Privacy policy
1. Controller
The controller responsible for data processing on this website is PAN21.com International LLC, 7533 South Center View CT, STE R, West Jordan, UT 84084, USA, represented by Harald Linhart. Email: dsgvo@pan21.com, phone: +49 30 5684450-0.
2. Hosting
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the website, Vercel processes technically necessary data such as your IP address, date and time, the page requested, the referrer and browser information (server log files) in order to deliver the website and protect it against misuse. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). We have concluded a data processing agreement with Vercel; transfers of data to the USA are based on the EU Standard Contractual Clauses.
3. Cookies and local storage
This website does not set any cookies for analytics or advertising purposes. To keep you signed in to the client area, a technically necessary sign-in token is stored in your browser's local storage (Art. 6(1)(b) GDPR); your language preference is stored there as well. If you arrive via a referral partner's link, the cookie "pan_ref" containing the partner code is set so that the referral can be attributed to the correct partner; it is valid for 30 days. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in correctly settling partner commissions).
4. Client account and sign-in
You sign in to the client area via an email link. For this purpose, we process your email address and store your customer data and bookings in our database at Supabase (Supabase Inc., USA). To protect against automated sign-ups, we use hCaptcha (Intuition Machines, Inc., USA); your IP address and browser information are transmitted to hCaptcha in the process. The legal basis is Art. 6(1)(b) GDPR, and Art. 6(1)(f) GDPR for hCaptcha (protection against misuse).
5. Bookings and location services
Location services (postal address, mail receipt, scanning and forwarding) are provided via our partner clevver.io. For your booking, we transmit the necessary information (e.g. name, company, address, email address, booked location) to clevver.io. For the mandatory identity verification, you upload documents that are forwarded to clevver.io. Incoming mail is recorded and scanned there; you can access the scans in the client area. The legal basis is Art. 6(1)(b) GDPR and, where identity verification is required by law, Art. 6(1)(c) GDPR.
6. Payments
Payments are processed by Stripe (Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland); the data required for the payment is transmitted to Stripe. To display and use EUROPAN balance, your email address is transmitted to the EUROPAN balance system (noble-limited.com). The legal basis is Art. 6(1)(b) GDPR.
7. Contact form and email
If you write to us via the contact form or by email, we process the information you provide (e.g. name, email address, message) in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR. The data is deleted as soon as it is no longer needed and no statutory retention obligations apply. Emails are sent via Resend (Resend Inc., USA) on the basis of a data processing agreement and the EU Standard Contractual Clauses.
8. Newsletter
We use beehiiv (Beehiiv Inc., USA) for our newsletter. When you subscribe, your email address and sign-up data are stored by beehiiv. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the unsubscribe link.
9. AI chat and voice call
The AI chat or voice call in the support window is only loaded when you actively start it. Your input or voice is then transmitted to the provider in order to conduct the conversation. The button of the virtual secretary "Anna" is loaded from telefonassistent.pro when the page is opened, which transmits your IP address to that server; a conversation only starts when you actively open it. The legal basis is Art. 6(1)(b) or (f) GDPR.
10. WhatsApp
The WhatsApp button is a simple link. WhatsApp (WhatsApp Ireland Limited) is only opened when you click it; WhatsApp's privacy policy applies to any further communication.
11. Visitor counting with PAN21counter
We count page views with our own visitor counter PAN21counter (pan21counter.de). It does not set cookies and does not create user profiles. When a page is requested, a truncated hash value that changes daily is derived from the IP address to avoid counting the same visitor more than once per day; the IP address itself is not stored. Individual page views are deleted after three days; after that, only aggregated daily totals remain. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in simple reach measurement).
12. Fonts
The fonts on this website are loaded locally from our own server. No connection is made to servers of Google or other font providers.
13. Embedded content
This website embeds content from other servers: product images from shop.pan21.com, the company-purchase widget from firmenkauf.org, guide articles from app.trysoro.com, country flags from cdnjs.cloudflare.com, the Supabase program library from cdn.jsdelivr.net, the referral script from pan-finanzvertrieb.de and directory banners from ffa-links.de, swiss-quality.de and german-quality.net. When this content is loaded, your IP address is necessarily transmitted to the respective server. The legal basis is Art. 6(1)(f) GDPR.
14. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You can withdraw any consent you have given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority. Please send your requests to dsgvo@pan21.com.
Status: October 2026