Your data is your business.

Controller and contact

Praedurion Versicherungsmakler UG (haftungsbeschränkt), Langenpreisinger Str. 59, 80995 München, Germany.
Email: info@praedurion.com

Orientation check

The answers are evaluated exclusively in your browser’s memory. The website does not transmit them to Praedurion. Unsaved entries are discarded when you reload or leave the page.

With “Save on this device”, you voluntarily store the check answers and the time of saving in your browser’s local storage. The entry is called praedurion:orientation:v1. It remains until you delete it via “Remove saved check” or in your browser settings. Anyone using the same browser on the same device can access it.

A download is handed to your browser as a text file. When copying, the summary is only written to the clipboard after your explicit action.

Themeswitcher: Light vs. Dark Mode

If you change the display using the sun/moon switch, we only store your choice “light” or “dark” under praedurion:color-mode:v1 in your browser’s local storage. This keeps it for your next visit. The choice is not transmitted to a server and contains no check answers or contact details.

You can switch again at any time or delete the entry in your browser settings. Without a saved choice, the website starts in dark mode. If your browser blocks storage, switching still works for the current visit; a notice makes the restriction visible.

Car insurance calculator

The car insurance calculator automatically saves calculation details under praedurion:kfz:calculation:v1in your browser’s local storage so that you can continue later. This can include vehicle data, postcode and driver details. Anyone using the same browser can see these details. “Reset” removes the details you entered; you can also delete the entry in your browser settings. The bank and contact details from the separate application form are not stored in this entry.

When the service is active, vehicle and location searches run via the Praedurion API to the comparison provider NAFI. For the premium calculation, the required vehicle, driver and insurance details are transmitted. Insurer logos and plan documents are loaded via the same Praedurion API. For street suggestions in the application form, the postcode is sent server-side to the OpenPLZ API; manual entry remains possible.

Only after you explicitly submit it does the Praedurion service send the application details, including bank details, via its own Mailcow system on Aurelius to info@praedurion.com. A confirmation of receipt without bank details goes to the email address provided. Praedurion checks the details and then submits the application to the insurer. Only a technical receipt with a case number and check value remains on the web server, so that the same application is not sent twice; the application details themselves are not stored there. The request is not yet confirmation of an insurance contract or of an eVB. Without activation, the service does not accept applications.

eVB for short-term number plates

For online orders, we process your title, first and last name, date of birth, address, email address and optionally your telephone number. Praedurion sends these details to its own eVB service on the Aurelius server. It handles payment through Stripe (Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland) and, after confirmed payment, obtains the eVB from BALOISE through the comparison provider NAFI (access through the Fonds Finanz broker pool). You enter payment details directly with Stripe; Praedurion does not receive them. Stripe creates an invoice for each payment.

The eVB number is shown to you on the page and sent to you by email; info@praedurion.com receives a copy with your details. The eVB service keeps the order and proof of payment as evidence of issue. Only technical order references without customer details remain on the website’s web server, so that reloading continues the same order. In the browser, only this reference is kept in session storage under praedurion:evb:reference:v1. The legal basis is the performance of your order (Art. 6(1)(b) GDPR).

Travel insurance comparison via Softfair

Wenn du einen Reiseantrag einreichst, erhält Praedurion die gewählten Tarif- und Reiseangaben, Kontaktdaten, Angaben aller versicherten Personen, Bankverbindung und gegebenenfalls Antworten auf tarifabhängige Antragsfragen. Die Verarbeitung dient deinem Auftrag zur Vertragsanbahnung (Art. 6 Abs. 1 lit. b DSGVO). Der Versand an info@praedurion.com erfolgt mit deiner gesonderten Zustimmung als OpenPGP-verschlüsselte E-Mail. Die Eingangsbestätigung bestätigt keinen Versicherungsschutz. Derzeit erfolgt aus diesem Formular keine automatische Antragsübermittlung an Softfair oder den Versicherer. Bitte keine unaufgeforderten Gesundheitsunterlagen im Freitext eintragen. Der Berechnungs- und Fragenstand wird auf dem Webserver für höchstens 24 Stunden zur aktiven Sitzung vorgehalten; ein Neustart beendet diese Verfügbarkeit. Dauerhaft verbleiben datensparsame Versandnachweise (Vorgangsnummer, Zeitstempel und Prüfsummen) zur Vermeidung doppelter Einreichungen sowie die verschlüsselte E-Mail. Für die anschließende Bearbeitung gelten die oben beschriebenen Betroffenenrechte und gesetzlichen Aufbewahrungspflichten.

For travel comparisons, only after your express consent are the date of birth of the oldest insured person, the number and composition of travellers, travel dates, trip price and selected modules and benefit preferences sent to Softfair through the Fonds Finanz connection. This serves the tariff calculation you requested (Art. 6(1)(b) GDPR). No insurance application is submitted. Entries are not permanently stored in this calculator view; reloading loses them. Results remain in the view until you leave or reload it. This is not a promise of deletion for processing by Softfair or Fonds Finanz.

Legal expenses insurance comparison via Softfair

The entries in the German legal expenses form stay in the browser tab while you fill them in. Only after your confirmation and “Calculate plans” does the activated service transmit your date of birth, postcode, family and employment situation as well as cover, previous insurance, claims and benefit details via the broker pool Fonds Finanz to Softfair. For landlord cover, this includes property details and annual rents. The process does not create an insurance application.

A technically necessary HttpOnly cookie named pd_rs links the comparison and request to your browser. It is valid for seven days. The plan list in the service’s memory expires after 20 minutes at the latest; a request preparation opened before then remains usable for seven days with its protected snapshot. These form entries are not stored in LocalStorage or SessionStorage. Error logs contain no customer answers. These local periods are not a deletion promise for Softfair or Fonds Finanz; comparison data transmitted there and the server-side login status are subject to their processing. As long as the connection has not been activated, no form details are sent to Softfair.

Legal expenses request and data transmission

After a successful comparison, benefit details and, when you choose a plan, the associated questions are loaded once from Softfair on the server side using the plan and calculation identifiers. Filling in and sending the prepared request form then no longer requires a Softfair connection. A PDF download that you request retrieves the original document separately from Softfair via the Praedurion service. Only the assigned plan, calculation and document details are used for this, not your entries in the request form. Contact, personal and bank details as well as answers from the request form are not sent to Softfair. While you fill in the form, these details stay exclusively in the memory of the browser tab, without LocalStorage or SessionStorage. Reloading or leaving discards the unsent draft. Insurer logos are loaded via the Praedurion service from Softfair’s static image server; your browser does not contact Softfair directly for logos and documents.

The service also gives the tab an encrypted, tamper-protected snapshot of the comparison details, the chosen plan, the associated questions and the document references. It is bound to the necessary session cookie and valid for seven days. Even a restart of the service or the expiry of the 20-minute plan list does not end a request that has already been opened. The snapshot does not extend any premium commitment: Praedurion checks the premium, start, questions and acceptance again before a later application. For this, the service stores a technical encryption key, not your unsent form draft.

Only with the two explicit consents and “Send non-binding request” does the form transmit the details entered to the Praedurion service: contact and address, nationality and marital status, any co-insured persons and rental units, previous insurance, cancellation, previous claims and rejections, plan-specific answers, additions as well as IBAN, other bank details and, where applicable, a different account holder. In addition, the already confirmed comparison details, plan selection and document references from the protected snapshot are included. You must be authorised to pass on other people’s details. This is not consent to marketing.

The Praedurion service checks the details and encrypts the complete content of the request with the verified public OpenPGP key for info@praedurion.com. The email contains the request exclusively as an encrypted attachment. Reading it requires the associated private key held by the authorised recipient; that key does not belong in the web application or on its server. If a valid recipient key is missing or encryption fails, there is no unencrypted fallback sending. Sender, recipient, technical subject, case number and sending time remain visible as email metadata; the customer address is not included in the unencrypted Reply-To of the internal message.

This content encryption protects the email path from the Praedurion service to the authorised recipient. It is not end-to-end encryption directly from your browser: the service briefly needs the details in plain text for checking and encryption. The publicly provided website must use HTTPS. The separate confirmation of receipt to your repeated email address is an ordinary email that is not OpenPGP-encrypted. It only contains the case number and general information, no personal, plan, application or bank details and no tracking pixels.

It remains a non-binding request to prepare an application. No application is submitted to Softfair or an insurer, no SEPA mandate is granted, no direct debit is triggered and neither an insurance contract nor insurance cover is agreed. Product information and policy terms are documents for the period before conclusion of the contract, not the policy or policy number later issued by the insurer. Praedurion must provide the necessary documents, check details and acceptance guidelines and obtain any required declarations separately. A document reference shown or a download does not confirm consent to a document or that advice has been given.

The service permanently stores technical delivery receipts with a random application identifier, timestamps, owner hash and session-bound check value, as well as the assignment of a seven-digit case number to the technical application identifier. This number store contains no personal, form or bank details; application or email contents are not stored there. The receipts prevent duplicate sending and allow a status check without sending again. “Accepted for sending” means acceptance by our own mail server, not proven arrival in your mailbox. At the authorised recipient, encrypted attachments can be taken over locally, checked for decryptability and opened for processing; only assigned requests are read for this. Mailboxes, local working copies and technical receipts are kept regardless of the plan list and the request preparation valid for seven days. Your email provider processes the confirmation within the scope of its service.

You can request access, rectification, erasure and withdrawal of consent from the controller named above. A withdrawal takes effect for the future; a message already sent cannot be recalled by it. If you do not want to use the route described, you can agree another means of transmission with Praedurion.

Electricity, gas and other tariff calculators

The five tariff calculators use Praedurion’s own forms. No partner calculators, partner iframes or partner scripts are embedded in your browser. Only after you start a calculation does our service query the partner data: for electricity and gas with postcode and annual consumption, for internet with connection address, area code and contract options, for mobile plans with the chosen plan features. The current account comparison needs no contact, account or income data. Electricity, gas and internet are queried in parallel at PROCHECK24/CHECK24 and Verivox with a single entry. Current accounts come from the CHECK24 connection; mobile plans from the Verivox connection. The intermediary assignment is retained.

For electricity, gas and internet, further result pages are queried automatically for both sources. Details and ratings are loaded via the service when needed. Original provider logos and assigned PDF documents are delivered via the same domain. Partner cookies and hidden form or session tokens stay in the service, not in your browser.

After a calculation, Praedurion sets the necessary cookie pd_energy. It contains a random identifier, no contact or bank details, and links results, documents and applications to your browser. It is valid for /api/tariffs for no more than 30 minutes; it cannot be read by JavaScript (HttpOnly) and is restricted to the same website context (SameSite=Strict). With HTTPS, it is only transmitted in encrypted form (Secure).

The subsequent application process takes place at Praedurion. With “Prepare application”, the Praedurion service retrieves the empty application form of the chosen offer from CHECK24 or Verivox on the server side, so that all details required there are asked for; none of your details are transmitted in the process. Contact, address, birth, connection, option and payment details, and for current accounts also occupation, income, residence and tax details and details of a second account holder, stay in the memory of this browser tab while you fill them in. “Next” and “Back” do not send these details. While you fill in the form, there is no partner address search, bank query, identification or credit check.

Only with your separate confirmation and “Send application to Praedurion” are the complete details, the chosen tariff reference, the comparison price and the time transmitted to the Praedurion service. Via its own Mailcow system on Aurelius, it sends the complete data to info@praedurion.com and a receipt confirmation with an application summary to the customer email address you entered and repeated. The confirmation before submission specifies this address. For joint accounts too, the receipt confirmation goes only to this confirmed customer address. IBANs are shortened; dates of birth, tax identifiers, residential and income information are not listed. Your email provider processes the message as part of its service. The email contains no tracking pixels or externally loaded images. To submit the application, Praedurion then sends your details to the selected comparison partner (CHECK24 or Verivox) and the provider. Submission alone does not create a contract; the provider initiates cancellation, account opening or payments only after accepting your application.

Internal receipt is only confirmed once the application message has been found in the Mailcow mailbox and its full content has been matched with the data sent. Only the message with the corresponding application number is read for this. The confirmation of receipt has a separate sending status. For external addresses, the associated Postfix delivery events are used to check whether the recipient server accepted it; its inbox or spam folder is not read. For our own address info@praedurion.com, the full content of the confirmation of receipt in the mailbox is also checked. If sending is unclear, no second message is submitted. “Check status” only reads existing messages and delivery events. Mailcow may legitimately retry a delayed delivery of the same message.

Comparison and application sessions stay in the service’s short-lived memory and expire with the comparison; delivery checks already in progress are completed. Expired entries are released with the next matching API request. There is no application database and no storage of application details in LocalStorage or SessionStorage. Reloading or a restart can discard open drafts. “Leave application” discards unsent details. Emails that have already been delivered remain stored in the respective mailboxes regardless of the session expiry and must be deleted there separately.

PDF downloads and the print function can store personal documents on your device or printer; they are only triggered by your action. The print overview is not an official partner offer. Application responses and PDFs are not stored in the HTTP cache. Public energy provider logos can stay in the browser cache for one day, session-bound catalogue logos for no more than 30 minutes. The service limits repeated requests and logs errors without application data or email content. Partner connections are made for the comparisons, logos, tariff details and empty application forms described, and for the later submission of your application.

Contact form, email and WhatsApp

Only when you select “Send message” does your browser send your name, email address, subject and message encrypted to the Praedurion web server on victor. It sends the details through our Mailcow system on Aurelius exclusively to info@praedurion.com. We process them to answer your enquiry (Art. 6 Abs. 1 lit. b DSGVO for pre-contractual enquiries, otherwise Art. 6 Abs. 1 lit. f DSGVO for communication). No automatic customer email is sent.

The web server does not store the content permanently. The email remains in the mailbox for processing and is subject to the applicable retention and deletion periods. To prevent abuse, request counters and technical sending identifiers are held in web server memory. They expire after one hour and are removed on the next request; a restart discards them. Without submission, form entries remain in your browser tab.

The WhatsApp links open an external service. A connection to WhatsApp is only established when you click. WhatsApp’s privacy notice applies to processing there.

Please do not send any health data, identity documents or complete insurance policies through these channels. A suitable transmission method must be agreed for confidential documents.

Cookies, fonts and external content

Praedurion itself does not use any analytics or marketing cookies in this implementation. The necessary calculator session cookies are described above. DM Sans and the icons used come from the locally integrated Sixfold package. The car insurance calculator is embedded on the same domain; its provider requests are described above. External information pages are only accessed when you deliberately open a link.

Hosting and public provision

The website, calculator services and the Mailcow system on Aurelius run on servers of Contabo GmbH, Welfenstraße 22, 81541 München, Germany. Contabo provides the data centre and servers; Praedurion manages operation, configuration and access itself.

When you access the website, the web server logs the IP address, time, requested address, status code, amount of data transferred, previously visited page and browser identifier. These logs serve secure and stable operation and the investigation of faults and misuse (Art. 6(1)(f) GDPR). They are rotated daily and deleted automatically after 15 days at the latest.

Your rights

Where personal data is processed, you have, subject to the statutory requirements, rights including access, rectification, erasure, restriction of processing, data portability and objection. Consent you have given can be withdrawn with effect for the future. You can lodge a complaint with a data protection supervisory authority.

For questions, use the contact address given above. You can remove your locally saved check yourself without contacting us.