Privacy policy

Please note

This is a courtesy translation. The legally binding version is the German Datenschutzerklärung.

1. Controller

The controller responsible for data processing on this website is:

Darlo – owner Kevin Julkowski
Sole proprietorship
Am alten Grenzstein 5
48607 Ochtrup
Germany
Phone: +49 2553 9733654
E-mail: kevin@darlo.de

2. Hosting of this website

This website is hosted by an external service provider. When you access the site, the provider processes technically necessary connection data (see section 3).

This website is hosted by GoDaddy.com, LLC, 100 S. Mill Ave, Suite 1600, Tempe, AZ 85281, USA. Europe was selected as the server location during setup. This does not rule out transfers to the USA, for example in the course of administration, maintenance or support by the provider or its affiliated service providers. The provider's data processing agreement (Art. 28 GDPR) applies to processing on our behalf and names GoDaddy as the processor. Under that agreement, transfers to the USA rely primarily on the EU-US Data Privacy Framework and, as a fallback, on the EU standard contractual clauses.

The legal basis is our legitimate interest in providing the website securely and reliably (Art. 6 (1) (f) GDPR).

3. Server log files

When you access this website, information transmitted by your browser is recorded automatically. This usually includes: page accessed, date and time, amount of data transferred, browser type and version, operating system, referrer URL and IP address.

This data is not combined with other data sources and is used solely for the secure operation of the website. The legal basis is Art. 6 (1) (f) GDPR.

We archive our own access logs at the hosting provider with a retention period of 30 days. Independently of that, the provider rotates its own server logs every seven days according to its own information.

4. No cookies, no tracking

This website does not set cookies, does not use analytics or tracking services and does not include advertising networks. That is why there is no cookie banner.

Fonts are not loaded from external servers either: the typeface “Inter” is hosted on our own web space. No connection to Google or other third parties is established.

5. Contact via WhatsApp Business

On this website you will find buttons that open a WhatsApp chat with us. They are plain links: as long as you do not click them, no data is sent to WhatsApp. No WhatsApp script and no tracking pixel are embedded.

Provider: We use WhatsApp Business. The provider for users in the EU is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland – a Meta group company.

Which data: When you write to us on WhatsApp, we process your phone number, your profile name and the content of your messages in order to answer your enquiry. WhatsApp itself also collects metadata – for example who communicates with whom and when, device data and IP address. Message content is end-to-end encrypted, metadata is not. Data may also be transferred to the USA. What WhatsApp does with this data is described in the WhatsApp privacy policy.

Legal basis: If your message concerns a specific financing request, we process it in order to take steps prior to entering into a contract (Art. 6 (1) (b) GDPR). For general communication without any contractual link, we rely on our legitimate interest in being easy to reach (Art. 6 (1) (f) GDPR); you may object to this processing at any time. WhatsApp's own processing – in particular of metadata – does not take place on our behalf; WhatsApp alone is responsible for it. If you would rather avoid this, you can reach us just as well by phone or e-mail.

No documents via WhatsApp: Please do not send us documents such as payslips, bank statements or ID cards via WhatsApp. We will give you a secure way to do so (see section 7).

Alternatives: If you prefer not to use WhatsApp, you can reach us just as well by phone on +49 2553 9733654 or by e-mail at kevin@darlo.de.

We delete chat histories 30 days after your enquiry has been completed, unless statutory retention obligations or outstanding claims prevent this.

6. Contact by e-mail and phone

If you contact us by e-mail or phone, we process the data you provide in order to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR if your enquiry relates to entering into a contract, otherwise Art. 6 (1) (f) GDPR.

We delete this data as soon as it is no longer required for the purpose of processing. Statutory retention obligations – in particular under commercial and tax law – remain unaffected.

7. Financing check (Finlink)

For your request we link to your personal financing check, where you submit your details. It runs on the external platform Finlink at kevin-julkowski.finlink.de.

For documents we send you a secure upload link. Please do not send documents via WhatsApp.

When you follow the link, you leave this website. This website itself does not transfer any data to Finlink. Whatever you enter there is processed by the platform provider, and its own privacy policy applies, which you will find on the platform.

The platform is provided by FinLink GmbH, Kattrepelsbrücke 1, 20095 Hamburg, Germany. Its privacy policy is available at finlink.de/datenschutz.

The details you enter there reach us so that we can advise you and compare suitable financing options. The legal basis is taking steps prior to entering into a contract at your request (Art. 6 (1) (b) GDPR).

Providing the details is necessary for us to process your enquiry; there is no legal obligation to use the financing check. You can reach us just as well via WhatsApp, by phone or by e-mail.

We process the details we receive for as long as this is necessary for handling your enquiry and for the brokerage. After that we delete them, unless statutory retention obligations apply or they are needed to assert or defend legal claims. How long the provider stores the data in its own system is governed by its privacy policy.

8. Your rights

You have the right at any time to:

  • access the data stored about you (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure of your data (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object to processing (Art. 21 GDPR)
  • withdraw consent with effect for the future (Art. 7 (3) GDPR)

An informal message to kevin@darlo.de is sufficient.

9. Right to lodge a complaint with a supervisory authority

If you believe that the processing of your data violates data protection law, you can lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf, Germany
www.ldi.nrw.de

10. SSL/TLS encryption

For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by the browser address bar starting with “https://”.

11. Status of this privacy policy

We update this privacy policy whenever the legal situation or our processing changes. The version published on this page applies.

Last updated: 15 November 2026

← Back to the home page