This English version is provided for convenience. In case of discrepancies, the German Datenschutzerklärung is authoritative.
1. Privacy at a glance
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.
This website is a purely informational, static site (digital business card). It uses no cookies, no tracking, no analytics or advertising services and does not embed fonts or content from third-party servers. A contact form is available for inquiries; the data entered there is transmitted by email only and is not stored in a database (see section 4). Only the data strictly required for the technical operation of the site is processed.
2. Hosting
This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host's servers. This may include in particular IP addresses, meta and communication data as well as access data generated via a website.
Our host is:
ALL-INKL.COM – Neue Medien Münnich, owner: René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.
The host is used in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR). A data processing agreement pursuant to Art. 28 GDPR has been concluded with the host.
3. General information and mandatory disclosures
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. Please note that data transmission over the internet (e.g. when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible.
Controller
The controller responsible for data processing on this website is:
Marvin Himmelsbach
Q7 24
68161 Mannheim
Germany
Phone: +49 621 49084770
Email: info@vaultbrookcapital.com
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
Storage period
Unless a more specific storage period is stated in this privacy policy, your personal data remains with us until the purpose for the data processing no longer applies. If you assert a legitimate request for erasure or withdraw your consent to data processing, your data will be erased unless we have other legally permissible reasons for storing it; in the latter case, erasure takes place once those reasons cease to apply.
Recipients of personal data
We pass on personal data to external bodies only if this is necessary in the context of fulfilling a contract, if we are legally obliged to do so, if we have a legitimate interest in the transfer pursuant to Art. 6(1)(f) GDPR, or if another legal basis permits the transfer. When using processors, we pass on data only on the basis of a valid data processing agreement.
Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You may withdraw consent you have already given at any time. The lawfulness of the data processing carried out until the withdrawal remains unaffected.
Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)
IF THE DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged violation. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent technically feasible.
Access, rectification and erasure
Within the framework of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to rectification or erasure of this data. You can contact us at any time for this purpose and with any further questions regarding personal data.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this purpose.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the browser's address line changing from “http://” to “https://”. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
4. Data collection on this website
Server log files: The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and IP address. This data is not merged with other data sources. The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and the security of its website. This data is generally deleted after a short time.
No cookies, no tracking: This website does not set cookies and does not use analytics, tracking or advertising services. Consent (e.g. via a cookie banner) is therefore not required.
Inquiries by email or phone: If you contact us by email or phone, your inquiry including all resulting personal data (name, inquiry, contact details) is stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent. Processing is based on Art. 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6(1)(f) GDPR).
Contact form: If you use the contact form on this website, the data you enter (name, email address and message) is used solely to handle your inquiry. It is transmitted by email to our mailbox; it is not stored in a database on the server. Data is not passed on to third parties – with one exception: if you submit a property offer that we do not acquire ourselves (e.g. a new-build project), we forward it to developers or entrepreneurs from our network only with your express consent. Processing is based on your consent (Art. 6(1)(a) GDPR) and – for contract-related inquiries – on Art. 6(1)(b) GDPR. You may withdraw your consent at any time with effect for the future. The data remains with us until the purpose for storage no longer applies (e.g. once your request has been dealt with) or you ask us to delete it; mandatory statutory retention periods remain unaffected. To protect against automated submissions (spam) and misuse, the form uses a technical honeypot field, a check of the time taken to complete the form and a limit on the number of requests. For this rate limit, only a non-reversible hash value of your IP address together with the time of submission is stored in the server's temporary memory for a maximum of 10 minutes and then automatically discarded. The IP address itself is not stored. The legal basis is our legitimate interest in preventing spam and in the security of our systems (Art. 6(1)(f) GDPR). No cookies are set for this purpose.
5. Fonts (locally hosted)
For a uniform presentation, this website uses the “Montserrat” typeface. It is stored locally on our server and loaded from there. No connection to third-party servers (e.g. Google Fonts) is established; in particular, no data (such as your IP address) is transmitted to Google or other third parties.
6. Links to external profiles and offerings
This website may contain links to external offerings (e.g. Instagram as well as other profiles or partner sites). These are simple links; no content or buttons of these providers are actively embedded (no “social plugin”). Data is therefore only transmitted to the respective provider when you actively click on one of these links and open the target page. After opening the linked page, the respective provider alone is responsible for processing your data.
As of September 2026