Privacy information for Life · Alman Visum

Last updated: 3 October 2026. This information applies to the application at life.almanvisum.com.

Controller and contact

SZB (Sagdullaev Zwei Brüder) UG (haftungsbeschränkt)
Windthorststraße 20
48153 Münster, Germany
info@szb-nrw.de

You can use this address for questions about your personal information and to exercise your data protection rights.

Providing the application and hosting

The application runs on a Hostinger VPS in Frankfurt, Germany. When you open it, we process information necessary for the connection, including your IP address, the time and destination of the request, and technical browser and connection information. This supports delivery of the application, troubleshooting and security.

Article 6(1)(b) GDPR applies to technical processing necessary to provide a function you requested. Security and troubleshooting processing is based on Article 6(1)(f) GDPR; our legitimate interest is a functioning, secure service. Technical logs are needed only for as long as necessary to investigate errors, misuse or security incidents. Backups are created to restore the service; the hosting configuration provides for weekly backups.

Your session and device storage

We use the __Host-life_session cookie, valid for 30 days, to associate your web session securely. It is sent only over HTTPS, is inaccessible to JavaScript, and uses SameSite=Strict. Session validity is different from the retention periods for content described below.

The application also uses LocalStorage for language, profile, onboarding status, checklists, learning progress, favourites, reminders and locally held requests. This browser storage generally remains until the application, the browser or you remove it. It restores the personal functions you use. Storage access that is strictly necessary for a function you expressly requested relies on Section 25(2), no. 2 TDDDG; subsequent necessary processing of personal data relies on Article 6(1)(b) GDPR.

You can remove website data in your browser settings. Doing so may remove local settings and changes that have not yet synchronised. Clearing browser storage does not delete requests already sent to the server. On shared devices, consider who can access the same browser profile.

Profile, progress and reminders

Depending on what you enter, we process your name and contact details, language, country and city, professional status and occupation, German proficiency, visa and arrival information, family situation, goals and everyday arrangements. We also store steps you mark, learning and test results, favourites and reminders with dates and any personal notes.

These data are associated with your session, stored on your device and synchronised with our server to provide the personal functions. During connection problems, changes may initially remain only on your device. Processing for the profile, checklists and reminders you request is based on Article 6(1)(b) GDPR.

Recommendations organise information using your answers. They do not decide whether you receive a residence permit, official qualification recognition, employment or benefits.

Service and help requests

A service request requires the selected service, your name and telephone number. We also process any additional information you supply, such as email address, Telegram contact, country, city, professional situation, German proficiency, message, urgency and preferred contact method. A help request requires, in particular, your name, subject and message. Without the mandatory information, you cannot submit the relevant form.

We store requests with an identifier, timestamps and processing status to respond, clarify details and, where appropriate, prepare a requested service. Authorised people responsible for processing receive access. Article 6(1)(b) GDPR applies to contract-related enquiries; for other substantive enquiries we rely on our legitimate interest in responding under Article 6(1)(f) GDPR.

Please do not put medical documents, complete passport copies or other particularly confidential information that is unnecessary for your initial enquiry into free-text fields. If documents are needed later, an appropriate transfer method must be agreed.

Automatic forwarding of these web forms to internal Telegram chats, email notification services or CRM webhooks is currently not configured. A Telegram contact you provide is initially a contact field within your request.

Telegram and external services

When you open the application within Telegram, the official WebApp script from telegram.org is loaded to support that environment. Telegram receives technical connection information. The script is not loaded during an ordinary web-browser visit. For Telegram sign-in, we verify the signature of the sign-in information supplied by Telegram. We process your Telegram user identifier and, where supplied, display name, username and language to identify you and provide your personal profile. Article 6(1)(b) GDPR is the basis for this sign-in and profile function you request.

Your use of Telegram and voluntary direct messages to @AlmanVisum_bot are additionally covered by Telegram’s privacy policy. It also describes possible processing by group companies outside the European Economic Area. Direct Telegram communication is distinct from submitting our web forms.

Links to authorities, learning resources and other websites lead to separate services. Opening them sends the connection information needed for access to their operators. Their own privacy information governs processing there.

The Barmer offer button opens an external application at my-insurance24.com. A simple click does not send profile or contact details stored in Life into that application and does not create an additional contact enquiry in Life. Information you enter on the external page is processed under the privacy information provided there. Opening the link does not itself conclude an insurance contract.

Retention and deletion

Unused profiles stored on our server and their personal application data have a retention period of 90 days after the user’s last activity. Ordinary enquiries without a separate contractual or legal reason for continued retention are deleted 90 days after the last substantively relevant contact. This is our deletion policy; the 30-day session validity does not replace it.

Documents needed to meet legal obligations or establish, exercise or defend specific legal claims are retained only to the extent necessary. Such a reason does not justify indefinite retention of the entire profile. Depending on the purpose, Article 6(1)(c) or (f) GDPR applies. Backups and technically necessary logs serve separate recovery and security purposes; deleting an active entry is not a promise to erase every backup at the same moment.

Removing a request from your local history removes the copy on this device. Resetting a profile clears profile fields and may synchronise that change; it does not automatically delete the account, previously submitted requests or every other copy. For comprehensive access or deletion, contact info@szb-nrw.de.

Your rights

Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. Where processing relies on consent, you can withdraw it for the future. You may object to processing under Article 6(1)(f) GDPR on grounds relating to your particular situation. We may request information needed to verify your identity and assign your request securely.

You may complain to a data protection supervisory authority, in particular the Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.