Privacy policy
1. Controller
The controller responsible for data processing on this website is PAN21.com International LLC, 7533 South Center View CT, STE R, West Jordan, UT 84084, USA, represented by Harald Linhart. Email: dsgvo@pan21.com, phone: +49 30 5684450-0.
2. Hosting
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the website, Vercel processes technically necessary data such as your IP address, date and time, the page requested, the referrer and browser information (server log files) in order to deliver the website and protect it against misuse. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). We have concluded a data processing agreement with Vercel; transfers of data to the USA are based on the EU Standard Contractual Clauses.
3. Cookies
This website does not set any cookies for analytics or advertising purposes. Technically necessary cookies are set when you sign in to the partner area (Art. 6(1)(b) GDPR). If you arrive via a referral partner's link, the cookie "pan_ref" containing the partner code is set so that the referral can be attributed to the correct partner; it is valid for 30 days. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in correctly settling partner commissions).
4. Partner registration and partner directory
When you register as a partner, we process the information you provide (e.g. name, email address, password, phone number, profession, company, address, website, professional experience, licence number, short profile and your preferences for mail service and billing) in order to review your application and manage your partnership. The data is stored in our database at Supabase (Supabase Inc., USA). Once you are approved, your company name, city, country, website and short profile are shown in the public partner directory. To protect against automated registrations, we use hCaptcha (Intuition Machines, Inc., USA); your IP address and browser information are transmitted to hCaptcha in the process. The legal basis is Art. 6(1)(b) GDPR, and Art. 6(1)(f) GDPR for hCaptcha (protection against misuse).
5. Contact form and email
If you write to us via the contact form or by email, we process the information you provide (e.g. name, email address, message) in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR. The data is deleted as soon as it is no longer needed and no statutory retention obligations apply. Emails are sent via Resend (Resend Inc., USA) on the basis of a data processing agreement and the EU Standard Contractual Clauses.
6. Newsletter
We use beehiiv (Beehiiv Inc., USA) for our newsletter. When you subscribe, your email address and sign-up data are stored by beehiiv. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the unsubscribe link.
7. AI chat and voice call
The AI chat or voice call in the support window is only loaded when you actively start it. Your input or voice is then transmitted to the provider in order to conduct the conversation. The button of the virtual secretary "Anna" is loaded from telefonassistent.pro when the page is opened, which transmits your IP address to that server; a conversation only starts when you actively open it. The legal basis is Art. 6(1)(b) or (f) GDPR.
8. WhatsApp and appointment booking
The WhatsApp button and the appointment booking link (telefon-termin.com) are simple links. Data is only transmitted to WhatsApp (WhatsApp Ireland Limited) or the booking service when you click them; their privacy policies apply there.
9. Visitor counting with PAN21counter
We count page views with our own visitor counter PAN21counter (pan21counter.de). It does not set cookies and does not create user profiles. When a page is requested, a truncated hash value that changes daily is derived from the IP address to avoid counting the same visitor more than once per day; the IP address itself is not stored. Individual page views are deleted after three days; after that, only aggregated daily totals remain. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in simple reach measurement).
10. Advertising banners
Advertising banners are delivered via our own ad server ads.pan21.com. Your IP address is necessarily processed in order to deliver the banner; no user profiles are created. The legal basis is Art. 6(1)(f) GDPR.
11. Fonts
The fonts on this website are loaded locally from our own server. No connection is made to servers of Google or other font providers.
12. Embedded content
This website embeds content from other servers: product images from shop.pan21.com, the company-purchase widget from firmenkauf.org, country flags from flagcdn.com, the referral script from pan-finanzvertrieb.de and directory banners from ffa-links.de, swiss-quality.de and german-quality.net. When this content is loaded, your IP address is necessarily transmitted to the respective server. The legal basis is Art. 6(1)(f) GDPR.
13. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You can withdraw any consent you have given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority. Please send your requests to dsgvo@pan21.com.
Status: October 2026
