Privacy policy

1. Data protection at a glance

Personal data is any information that can be used to identify a natural person directly or indirectly.

Last updated: September 2026

2. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Cong Minh Nguyen acting under the brand CMN Finance / Tài Chính

Phone: +49 176 80370422

Email: cong.minh.nguyen@ergo.de

Unless a data protection officer is legally required or voluntarily appointed, there is no separate data protection officer contact.

3. Hosting and server log files

This website is hosted by the following provider:

When this website is accessed, the hosting provider may automatically collect information in so-called server log files. This may include:

• IP address of the accessing device
• Date and time of access
• Page or file accessed
• Referrer URL
• Browser and browser version used
• Operating system used
• Hostname of the accessing device
• HTTP status code
• Amount of data transferred

This data is processed to provide the website and to ensure its stability, functionality and security.

Legal basis: Art. 6 para. 1 lit. f GDPR.

Our legitimate interest lies in the secure, trouble-free and technically reliable provision of our website.

Server log files are deleted as soon as they are no longer required for the stated purposes, unless statutory obligations or legitimate security interests require longer retention.

The specific regular retention period of the hosting provider must be completed before this privacy policy is published.

If the hosting provider processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR, where legally required.

4. Contact via contact form, email or phone

If you contact us via the contact form, email or phone, we process the data you provide for the purpose of handling your enquiry.

This may include the following data:

• Name
• Email address
• Phone number
• Content of the message
• Time of contact
• Other information you voluntarily provide

Legal basis

If your enquiry relates to the initiation or performance of a contract, processing is based on Art. 6 para. 1 lit. b GDPR.

For general enquiries, processing is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the proper handling and response to enquiries.

If you have expressly consented to specific processing, this is carried out on the basis of Art. 6 para. 1 lit. a GDPR. Consent may be revoked at any time with effect for the future.

5. Recipients of contact and mediation data

Personal data is generally only passed on to bodies whose involvement is necessary for processing your enquiry or for which there is a legal basis for disclosure.

In the context of a specific insurance, pension or financial services enquiry, data may in particular be transmitted to the ERGO Group companies responsible for the enquiry as well as to other parties involved in the brokerage or contract processing, insofar as this is necessary for handling your enquiry, preparing an offer or carrying out pre-contractual measures.

In addition, IT, hosting or email service providers may process personal data insofar as this is necessary for the provision of the respective services.

Data is not disclosed for other purposes unless there is a legal basis or you have previously consented.

6. Retention period for contact enquiries

Data from contact enquiries is generally stored only for as long as is necessary to process and complete the respective enquiry.

Afterwards, the data is deleted unless statutory retention obligations, contractual requirements or legitimate interests in further storage exist.

If the enquiry leads to a contractual relationship or insurance or financial mediation, statutory or regulatory retention periods may apply to the resulting documents.

7. Google Maps

This website may embed the Google Maps mapping service.

Provider for users within the European Economic Area is generally:

Google Maps is not loaded automatically when the page is called up.

Only when you expressly activate the map function is a connection to Google servers established. In particular, the following data may be transmitted to Google:

• IP address
• Browser and device information
• Date and time of access
• Information about the website accessed
• Location information, if you have allowed its use on your device

Google may also use cookies or comparable technologies in connection with the use of Google Maps or read or store information on your device.

Legal basis

Google Maps is only embedded with your express consent.

The legal basis for the processing of personal data is Art. 6 para. 1 lit. a GDPR.

If Google stores or reads information on your device, this is done on the basis of your consent pursuant to Section 25 para. 1 TDDDG.

You can revoke your consent at any time with effect for the future.

Without your activation of the map function, no connection to Google Maps is established by this embedding.

8. Data transfer by Google to third countries

When using Google Maps, it cannot be ruled out that personal data will also be processed outside the European Union or the European Economic Area, in particular in the United States.

Google LLC is certified under the EU-U.S. Data Privacy Framework according to its own information. In addition, where required, further appropriate safeguards such as standard contractual clauses approved by the European Commission may be used for data transfers.

Further information on the processing of personal data by Google can be found in Google's privacy information.

9. Cookies and comparable technologies

This website currently does not use analytics or marketing cookies or tracking services for advertising or profiling purposes.

If technically necessary cookies or comparable storage technologies are used, this is only done to the extent that they are required for the operation of an expressly requested function or the basic functionality of the website.

Consent is obtained before using non-technically necessary cookies or comparable technologies.

10. No automated decision-making

No decision-making based exclusively on automated processing, including profiling within the meaning of Art. 22 GDPR, takes place via this website.

11. Data security

We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration or unlawful disclosure.

This website should in particular be provided via an encrypted HTTPS/TLS connection. An encrypted connection is recognisable by the fact that the connection between the browser and the website is established via HTTPS.

12. Your rights

Provided the statutory requirements are met, you have in particular the following rights:

• Right to information about the data processed concerning you (Art. 15 GDPR)
• Right to rectification of inaccurate data (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to certain processing (Art. 21 GDPR)
• Right to withdraw consent with effect for the future (Art. 7 para. 3 GDPR)

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, you can contact us using the contact details above.

13. Objection to processing based on legitimate interests

If personal data is processed on the basis of Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.

In the event of an objection, the personal data concerned will no longer be processed unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

14. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR.

For a controller based in Saxony, the following authority is in particular responsible:

Postal address: Postfach 11 01 32 01330 Dresden

Phone: +49 351 85471-101

Email: post@sdtb.sachsen.de

The right to contact another competent data protection supervisory authority remains unaffected.

15. Changes to this privacy policy

This privacy policy may be amended if the website, the services used or the legal requirements change.

The current version published on this website applies.