How we handle your personal data
This Privacy Policy explains how Your Expat Support collects, uses and protects personal data when you visit this website or contact us.
Last updated: 11 October 2026. This page is provided in English with German legal terms where useful.
We only ask for what we need to answer your request.
Technical data is processed to display and secure the website.
We process your message to respond to your relocation inquiry.
Your inquiry is used for support and orientation, not for official authority decisions.
Contents
- Controller / Verantwortlicher
- Data we process
- Purposes and legal bases
- Hosting and technical log files
- Contact form and email communication
- Cookies, local storage and similar technologies
- Fonts and external content
- Retention periods
- Recipients and service providers
- Transfers outside the EU/EEA
- Your rights
- Security
- Updates to this Privacy Policy
Who is responsible for data processing?
The controller responsible for the processing of personal data on this website is:
Marcel Plum
Your Expat Support
Bardenberger Str. 56
52146 Würselen
Germany
Email: info@yourexpatsupport.com
German: Verantwortlicher im Sinne der Datenschutz-Grundverordnung (DSGVO) ist Marcel Plum, erreichbar unter den oben genannten Kontaktdaten.
Which personal data may be processed?
Depending on how you use the website, we may process the following categories of data:
| Website visit | IP address, date and time of access, requested page or file, browser type and version, operating system, referrer URL, technical status codes and similar server log data. |
|---|---|
| Contact form | Name, email address, optional phone or WhatsApp number, current country, destination country, planned timeline, selected relocation goal and the content of your message. |
| Email communication | Email address, message content, metadata and any information you voluntarily provide in your email. |
| Business communication | Information required to respond to requests, prepare support, document communication or comply with legal obligations. |
Please do not send sensitive documents or special-category data unless we specifically ask for it and provide a suitable transfer method.
Why do we process personal data?
We process personal data only where there is a legal basis under the GDPR. In particular, processing may be based on:
- Art. 6(1)(a) GDPR — consent: where you have given consent, for example for optional contact or optional cookies, where applicable.
- Art. 6(1)(b) GDPR — pre-contractual or contractual steps: where processing is necessary to respond to your request or prepare support services.
- Art. 6(1)(c) GDPR — legal obligations: where we must retain or process information due to legal duties.
- Art. 6(1)(f) GDPR — legitimate interests: for secure operation of the website, abuse prevention, documentation of communication and business administration.
Our purposes include operating and securing the website, responding to inquiries, providing relocation-related orientation, preparing consultations, improving website content and complying with legal requirements.
Website hosting by STRATO
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit the website, technical data is processed to deliver the website, maintain stability and protect the website against misuse.
Server log files may include IP address, date and time, requested page or file, referrer URL, browser information, operating system and status code. Processing is based on our legitimate interest in secure, stable and efficient website operation pursuant to Art. 6(1)(f) GDPR.
Where required, we conclude a data processing agreement with our hosting provider under Art. 28 GDPR.
What happens when you contact us?
If you contact us via the contact form, email or phone, we process the information you provide so that we can respond to your inquiry. This may include your name, contact details, relocation goal, planned destination, timeline and message.
The website uses WordPress and may use SureForms for form submissions. Form data is processed to receive and handle your request. Depending on the content of your inquiry, the legal basis may be Art. 6(1)(b) GDPR for pre-contractual communication or Art. 6(1)(f) GDPR for our legitimate interest in responding to inquiries.
We do not use the contact form to make official visa decisions. Visa decisions are made only by the responsible authorities. Please do not submit passport copies, visa files, health data or financial documents through the first contact form unless requested through a suitable process.
Cookies, local storage and consent
This website may use technically necessary cookies or similar technologies to provide basic website functions, security and form functionality.
Technically necessary cookies may be used without separate consent where they are required to provide the website or a service requested by the user. Non-essential cookies, analytics, marketing tools or external tracking tools should only be used after valid consent, where required.
At the time this draft was created, the website is planned without analytics, advertising tracking, newsletter tracking or embedded Google Maps. If such tools are added later, this Privacy Policy and the cookie consent setup must be updated.
Fonts and third-party content
The website design may currently include Google Fonts via external CSS imports. When fonts are loaded from Google servers, technical data such as the visitor’s IP address may be transmitted to Google.
For a privacy-friendly setup, we recommend hosting fonts locally on the website server and removing external font imports. Once fonts are hosted locally, no connection to Google Fonts is needed for typography.
The contact page does not currently include a Google Maps block. If maps, videos, analytics, social media embeds or similar third-party content are added later, this Privacy Policy should be updated before publication.
How long do we keep personal data?
We store personal data only for as long as necessary for the respective purpose or as required by law.
- Contact inquiries are retained as long as needed to handle the inquiry and any follow-up communication.
- Business communication may be retained for documentation and legal retention obligations.
- Server logs are retained only as long as necessary for security, troubleshooting and operation, unless a security incident requires longer retention.
When data is no longer required and no legal retention obligation applies, it will be deleted or anonymized.
Who may receive personal data?
We may share personal data with service providers where this is necessary for website operation, communication or support. This may include hosting providers, email providers, IT service providers and website/form providers.
Service providers are selected carefully and, where required, bound by data processing agreements. We do not sell personal data.
Data is only shared with third parties where legally permitted, required by law, necessary to fulfill your request or based on your consent.
Transfers outside the EU/EEA
We aim to use providers located in the EU/EEA where practical. However, some digital services may involve processing in countries outside the EU/EEA, for example if external fonts, email tools, security tools or embedded third-party services are used.
Where personal data is transferred outside the EU/EEA, we rely on legally recognized transfer mechanisms where required, such as adequacy decisions or standard contractual clauses, unless another lawful basis applies.
This section should be updated if analytics, marketing tools, CRM systems, newsletter tools or additional third-party services are added.
Your data protection rights
Subject to the legal requirements, you have the following rights under the GDPR:
- Right of access to your personal data
- Right to rectification of inaccurate data
- Right to erasure of personal data
- Right to restriction of processing
- Right to data portability
- Right to object to processing based on legitimate interests
- Right to withdraw consent at any time with effect for the future
- Right to lodge a complaint with a data protection supervisory authority
To exercise your rights, please contact us at info@yourexpatsupport.com.
How we protect data
We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse or alteration. These measures include secure hosting, access controls and encrypted transmission where available.
No online transmission is completely risk-free. Please avoid sending highly sensitive documents through unsecured channels.
Changes to this Privacy Policy
We may update this Privacy Policy when the website, legal requirements or processing activities change. The version published on this page applies at the time of your visit.
Last updated: 11 October 2026.
Questions about your data?
Contact us if you have questions about this Privacy Policy or want to exercise your data protection rights.
Your Expat Support
Marcel Plum
Bardenberger Str. 56
52146 Würselen
Germany
Email: info@yourexpatsupport.com