Legal

Privacy Policy

Last updated: June 2026

1. Data Controller

The data controller within the meaning of Art. 4 (7) GDPR is:

Accounting Factory AbZ GmbH
Eichenallee 40, 16767 Leegebruch
Phone: +49 3304 522 0123
Email: office@accounting-factory.de
Legally represented by Managing Director Kerstin Schneider.

2. Data Protection Officer

You can reach our Data Protection Officer at:

heyData GmbH
Schützenstraße 5, 10117 Berlin
Web: www.heydata.eu
Email: datenschutz@heydata.eu

3. Your Rights as a Data Subject and Right to Lodge a Complaint

With respect to your personal data, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent at any time (Art. 7 (3) GDPR)

In the event of data protection violations, you have the right to lodge a complaint with the competent supervisory authority. The responsible authority is the Commissioner for Data Protection and the Right to Inspect Files of the State of Brandenburg.

4. Data Collection When You Visit Our Website

Personal data means any information that can be used to identify you personally. When you visit our website for informational purposes only, we collect only the data your browser automatically transmits (see Server Log Files below).

5. Server Log Files

The website's hosting provider automatically collects and stores information in server log files that your browser transmits:

• Browser type and version
• Operating system used
• Referring URL
• Hostname of the accessing device
• Time of the server request
• IP address (truncated / anonymized where possible)

The legal basis is Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and security of its website.

6. Contact Form and Email Contact

When you contact us via the contact form or by email, your details, including the contact information you provide, are stored for the purpose of processing your request and for follow-up questions. We do not share this data without your consent. Processing is based on Art. 6 (1) (b) GDPR (pre-contractual measures / initiation of a contract) or Art. 6 (1) (f) GDPR (legitimate interest in responding to your inquiry).

7. Job Applications

You may apply through our application form or by email. We process the data you submit (e.g., name, contact details, résumé, cover letter) exclusively for the purpose of the application process, on the basis of § 26 BDSG and Art. 6 (1) (b) GDPR. If no employment relationship is established, your application documents will be deleted no later than six months after the conclusion of the process, unless you have consented to longer retention.

8. Fonts (Web Fonts)

This website uses web fonts for uniform typographic presentation. The font files used (Fraunces, Fira Sans) are stored exclusively on our own server. No connection is established to external third-party servers, and no personal data — in particular no IP addresses — is transmitted to third parties.

9. Embedded Third-Party Services

9.1 Google Maps (Map / Directions)

Our contact page embeds the Google Maps mapping service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use a two-click solution: when the contact page loads, the map is initially not loaded and no data is transmitted to Google at that point. Only when you actively click "Load Map" and thereby give your consent is a connection to Google’s servers established. Google may then process your IP address and information about the page you visited; transfer to the United States cannot be excluded. The legal basis for processing after the map is loaded is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Consent is voluntary and not required to use the rest of the website; you can also find directions in the text description. You may withdraw a given consent at any time with effect for the future. For more information, see Google’s Privacy Policy: https://policies.google.com/privacy.

9.2  YouTube

Some pages on our website embed videos from YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube in enhanced privacy mode. According to YouTube, no information about visitors is stored before they watch a video. The enhanced privacy mode does not, however, necessarily prevent data transmission to YouTube’s partners. Regardless, YouTube establishes a connection to the Google network. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in an engaging presentation of our online services). Where consent has been separately obtained, processing is based on Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. For more information, see Google’s Privacy Policy: https://policies.google.com/privacy.

10. Analytics Tools and Advertising

10.1  Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies that enable analysis of your use of the website. The information generated is generally transmitted to and stored on a Google server in the EU. We have enabled IP anonymization, so your IP address is truncated within the EU before it is transferred to the United States in exceptional cases. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in analyzing user behavior to optimize our online offering). We have entered into a data processing agreement with Google pursuant to Art. 28 GDPR. You can prevent data collection by Google Analytics by downloading and installing the browser plugin at tools.google.com/dlpage/gaoptoutgaoptout or by setting an opt-out cookie.

More information: support.google.com/analytics/answer/6004245.

10.2  Google Ads and Conversion Tracking

This website uses Google Ads (formerly AdWords) from Google Ireland Limited. As part of Google Ads, we use conversion tracking: when you click on a Google ad, a cookie valid for 30 days is set and used to evaluate user behavior. The cookies contain no personal information and cannot be tracked across websites. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in optimizing our website and advertising measures). You can disable conversion tracking through your browser’s cookie settings. More information: policies.google.com/privacy.

11. SSL / TLS Encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can identify an encrypted connection by the “https://” in the address bar and the padlock icon.

12. Retention Period

Unless a more specific retention period has been stated within this Privacy Policy, your personal data will remain with us until the purpose for the data processing no longer applies. Statutory retention obligations (in particular under commercial and tax law) remain unaffected.