDG. Session cookies are automatically deleted when the browser is closed.
Optional cookies (analytics, marketing)
For optional cookies, we obtain your consent via our cookie consent banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You may withdraw your consent at any time with effect for the future by accessing the cookie settings via the link in the footer of our website.
6. Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies to analyse how you use the website.
Google Analytics is activated only upon your express consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). No analytics data is collected without your consent. We have enabled IP anonymisation so that your IP address is truncated within the EU/EEA before transmission.
Data collected via Google Analytics is processed on Google servers in the United States. The legal basis for this third-country transfer is standard contractual clauses (SCCs) pursuant to Art. 46(2)(c) GDPR and the EU-US Data Privacy Framework (DPF). A data processing agreement pursuant to Art. 28 GDPR is in place with Google.
You can disable Google Analytics at any time by withdrawing your consent in the cookie banner or by installing the browser add-on.
Google Privacy Policy: policies.google.com/privacy
7. Google Maps
This website embeds maps from the Google Maps service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When a page containing Google Maps is loaded, a connection to Google servers is established, transmitting your IP address and, if applicable, your location.
Google Maps is loaded only upon your express consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). We use a consent wrapper so that no connection to Google is established before you actively consent.
Data transfers to the United States are based on SCCs and the DPF. A data processing agreement pursuant to Art. 28 GDPR is in place with Google.
Google Privacy Policy: policies.google.com/privacy
8. Disclosure of Personal Data
Your personal data is transferred to third parties only if:
- you have given your express consent pursuant to Art. 6(1)(a) GDPR,
- the transfer is necessary for the performance of a contract pursuant to Art. 6(1)(b) GDPR,
- there is a legal obligation to disclose pursuant to Art. 6(1)(c) GDPR, or
- the transfer is necessary to establish, exercise or defend legal claims pursuant to Art. 6(1)(f) GDPR and there is no overriding interest in non-disclosure.
9. Data Security
We implement appropriate technical and organisational measures to protect your data against manipulation, loss, destruction and unauthorised third-party access. Our website uses SSL/TLS encryption (minimum 256-bit). Our security measures are continuously improved in line with technological developments.
10. Your Rights as a Data Subject
You have the following rights with regard to personal data concerning you:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw consent at any time (Art. 7(3) GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
To exercise your rights, please contact: info@iva-valuation.de
Competent supervisory authority: Der Hessische Beauftragte fuer Datenschutz und Informationsfreiheit (HBDI), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.
11. Right to Object
Where your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to such processing under Art. 21 GDPR on grounds relating to your particular situation. To exercise this right, an email to info@iva-valuation.de is sufficient.
12. Updates to This Privacy Policy
This privacy policy is currently valid as of April 2026. As our website evolves or legal and regulatory requirements change, it may be necessary to update this policy. The current version is always available at www.iva-valuation.de/en/privacy/.