1. Controller
The controller for this website is:
Biturai L.L.C-FZ
Meydan Grandstand, 6th floor, Meydan Road
Nad Al Sheba, U.A.E.
P.O. Box 77894, Dubai, United Arab Emirates
[email protected]
Further details are provided in the legal notice.
2. Scope of this website
auslandspolice is an information website without a customer account, contact or application form, newsletter or payment function. Fonts, images and scripts are served from the site's own deployment. Biturai uses no advertising, audience measurement or profiling tool on this website and makes no automated decision about visitors.
The selected language is fully expressed by the URL. The application therefore sets no language preference cookie or persistent user identifier. Cloudflare may set strictly necessary cookies as part of the security and network features that are active at the time, for example for bot protection, security checks or rate limiting. The cookie actually set depends on the feature triggered. These cookies are not used for advertising or cross-site profiling.
This notice covers auslandspolice. An external service's own privacy notice applies once you deliberately open that service.
3. Cloudflare: network, security and error reports
Your browser first connects to the global network of Cloudflare, Inc. Cloudflare provides TLS encryption, delivery, caching, redirects and protection against attacks. It may process the IP address, time, target address, browser and device information, response status, routing information and security events.
Cloudflare also sends a Network Error Logging policy. If a connection fails, the browser may send technical error data to Cloudflare. Cloudflare states that its NEL pipeline does not log the client IP address. Cloudflare Web Analytics is not enabled for auslandspolice.
By default, Cloudflare handles traffic at an available location in its global network and may process data in the United States and other countries. For transfers from the EU or EEA, the Cloudflare Data Processing Addendum incorporates the EU Standard Contractual Clauses. Cloudflare keeps connection and security data only for as long as required by the enabled service, threat prevention or legal duties. Cloudflare describes the possible strictly necessary cookies in its cookie documentation. Biturai does not build a visitor profile from it.
4. Vercel: hosting and runtime logs
Cloudflare forwards the request to Vercel Inc. as the hosting provider. Vercel may process the IP address, time, host and requested URL, search parameters, user agent, region, response status and technical error or diagnostic data. The project uses a Pro plan with no separate log drain and no enabled web analytics.
Vercel currently documents a retention period of one day for runtime logs on the plan in use. This plan-dependent period is checked again when the configuration changes. Vercel's primary processing takes place in the United States; additional processing may occur where its subprocessors operate. The Vercel Data Processing Addendum incorporates the EU Standard Contractual Clauses for transfers from the EU or EEA.
Cloudflare and Vercel process this data for secure and functional delivery under Article 6(1)(f) GDPR. The legitimate interests are delivery, error diagnosis and protection against abusive access.
5. Leaving for PassportCard
The “Get a quote” button is a direct link to PassportCard's offer flow.
Only when it is clicked does the browser connect to
angebote.passportcard.de. The link carries two static technical attribution
parameters so PassportCard can attribute a contract concluded through the link
to Biturai. The destination server also receives the connection information
normally sent with a web request, including IP address, time, browser
information and, where applicable, the referring domain.
Biturai sets no cookie for this referral and receives no health, application,
identity, payment or policy data through this website. From the moment the
PassportCard flow is opened, PassportCard is responsible for the processing
there. The offer, application and policy process may include identity and
health data. Please read the
PassportCard privacy notice before
making an enquiry. PassportCard lists [email protected] as a
contact for its data protection team.
Biturai does not become a party to the policy. The individual offer and policy identify the insurer and the other contracting parties. Processing in the PassportCard flow is governed by its documents, not this notice.
6. Contact by email
If you voluntarily contact Biturai by email, Biturai processes your sender and contact details, metadata, message content and any attachments to handle the enquiry. Do not send health or application data to Biturai; use the marked PassportCard channels for those details.
Email is provided through Google Workspace. Google may process data in the EU, the United States and other countries named in its current subprocessor list. Google offers a Cloud Data Processing Addendum for Workspace that contains mechanisms for relevant international transfers. Incorporation of that addendum into the agreement in use is not evidenced for this notice; Biturai therefore does not claim a specific contractual transfer mechanism. Authorised Biturai personnel access the mailbox from the United Arab Emirates to handle messages. Transfer and access are technically protected; the EU has not adopted an adequacy decision for the UAE.
Depending on its content, the enquiry is processed under Article 6(1)(b) GDPR for pre-contractual or contractual matters or under the legitimate interest in answering and documenting other enquiries under Article 6(1)(f) GDPR. Messages are deleted when the enquiry is finally resolved and no statutory retention duty or documented need to retain the correspondence remains. Biturai cannot reply without the contact details required for a response.
7. Your rights
Subject to the statutory requirements, you may request access, rectification, erasure, restriction, data portability or object to processing. Contact [email protected]. You may also lodge a complaint with the competent data protection supervisory authority.
You may also use this address to request information about the safeguards used by Cloudflare, Vercel and Google.
8. Updates
This notice is dated 3 September 2026. If tracking, forms, accounts, analytics or additional external services are added, this notice must be updated and reviewed before those features are activated.