Privacy policy

Last updated: 2 November 2026. This policy explains how personal information is processed when you visit expat-krankenversicherung.com.

1. Data controller

Stefan Bille, AXA Hauptvertretung / Service Center, Alt-Köpenick 15, 12555 Berlin, Germany.
Telephone: +49 30 8615951; email: stefan.bille@axa.de.

2. Website hosting and server logs

When you access this website, our hosting provider processes technical connection details as necessary to deliver and secure it. These may include IP address, access date/time, requested page, browser/device details, HTTP status and referrer. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in operating a reliable and secure website). Hosting retention periods and the actual hosting provider must be verified against the deployed hosting configuration.

3. Enquiries and assignment assessment

When you contact us, we process your name, company details, contact details and message to respond to you. The contact page opens an email application; the message is not submitted by the website until you send it. By contrast, the German-language assignment assessment form submits your data securely over HTTPS to our web server, which forwards the request to our team by email. Submitted information may include destination, duration, number of employees and your contact details. Please do not submit medical records or health information in the initial enquiry.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual enquiries) or Art. 6(1)(f) GDPR (legitimate interest in replying to other enquiries). We erase enquiries when no longer necessary unless retention is required by law or another applicable legal basis.

Contact via WhatsApp

We offer voluntary contact through WhatsApp using our business number +49 30 8615951. Clicking a WhatsApp link takes you to this external service operated by a Meta company; we do not embed a WhatsApp widget into the website. When you use WhatsApp, your telephone number, message and related technical communication data may be processed by WhatsApp under its own privacy terms, including possible transfers outside the EEA. We process your message to respond to you (Art. 6(1)(b) GDPR, or Art. 6(1)(f) GDPR for other requests). You can instead contact us by phone or email. Please do not send medical records or identification documents in the first message. WhatsApp privacy information.

4. Cookies, local storage and consent

We use strictly necessary technologies to provide this website and remember privacy choices. Where access to a device is strictly necessary, Section 25(2) of the German TDDDG applies; related processing of personal data is based on Art. 6(1)(f) GDPR where applicable.

Optional Google Analytics 4 loads only after your affirmative consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). No Google Analytics tag is loaded and no analytics request is sent before consent. You may reject analytics and continue to use the whole website. The configured measurement ID is G-F0GLCCSYH0.

We save your choice, the consent version and time locally in your browser, and request a fresh decision within 180 days. Use “Cookie settings” in the footer to change or withdraw consent with effect for the future. When withdrawing, known first-party analytics cookies are removed where technically possible. You can also delete cookies using your browser.

5. Google Analytics 4 and the Google tag

With your consent we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It helps us measure page views, sessions, referral sources, approximate technical and geographic characteristics, and website usage. This may involve pseudonymous identifiers and analytics cookies, for example _ga and _ga_*. Depending on the actual configuration, such cookies may last up to approximately two years. Google technically processes IP addresses for service delivery and approximate geolocation; according to Google, GA4 does not log or store IP addresses.

We use the Google tag (gtag.js) rather than a Google Tag Manager container. This consent does not permit advertising or remarketing tags, which are not enabled by this implementation. We reduce measured page addresses to paths without query parameters and do not intentionally share submitted enquiry details or form fields with Google Analytics.

Data recipients may include Google Ireland Limited, Google LLC in the United States and their subprocessors. Transfers to the United States may occur. Google LLC states that it participates in the EU–US Data Privacy Framework; additional transfer safeguards may be required depending on the recipient and circumstances. See Google Privacy Policy and data transfer frameworks.

Retention of user-level and event-level data is determined by the Google Analytics property settings. GA4 supports configurable periods including two and fourteen months. The effective setting must be verified and stated here before analytics is activated. Aggregated reports may be retained differently.

6. Your rights

Subject to legal conditions, you have rights of access, rectification, erasure, restriction, data portability and objection under Arts. 15–21 GDPR; you may withdraw consent at any time under Art. 7(3) GDPR. You can lodge a complaint with a data protection authority (Art. 77 GDPR), for example the Berlin Commissioner for Data Protection and Freedom of Information.

7. Changes

We may update this notice if our processing activities or deployed services change.