Privacy policy | DIWAN – Consulting · Financing

1. Controller

The controller responsible for data processing on this website is:

DIWAN Finance GmbH
Sonnenallee 114
12045 Berlin, Germany
Represented by the managing director Dalia Ranem
Email: [email protected]

2. General information

We only process personal data where this is necessary to provide this website, to answer your enquiries and to prepare or carry out a consultation, or where you have given your consent. The legal bases are in particular Art. 6(1)(a) (consent), (b) (contract and pre-contractual measures), (c) (legal obligation) and (f) (legitimate interests) of the General Data Protection Regulation (GDPR).

This website is protected by SSL/TLS encryption, which you can recognise by “https://” in your browser's address bar.

3. Hosting and server log files

This website is operated via the Fimo platform, a service of Strapi, Inc., 548 Market St, PMB 6057, San Francisco, CA 94104, USA. Fimo provides hosting, content management and form processing and uses its own technical service providers (sub-processors) for this purpose.

When you visit the website, information transmitted by your browser is recorded automatically (server log files): IP address, date and time of access, page requested, referrer URL, browser type and version, and operating system. This data is technically necessary to display the website and to ensure its security and stability. The legal basis is Art. 6(1)(f) GDPR.

We have concluded a data processing agreement with the provider pursuant to Art. 28 GDPR. Data is stored in the EU/EEA and in the USA. For transfers to the USA we rely on appropriate safeguards under Art. 46 GDPR, in particular the European Commission's standard contractual clauses, or on an adequacy decision under Art. 45 GDPR (EU-US Data Privacy Framework) where the recipient is certified under it.

4. No cookies, no tracking tools

This website does not set cookies and does not store any information on your device. We do not use advertising or tracking services, social media plug-ins or embedded third-party content. The font used is loaded from our own server; no data is transferred to third parties in the process.

5. Visitor statistics

To understand how our website is used, our hosting provider compiles aggregated statistics on the server, such as the number of page views, pages visited, referring pages, device type, browser and country. No cookies are set and no user profiles are created; we only receive aggregated figures. The legal basis is our legitimate interest in improving our services (Art. 6(1)(f) GDPR).

6. Contact by email or phone

If you contact us by email or phone, we process your details (e.g. name, contact details, content of your message) to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a consultation or a contract, and otherwise Art. 6(1)(f) GDPR.

7. Request for an initial consultation

You can request an initial consultation using our form. We process the data you enter: form of address, first and last name, email address, phone number, employment situation, occupation, topics of interest, your concern, your preferred contact time and your message.

We use this information to contact you, arrange an appointment and prepare and carry out the consultation. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and your consent under Art. 6(1)(a) GDPR, which you give by submitting the form.

If you voluntarily provide information that allows conclusions to be drawn about special categories of personal data – for example about religious beliefs – we process it solely on the basis of your explicit consent (Art. 9(2)(a) GDPR) and only for your consultation.

The form data is stored with our hosting provider (see section 3). We delete it once your enquiry has been fully dealt with and no consultation or brokerage takes place. If we work together, we keep the data for as long as necessary for that purpose and for as long as statutory retention obligations apply (in particular under commercial and tax law, generally six or ten years).

8. Job applications

If you apply via our application form, we process your details (first and last name, email address, phone number, desired position, experience, languages, message and – if uploaded – your CV) to carry out the application process. The legal basis is Art. 6(1)(b) GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG).

If no employment relationship results, we delete your documents six months after the end of the process unless you have consented to longer storage. If you are hired, the data is transferred to your personnel file.

9. Disclosure of data

We only disclose your data where this is permitted by law. This is the case in particular if you instruct us to arrange a product (e.g. insurance, financing or an investment): we then transmit the necessary details to the respective provider (Art. 6(1)(b) GDPR). In addition, we use technical service providers who act on our behalf and according to our instructions (Art. 28 GDPR). We never pass on your data for advertising purposes or in return for payment.

10. Your rights

You have the right at any time to:

access the data stored about you (Art. 15 GDPR),
rectification of inaccurate data (Art. 16 GDPR),
erasure (Art. 17 GDPR),
restriction of processing (Art. 18 GDPR),
data portability (Art. 20 GDPR),
withdraw consent you have given, with effect for the future (Art. 7(3) GDPR).

Right to object: Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

An email to [email protected] is sufficient for all requests.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany.

11. Automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

12. Updates

We update this privacy policy when our website or the legal requirements change. Last updated: October 2026.