Privacy policy
for the cancellation service

§ 1 Controller

This privacy policy explains which personal data we collect and process when you use the cancellation service. The controller within the meaning of the GDPR is fino still alive UG (haftungsbeschränkt), Friedrich-Ebert-Straße 25, 34117 Kassel, email: kontakt@abmelde-service.de.

§ 2 Collection and use of personal data

2.1. We process the data you enter to provide the cancellation service, based on your consent or to perform our contract with you under our terms (Art. 6 (1) (a) and (b) GDPR).

2.2. We only collect data that the service needs. You are not legally or contractually obliged to provide data. Without it, however, we cannot carry out the service, or not in full.

2.3. If you choose the automatic route, you log in to online banking via fino's BaFin-regulated account connection. The login details are used only once to detect running contracts from the account transactions. Access is read-only.

2.4. In particular we process: your contact details (name, address, email, phone), details of the deceased person and the death certificate, account transactions insofar as needed to detect contracts, and the contract partners found.

2.5. To improve the service we evaluate data in anonymised form only.

§ 3 Storage period

3.1. After the cancellation service is completed, all data is deleted automatically after 90 days.

3.2. Some data is deleted earlier, as soon as it is no longer needed: online banking login details immediately after one-time use, and account transactions not linked to a contract partner immediately.

§ 4 Encrypted transmission

All data traffic between your device and our servers is encrypted, at least with TLS 1.2. This protects your data in transit against manipulation and unauthorised access.

§ 5 Hosting

The application servers are located in an ISO 27001 certified data centre in Germany.

§ 6 Recipients

6.1. For individual steps we use carefully selected service providers under data processing agreements. They only receive the data needed:

(a) Online banking login details: transmitted to your bank via our banking API provider
(b) Cancellation and transfer letters: transmitted to dispatch providers (post, fax or digital interface) and to the respective contract partners
(c) Mobile number for text messages: transmitted to an SMS provider
(d) Support requests: transmitted to the group's internal support unit

6.2. If you use the service through your funeral home and it invoices you, we only pass on your name and the time of completion for billing purposes. Your funeral home does not receive any account data.

§ 7 Contacting us

If you contact us by email, contact form, phone or chat, we process your details to answer your enquiry. For contract-related enquiries this serves to perform the contract, otherwise it is based on our legitimate interest in answering (Art. 6 (1) (b) and (f) GDPR).

The chat assistant answers automatically. To do so, your entries are transmitted encrypted to Anthropic PBC (USA), whose AI model Claude generates the answer, based on the EU standard contractual clauses (Art. 46 GDPR). We do not store chat content, and Anthropic does not use it for training. Please do not enter bank details or login data in the chat.

§ 8 Your rights

You can request free of charge at any time information about your stored data as well as its correction, deletion or restriction of processing. You can object to processing, withdraw consent with effect for the future and exercise your right to data portability. Please contact kontakt@abmelde-service.de. You also have the right to lodge a complaint with a supervisory authority.

§ 9 Log files and cookies

Each time the service is used, we record technical data anonymously in a log file: requested file, date and time, amount of data transferred, error messages, operating system and browser. We use it only to find errors, ensure security, prevent misuse and improve the service (Art. 6 (1) (f) GDPR). We only use session cookies, which are deleted automatically after use. They contain no features that could identify you personally.

§ 10 Links to other providers

This privacy policy does not apply to linked pages of other providers.