Privacy Policy

Last updated: September 4, 2026

1. Overview

We take the protection of your personal data very seriously. This privacy policy informs you about how we handle your personal data when you visit our website and your rights under the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

2. Data Controller

Henry van de Vorming
c/o AutorenServices.de
Birkenallee 24
36037 Fulda, Germany
Email: hello@arrimundo.com

3. Data Collection on Our Website

3.1 Server Log Files

Our hosting provider automatically collects and stores information in server log files, which your browser transmits automatically:

• Browser type and version
• Operating system
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address (anonymized)

This data cannot be attributed to specific persons. It is stored for security purposes and deleted after 14 days. Legal basis: Art. 6(1)(f) GDPR.

3.2 SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the "https://" prefix and the lock icon in your browser.

4. Cookies & Third-Party Services

We do not set cookies ourselves and do not use a consent banner because no consent-requiring technology is loaded by us. Server logs are processed by our hosting provider Netlify (USA, Data Privacy Framework). The engagement widget Grow by Mediavine (Mediavine Inc., USA) loads after your first interaction with the page and may set its own cookies; its consent handling and privacy notice are provided by Mediavine at https://www.mediavine.com/privacy-policy/. Our contact form is processed by Netlify Forms. We do not run Google Analytics.

Your theme preference (light/dark) is stored in your browser's localStorage, which is not a cookie and is never transmitted to our servers.

localStorage entries are kept locally in your browser only. You can clear them at any time via your browser's site data settings. For more detail, see our Cookie Policy.

5. Contact & Email

When you contact us via email or a contact form, the data you provide (name, email, message) will be stored for the purpose of processing your inquiry. We will not share this data without your consent. Legal basis: Art. 6(1)(b) GDPR.

Data is deleted once your inquiry has been fully resolved, unless statutory retention obligations apply.

6. Applying for Insurance

student-insurance.com does not collect or process insurance applications. When you choose a plan, you follow a link to the respective provider's own website and submit your application there. Any personal data you enter is collected and processed by that provider under its own privacy policy — not by us.

7. Netlify Forms & Hosting

Our website is hosted on Netlify (Netlify, Inc., 44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA). When you submit a form on our website (contact form, partner application), the data is processed and stored by Netlify Forms.

7.1 Data Processing by Netlify

Netlify processes form submissions on our behalf as a data processor. The following data is collected:

• Form field contents (name, email, message, etc.)
• Submission timestamp
• IP address (for spam prevention)
• User agent (browser information)

Form submissions are stored on Netlify's secure servers and are accessible to us via the Netlify dashboard. We have entered into a Data Processing Agreement (DPA) with Netlify to ensure GDPR compliance.

7.2 Data Retention

Form data is retained for as long as necessary to fulfill the purpose for which it was collected:

• Contact inquiries: Deleted after resolution of your inquiry (typically 30-90 days)
• Insurance applications: Retained in accordance with legal retention requirements (typically 10 years)

7.3 Spam Protection

Netlify Forms includes built-in spam filtering. This processing is necessary to protect our legitimate interests in preventing abuse. Legal basis: Art. 6(1)(f) GDPR.

7.4 Data Transfers to the USA

Netlify is based in the USA. Data transfers to the USA are covered by the EU-US Data Privacy Framework and Netlify's compliance with Standard Contractual Clauses (SCCs). More information: Netlify Privacy Policy

8. Your Rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR) — Request information about your stored data
• Right to rectification (Art. 16 GDPR) — Correct inaccurate data
• Right to erasure (Art. 17 GDPR) — Request deletion of your data
• Right to restriction (Art. 18 GDPR) — Restrict processing of your data
• Right to data portability (Art. 20 GDPR) — Receive your data in a machine-readable format
• Right to object (Art. 21 GDPR) — Object to processing based on legitimate interest
• Right to withdraw consent (Art. 7(3) GDPR) — Withdraw consent at any time

To exercise these rights, contact us at hello@arrimundo.com.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority is the data protection authority of the state where our company is registered.

10. Changes to This Policy

We may update this privacy policy from time to time. The current version is always available on this page.