Privacy policy
1. Controller
European Recovery Group Ltd is the controller for data processing on this website and in the course of our debt collection activities. You can reach us at kontakt@europerecoverygroup.com. We process personal data strictly in line with the General Data Protection Regulation (GDPR) and applicable national law.
2. Processing in debt collection
We collect claims on behalf of our clients (creditors). To do so, we process the following data about debtors: identity and contact data (name, address, email address, phone number), claim data (invoice number, invoice date, amount, due date, payments received) and communication data (correspondence, objections, payment notices). We receive the data from the creditor; in individual cases we supplement it from publicly available sources, for instance to verify an address. The purpose is to assert, collect and settle the claim. The legal basis is Art. 6(1)(f) GDPR (the legitimate interest of the creditor and of us in enforcing due claims); where we are subject to legal obligations, Art. 6(1)(c) GDPR. Data of clients and their contact persons is processed to perform the contract (Art. 6(1)(b) GDPR).
3. Payment portal
In the payment portal, debtors can look up their claim with the file number and email address or via a personalised link from our letter. No user account is created. To prevent abuse we limit lookups per IP address; the IP address is held briefly in memory for this purpose and is not stored permanently (Art. 6(1)(f) GDPR). Payments are made by bank transfer to our account; we receive from your bank only the details needed to allocate the payment. We never ask for card details or online banking credentials.
4. Website, forms and hosting
This website is hosted by Vercel Inc. (San Francisco, USA). When you visit, technically necessary data such as IP address, time, page requested and browser identifier are processed in server log files to secure operations (Art. 6(1)(f) GDPR); these logs are deleted after a short period. Data from the “Submit a claim” form and the contact form is processed to handle your request (Art. 6(1)(b) GDPR). Our case data is held in a database operated by Neon Inc., stored in Frankfurt am Main (AWS region eu-central-1). We send emails via Postmark (ActiveCampaign, LLC, Chicago, USA). Data processing agreements under Art. 28 GDPR are in place with these providers. We do not use tracking cookies or analytics tools; a technically necessary session cookie is set only in the internal staff area.
5. Recipients
We share data only where necessary for collection: with the respective creditor (file status, payments received), with postal and print service providers for sending letters, with courts and authorities in judicial dunning and enforcement proceedings, with banks for payment processing and with the technical providers named in section 4. Data is never sold.
6. Transfers to third countries
European Recovery Group Ltd is based in the United Kingdom. The European Commission has issued an adequacy decision for the United Kingdom, so transfers are permitted without further authorisation (Art. 45 GDPR). For providers based in the USA we rely on their certification under the EU-US Data Privacy Framework or on the European Commission’s standard contractual clauses (Art. 46 GDPR); the case data itself is stored in Frankfurt.
7. Retention
We keep data for as long as the claim is open or objections are being reviewed, and thereafter for as long as statutory retention obligations under commercial and tax law apply (generally six to ten years after the file is closed). The data is then deleted. Enquiries via the website that do not lead to an engagement are deleted no later than twelve months after the correspondence ends.
8. Your rights
You have the right of access to the data stored about you (Art. 15 GDPR) and the rights to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may object to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation (Art. 21 GDPR). To exercise your rights, an email to kontakt@europerecoverygroup.com quoting your file number is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority of your place of residence.
9. Version
This privacy policy is dated September 2026. We will update it if our processing or the legal situation changes; the current version is always available on this page.