Thank you for your interest in our services. Protecting your personal data matters to us. Below we explain in detail how we handle your data in accordance with the General Data Protection Regulation (GDPR).
Last updated: October 2026
The controller within the meaning of the GDPR and other data protection provisions is:
As a company established outside the European Union that also offers its services to people in the EU, we will designate a representative in the Union within the meaning of Art. 27 GDPR on request. Until a separate representative is designated, you can reach us directly in all data protection matters using the contact details above (info@nexusbridgecapital.de). As soon as a representative has been formally appointed, their name and address will be published here.
Personal data is any information relating to an identified or identifiable natural person (Art. 4(1) GDPR). We process your data only on the basis of the statutory provisions.
Where we obtain your consent for processing operations, Art. 6(1)(a) GDPR is the legal basis. Where processing is necessary to take steps prior to entering into a contract or to perform a contract, Art. 6(1)(b) GDPR is the legal basis. Where processing is necessary to protect legitimate interests, Art. 6(1)(f) GDPR is the legal basis. Where information is stored on or read from your device (for example cookies or pixels), this is additionally based on your consent under Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG).
When you visit our website, the hosting provider automatically records information that your browser transmits in so-called server log files. This is: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and the IP address. This data is not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in technically error-free and secure operation).
Our website is hosted by Serverprofis GmbH, Otto-Lilienthal-Ring 34-36, 85622 Feldkirchen, Germany (Munich Local Court, HRB 216296). The servers are located in a data centre in Munich. A data processing agreement under Art. 28 GDPR is in place with the provider.
A content delivery network or security service may also be engaged to deliver the website, which processes technical connection data (including the IP address); the legal basis is Art. 6(1)(f) GDPR.
If you contact us via WhatsApp, email or telephone, we process the data you provide (for example name, telephone number, email address, content of your enquiry) in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) or Art. 6(1)(f) GDPR (legitimate interest in answering).
WhatsApp is a service of WhatsApp Ireland Limited. When you communicate via WhatsApp, metadata (for example the telephone numbers of the parties, the time) may be processed by the provider and may be transferred to third countries (USA). If you wish to avoid this, please use email or telephone. WhatsApp is used on the basis of the consent you give implicitly by clicking the WhatsApp button and of our legitimate interest in fast communication (Art. 6(1)(a) and (f) GDPR).
In the booking section of our website you can reserve a free and non-binding initial consultation. Bookings are handled by the scheduling service Calendly of Calendly, LLC, 115 E Main St., Ste A1B, Buford, GA 30518, USA. The booking calendar is not loaded automatically. At first you only see a notice with the button “Load calendar”. Only when you click it does your browser connect to Calendly, and your IP address and technical information about your browser are transmitted to Calendly. Calendly may use cookies or similar technologies in doing so. If you do not click the button, no connection to Calendly is made.
When you book an appointment, you enter your details (for example name, email address, telephone number, preferred time) directly with Calendly. We receive these details and use them only to hold the appointment and to contact you. Calendly sends the confirmation and reminder emails for your appointment. The legal basis for the booking is Art. 6(1)(b) GDPR (steps prior to entering into a contract); for loading the booking calendar it is your consent given by clicking “Load calendar” (Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG), which you can withdraw at any time with effect for the future by closing and reloading the page.
According to its own information, Calendly bases transfers to the USA on the EU-US Data Privacy Framework, the EU Standard Contractual Clauses and the UK Addendum to those clauses. The section “Transfers to third countries” also applies. Further information: calendly.com/privacy. Alternatively, you can request an appointment directly via WhatsApp or email at any time.
Our website uses cookies and similar technologies (for example localStorage, pixels). Technically necessary cookies are required to operate the website and are used on the basis of Art. 6(1)(f) GDPR or Section 25(2) TDDDG. All non-essential technologies, in particular marketing and analytics services, are loaded only after your express consent via our consent banner (Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG). Exceptions are the Expertenmarkt review widget, which is loaded without consent when the page is opened (see the relevant section), and the Calendly booking calendar, which is loaded only after you click “Load calendar”.
You can withdraw or adjust your consent at any time with effect for the future by resetting the consent stored in your browser. The lawfulness of processing carried out before the withdrawal remains unaffected.
If you have consented, we use the Meta Pixel of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. It allows us to measure the success of our advertisements (conversion tracking) and to build audiences for ad delivery (remarketing/custom audiences).
The following data, among others, may be processed: IP address, browser and device information, pages visited, events triggered (for example a click on the contact button, an appointment booking) and online identifiers. For processing in connection with the Meta Pixel, we and Meta are joint controllers within the meaning of Art. 26 GDPR; Meta also processes some data under its own responsibility. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). A transfer to the USA cannot be ruled out. Further information: Meta's data policy at facebook.com/privacy/policy.
If you have consented, we use the TikTok Pixel of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (for the EEA). The pixel enables us to analyse user behaviour in order to optimise our campaigns, audience targeting and conversion measurement.
IP address, browser and device information, timestamps and events triggered may be processed. TikTok sets cookies for this purpose (including _ttp and ttclid). The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).
Note: with TikTok, a transfer of data to third countries (including the USA) and access from other states cannot be completely ruled out. Data protection authorities regard this as an increased risk. The transfer is safeguarded by EU Standard Contractual Clauses (Art. 46 GDPR). Further information: tiktok.com/legal/privacy-policy.
If you have consented, we use the LinkedIn Insight Tag of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. The tag enables us to evaluate the success of our LinkedIn advertising campaigns (conversion tracking), to build audiences (retargeting) and to produce statistical evaluations of visitors to our website.
IP address, device and browser information, timestamps, events triggered and, if you are logged in to LinkedIn, your LinkedIn member ID in pseudonymised form may be processed. LinkedIn sets cookies for this purpose. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). For the joint processing, we and LinkedIn are joint controllers (Art. 26 GDPR). A transfer to the USA (LinkedIn Corporation) is possible. Further information: linkedin.com/legal/privacy-policy.
If you have consented, we use services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. With Google Ads we measure conversions (for example contact requests) and build remarketing audiences. With Google Analytics 4 we analyse usage behaviour in pseudonymised form in order to improve our services.
IP address (shortened), device and browser data, events triggered and online identifiers may be processed. A transfer to Google LLC (USA) is possible. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Further information: policies.google.com/privacy.
If you have consented, we use the X Pixel of X Internet Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. We use it to measure which actions visitors take on our website after seeing or clicking one of our ads on X, such as booking an appointment.
The pages visited, events triggered, identifiers used to match an ad click to a session, the IP address and browser and device information may be processed. The pixel sets cookies in your browser, including “_twpid” and “_twsid”. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). A transfer to third countries, in particular the USA, is possible; according to its own information, X relies on EU Standard Contractual Clauses for this. The section “Transfers to third countries” also applies. Further information: x.com/en/privacy.
If you have consented, we use Microsoft Clarity of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Clarity helps us understand how visitors use our website and where they have difficulties. To do so, the service produces usage analyses, which may include recorded sessions and heatmaps.
Interactions on the page such as clicks, mouse movements and scrolling, the pages visited and device and browser information may be processed. Clarity sets two cookies in your browser: “_clck” stores a pseudonymous user ID, “_clsk” links several page views into one session. We also mark in Clarity when an appointment booking has taken place. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). A transfer to third countries, in particular the USA, is possible. The section “Transfers to third countries” also applies. Further information: privacy.microsoft.com/privacystatement.
If you have consented, we use the conversion pixel of OpenAI Ads (OpenAI Measurement Pixel). For data of users in the European Economic Area and in Switzerland, the processing company under OpenAI's terms for advertising tools is OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland. We use the pixel to measure whether visitors who reach our website through an ad in ChatGPT take an action there, such as viewing a page, clicking the WhatsApp button or booking an initial consultation.
The pixel is loaded only after you have clicked “Accept” in the consent banner. Without your consent, no connection to OpenAI is established and no data is transmitted to OpenAI via the pixel. Consent is voluntary. If you do not consent, this does not put you at any disadvantage when using our website.
After your consent, the following data may be processed: address and title of the page viewed, timestamp, an event identifier, the ad click identifier (oppref), a randomly generated browser identifier and technically customary connection data such as the IP address. We currently send these events: the page view, the click on the WhatsApp button and the successful booking of an appointment through our booking calendar. We do not pass the details you enter in the booking calendar to OpenAI.
According to OpenAI, the pixel sets two cookies in your browser: “__oppref” with a lifetime of 30 days, which stores the ad click identifier, and “__obref” with a lifetime of 365 days, which serves as a browser identifier.
Automatic advanced matching is enabled in the pixel settings. According to OpenAI, the pixel can recognise supported contact details, such as an email address or telephone number, in form fields or other sources on the page viewed and convert them in the browser into a checksum using the SHA-256 method (hashing) before they are sent to OpenAI. Hashed details can also be personal data.
The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Under OpenAI's terms for advertising tools, OpenAI and we generally act as controllers for processing via the pixel. We are responsible for integrating the pixel on our website and for transmitting the data to OpenAI. OpenAI then processes the data under its own responsibility, according to its own information for example to measure advertising effectiveness and to personalise ads.
OpenAI also processes data outside the European Economic Area and, according to its own information, bases transfers on adequacy decisions of the European Commission and on EU Standard Contractual Clauses. You can obtain a copy of the safeguards from OpenAI at privacy@openai.com. You can reach OpenAI's data protection officer at dpo@openai.com. The section “Transfers to third countries” also applies. Further information: openai.com/policies/eu-privacy-policy.
The pixel's cookies remain stored in your browser for the lifetimes stated unless you delete them earlier. According to its own information, OpenAI stores data only for as long as is necessary to provide the services or for other legitimate business purposes. You can withdraw your consent at any time with effect for the future by resetting the consent stored in your browser and deleting the cookies “__oppref” and “__obref”. The lawfulness of processing carried out before the withdrawal remains unaffected. Your rights as a data subject and your right to lodge a complaint with a supervisory authority are set out in the section “Your rights as a data subject”.
The fonts used on our website, Fraunces, Inter and Cormorant Garamond, are stored on our own server and delivered from there (local hosting). No connection to servers of Google or other third parties is made when a page is opened, and no data is transmitted to third parties. The fonts are licensed under the SIL Open Font License.
When the font files are retrieved, the technically necessary server log data is generated, as with any other page request (see the section “Hosting and server log files”). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in an error-free and consistent presentation of our website).
On our home page we embed a review widget from the Expertenmarkt portal (expertenmarkt.de, Trustmarkt), which displays reviews and key figures for our profile on that portal. The widget is loaded from the provider's servers (widget.trustmarkt.de) when the home page is opened, without prior consent in the consent banner. In the process, your IP address is transmitted to the provider, together with technical information such as the browser type and the page viewed. We have no influence on the scope and duration of processing by the provider. Information about the operator and its privacy policy can be found at expertenmarkt.de.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a transparent presentation of reviews).
Enquiry forms are available on some pages, for example for a financing enquiry or for a second opinion on a financing offer you already have. Mandatory details are your name and a way to contact you (email address or telephone number). Everything else is voluntary. Depending on the form, you can also state your nationality, your country of residence, your employment, your monthly net income, the property status, purchase price, amounts already paid or equity, the financing you would like, whether the property is ready or off-plan, the expected handover and, for the second opinion, loan, monthly payment, service charge, expected rent, ancillary costs and size, as well as a free-text note. Please enter only details you want to share with us.
When you submit the form, your details are transmitted to our own server and processed there. In addition, we record the time of the enquiry, your IP address, the page from which you sent the form and, where applicable, information about the origin of your visit (for example the source through which you reached the page). The enquiry is first stored in a log file on our server, which is located outside the publicly accessible web folder, and then delivered as an email to our mailbox info@nexusbridgecapital.de. It is not passed on to third parties.
To fend off automated access we use an additional field that is invisible to humans and a measurement of the time taken to fill in the form. No external service and no captcha is used for this. If you have consented to the use of Google Analytics, the successful submission is also recorded as an event (“enquiry sent”), without the content of your entries.
The legal basis is Art. 6(1)(b) GDPR (handling your enquiry, steps prior to entering into a contract); for logging and spam protection it is Art. 6(1)(f) GDPR (legitimate interest in secure operation and protection against misuse). The section “Retention period” applies to how long the data is kept.
Our website contains links to third-party sites, for example to public authorities, sources and specialist articles, to review portals and to profiles on social networks (for example LinkedIn). Merely visiting our pages does not transmit any data to these providers. Only when you click a link do you leave our website, and the privacy policy of the respective provider then applies.
We currently do not embed any YouTube videos or maps from Google Maps or other map services. The map on the home page is a graphic we created ourselves, which is loaded entirely from our own server. No map tiles are loaded from third parties. Should we embed videos or maps from third parties in future, we will update this privacy policy beforehand and load such content only after your consent.
The services named above may transfer personal data to countries outside the European Economic Area (in particular the USA). For the USA there is an adequacy decision of the European Commission (EU-US Data Privacy Framework); a transfer on this basis is permissible only if the respective recipient is certified under it. Where no adequacy decision applies, the transfer takes place on the basis of EU Standard Contractual Clauses (Art. 46(2) GDPR) or on the basis of your express consent (Art. 49(1)(a) GDPR).
Note: the controller itself is established in the United Arab Emirates (a third country). We process your enquiry data on the basis of Art. 49(1)(b) GDPR (steps prior to entering into a contract) or your consent.
You have the following rights against the controller with regard to personal data concerning you:
To exercise your rights, an informal message to info@nexusbridgecapital.de is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
If your data is processed for direct marketing purposes, you have the right to object at any time to the processing of data concerning you for such marketing. After an objection, your data will no longer be used for these purposes (Art. 21(2) GDPR).
We process and store personal data only for as long as is necessary to achieve the respective purpose of processing or as required by statutory retention periods. We delete enquiry and booking data as soon as it is no longer needed for handling. Cookie-related data of the advertising services is stored in accordance with the requirements of the respective providers (for TikTok, for example, 13 months from the last activity; for LinkedIn up to 6 months; for Google Analytics 4 selectable; for the cookies of the OpenAI pixel 30 or 365 days).
We reserve the right to amend this privacy policy so that it always meets current legal requirements or to reflect changes to our services. The new privacy policy will then apply to your next visit.