Privacy policy

Ichii GmbH, Kollwitzstraße 76, 10435 Berlin
E-Mail: support@getsteuer.com
Legal notice (Impressum)

Businesses: information about the business (legal form, postcode and city, size, services needed, special requirements, preferred languages, reason, timing) plus company name, name, business email and phone number. We never ask for ID documents, tax numbers, bank details or financial records.

Advisors: sign-in email, firm profile (name, contact, location, services, languages, preferences) and the result of the basic professional-admission check.

Optional verification (“GetSteuer Verified”): only if an advisor orders it: application details, messages during the review, the register result (only “registered / not registered / unable to confirm” with source and date, never reasons), the scope checked, references to sources used, internal review notes, the decision with its validity period, and payment and invoice data for the review fee. Identity is checked in a video call that is not recorded, without ID copies. We do not process data about criminal offences or suspicions. Card data is processed solely by Stripe.

All visitors: technically necessary server logs of our hosting provider. To prevent abuse we store a hashed (not plain-text) value derived from the IP address when a request is submitted.

Handling your request and automatically finding suitable advisors (Art. 6(1)(b) GDPR).

Sharing a business’s contact details with up to five advisors per search round who say they are interested in the request — only with consent (Art. 6(1)(a) GDPR). Before that, advisors only see an anonymised summary. (Requests made under the earlier “up to 3” consent stay limited to three.)

Advisor participation and free introductions (Art. 6(1)(b) GDPR).

Performing an ordered verification review, payment processing and showing the badge with its summary to businesses the practice is introduced to (Art. 6(1)(b) GDPR). Verification has no effect on matching.

Abuse and spam prevention and platform security (Art. 6(1)(f) GDPR).

Retention of accounting and invoice records (Art. 6(1)(c) GDPR with § 147 AO, § 257 HGB).

Suitable advisors are selected automatically using fixed rules. This has no legal effect on you within the meaning of Art. 22 GDPR; you decide yourself whom to work with.

Advisors who said they are interested in a request (at most five per search round) receive the contact details and become independent controllers for any further processing. Businesses receive these advisors’ contact and profile details and, where applicable, the verification badge with its summary.

Processors: Vercel Inc., USA (hosting; server functions in Frankfurt), Supabase Inc., USA (database and sign-in; stored in Frankfurt), Resend, USA (email delivery). Payments for the optional verification are processed by Stripe Payments Europe, Limited, Ireland. For transfers to the USA we rely on the EU-US Data Privacy Framework or EU Standard Contractual Clauses.

We keep data only as long as needed for matching and to document introductions. Unconfirmed requests are closed after 7 days, inactive requests after 60 days. Verification records are kept while valid and then until the limitation period ends (end of year plus three years). Invoices and other accounting vouchers are kept for eight years, books and financial statements for ten years (§ 147 AO, § 257 HGB). If you withdraw consent, we share your details with no further advisors.

Strictly necessary are a cookie for your language choice, session cookies for signed-in advisors, and an entry in your browser’s storage that records your choice about analytics cookies. In addition, we collect usage statistics on our own servers without cookies and without personal data. We do not use advertising cookies.

Only if you consent, we use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics then sets cookies (_ga, _ga_*, valid for up to 2 years) and processes usage data such as pages visited, device, browser, approximate location and time, so that we can analyse how GetSteuer is used. We do not send names, email addresses, phone numbers, request contents or access links; page addresses are shortened first. Google signals and advertising features are disabled; Google Analytics 4 does not store IP addresses. The legal basis is your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). Data may be transferred to Google LLC in the USA on the basis of the EU-US Data Privacy Framework. Analytics data is deleted after 14 months at the latest. You can withdraw your consent at any time via “Cookie settings” in the footer; the analytics cookies are then removed.

You have the right of access, rectification, erasure, restriction, data portability and objection. You can withdraw consent at any time with effect for the future — for example via “I no longer need an advisor” on your status page. You can also lodge a complaint with a data protection authority, for example the Berlin Commissioner for Data Protection and Freedom of Information, which is responsible for us.

Without contact details we cannot introduce advisors. All other answers help us find a good fit.