Privacy Policy
for the website https://eori-beantragen.de
Last updated: October 2026
Protecting your personal data is important to us. We treat your personal data confidentially and in accordance with the applicable data protection regulations — for customers in the EU in particular the General Data Protection Regulation (GDPR), supplemented by the Swiss Federal Act on Data Protection (FADP) — as well as this privacy policy. As the controller is based in Switzerland, data from the EU is processed on the basis of an adequate level of data protection (the European Commission's adequacy decision for Switzerland).
1. Controller
Urs Zimmermann
Klybeckstr. 141
4057 Basel
Switzerland
Email: info@eori-beantragen.de
2. What data we collect
When visiting the website
This data is automatically stored in server log files and is used for security purposes (investigating misuse). It is not combined with other data sources.
- IP address
- Date and time of the server request
- Browser and operating system used
- Referrer URL
When using the order form
We need this data to unlock the right guide for you, issue the invoice and answer usage questions. We do not collect tax numbers, documents, signatures or customs portal credentials; you enter those directly in the customs portal only.
- First and last name, company name (if given)
- Billing address (street, postal code, city, country)
- Email address and optional phone number
- Legal form, request type (new, change, end) and whether you already hold a login for the customs portal (yes/no only, no credentials)
- Time of your consent to immediate access and your progress in the guide (ticked steps)
3. Purpose and legal basis
Processing takes place for the performance of the contract or to carry out pre-contractual measures (Art. 6(1)(b) GDPR), to comply with legal obligations (lit. c), and on the basis of legitimate interests (lit. f).
4. Processors & service providers
To provide the service, we use carefully selected service providers who process data exclusively on our instructions (Art. 28 GDPR):
- Website hosting: Hetzner Online GmbH (Germany)
- Database: PostgreSQL on servers of Hetzner Online GmbH (Germany)
- Payment processing: Stripe Payments Europe, Ltd. (card payments; Stripe also generates payment receipts). Stripe may transfer data to Stripe, Inc. in the USA; this is based on Standard Contractual Clauses and/or the EU-US Data Privacy Framework.
- Payment by SEPA bank transfer (QR code/Girocode): your transfer is processed via your bank and our business account; we receive your name, IBAN and payment reference to the extent provided by your bank.
- Invoices: the invoice is generated from your order data and sent to you by email.
- Email delivery: Strato AG
- No transfer to authorities: the Provider does not forward any data to the customs administration. You file the application yourself in the customs portal.
5. Advertising measurement (OpenAI pixel) — consent only
If you consent via the cookie notice, we use a measurement pixel provided by OpenAI (OpenAI Ireland Ltd., Dublin, and/or OpenAI OpCo, LLC, San Francisco, USA). It is used solely to measure whether our advertisements lead to page views and applications (reach and conversion measurement).
Cookies or comparable identifiers are stored in your browser for this purpose, and the following data is transmitted to OpenAI: IP address, browser and device information, pages visited, a click identifier from the advertisement, and — if an order is completed — the order number and amount. We do not transmit the content of your application (names, addresses, documents).
The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Without consent, the pixel is not loaded. A transfer to the USA cannot be ruled out; it is based on the EU-US Data Privacy Framework and/or Standard Contractual Clauses.
You can withdraw your consent at any time with effect for the future via the "Cookie settings" link in the footer of every page.
Cookies and tracking
Without your consent, we only use technically necessary storage access (e.g. to remember your cookie choice). Analytics or advertising tracking only takes place with consent and is described in Section 5; we do not use any further analytics services.
6. Storage period
We store order data and your progress in the guide for up to 12 months after access expires, after which they are deleted; on request, we delete them earlier (an email is sufficient). We retain invoice and payment data for as long as required by statutory retention obligations.
7. Your rights
Right to lodge a complaint with a supervisory authority, e.g. the Berlin Commissioner for Data Protection and Freedom of Information (https://www.datenschutz-berlin.de).
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
- Withdrawal of consent (Art. 7(3) GDPR)
8. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption, recognizable by "https://" in the address bar.
9. Contact for data protection questions
Urs Zimmermann, Klybeckstr. 141, 4057 Basel, Switzerland
Email: info@eori-beantragen.de
