Privacy notice

Last updated: 15 August 2026

Controller and contact

Engine Vaulthub, Level 9, 82 Landsberger Straße, Munich 80339, is the controller for personal data described here. Questions and rights requests can be sent to info@engine-vaulthub.digital or made by phone at +49 89 5551 6520.

Data we process and why

We process contact details, enquiry text, scheduling information, invoices and limited consultation notes. We use them to respond before a contract (Article 6(1)(b) GDPR), perform an agreed service (Article 6(1)(b)), meet tax and accounting duties (Article 6(1)(c)), and protect legitimate business interests such as security and claim handling (Article 6(1)(f)).

Do not send passport images, financial statements, health information or complete immigration files through the enquiry form. If particular information becomes necessary, we agree a proportionate transfer method and purpose first.

Recipients, hosting and transfers

Authorised staff and service providers supporting hosting, email, scheduling and accounting may process data under appropriate obligations. We do not sell personal data. If a provider processes information outside the European Economic Area, we use an applicable transfer mechanism such as an adequacy decision or standard contractual clauses and assess supplementary safeguards where required.

Retention

Unconverted enquiries are normally deleted after six months. Consultation records are generally retained for three years after the engagement for follow-up and claims purposes. Invoices and tax records are retained for statutory periods, commonly up to ten years. We delete or anonymise data earlier when no lawful purpose remains.

Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent without affecting earlier lawful processing. You also have the right to complain to a competent data protection supervisory authority, including the Bavarian State Office for Data Protection Supervision where applicable.

Website use and cookies

Server logs may briefly record IP address, time, requested page and browser information for delivery and security. Our cookie preference is stored locally in your browser. Optional analytics, if introduced, will require consent. Details appear in our cookie notice.

Security and updates

We use access controls, data minimisation and appropriate technical safeguards, but no transmission method is risk-free. Material changes to this notice will be posted here with a new date.