Version 3.1 · Last updated: 13 November 2026 · Phoenix Business Consulting Limited
The protection of your personal data is important to us. In this privacy policy we inform you which data we process when you visit our website, contact us or book our services, for what purposes, on what legal basis, and what rights you have.
The controller responsible for data processing on this website and in connection with our services is:
Phoenix Business Consulting Limited
trading under the brand “Pro Mauritius – One-Stop Consulting”
Suite 207, The Catalyst, Silicon Avenue
40 Cybercity, 72201 Ebène, Mauritius
Business Registration Number: C21184641
Represented by: Hartmut Sieper
Email: info@pro-mauritius.com
We are a company with its registered office in Mauritius. As our services are specifically directed at persons in the European Union, Switzerland and Austria, we apply the General Data Protection Regulation (GDPR) (Art. 3(2) GDPR). In addition, the Mauritian Data Protection Act 2017 applies and, for persons in Switzerland, the Swiss Federal Act on Data Protection (FADP).
We have not appointed a data protection officer because the legal requirements for doing so are not met. For all questions about data protection, you can reach us at the email address above.
“Personal data” means any information by which you can be personally identified, such as your name, address, email address or telephone number. “Processing” means any operation performed on such data, from collection and storage to erasure.
We process your data only where a legal basis permits it. The following legal bases are particularly relevant:
This website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. We have concluded a data processing agreement with STRATO pursuant to Art. 28 GDPR.
Each time our website is accessed, the server automatically stores information transmitted by your browser (server log files):
We need these data to deliver the website, to ensure its stability and security and to fend off attacks. The legal basis is Art. 6(1)(f) GDPR. The data are not combined with other data sources. The log files are deleted after 7 days at the latest, unless they are needed for longer to investigate a security incident.
Our website sets no cookies for analytics or advertising purposes and uses no tracking or analytics services such as Google Analytics. A cookie banner is therefore not required.
The fonts used are stored on our own server. No connection to Google Fonts or other font providers is established when the website is accessed.
Our order form is protected against automated abuse by Cloudflare Turnstile (see section 10). Technically necessary information about your device and browser may be processed in this context. The legal basis is our legitimate interest in an order process free of abuse (Art. 6(1)(f) GDPR).
If you write to us by email, WhatsApp, telephone or via the contact form, we process your details (name, contact details, content of your message) in order to answer your enquiry. If the enquiry relates to a contract or its initiation, the legal basis is Art. 6(1)(b) GDPR; otherwise it is our legitimate interest in answering it (Art. 6(1)(f) GDPR).
Please note: with WhatsApp, WhatsApp Ireland Ltd. or the Meta group processes data under its own terms, including in the USA. If you do not want this, please send us an email.
When you book services via our order form, we process the following data:
In the course of our advice we receive further documents required for your application or account opening, such as your passport, birth and marriage certificates, police clearance certificate, proof of income and assets, source of funds, bank statements and, for a residence permit application, a medical certificate.
The legal basis is the performance of the contract with you (Art. 6(1)(b) GDPR). We process health data only with your explicit consent (Art. 9(2)(a) GDPR). Insofar as we, as a registered real estate agent, are legally obliged to carry out due diligence checks (in particular under the Mauritian Financial Intelligence and Anti-Money Laundering Act), the legal basis is additionally Art. 6(1)(c) GDPR.
We keep customer and case data in Notion (see section 10).
We obtain separate consents in the order form for the disclosure of your data to authorities, real estate agents and developers. We forward documents for an account opening only on your express instruction to the bank you have chosen yourself. So that we can prove which consent you gave and when (Art. 7(1) GDPR), we store a consent record for each order: order number, time, version of the form and of the privacy policy, and the status of each individual checkbox.
The legal basis is our legal obligation to provide proof (Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR). The record is not altered. If you withdraw a consent, we note the withdrawal with the date.
If you sign up for the waiting list for our Starter Kit, we process your email address, your first name (optional), the time of registration and, where applicable, the page through which you came to us. We use these data exclusively to inform you as soon as the Starter Kit is released.
We use the double opt-in procedure: after signing up, you receive an email with a confirmation link. You are only registered once you have confirmed. The legal basis is your consent (Art. 6(1)(a) GDPR). The emails are sent by GetResponse (see section 10). You can unsubscribe at any time via the unsubscribe link in every email or by sending us a message.
Depending on the service booked, we pass on your data to the following recipients, in each case only to the extent necessary and, unless stated otherwise below, only with your consent or on your instruction in the order form. These recipients process your data under their own responsibility.
| Recipient | Purpose | Service |
|---|---|---|
| Economic Development Board (EDB), Passport & Immigration Office, other Mauritian authorities | Application for a residence permit, including health data (medical certificate) | Immigration |
| The bank in Mauritius you have chosen yourself | Forwarding of your account-opening documents on your express instruction; we do not broker banking services or introduce you to banks | Bank account |
| Real estate agents, developers, notaries in Mauritius | Viewings, reservation and purchase | Real estate |
| Licensed management company in Mauritius | Incorporation and administration of your company | Company formation |
Beyond this, we only pass on your data if we are legally obliged to do so, for example to tax or supervisory authorities. Your data are not passed on for advertising purposes.
We use the following service providers to operate this website and deliver our services. They process data only on our behalf and in accordance with our instructions; we have concluded data processing agreements with them pursuant to Art. 28 GDPR.
| Service provider | Purpose | Location / data transfer |
|---|---|---|
| STRATO AG | Website hosting, email | Germany |
| Make (Celonis s.r.o.) | Automatic transfer of orders and sign-ups from the forms | Czech Republic (EU) |
| Notion Labs, Inc. | Customer and case management, consent record | USA |
| Google (Gmail / Google Workspace) | Sending acknowledgements of receipt and correspondence | Ireland, data processing also in the USA |
| GetResponse S.A. | Sending emails, waiting list | Poland (EU) |
| Cloudflare, Inc. (Turnstile) | Protecting the order form against abuse | USA |
| Communi (Daom Limited) | Course area and community for customers | New Zealand, servers in the USA |
In future, the Starter Kit will be sold via Digistore24. Digistore24 GmbH is the seller and an independent controller for processing the purchase; Digistore24’s privacy policy applies.
Because our company has its registered office in Mauritius, your data are transferred to and processed in Mauritius. There is no adequacy decision of the European Commission for Mauritius (Art. 45 GDPR). The transfer is based on Art. 49(1)(b) GDPR, because it is necessary for the performance of the contract with you, and, insofar as you have consented, on Art. 49(1)(a) GDPR. The risk is that the level of data protection in Mauritius does not correspond to that of the EU in every respect. With the Data Protection Act 2017 and the Data Protection Office, Mauritius has its own data protection law and a supervisory authority.
Our course area is operated by Daom Limited (Communi), based in New Zealand. There is an adequacy decision of the European Commission for New Zealand (Art. 45 GDPR). Communi stores data on servers in the USA; for this, Communi has agreed EU standard contractual clauses with its hosting provider.
Where service providers process data in the USA, this is done on the basis of the EU-US Data Privacy Framework (adequacy decision of 10 July 2023) if the provider is certified under it, and otherwise on the basis of the EU standard contractual clauses (Art. 46(2)(c) GDPR).
On request, we will provide you with information on the appropriate safeguards.
Our website contains links to our YouTube channel and to other websites. Videos are not embedded; a connection to YouTube is only established when you click on a link. The privacy policies of the respective providers apply to the linked pages.
We store your data only for as long as is necessary for the respective purpose or as required by statutory retention periods:
| Data | Storage period |
|---|---|
| Server log files | 7 days |
| Enquiries without conclusion of a contract | 3 years after the last communication |
| Contract, invoice and accounting records | in accordance with statutory retention periods, usually 7 years after the end of the financial year |
| Due diligence records as a real estate agent | in accordance with statutory requirements, usually 7 years after the end of the business relationship |
| Consent records | duration of the business relationship plus 3 years |
| Health data | until the application procedure has been completed, then deletion unless there is a retention obligation |
| Waiting list | until the Starter Kit is released and the information has been sent, at the latest until you unsubscribe |
You have the following rights with regard to your personal data:
To exercise your rights, an email to info@pro-mauritius.com is sufficient.
You can withdraw any consent you have given at any time with effect for the future, most easily by email to info@pro-mauritius.com. The lawfulness of processing carried out until the withdrawal remains unaffected. Please note: if you withdraw your consent to disclosure to authorities, we can no longer provide the service concerned.
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the country of your residence, your place of work or the place of the alleged infringement. Examples are the data protection authority of your federal state in Germany, the Data Protection Authority (DSB) in Austria or the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland. In Mauritius, the Data Protection Office is responsible.
You are neither legally nor contractually obliged to provide your data. However, we need the data and consents marked as mandatory in the order form in order to conclude the contract and provide the service booked. Without them, we cannot accept your order.
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
Our website is protected by an encrypted connection (TLS/HTTPS). We take technical and organisational measures to protect your data against loss, manipulation and unauthorised access, and adapt them to the state of the art.
We adapt this privacy policy when our services, the services we use or the legal situation change. The version published on this page applies.
Version 3.1 · Last updated: 13 November 2026 · replaces version 3.0 (27 October 2026), 2.1 (October 2026), 2.0 (2025) and 1.0 (24 June 2022)