Privacy Policy

1. Data Controller

The entity responsible for data processing on this website is:

Goetzl Consulting LLC
23160 Fashion Dr, Ste 220
Estero, FL 33928
USA
Email: m.goetzl@markgoetzl.com
Phone: +49 151 56012349

A data protection officer has not been appointed.

2. Introduction

We, Goetzl Consulting LLC, handle the personal data collected through our website www.markgoetzl.com and related services responsibly. We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. If you have any questions regarding data protection, please contact us at m.goetzl@markgoetzl.com or +49 151 56012349.

3. Scope

This Privacy Policy applies to all visitors to our website, as well as to prospective clients and customers who use our services, in particular the free review and cancellation of life, pension, and similar insurance policies.

4. What Data We Process

We process personal data when you visit our website, use our services, or provide us with information. This includes, in particular:

  • First and Last Name, Title
  • Email address and phone number
  • Address (Street, House Number, ZIP Code, City)
  • Contract and Insurance Information
  • Documents you have uploaded
  • IP address and technical connection data (browser, time of access)

We process only the data necessary to provide our services, comply with legal obligations, ensure the security of the website, or improve the user experience. Providing your data is voluntary; however, without the information marked as required fields in the form, we cannot process your request. We do not engage in automated decision-making, including profiling, as defined in Article 22 of the GDPR.

5. Visiting the Website (Hosting, Server Log Files, Encryption)

Our website is hosted by Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit the website, the server automatically processes technical data (IP address, date and time, page accessed, browser type, operating system, and the page from which you arrived at our site). This data is necessary for the operation and security of the website and is stored only for as long as necessary for this purpose. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR).

Technically, the website is based on WordPress with the Elementor page builder; both run on our server and do not themselves transmit any personal data to their respective manufacturers. To speed up delivery, images, fonts, and scripts are served via the RocketCDN content delivery network (Section 9). All data is transmitted over an encrypted connection (TLS/SSL).

To protect against attacks, we use the Wordfence security plugin. It checks access attempts based on the IP address and can block suspicious requests; in doing so, IP addresses and access data are processed (Section 9). The legal basis for this is our legitimate interest in the security of the website (Art. 6(1)(f) GDPR).

6. Contact via email or phone

If you contact us by email or phone, we will process the data you provide (name, contact information, content of your message) in order to respond to your inquiry. The legal basis for this is the implementation of pre-contractual measures or the performance of a contract (Art. 6(1)(b) GDPR) or our legitimate interest in responding to your inquiry (Art. 6(1)(f) GDPR). We will delete the data as soon as your inquiry has been resolved and there are no legal retention requirements that prevent us from doing so.

7. “Free Check” Form

You can use our “Free Review” form to have your life, retirement, or similar insurance policies reviewed at no cost. In doing so, we process the following data:

  • Contact and Personal Information: Title, first and last name, address (street, ZIP code, city; this form is intended for customers residing in Germany), email address, phone number.
  • Policy details: Insurance company, policy number, type of policy (e.g., life insurance, pension insurance, Riester, Rürup, or direct insurance), policy status, policy start date, premiums paid, current policy value or surrender value, details regarding private legal expense insurance, and whether an objection or revocation has already been filed.
  • Uploaded documents: e.g., insurance certificate (policy), current statement of account, signed application form with cancellation instructions, insurance terms and conditions, and, if applicable, your legal protection insurance policy. These documents may contain additional personal and financial information (e.g., bank account information, date of birth, health information). Photos (JPG, PNG, HEIC) are converted directly in your browser into PDF files before they are uploaded.
  • Technical Data: Time of the request, an automatically assigned reference number, your IP address in truncated (anonymized) form, and the browser identifier. This data is used to prevent misuse (e.g., automated requests).

Purpose and Legal Basis: We process this data to receive and manage your inquiry and to have your contract reviewed free of charge by one of our partners. The legal basis is your consent (Art. 6(1)(a) GDPR), which you provide by submitting the form, as well as the implementation of pre-contractual measures (Art. 6(1)(b) GDPR). Technical data is stored based on our legitimate interest in ensuring the security of the form (Art. 6(1)(f) GDPR). You may withdraw your consent at any time with future effect, e.g., by sending an email to m.goetzl@markgoetzl.com.

Confirmation Email: After submitting the form, you will receive an automatic confirmation email at the address you provided. It will include your reference number, the type of policy, and the insurer. A copy of this notification will be sent to us.

Storage and Deletion: Your request and the uploaded documents are stored on our server at Strato AG in Germany. The documents are stored in a separately secured area that is not directly accessible from outside and can only be accessed via time-limited, signed links (valid for 30 days). Uploaded documents are automatically deleted from our server no later than 90 days after upload; the remaining request data is deleted no later than 365 days after upload. In our customer management system (Pipedrive, Section 9), we retain your request and the supporting documents for the duration of the processing and, beyond that, for as long as necessary to document the process and to comply with legal retention requirements; after that, we delete them.

8. Sharing Information with Our Partners

We do not conduct the legal review, termination, or rescission of your contract ourselves; instead, these tasks are handled by specialized partners. To this end, we forward the information you provided in the form and the uploaded documents to one of the following partners:

  • Verbraucherhilfe24, a brand of Conrevo GmbH, Albert-Roßhaupter-Straße 32, 81369 Munich. The vast majority of inquiries are directed to this partner.
  • ABN Partner Law Firm & Tax Advisory Firm PartG mbB, Albert-Roßhaupter-Straße 32, 81369 Munich. This firm handles the legal review and processing.
  • ProLife GmbH, Ruppertswies 40, 85092 Kösching. In certain cases, particularly with direct insurance policies, this partner handles the review and processing.

Which partner processes your request depends on the type of contract and their workload. The respective partner then processes your data as an independent data controller for the purposes of legal review, termination, billing verification, and, if applicable, additional billing; in this regard, that partner’s privacy policy applies. The legal basis for the transfer of your data is your consent (Art. 6(1)(a) GDPR) as well as the implementation of pre-contractual measures (Art. 6(1)(b) GDPR).

9. Service Providers Used

We use the following service providers to operate the website and process your inquiry. To the extent that these providers process data on our behalf, we have entered into data processing agreements in accordance with Article 28 of the GDPR.

  • Strato AG (Berlin, Germany) – Website hosting, storage of inquiries and documents. Data: all form data, documents, IP address, server log files. Privacy policy: strato.de/datenschutz
  • WP Media SAS (Lyon, France) – RocketCDN, a content delivery network for the fast delivery of images, fonts, and scripts; operated on the infrastructure of BunnyWay d.o.o. (Ljubljana, Slovenia). Data: IP address, files accessed. Privacy policy: wp-rocket.me/privacy-policy
  • Defiant, Inc. (Seattle, USA) – Wordfence security plugin for defending against attacks. Data: IP address, access data for blocked or suspicious requests. Privacy policy: wordfence.com/privacy-policy
  • Zapier, Inc. (San Francisco, USA) – automated forwarding of inquiries to our customer management system. Data: all form data (contact, address, and contract information), reference number, and uploaded documents, which Zapier retrieves via temporary links and transfers to Pipedrive. Privacy policy: zapier.com/privacy
  • Pipedrive OÜ (Tallinn, Estonia) – Inquiry management (CRM). Data: all form data, reference number, uploaded documents. Privacy policy: pipedrive.com/en/privacy
  • Formspree, Inc. (U.S.) – additional receipt and archiving of form submissions (backup). Data: all form data. Privacy policy: formspree.io/legal/privacy-policy
  • SendLayer, LLC (U.S.) – Delivery of emails sent by our website (confirmation email to you, notification to us). Data: Email address, name, email content (reference number, contract type, insurer). Privacy Policy: sendlayer.com/privacy-policy
  • Google Ireland Limited (Dublin, Ireland) – Google Workspace for our email accounts, where we receive notifications and messages from you. Data: Email address, name, content of your messages. Privacy policy: policies.google.com/privacy
  • Weglot SAS (Paris, France) – Website translation into additional languages and language selector. Data: Text of the page being viewed, URL accessed, selected language and browser language, IP address (when loading the flag images and the translation feature). Your entries in form fields are not transmitted to Weglot. Privacy policy: weglot.com/privacy
  • Usercentrics A/S (Copenhagen, Denmark) – Cookie consent management (Cookiebot). Data: IP address, browser information, your consent decision. Privacy policy: cookiebot.com/de/privacy-policy
  • Google Ireland Limited (Dublin, Ireland) – Google Fonts for displaying fonts. Data: IP address. Privacy policy: policies.google.com/privacy
  • Google Ireland Limited (Dublin, Ireland) – Google Tag Manager and Google Ads (Section 11). Data: IP address, cookie identifiers, usage data. Privacy policy: policies.google.com/privacy

10. International Data Transfers

We, Goetzl Consulting LLC, are headquartered in the United States. Your data is stored on servers in Germany; we access it from the United States to process your inquiry. Some of the services we use (including Zapier, Formspree, SendLayer, Defiant, and Google) also process data in the United States. For these transfers, we rely on appropriate safeguards within the meaning of Articles 44 et seq. of the GDPR, in particular the EU-U.S. Data Privacy Framework, provided the provider is certified under it, as well as the European Commission’s Standard Contractual Clauses.

11. Cookies, Google Tag Manager, and Google Ads

We use cookies and similar technologies to ensure the website functions properly and—with your consent—to collect audience and marketing data. You can give, withdraw, or modify your consent at any time via our cookie banner (Cookiebot). Non-essential cookies are not set until you have given your consent (Art. 6(1)(a) GDPR). You can find a detailed overview of all cookies used in our Cookie Policy.

Google Tag Manager: We use Google Tag Manager, provided by Google Ireland Limited, to integrate marketing and analytics services into the website. Google Tag Manager itself does not set any cookies or collect any personal data; it does not load the integrated services until you have given your consent via the cookie banner.

Google Ads (Conversion Tracking and Remarketing): With your consent, we use Google Ads to measure the effectiveness of our advertisements and to retarget visitors to our website on other websites. In doing so, cookies are set, and data such as IP addresses, cookie identifiers, pages visited, and interactions with our ads are transmitted to Google, including to servers in the United States. The legal basis is your consent (Art. 6(1)(a) GDPR), which you may revoke at any time via the cookie banner. For more information: policies.google.com/technologies/ads

12. Your Rights

Under the GDPR, you have the following rights:

  • Information Regarding the Data Stored About You (Art. 15 of the GDPR)
  • Rectification of Inaccurate Data (Art. 16 of the GDPR)
  • Erasure (Art. 17 of the GDPR)
  • Restriction of Processing (Art. 18 GDPR)
  • Data Portability (Art. 20 of the GDPR)
  • Objection to Processing (Art. 21 GDPR)
  • Withdrawal of Consent with Future Effect (Art. 7(3) of the GDPR)
  • Filing a complaint with a data protection supervisory authority, particularly in the Member State where you reside (Art. 77 of the GDPR)

To exercise your rights, please contact us at m.goetzl@markgoetzl.com or +49 151 56012349.

13. Procedures in the Event of Data Breaches

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority without delay, generally within 72 hours (Art. 33 GDPR). If there is a high risk to you, we will also notify you without delay (Art. 34 GDPR).

14. Changes to This Privacy Policy

We will update this Privacy Policy if our services, the service providers we use, or the legal landscape change. The version published on this page is the one that applies at any given time.

Effective date of this Privacy Policy: October 12, 2026