Who is responsible
The website operator and controller is Elbe Tech Invest ETI GmbH, Finksweg 51, 21129 Hamburg, Germany. Contact hello@finki.finance about this notice or your information.
This draft describes the current website. It requires legal review before publication.
Visiting the website
Serving a page involves technical information such as an IP address, requested URL, time and browser information.
Images and compiled fonts are served as website assets. Google Tag Manager loads on every JavaScript-enabled visit, after denied-by-default consent settings. Its request exposes technical connection information to Google. No tracking iframe is loaded when JavaScript is disabled.
The proposed basis for necessary delivery and security processing is legitimate interests under Article 6(1)(f) GDPR: operating a reliable website and preventing abuse. The deployed setup and assessment must be reviewed before launch.
Optional analytics and advertising
With your analytics consent, Google Analytics (Google Ireland Limited) and Ahrefs Web Analytics (Ahrefs Pte. Ltd.) may measure visits and page use. With your marketing consent, Meta Pixel (Meta Platforms Ireland Limited) may measure advertising and connect visits with a Meta account for personalised advertising. The GTM connection is installed; individual services require configuration and publication before they collect data.
Consented analytics and advertising processing is based on Article 6(1)(a) GDPR; consent-requiring storage or access on your device is governed by section 25(1) TDDDG. Our tag policy requires analytics and advertising measurement to wait for the relevant consent, including cookieless analytics. Google Tag Manager itself connects before consent and receives technical connection information; this is not a promise of no data transfer or anonymity. The operator must assess and document that connection's legal basis and verify consent gates before publishing measurement tags. You can withdraw consent in the footer without losing access; withdrawal does not affect earlier processing.
Depending on enabled tags, providers may receive your IP address, browser and device information, page URL and interaction events. Do not put personal or confidential information in URLs. Demo-form fields must not be sent to analytics or advertising providers. Ahrefs describes its current analytics as cookieless; we nevertheless place it behind analytics consent.
Your versioned choice and timestamps are stored in finki.consent.v1 on this device for 180 days. A change to the consent notice or expiry asks you to choose again. Saving changed preferences reloads the page when needed to stop optional services; accessible first-party Google and Meta cookies are removed. Provider-held data and third-party cookies are not erased by this action.
Providers may process data outside the EEA, including in the US and Singapore. Before publishing tracking tags, the operator must verify provider agreements, transfer safeguards, configured retention and the final cookie inventory. These are not certified by the consent interface.
Requesting a demo or emailing us
The demo form asks for your name, work email, company and role. A message is optional. Contact details let the team respond; your company and role help prepare a relevant demonstration. Please do not send confidential deal documents, bank details or sensitive personal information.
When configured, the form sends your enquiry through Resend to the team's designated inbox. Your email is used as the reply address. The website does not create a platform account, subscribe you to a newsletter or add your enquiry to a website database.
A request reference and a content-derived identifier help avoid duplicate delivery when a request is retried. The form retains entered details in the open page after a failure; it does not save the draft in local storage.
For a request you make as a prospective contracting party, the proposed basis is Article 6(1)(b) GDPR. For business correspondence on behalf of an organisation, it is Article 6(1)(f), responding to relevant business enquiries. Submitting a form is not blanket consent to other uses.
Spam protection
When configured, the demo page loads Cloudflare Turnstile to check for automated abuse. Cloudflare receives browser and network information needed for that check. The website sends the resulting challenge token to Cloudflare for verification before sending the enquiry.
The form also includes a hidden anti-spam field and input validation. Its server code does not log message content, credentials or raw provider responses.
The proposed basis for abuse prevention is Article 6(1)(f) GDPR. Any access to device information must also be assessed under Section 25 TDDDG. The final configuration, data roles and any consent requirement remain subject to review.
Providers and international processing
Enquiries can be received by the FINKI team handling the request, its mailbox provider and Resend (Plus Five Five, Inc.). Turnstile, when enabled, uses Cloudflare.
Resend states that its primary processing takes place in the United States. Provider processing can therefore involve locations outside the EEA. FINKI must confirm the applicable contracts, recipient roles and transfer safeguards before activation; this draft does not assert that those arrangements have been completed.
Your rights and contact options
Depending on the applicable conditions, you can request access, correction, deletion, restriction or portability of your personal data. You can object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing.
Contact hello@finki.finance to make a request. You may also complain to a data protection supervisory authority, including in the country where you live or work. FINKI's establishment-specific authority and whether a data protection officer must be designated remain to be confirmed.
This marketing website does not make automated credit or investment decisions about you. Separate information and agreements are needed before using the FINKI platform or sharing deal records.