1. Controller

The controller for the data processing on this website is THI Treuhandgesellschaft mbH, Taubenstrasse 20, 10117 Berlin, Germany, telephone +49 30 2061373-20, email office@thi-treuhand.de.

2. Data protection officer

THI has not appointed a data protection officer because the statutory requirements for doing so are not met. Please address any questions regarding data protection to office@thi-treuhand.de.

3. Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Strasse 57, 56410 Montabaur, Germany; the server location is Germany. When the website is accessed, the provider processes automatically transmitted data (IP address, date and time of access, page accessed, volume of data transferred, browser type and operating system). This processing serves the secure and stable operation of the website; the legal basis is Article 6(1)(f) GDPR. The log files are deleted after 60 days. 

4. Encryption

The website uses TLS encryption, recognisable by “https://” in the address bar.

5. Contacting us

If you contact us by email or telephone, we process the information you provide in order to handle your enquiry. The legal basis is Article 6(1)(b) GDPR for contract-related enquiries and otherwise Article 6(1)(f) GDPR. We delete the data as soon as it is no longer required for the purpose and no statutory retention obligations prevent deletion.

6. Data processed in connection with mandates

In connection with the initiation and performance of fiduciary mandates, we process personal data of our contractual partners, their representatives and the beneficiaries. This also includes identification data under the German Anti-Money Laundering Act. The legal bases are Article 6(1)(b) and (c) GDPR in conjunction with the obligations under anti-money laundering law. Records under the Anti-Money Laundering Act are retained for five years; retention periods under commercial and tax law of up to ten years remain unaffected.

7. Cookies and analytics

The website uses only technically necessary cookies. No analytics or analysis of user behaviour takes place. To protect against attacks we use a security module that runs on this website’s own server and processes technically necessary access data (IP address, time of access); the legal basis is Article 6(1)(f) GDPR. Should we use further services in the future, we will obtain your consent pursuant to Article 6(1)(a) GDPR by means of a consent dialogue. 

8. Fonts and embedded content

Fonts are delivered locally from the server; no connection to external providers takes place. Third-party content is not embedded.

9. Links to social networks

The website contains a link to our LinkedIn profile. This is a simple link; data is only transmitted to LinkedIn once you click on the link.

10. Recipients and processors

We only pass on personal data where this is necessary for the performance of the contract, where you have consented or where there is a statutory obligation. Service providers that process data on our behalf – for example for hosting, IT operations or cloud storage – are bound by contract pursuant to Article 28 GDPR.

11. Transfers to third countries

No personal data is transferred to countries outside the European Union via this website. In individual mandates with an international dimension, any transfer takes place only on the basis of Articles 44 et seq. GDPR.

12. Your rights

You have the right to information, rectification, erasure, restriction of processing, data portability and to withdraw consent with effect for the future. Please contact office@thi-treuhand.de in this regard.

13. Right to object

Where we process data on the basis of legitimate interests, you may object to the processing at any time on grounds relating to your particular situation (Article 21 GDPR).

14. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority; the authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information.

15. No automated decision-making

No automated decision-making, including profiling, takes place.

16. Status and amendments

This privacy policy is dated September 17, 2026. We will amend it if the legal situation or the processing on this website changes.