Privacy policy
We treat your personal data with utmost confidentiality and in strict compliance with the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and the Digital Services Act (DDG).
Last updated: 13.10.2026
1. Data Controller & Contact
The controller for data processing on this platform is the operator identified in the Imprint: KreditFair, Sophienstr. 15, 68165 Mannheim, Germany (Email: contact@kreditfair-de.com). For any privacy-related questions or requests, you may contact us directly at any time.
2. Server Logfiles & Website Access
When accessing our website, information is automatically transmitted from your browser to our server logfiles (including IP address, access timestamp, requested URI, transferred bytes, referrer URL, browser type, and operating system). This processing is grounded in Art. 6(1)(f) GDPR to guarantee stable connectivity, load balancing, and cyber security.
3. Loan Inquiries & Simulation Processing
When submitting a non-binding loan inquiry through our web forms, we collect and process the data you provide (such as name, date of birth, residential address, contact details, net monthly income, current liabilities, employment status, desired loan amount, and duration). The legal basis is Art. 6(1)(b) GDPR for pre-contractual measures.
4. Credit Inquiries & SCHUFA-Neutral Quotes
To evaluate binding loan options, we transmit your parameters to selected lending partners. Credit agency checks are conducted strictly as credit quote inquiries ('Anfrage Kreditkondition' pursuant to § 28b BDSG). These inquiries are completely credit-score-neutral, have zero impact on your SCHUFA score, and remain invisible to other lenders.
5. Disclosure to Partner Lenders & Processors
Your data is only shared with licensed European credit institutions and technical processors strictly when necessary for loan quotation and mediation. We never sell, monetize, or transfer your personal data to marketing third parties under any circumstances.
6. SSL/TLS Encryption & Data Security
For comprehensive security and protection of sensitive information during transit, this platform enforces end-to-end SSL/TLS encryption (minimum 256-bit). This guarantees that all transmitted data cannot be intercepted or read by unauthorized third parties.
7. Cookies, Local Storage & No Tracking
We utilize exclusively technically necessary cookies (such as remembering your chosen language 'NEXT_LOCALE'). We do not use third-party advertising, profiling, or tracking cookies. All typography fonts are self-hosted locally, preventing any external IP leakage to CDNs.
8. Data Retention & Statutory Archives
Your information is deleted as soon as it is no longer required for the purpose for which it was gathered. Insofar as mandatory commercial, supervisory, or fiscal retention duties apply (e.g., § 257 HGB, § 147 AO, § 34c GewO), data is securely retained and restricted for 6 to 10 years.
9. Your Rights as a Data Subject
Pursuant to Art. 15–21 GDPR, you hold full rights to access, rectification, erasure ('right to be forgotten'), processing restriction, data portability, and the right to revoke consent at any time with future effect.
10. Right of Complaint to Supervisory Authority
You have the right to lodge a complaint with a competent data protection authority. The supervisory authority for our registered office is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI BW), Lautenschlagerstraße 20, 70173 Stuttgart, Germany, Email: poststelle@lfdi.bwl.de, Web: https://www.baden-wuerttemberg.datenschutz.de.