Data PriVacy

In the following, we will inform you about the collection of personal data when you use our website and when you contact us using a contact form, by e‑mail or by telephone. Personal data is any data that can be personally related to you, such as name, address, e‑mail addresses and user behaviour.

I. Name and contact details of the controller and of the data protection officer

  1. The controller within the meaning of Art. 4 (7) of the General Data Protection Regulation (GDPR) is Trockland Management GmbH, Hauptstrasse 27, 10827 Berlin, T +49 30 2363137-0, datenschutz[at]trockland.com (see our imprint http://www.trockland.com/imprint-data-privacy/).
  2. You can reach our data protection officer, Mr Christian Kroesch, Attorney-at-law, SLK Compliance Services GmbH, Koenigsbruecker Strasse 76, 01099 Dresden, by telephone: +49 351 89676360 or by e‑mail at: datenschutz[at]slk-compliance.de.

II. General information about the collection, transfer and storage of personal data

  1. We process your personal data in compliance with the provisions of the GDPR, the Federal Data Protection Act (BDSG, Bundesdatenschutzgesetz) and all other relevant laws.
  2. The main purpose of data processing is to establish and fulfil a contractual relationship with you. When you contact us by e‑mail, via a contact form or by telephone, the data you provide (your e‑mail address and, if applicable, your name and telephone number) will be stored by us in order to answer your questions. The primary legal basis for this is Art 6 (1) lit. b) GDPR. In addition, your separate consent pursuant to Art. 6 (1) lit. a), Art. 7 GDPR may also be used as consent within the meaning of data protection law. We also process your data in order to fulfil our legal obligations, specifically in the field of commercial and tax law. The basis for this is Art. 6 (1) lit. c) GDPR. In as far as this is necessary, we also process your data on the basis of Art. 6 (1) lit. f) GDPR in order to protect our legitimate interests or those of third parties.
  3. Your personal data will not be transferred to third parties for any purposes other than those listed below. We will only disclose your personal data to third parties if you have given your express consent pursuant to Art. 6 (1) lit. a) GDPR, if disclosure pursuant to Art. 6 (1) lit. f) GDPR is necessary in order to establish, exercise or defend legal claims and if there is no reason to assume that you have an overriding legitimate interest in preventing disclosure of your data, if disclosure is required by law pursuant to Art. 6 (1) lit c) GDPR and if disclosure is permitted by law and required pursuant to Art. 6 (1) lit. b) GDPR for the purpose of handling contractual relationships with you.
  4. In as far as we use contracted contractors for individual functions of our offering or are planning to use your data for advertising purposes, we will inform you in detail about the respective processes below. In this context, we will also specify the criteria defined for the storage period.
  5. We will erase your personal data as soon as such data is no longer required for the following purposes. After termination of the contractual relationship, your personal data will be stored as long as we are legally obliged to do so. This typically results from legal verification and storage obligations which are laid down, among other things, in the Commercial Code (HGB, Handelsgesetzbuch) and Fiscal Code of Germany (AO, Abgabenordnung). Pursuant to these laws, storage periods can be as long as ten years. Furthermore, personal data may be stored for the period during which claims can be established against us (subject to a statutory limitation period of three or up to thirty years).

III. Collection of personal data on our website

  1. Visit to our website

1.1 When you use the website for information purposes only, i.e. if you do not register or provide us with any other information, we only collect the personal data which your browser sends to our server. If you wish to view our website, we collect data that is technically necessary for us to display our website to you and to ensure stability and security. The data is also stored in the log files of our system. This data is not stored together with other personal data of the user. This data includes the IP address, the date and time of the request, the difference between the user’s time zone and Greenwich Mean Time (GMT), the content of the request (specific page), the access status/HTTP status code, the data volume transmitted in each case, the website where the request originates, the browser, operating system and its interface as well as the language and version of the browser software.

1.2 The legal basis for the temporary storage of data and log files is Art. 6 (1) lit. f) GDPR.

1.3 Temporary storage of the IP address by the system is necessary in order to enable the website to be delivered to your browser. This requires your IP address to be stored during the entire duration of the session. The data is stored in log files in order to ensure the functionality of the website. Furthermore, we use the data in order to optimise the website and to ensure the security of our information technology systems. These purposes are also the basis of our legitimate interest in data processing as contemplated in Art. 6 (1) lit. f) GDPR. The data will not be evaluated for marketing purposes in this context.

1.4 The data will be erased as soon as it is no longer necessary in order to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session ends. Log files are deleted within 7 days after the website has been visited.

1.5 The collection of data when you visit the website and the storage of data in log files are indispensable for the operation of the website. This means that you do not have a right to object.

  1. Use of cookies

2.1 When you use our website, cookies are stored on your computer system. Cookies are text files that are stored in and/or by the web browser on your computer system. When you visit a website, a cookie may be stored in your operating system. This cookie contains a characteristic character string that enables unique identification of the browser when the website is visited again.

2.2 This website uses the following types of cookies whose scope and principles of function are explained below:

  • transient cookies (temporary use)
  • persistent cookies (use for a finite period of time)
  • third-party cookies (from third-party providers according to separate information)

2.3 Transient cookies are automatically deleted when you exit your browser. This type of cookies specifically includes session cookies. Session cookies store a so-called session ID that enables different queries of your browser to be assigned to the common session. In this way, your computer can remembered when you visit our website again. Session cookies are deleted when you log out or exit your browser. The legal basis for the processing of personal data using transient cookies is Art. 6 (1) lit. f) GDPR. The purpose of using these cookies is to enhance your user experience when you visit a website. Some functions of our website cannot be offered without the use of cookies. This means that the browser must be remembered even after you have visited other pages or websites. These purposes are also the basis of our legitimate interest in the processing of personal data as contemplated in Art. 6 (1) lit. f) GDPR.

2.4 Persistent cookies are used exclusively in conjunction with the web analytics services used by us and only for as long as the purpose requires; they have a maximum lifetime of two years. You can delete cookies at any time in the security settings of your browser. The functions and user-friendliness of the offering may then be restricted. The legal basis for the processing of personal data using persistent cookies is Art. 6 (1) lit. f) GDPR. The analysis cookies are used in order to improve the quality of our website and its content. The analysis cookies inform us on how the website is used, so that we can continuously optimise our offering. These purposes are also the basis of our legitimate interest in the processing of personal data as contemplated in Art. 6 (1) lit. f) GDPR.

2.5 Cookies, which are technically not necessary for the provision of our service, are only set with your consent which you can withdraw at any time. When you continue using the website with the corresponding browser settings, you consent to the use of cookies within the scope of this privacy statement. You can hence communicate your consent to us by setting your browser accordingly, for instance, by determining that you wish to be informed whenever cookies are set and that you do not accept any cookies unless you expressly confirm this. In this way, you can also choose to accept cookies in certain cases or in general. You can configure your browser settings according to your needs and decide, for instance, whether you wish to accept or reject third-party cookies or all cookies. You should note, however, that this may result in you not being able to use all of the functions of this website. The legal basis for the processing of personal data using cookies for analytical purposes with a corresponding consent by the user is Art. 6 (1) lit. a) GDPR.

  1. Further functions and offerings of our website

3.1 Besides the use of our website for purely informational purposes, we also offer various services which you can use if you are interested. This usually means that you have to enter further personal data which we use in order to provide the respective service and which is subject to the aforementioned data processing rules.

3.2 We sometimes also outsource the processing of your data to external service providers who are carefully selected and commissioned by us and who are bound by our instructions and subject to regular checks.

3.3 Furthermore, we may forward your personal data to third parties if we offer participation in promotions and competitions as well as the conclusion of contracts or similar services together with partners. For more information, please enter your personal data or refer to the description of the offering below.

3.4 In as far as our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this fact in the description of the offering.

  1. Use of Google Analytics

4.1 This website uses Google Analytics, a web analysis service of Google Ireland Limited (“Google”). Google Analytics uses so-called “cookies”, i.e. text files which are stored on your computer and enable your usage of the website to be analysed. The information generated by the cookie regarding your usage of this website is normally sent to a Google server in the US and stored there. However, in the event that the IP anonymization feature is activated on this website, Google will first set the last digits of your IP address to zero in member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the US and shortened there. On behalf of the operator of this website, Google uses this information in order to evaluate your usage of the website, compile reports on website activities and provide further services to the website operator related to website and Internet usage.

4.2 The IP address transmitted by your browser in conjunction with Google Analytics will not be combined by Google with other data.

4.3 You can prevent the storage of cookies by making the appropriate settings in your browser software. Please note, however, that you may then be unable to use all functions of this website. You can also download and install the browser plugin from the link below in order to prevent the capture of the data (including your IP address) generated by cookies and related to your usage of the website as well as its transmission to and processing by Google: http://tools.google.com/dlpage/gaoptout?hl=en.

4.4 This website uses Google Analytics with the “_anonymizeIp()” extension. As a result, IP addresses are further processed in an abbreviated form, so that no reference to a concrete individual is possible. In as far as you as an individual can be identified from the data collected about you, this will be disabled immediately and the personal data thereby deleted immediately.

4.5 We use Google Analytics in order to analyse and continuously improve the use of our website. The statistical information thereby generated helps us to improve our offering and to make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the US, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 (1) lit. f) GDPR.

4.6 Third-party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001, terms of use: http://www.google.com/analytics/terms/de.html, privacy overview: http://www.google.com/intl/de/analytics/learn/privacy.html as well as the privacy statement: http://www.google.de/intl/de/policies/privacy.

  1. Integration of Google Maps

5.1 On our website, we use the offering of Google Maps. This allows us to display interactive maps directly on the website and enables the user-friendly use of the map function. The legal basis for the use of Google Maps is Art. 6 (1) lit. f) GDPR.

5.2 By visiting the website, Google is informed that you visited the corresponding subpage of our website. The data referred to in section III. 1. of this privacy statement is additionally transmitted, irrespective of whether Google provides a user account to which you are logged in or whether no user account exists. If you are logged in to Google, your data is directly associated with your account. If you do not wish to be associated with your profile at Google, you must log out before clicking the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or the demand-oriented design of its website. The main purpose of such evaluation (even for users who are not logged in) is to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the generation of such user profiles, in which case you will have to address this request to Google.

5.3 Further information regarding the purpose and scope of the collection and processing of data by this provider can be found in the provider’s privacy statement where you will also find further information about your rights in this regard as well as setting options in order to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the US and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. Opt-Out: https://adssettings.google.com/authenticated

  1. Integration of Google Fonts

6.1 On our website, we use the offering of Google Fonts. We use this service in the interest of a uniform and attractive presentation of our website. When you visit a website, your browser loads the required web fonts into your browser cache in order to ensure the correct display of text and fonts. If your browser does not support web fonts, your computer will then use a default font. The legal basis for the use of Google Fonts is Art. 6 (1) lit. f) GDPR.

6.2 By visiting the website, Google is informed that you visited the corresponding subpage of our website. The data referred to in section III. 1. of this privacy statement is additionally transmitted, irrespective of whether Google provides a user account to which you are logged in or whether no user account exists. If you are logged in to Google, your data is directly associated with your account. If you do not wish to be associated with your profile at Google, you must log out before clicking the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or the demand-oriented design of its website. The main purpose of such evaluation (even for users who are not logged in) is to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the generation of such user profiles, in which case you will have to address this request to Google.

6.3 Further information regarding the purpose and scope of the collection and processing of data by this provider can be found in the provider’s privacy statement where you will also find further information about your rights in this regard as well as setting options in order to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the US and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. Opt-Out: https://adssettings.google.com/authenticated

  1. Data security

We also use suitable technical and organisational security measures in order to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological progress.

IV. Collection of personal data when you contact us by e‑mail, post or telephone

  1. Collection of personal data from customers, prospective customers and suppliers

1.1 We only collect your personal data as a customer, prospective customer or supplier if you give us this data voluntarily by e‑mail, post or telephone. In this context, we collect the information which is generated when you contact us. This specifically includes names and contact data given to us as well as the date and reason for contacting us. Your personal data collected by you will only be used for the purpose of providing you with the desired products or services (legal basis: Art. 6 (1) lit. b) GDPR) or for other purposes for which you have given your consent (legal basis. Art. 6 (1) lit. a) GDPR) and which are described in this privacy statement. You can withdraw your consent to the processing of personal data at any time.

1.2 You are not obliged to provide the aforementioned personal data. The data provided may be necessary in order to conclude a contract. Without the provision of the data, there is a risk that it will not be possible to communicate or to conclude or perform a contract.

1.3 The data, which is relevant from case to case, will be transmitted on the basis of the statutory provisions or a contract to public authorities if overriding legal provisions exist, to external service providers or other contractors and to other external parties if you have given your consent or if such transmission is permissible due to an overriding interest. We have no intention to transfer your data to a recipient in a third country (not an EU/EEA Member State) or to an international organisation.

1.4 The data will be erased as soon as it is no longer necessary in order to achieve the purpose for which it was collected. With regard to the personal data provided, this will happen when the respective conversation with you ends. The conversation is deemed to be over when circumstances suggest that the facts in question are finally clarified. In as far as the data disclosed to us is subject to storage obligations under tax and commercial law, such data will be stored for the mandatory storage period of ten years and then erased, unless you have consented to a longer storage period or unless further processing of the data is necessary for the establishment, exercise or defence of legal claims. The legal basis for the processing of personal data for the purpose of abiding by statutory archiving and storage obligations is Art. 6 (1) lit. c) GDPR.

  1. Collection of personal data from applicants

2.1 We only collect your personal data as an applicant if you give us this data voluntarily by e‑mail, post or telephone. This applies to both applications for job vacancies and unsolicited applications. In this context, we collect the information which you give us in your job application. This specifically includes your name, date of birth, contact details, interests, qualification information as well as educational and professional history. Your personal data collected by us will only be used for the purpose of handling the application procedure (legal basis: Art. 6 (1) lit. a), b) and f) GDPR, sec. 26 of the Federal Data Protection Act (BDSG, Bundesdatenschutzgesetz).

2.2 You are not obliged to provide the aforementioned personal data. The data provided may be required for a future contract to be concluded after the application procedure has been completed. Without the provision of the data, there is a risk that it will not be possible to communicate, to perform the application procedure or to conclude a contract.

2.3 The data, which is relevant from case to case, will be transmitted on the basis of the statutory provisions or a contract. Data is transmitted to employees of the HR department, members of executive management and the respective head of department. Your personal data will not be transferred to third parties. We have no intention to transfer your data to a recipient in a third country (not an EU/EEA Member State) or to an international organisation.

2.4 The data will be erased as soon as it is no longer necessary in order to achieve the purpose for which it was collected. If your application was not successful, we will therefore store your data after completion of the application procedure for a period of six months from the date of informing you that your application was rejected. If you have consented to a longer storage period, the storage period then totals two years. We will then either erase your data or ask you for your consent again. You can withdraw your consent to the processing of personal data at any time.

V. Objection to the processing of your data or withdrawal of your consent

  1. If you have given your consent to the processing of your data, you can withdraw this consent at any time. Such withdrawal impacts the permissibility of the processing of your personal data after you have declared such withdrawal to us.
  2. If the processing of your personal data by us is based on the weighing of interests, you may object to the processing. This is especially the case if processing is not necessary in order to perform a contract with you as described by us in the description of functions below. When exercising such right to object, we will request that you explain the reasons why we should not process your personal data as practised. Should your objection be justified, we will examine the facts and either discontinue or modify the processing of your data or explain to you our compelling legitimate reasons on the basis of which we will continue the processing.
  3. It goes without saying that you can object to the processing of your personal data for purposes of advertising and data analysis at any time. You can send us your objection to receiving advertising material under the following contact details: Trockland Management GmbH, Hauptstrasse 27, 10827 Berlin, T +49 30 2363137-0,
    datenschutz[at]trockland.com.

VI. Your rights

  1. Pursuant to Art. 15 GDPR, you have the right to request information about your personal data processed by us. You can, in particular, request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the envisaged storage period, the existence of a right to request rectification, erasure, restriction of processing or objection, the right to lodge a complaint, the source of any of your data not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on the related details.
  2. Pursuant to Art. 16 GDPR, you have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you which we have stored. Pursuant to Art. 17 GDPR, you have the right to request the erase of your personal data stored by us, unless the processing is necessary in order to exercise the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.
  3. Pursuant to Art. 18 GDPR, you have the right to obtain restriction of processing of your personal data if you contest the accuracy of the data, if the processing is unlawful and if you oppose the erasure of such data and if we no longer need the data, but if you need such data in order to establish, exercise or defend legal claims or if you have objected to the processing pursuant to Art. 21 GDPR.
  4. Pursuant to Art. 20 GDPR, you have the right to receive the personal data you have given to us in a structured, commonly used and machine-readable format or to request its transmission to another controller.
  5. Pursuant to Art. 7 (3) GDPR, you have the right to withdraw your consent at any time. This means we are no longer allowed in the future to process the data based on such withdrawn consent.
  6. Pursuant to Art. 77 GDPR, you also have the right to lodge a complaint with a supervisory authority regarding the processing of your personal data by us, for example, with the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Friedrichstraße 219, 10969 Berlin, telephone: 030/138 89‑0, e‑mail: mailbox[at]datenschutz-berlin.de, as the supervisory authority responsible for us.

VII. Up-to-dateness and revision of this privacy statement

  1. This privacy statement is currently in effect as of May 2024.
  2. In view of the further development of our website and offerings on this website, or as a result of changed legal or regulatory requirements, it may become necessary to revise this privacy statement. The latest privacy statement can be downloaded from the website at http://www.trockland.com/imprint-data-privacy/ and printed at any time.

Information pursuant to Art. 13 GDPR

 

  1. Name and contact details of the controller and of the data protection officer

The controller within the meaning of Art. 4 (7) of the General Data Protection Regulation (GDPR) is Trockland Management GmbH, Hauptstrasse 27, 10827 Berlin, telephone +49 30 2363137‑0, datenschutz[at]trockland.com. You can reach our data protection officer, Mr Christian Kroesch, Attorney-at-law, SLK Compliance Services GmbH, Koenigsbruecker Strasse 76, 01099 Dresden, by telephone: +49 351 89676360 or by e‑mail at: datenschutz[at]slk-compliance.de.

 

  1. Data collection, purpose and legal basis

We only collect your personal data if you give us this data voluntarily by e‑mail, post or telephone. In this context, we collect the information which you give us when contacting us. This specifically includes names and contact data given to us as well as the date and reason for contacting us. Your personal data collected by us will only be used for the purpose of providing you with the desired products or services and communicating with you (legal basis: Art. 6 (1) lit. b) GDPR). You are not obliged to provide the aforementioned personal data. The data provided may be necessary in order to conclude a contract. Without the provision of the data, there is a risk that it will not be possible to communicate or to conclude or perform a contract.

 

  1. Recipients or categories of recipients of personal data, transfer to third countries

Your personal data will not be transferred to third parties for any purposes other than those listed below. We will only disclose your personal data to third parties if you have given your express consent pursuant to Art. 6 (1) lit. a) GDPR, if disclosure pursuant to Art. 6 (1) lit. f) GDPR is necessary in order to establish, exercise or defend legal claims and if there is no reason to assume that you have an overriding legitimate interest in preventing disclosure of your data, if disclosure is required by law pursuant to Art. 6 (1) lit c) GDPR and if disclosure is permitted by law and required pursuant to Art. 6 (1) lit. b) GDPR for the purpose of handling contractual relationships with you.

We have no intention to transfer your data to a recipient in a third country (not an EU/EEA Member State) or to an international organisation.

 

  1. Storage time

We will erase your personal data as soon as such data is no longer required for the above-mentioned purposes. With regard to the personal data provided by you when contacting us, this will happen when the respective conversation with you ends. The conversation is deemed to be over when circumstances suggest that the facts in question are finally clarified. In as far as the data disclosed to us is subject to storage obligations under tax and commercial law, such data will be stored for the mandatory storage period of ten years and then erased, unless you have consented to a longer storage period or unless further processing of the data is necessary for the establishment, exercise or defence of legal claims (statutory limitation period of three or up to thirty years).

 

  1. Rights of data subjects

You generally have the rights to obtain information, rectification, erasure, restriction, data portability, withdrawal and objection. If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other form, you can lodge a complaint with a supervisory authority. In our case, this is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Friedrichstraße 219, 10969 Berlin, telephone: 030/138 89‑0, e‑mail: mailbox[at]datenschutz-berlin.de.

 

  1. Right to object

You have the right to object to the processing of your personal data for direct marketing purposes without giving reasons. If your personal data is processed on the basis of legitimate interests as contemplated in Art. 6 (1) lit. f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR on condition that reasons for this exist due to your particular situation.

 

  1. Please also note

For more information regarding the processing of your data, please refer to our privacy statement which you download from our website at http://www.trockland.com/imprint-data-privacy/ and print at any time.

This is to inform you about the processing of your personal data by Trockland Management GmbH – and the rights to which you are entitled under data protection law.

  1. Who is the controller and who is the data protection officer?

The controller is Trockland Management GmbH, Hauptstrasse 27, 10827 Berlin, T +49 30 2363137-0, datenschutz[at]trockland.com.

You can reach our data protection officer, Mr Christian Kroesch, Attorney-at-law, SLK Compliance Services GmbH, Koenigsbruecker Strasse 76, 01099 Dresden, by telephone: +49 351 89676360 or by e‑mail at: datenschutz[at]slk-compliance.de.

  1. Which categories of data do we use as contract partner and where do they come from?

The categories of personal data processed include, in particular, your contact details (such as title, first name, surname, name affixes, address, (mobile) telephone number, e‑mail address), the contract data generated in the context of the initiation or performance of the contract (such as contact details of contact persons, contract contents, bank details) as well as further data from the contractual relationship.

Your personal data is generally collected directly from you as part of the initiation or performance of the contract. Under certain conditions, your personal data may also be collected from other parties based on legal requirements. We also process personal data which we have lawfully obtained from publicly accessible sources (such as professional social networks).

  1. Which are the purposes and legal basis of data processing?

We process your personal data in compliance with the provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG, Bundesdatenschutzgesetz) and all other relevant laws.

The main purpose of data processing is to establish and fulfil a contractual relationship with you. The primary legal basis for this is Art 6 (1) lit. b) GDPR. In addition, your separate consent pursuant to Art. 6 (1) lit. a), Art. 7 GDPR may also be used as consent within the meaning of data protection law. We also process your data in order to fulfil our legal obligations, specifically in the field of commercial and tax law. The basis for this is Art. 6 (1) lit. c) GDPR. In as far as this is necessary, we also process your data on the basis of Art. 6 (1) lit. f) GDPR in order to protect our legitimate interests or those of third parties (such as public authorities, participants involved in projects business such as investors and partners).

Should we intend to process your personal data for any purpose not mentioned above, we will inform you in advance.

  1. To whom do we transfer your data?

Within our company, your personal data will only be made available to those persons and departments (such as specialist departments, sales department) who need such data in order to fulfil our company’s contractual and legal obligations.

We will only disclose your personal data to third parties if you have given your express consent pursuant to Art. 6 (1) lit. a) GDPR, if disclosure pursuant to Art. 6 (1) lit. f) GDPR is necessary in order to establish, exercise or defend legal claims and if there is no reason to assume that you have an overriding legitimate interest in preventing disclosure of your data (such as courts of law, lawyers, project participants, investors and partners), if disclosure is required by law pursuant to Art. 6 (1) lit. c) GDPR (for instance, to tax authorities), if disclosure is permitted by law and required pursuant to Art. 6 (1) lit. b) GDPR for the purpose of handling the contractual relationship with you (such as banks, logistics companies).

The data disclosed may be used by the third party solely for the purposes mentioned.

  1. Which data protection rights can you assert as the data subject?

Pursuant to Art. 15 GDPR, you have the right to request information about your personal data processed by us. You can, in particular, request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the envisaged storage period, the existence of a right to request rectification, erasure, restriction of processing or objection, the right to lodge a complaint, the source of any of your data not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on the related details.

Pursuant to Art. 16 GDPR, you have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you which we have stored. Pursuant to Art. 17 GDPR, you have the right to request the erasure of your personal data stored by us, unless the processing is necessary in order to exercise the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.

Pursuant to Art. 18 GDPR, you have the right to obtain restriction of processing of your personal data if you contest the accuracy of the data, if the processing is unlawful and if you oppose the erasure of such data and if we no longer need the data, but if you need such data in order to establish, exercise or defend legal claims or if you have objected to the processing pursuant to Art. 21 GDPR.

Pursuant to Art. 20 GDPR, you have the right to receive the personal data you have given to us in a structured, commonly used and machine-readable format or to request its transmission to another controller.

Pursuant to Art. 7 (3) GDPR, you have the right to withdraw your consent at any time. This means we are no longer allowed in the future to process the data based on such withdrawn consent.

Right to object

You have the right to object to the processing of your personal data for direct marketing purposes without giving reasons. If we process your data in order to protect legitimate interests, you can object to such processing for reasons related to your special situation. We will then no longer process your personal data unless we can show compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or if the processing serves to establish, exercise or defend legal claims.

  1. Where can you lodge a complaint?

Pursuant to Art. 77 GDPR, you also have the right to lodge a complaint with a supervisory authority regarding the processing of your personal data by us, for example, with the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Friedrichstraße 219, 10969 Berlin, telephone: 030/138 89‑0, e‑mail: mailbox[at]datenschutz-berlin.de, as the supervisory authority responsible for us.

  1. How long will your data be stored?

We will erase your personal data as soon as such data is no longer required for the above-mentioned purposes. After termination of the contractual relationship, your personal data will be stored as long as we are legally obliged to do so. This typically results from legal verification and storage obligations which are laid down, among other things, in the Commercial Code (HGB, Handelsgesetzbuch) and Fiscal Code of Germany (AO, Abgabenordnung). Pursuant to these laws, storage periods can be as long as ten years. Furthermore, personal data may be stored for the period during which claims can be established against us (subject to a statutory limitation period of three or up to thirty years).

  1. Will your data be transferred to a third country?

We are currently not planning to transfer your personal data to a third country or to an international organisation. If we transfer personal data to service providers or affiliated companies outside the European Economic Area (EEA), such transfer will only take place if the European Commission has confirmed that such third country offers an appropriate level of data protection or if other appropriate data protection guarantees (such as binding data protection rules within the company or EU standard contractual clauses) exist.

  1. Are you obliged to provide your data?

You are obliged to provide us with the personal data required for the establishment and performance of a contractual relationship and the fulfilment of the related contractual obligations or which we are legally obliged to collect. Without this information we will not be able to conclude and perform the contract with you.