Privacy Policy

POLARIS Treuhand GmbH (as at 25 February 2026)

1. General Information

We, POLARIS Treuhand GmbH, take the protection of your personal data very seriously. Below, we explain what personal data we process when you visit our website, the purposes for which we use this data, and the rights you have in relation to your personal data.

We process personal data exclusively in accordance with the EU General Data Protection Regulation (GDPR) and the relevant German data protection laws (BDSG, TMG/MStV).

2. Name and address of the controller

Soweit nicht anders angegeben, ist Verantwortlicher im Sinne der DSGVO:

POLARIS Treuhand GmbH
Radlkoferstraße 2
81373 Munich

Managing Directors:
Bernd Richter, WP, StB, Dipl.-Kfm.,
Dr. Maximilian Pluta, RA, StB, Dipl.-Kfm.,
Stefan Meyer, RA,
Marcus Katholing

Contact:
Telephone: +49 (0)89 44 44 35 35 0
Email: contact@polaris-treuhand.com

3. Provision of the website

Our website is technically provided by Mittwald CM Service GmbH & Co. KG (hosting provider). When you visit our website, data is automatically processed by our servers and the hosting provider (server log files):

  • Browser type and version
  • Operating system
  • Referrer URL
  • Date and time
  • IP address (truncated/anonymised)
  • Name of the file accessed
  • Amount of data transferred

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the stable, secure provision of the website).

4. Contact and communication options

You can contact us at any time:

  • Email: contact@polaris-treuhand.com
  • Telephone: +49 (0)89 44 44 35 35 0
  • Postal address: POLARIS Treuhand GmbH, Radlkoferstraße 2, 81373 Munich

Data processed when contacting us:

  • Name
  • Email address
  • Telephone number
  • Content of your message
  • Date and time

Legal basis:
Art. 6(1)(b) GDPR (pre-contractual communication)
or Art. 6(1)(f) GDPR (legitimate interest in communication)

5. SSL/TLS encryption

To protect your data, we use up-to-date SSL/TLS encryption. This secures the transmission of your data between your browser and the server.

6. Purposes of data processing

We process personal data exclusively for the following purposes:

  • Operation and provision of the website
  • Ensuring technical functionality
  • Responding to enquiries
  • Error analysis / security
  • Statistical analysis (Matomo)
  • Administration of legal obligations

7. Obligation to provide data

There is no obligation to provide personal data. However, the use of certain functions (e.g. contacting us) is only possible if data is provided.

8. Processing of personal data

When you contact us or use our website, we process the following categories of personal data:

  • Communication data (name, email, telephone number)
  • Technical usage data (IP address, browser data, device)
  • Content data (texts from contact enquiries, uploaded documents)

9. Legal basis for processing

  • Art. 6(1)(a) GDPR – Consent
  • Art. 6(1)(b) GDPR – Contract / pre-contractual enquiries
  • Art. 6(1)(c) GDPR – Legal obligation
  • Art. 6(1)(f) GDPR – legitimate interest

10. Recipients or categories of recipients

Within our company, access is granted only to those departments that require it for their work.

Categories of recipients:

  • internal specialist departments
  • IT service providers / hosting (processors)
  • external consultants (e.g. tax advisors)
  • public authorities, where required by law
  • processors in accordance with Art. 28 GDPR

Data is not disclosed to unauthorised third parties.

We do not transfer any data to the USA or other non-EU countries.

11. Duration of storage

We store personal data only for as long as is necessary or as required by statutory retention periods.

12. Matomo (selbstgehostet)

Wir verwenden Matomo, eine datenschutzfreundliche Open-Source-Analytics-Software. Sie wird auf unserem eigenen Server betrieben, sodass keine Daten an Dritte übertragen werden.

Data collected:

  • anonymised IP address
  • browser type
  • device data
  • date, time, page views
  • referrer URL

Your rights regarding Matomo:

  • You can opt out at any time

Legal basis: Consent (Art. 6(1)(a) GDPR), alternatively legitimate interest (Art. 6(1)(f) GDPR)

13. Use of locally stored fonts

We use only locally stored fonts (WOFF2).

No Google Fonts or external services are loaded. No data is transferred to third parties.

Legal basis: Art. 6(1)(f) GDPR (technically necessary display)

14. Rights of data subjects

When we process personal data, you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Objection (Art. 21 GDPR)
  • Data portability (Art. 20 GDPR)
  • Complaint to the supervisory authority

Competent supervisory authority: The Bavarian State Commissioner for Data Protection (BayLfD) or the competent authority in your place of residence.

15. Withdrawal of consent

You may withdraw any consent you have given at any time with effect for the future. The lawfulness of previous processing remains unaffected.

16. LinkedIn

Functions and content from the “LinkedIn” service are integrated into our website.

The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

You can recognise the LinkedIn functions by the LinkedIn logo or the “Share button” on our website. When you visit a page on our website that contains LinkedIn elements, a connection is established with LinkedIn’s servers. In doing so, LinkedIn is informed which of our pages you have visited, along with your IP address. If you click the LinkedIn button whilst logged into your LinkedIn account, LinkedIn is able to associate your visit to our website with your user account.

Please note that, as the provider of the pages, we have no knowledge of the content of the data transmitted or its use by LinkedIn.

Purpose and legal basis of processing

The use of LinkedIn is in the interest of presenting our online offering in an appealing manner, as well as for communication and interaction with users. Where consent has been requested (e.g. via a cookie consent tool), processing is based on Article 6(1)(a) of the GDPR. Otherwise, processing is based on Article 6(1)(f) of the GDPR (legitimate interest).

Data transfer to third countries

LinkedIn also processes personal data in the USA. LinkedIn relies on standard contractual clauses approved by the European Commission or comparable safeguards within the meaning of Articles 44 et seq. of the GDPR.

Retention period

The data collected by LinkedIn is stored and processed by LinkedIn in accordance with its own policies. We have no influence over the specific retention period.

Further information

Further information on data protection at LinkedIn can be found in LinkedIn’s privacy policy at:
https://www.linkedin.com/legal/privacy-policy

17. Changes to this privacy policy

We reserve the right to amend this privacy policy.
Date: 25 February 2026