Privacy Policy
Last updated: 08-2026

01. General

This privacy policy informs you about the nature, scope and purpose of the processing of your personal data by the data controller in accordance with Art. 13 and 14 of the General Data Protection Regulation (GDPR).

‍

The definitions of the GDPR, in particular those in Art. 4, apply.

‍

a. Controller

The controller within the meaning of data protection law is:

Integral Tax GmbH Wirtschaftsprüfungsgesellschaft (“Integral Tax”)
Schönhauser Allee 148
10435 Berlin, Germany
Website: https://www.integral.de
E-mail: info@integral.de

‍

b. Data Protection Officer

You can reach our appointed Data Protection Officer (DPO) as follows:

Intelliant GmbH
Reinhardtstr. 25
10117 Berlin, Germany
E-mail: privacy@integral.de

02. Details of Data Processing

a. Website Operation and Website Functions

When you visit our website, we process your personal data as a website visitor as follows.

‍

In doing so, we use third-party services. These services include the use of cookies (necessary, preferences, statistics, marketing). Specific information on the individual cookies and individual settings can be found under “Change consent” in our consent management.

‍

In the consent management you can consent to processing activities and object to processing activities based on legitimate interest. You can also adjust your preferences at a later time or withdraw your consent with effect for the future. These adjustments can be made at any time via the widget or the link in the website footer in your browser window. Please note that without your consent, individual functions of the website may only work to a limited extent.

‍

i. Provision of Website Content

Processing
Provision of website content
Purpose
- Establishing the technical connection between the visitor's device and our website (conducting the session)
- Maintaining and improving the functionality of the website
- Maintaining and improving the information security and data security (confidentiality, availability and integrity) of the website (data storage in log files)
Categories of data processed
- IP address of the accessing system
- Browser type and version of the device used
- Internet service provider of the accessing system
- Date, time and success of access
- Third-party websites from which the user's system reaches our website
- Third-party websites accessed by the user's system via our website
Categories of recipients
- Web hosting and provision – Integral Services GmbH
- Various cookie providers (see consent management)
Third-country data transfer
- US (web hosting) subject to appropriate safeguards pursuant to Art. 46 GDPR
- US (cookies) with corresponding consent
Retention period or criteria for determining it
- Session: data deleted at the end of the respective session
- Log files: data deleted after 7 days or anonymised
- Cookies: see consent management
Legal bases
- Art. 6 (1) (f) GDPR (legitimate interests)
- Art. 6 (1) (a) GDPR (consent – see 2. a. ii.)

‍

ii. Website Optimisation, Reach Analysis and Social Media Integration

We process personal data of website visitors for the purposes of website optimisation and reach analysis, as well as for the integration of marketing and social media functionalities. Detailed information on these processing activities can be found in the consent management under “Change consent”. The legal basis for processing for these purposes is Art. 6 (1) (a) GDPR (consent). Consent to this processing can be withdrawn at any time during the browser session in which these settings are used.

‍

iii. Contact

Processing
Contact (contact form)
Purpose
- Contact between Integral Tax and prospective clients
- Processing and answering (contact) enquiries
- Arranging and conducting introductory meetings
Categories of data processed
- Personal master data (name)
- Contact details (e-mail address, telephone number)
- Message content (optional)
- IP address, log data and tracking
Categories of recipients
- Customer relationship management – HubSpot Germany GmbH
Third-country data transfer
–
Retention period or criteria for determining it
- 3 months after the introductory meeting has taken place
Legal bases
- Art. 6 (1) (a) GDPR (consent)

‍

b. Use of the Integral Platform

Integral Services GmbH provides the Integral Platform technically. All reserved professional services (Vorbehaltsaufgaben) are performed by Integral Tax in accordance with the agreement.

Processing
Use of the Integral Platform
Purpose
- Management of master data
- Storage of company documents
- Provision of a communication channel with Integral Tax
Categories of data processed
- Personal master data (name, address, date of birth)
- Contact details (e-mail address, telephone number)
- Where applicable, communication data (communication between data subjects and Integral Tax)
- Tax numbers of the shareholders
Categories of recipients
- Platform operation and provision – Integral Services GmbH
Third-country data transfer
–
Retention period or criteria for determining it
- Processing within the scope of and until the end of contract performance
- To comply with statutory retention obligations, for evidentiary purposes or documentation obligations
Legal bases
- Art. 6 (1) (b) GDPR (initiation or performance of a contract)
- Art. 6 (1) (a) GDPR (consent – only for social login)

‍

c. Client KYC / Anti-Money Laundering Check

In accordance with statutory requirements, an anti-money laundering check with “Know Your Customer” identity verification is carried out by Integral Tax before the conclusion of the contract and acceptance of the engagement.

Processing
Anti-money laundering check / KYC
Purpose
- Fulfilment of anti-money laundering obligations (pursuant to the German Anti-Money Laundering Act, GwG)
Categories of data processed
- Personal master data (name, address, date of birth, place of birth)
- Contact details (e-mail address, telephone number)
- Nationality
- Ownership and control structure of the legal entity
- Identification documents (passport/identity card)
- Politically exposed person status
- Personal master data of further shareholders and beneficial owners
- Tax ID/tax numbers of the shareholders
Categories of recipients
- Platform operation and provision – Integral Services GmbH
Third-country data transfer
–
Retention period or criteria for determining it
- To comply with statutory retention obligations, for evidentiary purposes or documentation obligations
Legal bases
- Art. 6 (1) (b) GDPR (initiation or performance of a contract)
- Art. 6 (1) (c) GDPR (legal obligation)

‍

d. Reserved Professional Services and Statutory Obligations

Processing
Reserved professional services and statutory obligations
Purpose
- Performance of the engagement contract, in particular
    – Preparation of tax returns
    – Bookkeeping
    – Preparation of annual financial statements
    – Payroll accounting
    – Tax advice
    – Correspondence with tax authorities
- Compliance with legal obligations
    – Tax retention obligations
    – Professional documentation obligations
- Safeguarding legitimate interests
    – Asserting and defending legal claims
    – Quality assurance and internal administration
    – Handling of insurance claims
Categories of data processed
Managing directors, authorised representatives, beneficial owners:
- Personal master data (name, address, date of birth, place of birth)
- Contact details (e-mail address, telephone number)
- Nationality
- Tax ID/tax number
- Documents of representation
- Income from shareholdings

Employees:
- Personal master data (name, address, date of birth)
- Employment data (including contract data, remuneration, working hours, absences, training data, termination data)
- Where applicable, communication data (communication with Integral Tax)
- Contact details (e-mail address, telephone number)
- Nationality
- Tax data (tax ID, tax class, child allowances)
- Social security data (social security number, health insurance provider)
- Bank details (account holder, IBAN)
- Special categories of personal data pursuant to Art. 9 GDPR (religious affiliation for church tax deduction, health data in the context of maternity protection, occupational accidents/occupational diseases and medically ordered employment bans)
Categories of recipients
- Platform operation and provision – Integral Services GmbH
- Provision of API data transfer – Integral Services GmbH and Maesn GmbH
- Where applicable, social security institutions
- Where applicable, DATEV eG
- Where applicable, credit institutions
- Where applicable, professional liability insurance
- Where applicable, courts and authorities (to the extent required by law)
Third-country data transfer
–
Retention period or criteria for determining it
- Processing within the scope of and until the end of contract performance
- To comply with statutory retention obligations, for evidentiary purposes or documentation obligations
Legal bases
- Art. 6 (1) (b) GDPR (initiation or performance of a contract)
- Art. 6 (1) (c) GDPR (legal obligation)
- Art. 6 (1) (f) GDPR (legitimate interests)

‍

e. Feedback

Processing
Feedback
Purpose
- Improvement of our services
- Optimisation of our service portfolio
- Contacting you to obtain feedback
- Arranging and conducting feedback meetings
- Evaluation of feedback
Categories of data processed
- Personal master data (name)
- Contact details (e-mail address, telephone number)
Categories of recipients
- Google LLC (Google Workspace) – optional
Third-country data transfer
- US subject to appropriate safeguards pursuant to Art. 46 GDPR
Retention period or criteria for determining it
- 3 months after the feedback has been obtained
- Where applicable, processing outside Integral's area of responsibility
Legal bases
- Art. 6 (1) (a) GDPR (consent)

‍

f. Integral Tax Customer Service

Processing
Integral Tax customer service
Purpose
- Contacting client companies
- Processing and answering enquiries
- Where applicable, requesting relevant information
Categories of data processed
- Personal master data (name, e-mail address)
- Message content (optional)
- IP address, log data and tracking
Categories of recipients
- Platform operation – Integral Services GmbH
- Communication – Google LLC (Google Workspace)
Third-country data transfer
- US subject to appropriate safeguards pursuant to Art. 46 GDPR
Retention period or criteria for determining it
- 3 months after receipt/answering of the contact enquiry
Legal bases
- Art. 6 (1) (a) GDPR (consent)

‍

g. Integral Tax Invoicing

Processing
Integral Tax invoicing
Purpose
- Invoicing of the agreed services
- Processing and settlement of payments
Categories of data processed
- Personal master data of the invoice recipient (name, e-mail address)
- Billing address
- Payment data
- IP address, device information
Categories of recipients
- Where applicable, payment processing – Stripe Payments Europe, Limited
Third-country data transfer
- Where applicable, US (payment processing) subject to appropriate safeguards pursuant to Art. 46 GDPR
Retention period or criteria for determining it
- Processing within the scope of and until the end of contract performance
- To comply with statutory retention obligations, for evidentiary purposes or documentation obligations
Legal bases
- Art. 6 (1) (b) GDPR (initiation or performance of a contract)

‍

h. Community Management

For communication, feedback, or to clarify questions and potential bugs, we offer our users various communication channels.

‍

If you contact us via external platforms such as Facebook or LinkedIn, your enquiry will also be processed by the respective platform provider. As you have already entered into a user agreement with the platform as a registered user in this case, you have already been informed about the processing by the provider. We are not responsible for the processing of your data by, among others, Meta Platforms, Inc. or LinkedIn Ltd. Further information on the processing of your data can be found in the respective privacy policies.

Processing
Community management
Purpose
- Contacting Integral Tax
- Processing of (customer) enquiries and follow-up communication
- Communication of feedback, questions, answers, bugs
Categories of data processed
- Depending on the medium chosen
- Where applicable, personal master data (name, e-mail address)
- Where applicable, telephone number
- Where applicable, content data of the respective message
Categories of recipients
- External platforms or messengers – see above
Third-country data transfer
- US on the basis of appropriate safeguards pursuant to Art. 46 GDPR
Retention period or criteria for determining it
–
Legal bases
- Art. 6 (1) (f) GDPR (legitimate interest)
03. Application Process

Via our careers website (https://jobs.ashbyhq.com/integral-de) open positions within the Integral network can be viewed and the application process can be initiated by providing personal data and application documents. This is enabled by the provider Ashby. If you apply for a position at Integral Tax, we process your personal data as follows:

Processing
Application process at Integral Tax
Purpose
- Provision of a secure application portal
- Finding and hiring future employees
- Filling open positions at clients
- Conducting the application process
- Communication in the course of the application process
Categories of data processed
- Personal master data (name, e-mail address)
- Contact details (address, telephone number)
- CV data (including education data, career data)
- Visa information
- Cover letter (optional)
- LinkedIn profile details (optional)
- Salary expectation (optional)
Categories of recipients
- Application management – Integral Services GmbH and Ashby, Inc.
- Communication – Google LLC (Google Workspace)
Third-country data transfer
- US subject to appropriate safeguards pursuant to Art. 46 GDPR
Retention period or criteria for determining it
- Up to 6 months after completion of the application process (rejection), unless other statutory retention requirements apply (e.g. claims under the German General Equal Treatment Act, AGG)
- Extended retention with consent (talent pool for 6 months)
- Upon conclusion of a contract, the data is stored and further managed in the personnel data management system
Legal bases
- Art. 6 (1) (a) GDPR (consent)
- Art. 6 (1) (b) GDPR (initiation or performance of a contract)

‍

Please understand that, for data protection reasons, we cannot process applications received outside of Ashby.

‍

Under European data protection law, we are obliged to inform you that withholding personal data in your application may put you at a disadvantage compared to other applicants applying for the same position.

04. Rights of the Data Subject

If your personal data is processed, you are a data subject within the meaning of the GDPR. You therefore have the following rights vis-à-vis the controller:

In this case, you have the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR) and erasure (Art. 17 GDPR) of your data, the right to restriction of processing (Art. 18 GDPR), the right to object to processing (Art. 21 GDPR) and the right to data portability (Art. 20 GDPR). You also have the right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR. The competent data protection supervisory authority for Integral Tax is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

‍

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

‍

For further information or to exercise your rights as a data subject, please contact the Data Protection Officer (see 1. b.).

05. Validity and Changes to this Privacy Policy

This privacy policy applies in its current version. The current privacy policy can be accessed and printed at any time at the following web address: https://integral.de/en/privacy-policy

‍

Last updated: 08-2026