Privacy Policy

Last updated: 26 September 2026

Xerter GmbH ("Xerter", "we", "us") operates this site to help you compare and purchase travel insurance plans from multiple insurance providers. This policy explains what personal data we collect, why, and what rights you have over it under the EU General Data Protection Regulation (GDPR).

1. Who We Are

Xerter GmbH, incorporated in Germany, is the data controller for the personal data described in this policy. We are an insurance compiler/broker - we help you compare travel insurance plans from third-party insurance companies and facilitate your purchase. We are not ourselves an insurer, and any policy you buy is a contract between you and the issuing insurer.

2. Data We Collect

When you request a quote or apply for a policy, we collect contact details (name, email, phone number) and traveler information (date of birth, nationality, passport number, country of residence) needed to generate a quote and issue a certificate. We do not collect or store your payment card details - these are entered directly with our payment provider. When you use our contact form, admin login, or the embassy certificate-verification page, we also process the information you submit and, for fraud prevention, your IP address and browser data via Google reCAPTCHA.

3. How We Use Your Data

We use your data to generate insurance quotes, process and issue your application with the chosen insurer, send you confirmations and your certificate, respond to support requests, and detect and prevent fraudulent or abusive use of the site. We do not use your data for advertising, and we do not sell your personal data to third parties.

4. Who We Share Your Data With

We share the information needed to issue your policy with the insurance provider underwriting the plan you select. We share payment details directly with our payment processor, which handles your transaction on our behalf - we don't see or store your card number. We use Google reCAPTCHA to protect our forms from automated abuse, which processes limited technical data (like your IP address) under Google's own privacy policy. We don't share your data with anyone else for their own marketing purposes.

5. International Transfers

Some of the insurers and service providers we work with may be located outside the European Economic Area (EEA). Where we transfer personal data outside the EEA, we rely on appropriate safeguards recognized under GDPR, such as the European Commission's standard contractual clauses.

6. Data Retention

We keep your data for as long as needed to provide our service and fulfil the purposes described above, and afterward for as long as required by applicable statutory retention obligations - typically around six to ten years for records related to a contract or payment under German commercial and tax law.

7. Cookies

We use a small number of strictly necessary cookies - to keep staff logged into the admin area and to remember your language preference - and no advertising or analytics cookies. See our Cookie Policy for details.

8. Your Rights Under GDPR

Subject to certain conditions, you have the right to access, correct, or delete your personal data, restrict or object to its processing, and receive a copy of it in a portable format. You also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, contact us using the details below.

9. Changes to This Policy & Contact

We may update this policy from time to time; the "last updated" date above reflects the most recent revision. If you have any questions about this policy or how we handle your data, contact us at support@xerter.com.