Book a first call

Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Varia Franchise GmbH
Mollenbachstraße 2
71229 Leonberg
Germany

Phone: +49 7152 / 6097-02
Fax: +49 7152 / 6097-800
Email: info@varia.de

Represented by the Managing Director: Patrick Florea

2. General information on data processing

We take the protection of your personal data seriously. Personal data means any information that can be used to identify you personally, such as your name, email address, phone number or IP address.

We process personal data only to the extent necessary to provide this website, respond to enquiries, communicate with interested parties, and carry out pre-contractual or contractual measures.

The processing is carried out on the basis of the General Data Protection Regulation, in particular Art. 6 para. 1 lit. a GDPR where consent has been given, Art. 6 para. 1 lit. b GDPR for pre-contractual or contractual measures, Art. 6 para. 1 lit. c GDPR for legal obligations, and Art. 6 para. 1 lit. f GDPR for legitimate interests.

3. Hosting and server log files

When you access this website, information that your browser automatically transmits is processed by the web server. This may include:

This processing is carried out to ensure the secure and stable provision of the website and for technical error analysis. The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure and trouble-free operation of our online offering.

Server log files are stored only for as long as necessary for security and verification purposes. These data are not combined with other data sources.

4. Contact enquiries

If you contact us via a contact form, by email, by phone or by other means, we process the data you provide in order to handle your enquiry.

This may include, in particular:

The processing is carried out to respond to your enquiry and to communicate with you. The legal basis is Art. 6 para. 1 lit. b GDPR if your enquiry relates to the initiation or performance of a contract. In all other cases, the processing is based on our legitimate interest in responding to enquiries pursuant to Art. 6 para. 1 lit. f GDPR.

The data transmitted will be stored only for as long as necessary to process your enquiry. Statutory retention obligations remain unaffected.

5. AI-based location analysis (Location Radar)

Our website offers an optional AI-based location analysis ("Location Radar"). When you use it, the region or location information you enter may be transmitted to an AI service provider in order to generate an automated assessment or a structured evaluation.

For this we use services of:

Anthropic, PBC
548 Market Street, PMB 90375
San Francisco, CA 94104-5401
USA

Only the information required for the location analysis is transmitted to Anthropic, in particular region, town, postal code or comparable location information. We do not transmit sensitive data unless this is necessary for the analysis.

The processing serves to provide the requested location analysis. The legal basis is Art. 6 para. 1 lit. b GDPR where the analysis relates to pre-contractual measures. In addition, we base the processing on Art. 6 para. 1 lit. f GDPR, as we have a legitimate interest in the efficient, structured and user-friendly evaluation of location information. Where explicit consent is required, processing is based on Art. 6 para. 1 lit. a GDPR.

As Anthropic is based in the USA, a transfer of personal data to a third country outside the European Union may take place. Such a transfer only occurs on the basis of appropriate safeguards pursuant to Art. 44 et seq. GDPR, in particular the standard contractual clauses of the EU Commission and additional protective measures.

The transmitted data are used exclusively to carry out the location analysis and are not used by us for our own advertising purposes.

6. Service providers and processors

To provide our website and to handle enquiries, we use technical service providers. Insofar as these service providers process personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR. In particular, we use the following service providers:

Vercel

We use Vercel for the hosting and technical delivery of our website.

Vercel Inc.
340 S Lemon Ave #4133
Walnut, CA 91789
USA

Vercel processes technical access data, server log data and, where applicable, further technical data required for the provision, security and performance of the website. As Vercel is based in the USA, a third-country transfer may take place; this is carried out on the basis of appropriate safeguards pursuant to Art. 44 et seq. GDPR, in particular the standard contractual clauses of the EU Commission.

Anthropic

For the AI-based location analysis we use services of Anthropic, PBC (548 Market Street, PMB 90375, San Francisco, CA 94104-5401, USA). Region or location information you enter may be transmitted to and processed by Anthropic. As Anthropic is based in the USA, a third-country transfer may take place on the basis of appropriate safeguards pursuant to Art. 44 et seq. GDPR, in particular the standard contractual clauses of the EU Commission.

Matomo

For privacy-friendly web analytics we use Matomo in a cookieless configuration, self-hosted on our own infrastructure at analytics.varia.de. As Matomo runs on our own infrastructure, no personal data is passed on to an external analytics provider.

7. Communication via WhatsApp

If we offer communication via WhatsApp, the use of this communication channel is voluntary. If you contact us via WhatsApp, we process the data you provide, in particular your phone number, your name, your message and any other information voluntarily provided by you.

The processing is carried out exclusively for the purpose of handling your enquiry and communicating with you. The legal basis is Art. 6 para. 1 lit. b GDPR if your enquiry is related to pre-contractual or contractual measures. In other cases, processing is based on our legitimate interest in simple and efficient communication pursuant to Art. 6 para. 1 lit. f GDPR. Where consent is required, processing is based on Art. 6 para. 1 lit. a GDPR.

Please note that when using WhatsApp, data may also be processed by WhatsApp or companies of the Meta Group. We have no full control over this data processing. Further information can be found in WhatsApp's privacy policy.

If you do not wish to communicate with us via WhatsApp, you can contact us alternatively by email or phone at any time.

Our WhatsApp number is: +49 7152 6097-02.

8. Cookies and consent-based services

This website uses only technically necessary cookies or comparable technologies where these are required for the operation of the website.

Analytics, marketing or tracking services that require consent are used only if you have given your prior consent. If no such services are used, no cookie banner is required.

9. Web analytics with Matomo

We use Matomo on this website for privacy-friendly web analytics. Matomo is self-hosted on our own infrastructure at analytics.varia.de.

Matomo is configured in a cookieless mode. This means that no tracking cookies are set and no personal user profiles are created. The analytics are used solely to statistically evaluate the use of our website and to improve our content, structure and technical performance.

The information collected may include, in particular:

The data are processed in an aggregated or anonymised form. A direct identification of individual visitors does not take place.

The processing is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the statistical analysis and optimisation of our website. Since Matomo is used without tracking cookies and without consent-based tracking technologies, no cookie banner is required for this analytics setup.

We do not use Google Analytics 4, Google Marketing Services, Meta Pixel, TikTok Pixel, LinkedIn Insight Tag, Hotjar or comparable marketing and tracking services without prior consent. If such services are introduced in the future, they will only be loaded after prior consent via a consent banner.

10. Social media presence

We maintain online presences on social networks in order to communicate with interested parties, partners and customers and to provide information about our services.

When visiting our social media profiles, the privacy policies of the respective platform operators apply. Please note that personal data may also be processed outside the European Union.

If you communicate with us via our social media profiles, we process the data you provide to handle your enquiry. The legal basis is Art. 6 para. 1 lit. b GDPR or Art. 6 para. 1 lit. f GDPR.

11. Embedded third-party content and external services

This website may include third-party content or services, for example maps, videos, fonts or external media content.

Such content is loaded only if it is technically necessary or if you have given your consent beforehand. When external content is loaded, your IP address may be transmitted to the respective provider.

The legal basis is, depending on the type of integration, Art. 6 para. 1 lit. f GDPR or your consent pursuant to Art. 6 para. 1 lit. a GDPR.

12. International orientation of the website

This website is aimed at interested parties and business partners in various European countries, in particular in Southeast Europe. If you contact us from another country, the data you provide will be processed by us in Germany for the purpose of handling your enquiry and communicating with you.

Data transfers to recipients outside the European Union or the European Economic Area only take place where this is legally permitted, for example on the basis of an adequacy decision, standard contractual clauses or your consent.

13. Retention period

We store personal data only for as long as necessary for the respective purpose. Statutory retention periods remain unaffected.

Data subject to commercial or tax law retention obligations are stored in accordance with statutory requirements and then deleted.

14. Your rights

Within the scope of the applicable legal provisions, you have the following rights at any time:

If you withdraw your consent, the lawfulness of processing carried out before the withdrawal remains unaffected.

15. Security

We use appropriate technical and organisational measures to protect your data against loss, misuse, unauthorised access and unauthorised disclosure. This includes, in particular, encrypted data transmission via HTTPS.

16. Status of this Privacy Policy

This Privacy Policy is currently valid.

Status: June 2026

CallBecome a partner