Privacy Policy

Last updated: February 2026

1. Controller

The controller responsible for data processing on this website is Malevolent GmbH, Germany. Contact: contact@malevolent.online.

2. Data We Collect

We collect the following categories of personal data:

  • Contact details (name, email address, company name) submitted via our contact form
  • Financial information provided in connection with debt collection mandates or loan applications
  • Usage data (IP address, browser type, pages visited) collected automatically when you visit our website
  • Communication records including emails and enquiry submissions

3. Legal Basis for Processing

We process your personal data on the following legal bases under the GDPR:

  • Art. 6(1)(b) GDPR — processing necessary for the performance of a contract or pre-contractual measures
  • Art. 6(1)(c) GDPR — processing necessary to comply with a legal obligation (e.g. BaFin regulatory requirements, AML obligations)
  • Art. 6(1)(f) GDPR — processing necessary for our legitimate interests (e.g. fraud prevention, security)
  • Art. 6(1)(a) GDPR — your consent, where explicitly obtained

4. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by German commercial and tax law (typically 6–10 years under HGB and AO).

5. Your Rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you (Art. 15)
  • Rectification of inaccurate data (Art. 16)
  • Erasure of your data ("right to be forgotten") where applicable (Art. 17)
  • Restriction of processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing (Art. 21)
  • Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at contact@malevolent.online.

6. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority. In Germany, the competent authority is the data protection officer of the relevant German state (Landesdatenschutzbehörde).

7. Cookies

Our website uses technically necessary cookies only. We do not use tracking or advertising cookies. You may disable cookies in your browser settings at any time.