1. Controller
The controller is Brovela GmbH, Markgrafenstraße 58, 10117 Berlin, Germany, represented by Maximilian Hoffmann. Privacy contact: info@brovela.com.de; telephone: +49 89 7273 455-73.
2. Website access and hosting
Cloudflare provides website delivery. Access involves technically necessary connection data, including IP address, time, requested resource, browser and device information, and technical error or security data. Processing serves website delivery, stability and security. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in securely operating the service. Hosting and security logs are retained only for their operational or security purpose and then removed under applicable deletion rules. A security incident may justify longer retention.
3. Callback requests
For a requested callback, we process first name, surname, email address and telephone number. We also document the language, time, inquiry context and wording or version of the callback consent. The purpose is handling your inquiry and the expressly requested telephone contact about our courses. Consent is based on Article 6(1)(a) GDPR; pre-contractual handling requested by you is based on Article 6(1)(b). Evidence of consent is retained to meet legal obligations under Article 6(1)(c), together with section 7a UWG. The four contact fields are necessary for this inquiry route. You can alternatively contact us directly.
4. Email, purchases and support
Direct contact involves processing the information you provide. Purchases involve additional information needed for the contract, invoice, payment, delivery, support and certificate. The legal bases are Article 6(1)(b) GDPR and, for statutory retention or evidence obligations, Article 6(1)(c). Article 6(1)(f) may apply to general organisational communication. You do not need to submit personal financial records to take a course; complete exercises privately or use fictional examples.
5. Recipients and service providers
Responsible sales staff within Brovela can access inquiries. People handling support or contracts receive only information needed for their tasks. Hosting, email and customer-management services may process data as contracted providers. Required processing agreements are concluded under Article 28 GDPR. We do not sell your contact information or disclose it for other businesses’ advertising.
6. Processing outside the European Economic Area
Cloudflare operates internationally; hosting or security functions may involve processing outside the EEA. Where required, appropriate safeguards under Articles 44 et seq. GDPR are used, including applicable adequacy decisions or EU standard contractual clauses with supplementary protection. You may request information about recipients and safeguards relevant to your data.
7. Retention
Inquiries that do not result in a purchase are normally deleted 180 days after receipt unless a specific legal basis requires longer retention. Telephone advertising consent evidence is retained separately and for that purpose under section 7a UWG for five years from consent and after each use; withdrawal is recorded. Contract and invoice records are retained under applicable statutory obligations. Other correspondence is deleted when its purpose ends unless retention obligations or legitimate legal defence require otherwise.
8. Cookies and browser storage
The website embeds no analytics, advertising or social-media tracking. Fonts, images and scripts are local; language follows the URL. The “necessary only” choice is stored in the first-party brovela_cookie_preferences cookie for 180 days; blocked cookies or local file viewing may use localStorage with the same expiry check. This record contains no contact details. After confirmed form acceptance, brovela_callback_received may briefly hold a language code in sessionStorage for the receipt confirmation. Use Cookie settings in the footer to manage the choice or clear the confirmation. Technically necessary access follows section 25(2) TDDDG; respecting your choice and secure operation rely on Article 6(1)(f) GDPR where personal data is involved. The cookie policy provides details.
9. Your rights
Subject to the GDPR, you have rights of access, rectification, erasure, restriction and data portability. You may withdraw consent at any time for the future; earlier lawful processing remains unaffected. For processing under Article 6(1)(f), you may object on grounds relating to your situation; you may object to direct marketing at any time. Contact info@brovela.com.de.
10. Complaints and automated decisions
You may complain to a data protection supervisory authority, particularly the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, email: mailbox@datenschutz-berlin.de, telephone: +49 30 13889-0. Handling your course inquiry does not involve solely automated decisions with legal or similarly significant effects.