Privacy Policy

1. Controller

DLAZ GmbH ("we", "us", "our") is the controller responsible for your personal data within the meaning of the General Data Protection Regulation (GDPR).

Address: Dalbenstraße 17, 26135 Oldenburg, Deutschland
Phone: +49 441 210 09 81
Email: support@dlaz.ltd

2. Data We Collect

We collect and process the following categories of personal data when you interact with our website or engage our services:

• Contact data: name, email address, phone number, and practice or clinic details you provide via our contact form or in direct correspondence.
• Business data: information related to invoices, receivables, billing records, and financial transactions necessary for providing our factoring and Forderungsmanagement services.
• Usage data: IP address, browser type, pages visited, and timestamps collected automatically when you visit our website.
• Cookie data: information stored or retrieved from your device through cookies, as described in our Cookie Policy.

3. Legal Basis for Processing

We process personal data on the following legal bases:

• Consent (Art. 6(1)(a) GDPR): when you provide data voluntarily through our contact form or accept cookies.
• Contract performance (Art. 6(1)(b) GDPR): when processing is necessary to deliver our factoring and receivables management services under a contract with you.
• Legal obligation (Art. 6(1)(c) GDPR): when we are required to retain data under German tax, commercial, or financial regulations.
• Legitimate interest (Art. 6(1)(f) GDPR): for website security, fraud prevention, and improving our services, provided your interests do not override ours.

4. How We Use Your Data

We use your personal data to:

• Respond to enquiries and provide information about our services.
• Process factoring applications, manage receivables, and execute billing activities.
• Comply with legal and regulatory obligations under German and EU law.
• Maintain and improve our website, services, and customer experience.
• Communicate with you regarding your account, transactions, and service updates.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Contact form submissions are retained for up to 24 months. Transaction and billing records are retained in accordance with German commercial and tax law, typically up to 10 years.

6. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: banks, payment processors, and IT service providers acting as processors under our instructions.
• Public authorities: when required by law, court order, or regulatory obligation.
• Professional advisors: lawyers, auditors, and tax advisors bound by confidentiality obligations.

All processors are bound by written agreements ensuring GDPR-compliant data protection.

7. International Transfers

Your data is processed primarily within Germany and the European Union. Where any transfer to a third country is necessary, we ensure an adequate level of protection through Standard Contractual Clauses or other safeguards permitted under GDPR Chapter V.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access to your personal data.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten").
• Right to restriction of processing.
• Right to data portability.
• Right to object to processing based on legitimate interest.
• Right to withdraw consent at any time without affecting prior processing.
• Right to lodge a complaint with the relevant supervisory authority (Landesbeauftragte für Datenschutz Niedersachsen).

To exercise any of these rights, contact us at support@dlaz.ltd.

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, regular security assessments, and staff training on data protection obligations.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be published on this page with a revised "last updated" date. We encourage you to review this page periodically.

11. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at:

DLAZ GmbH
Dalbenstraße 17
26135 Oldenburg, Deutschland
Phone: +49 441 210 09 81
Email: support@dlaz.ltd