Privacy Information
With this privacy notice, we inform you about how we handle your personal data and about your rights under the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG). The controller responsible for data processing is Obotritia Capital KGaA (hereinafter referred to as “we” or “us”).
Contents
I. General information
1. Contact
2. Legal bases
3. Storage period
4. Categories of recipients of the data
5. Processing when you exercise your rights
6. Your rights
7. Right to object
8. Data protection officer
II. Data processing on our website
1. Storage in your browser
III. Other data processing
1. Contact by e-mail
2. Customer and prospect data
3. Applications
I. General information
1. Contact
If you have any questions or suggestions regarding this information or would like to contact us to assert your rights, please send your request to
Obotritia Capital KGaA
Hermannstraße 40
20095 Hamburg
Tel.: +49 (0) 403 688 126 - 77
E-mail: info@obocap.com
2. Legal bases
The data protection term “personal data” refers to all information relating to an identified or identifiable person. We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the BDSG. We only process data on the basis of a legal permission. We process personal data only with your consent (Section 25 (1) TDDDG or Art. 6 (1) (a) GDPR), for the performance of a contract to which you are a party, or at your request to take steps prior to entering into a contract (Art. 6 (1) (b) GDPR), for compliance with a legal obligation (Art. 6 (1) (c) GDPR) or where the processing is necessary for the purposes of our legitimate interests or the legitimate interests of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require the protection of personal data (Art. 6 (1) (f) GDPR).
If you apply for a vacancy in our company, we also process your personal data in order to decide on the establishment of an employment relationship (Section 26 (1) sentence 1 BDSG).
3. Storage period
Unless otherwise stated in the following information, we only store data for as long as is necessary to achieve the purpose of processing or to fulfil our contractual or statutory obligations. Such statutory retention obligations may arise in particular from commercial or tax law provisions. From the end of the calendar year in which the data was collected, we will retain personal data contained in our accounting records for ten years and personal data contained in business letters and contracts for six years. Furthermore, we will retain data in connection with consents that require proof, as well as with complaints and claims, for the duration of the statutory limitation periods. We will delete data stored for advertising purposes if you object to processing for this purpose.
4. Categories of recipients of the data
We use processors in the processing of your data. Processing operations carried out by such processors include, for example, hosting, e-mail dispatch, maintenance and support of IT systems, accounting and billing, marketing measures or the destruction of files and data carriers. A processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller. Processors do not use the data for their own purposes, but carry out the data processing exclusively for the controller and are contractually obliged to ensure appropriate technical and organisational data protection measures. In addition, we may transfer your personal data to bodies such as postal and delivery services, our bank, tax advisory/auditing firms or the tax authorities. For the purpose of tracing infections, data may be transferred to the competent public health authority. Further recipients may result from the following information.
5. Processing when you exercise your rights
If you exercise your rights pursuant to Art. 15 to 22 GDPR, we process the personal data transmitted for the purpose of implementing these rights and in order to be able to provide evidence thereof. We will only process data stored for the purpose of providing information and preparing it for this purpose and for the purposes of data protection control, and will otherwise restrict processing in accordance with Art. 18 GDPR.
This processing is based on the legal basis of Art. 6 (1) (c) GDPR in conjunction with Art. 15 to 22 GDPR and Section 34 (2) BDSG.
6. Your rights
As a data subject, you have the right to assert your data subject rights against us. In particular, you have the following rights:
In accordance with Art. 15 GDPR and Section 34 BDSG, you have the right to request information as to whether or not and, if so, to what extent we process personal data relating to you.
You have the right to request that we rectify your data in accordance with Art. 16 GDPR.
You have the right to request that we erase your personal data in accordance with Art. 17 GDPR and Section 35 BDSG.
You have the right to have the processing of your personal data restricted in accordance with Art. 18 GDPR.
You have the right, in accordance with Art. 20 GDPR, to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and to transmit this data to another controller.
If you have given us separate consent to data processing, you can withdraw this consent at any time in accordance with Art. 7 (3) GDPR. Such a withdrawal does not affect the lawfulness of the processing carried out on the basis of the consent up to the withdrawal.
If you believe that the processing of personal data concerning you violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.
7. Right to object
In accordance with Art. 21 (1) GDPR, you have the right to object, on grounds relating to your particular situation, to processing based on Art. 6 (1) (e) or (f) GDPR. Where we process personal data about you for direct marketing purposes, you can object to this processing in accordance with Art. 21 (2) and (3) GDPR.
8. Data protection officer
You can reach our data protection officer at the following contact details:
E-mail: datenschutzbeauftragter@obocap.com
Herting Oberbeck Datenschutz GmbH
Hallerstr. 76, 20146 Hamburg
https://www.datenschutzkanzlei.de
II. Data processing on our website
When you use the website, we collect information that you provide yourself. In addition, certain information about your use of the website is automatically collected by us during your visit. Under data protection law, an IP address is generally also considered personal data. An IP address is assigned to every device connected to the internet by the internet provider so that it can send and receive data.
When you use our website purely for information purposes, general information that your browser transmits to our server is initially stored automatically (i.e. not via a registration). By default, this includes: browser type/version, operating system used, page accessed, the previously visited page (referrer URL), IP address, date and time of the server request and HTTP status code. The processing is carried out to safeguard our legitimate interests and is based on the legal basis of Art. 6 (1) (f) GDPR. This processing serves the technical administration and security of the website. The stored data is anonymised after seven days and the anonymised data is deleted after a further 60 days, unless there is a justified suspicion of unlawful use based on specific indications and further examination and processing of the information is necessary for this reason. We are not able to identify you as a data subject on the basis of the stored information. Art. 15 to 22 GDPR therefore do not apply pursuant to Art. 11 (2) GDPR, unless you provide additional information that enables your identification in order to exercise your rights set out in these articles.
1. Storage in your browser
On the “Takeover Offer” page, the documents are only displayed after you have confirmed the legal notice. So that you do not have to repeat the confirmation in the same tab, your browser stores the entry “obotritia-offer-notice-en” in its session storage (sessionStorage) for this purpose. The entry is not transmitted to us and is deleted automatically when you close the tab. This storage is necessary to provide the page you have accessed as described (Section 25 (2) no. 2 TDDDG).
III. Other data processing
1. Contact by e-mail
If you send us a message via the contact e-mail address provided, we will process the data transmitted for the purpose of responding to your enquiry. We process this data on the basis of our legitimate interest in contacting persons making enquiries. The legal basis for data processing is Art. 6 (1) (f) GDPR.
2. Customer and prospect data
If you contact our company as a customer or prospective customer, we process your data to the extent necessary to establish or perform a contractual relationship. This regularly includes the processing of the master, contract and payment data provided to us as well as the contact and communication data of our contact persons at business customers and business partners. The legal basis for this processing is Art. 6 (1) (f) GDPR. We also process customer and prospect data for evaluation and marketing purposes. This processing is also based on the legal basis of Art. 6 (1) (f) GDPR and serves our interest in further developing our offering and informing you specifically about our offers. Further data processing may take place if you have given your consent (Art. 6 (1) (a) GDPR) or if this is necessary to fulfil a legal obligation (Art. 6 (1) (c) GDPR).
3. Applications
If you apply to our company, we process your application data exclusively for purposes related to your interest in current or future employment with us and the processing of your application. Your application will only be processed and noted by the relevant contact persons at our company. All employees entrusted with data processing are obliged to maintain the confidentiality of your data. If we are unable to offer you employment, we will retain the data you have submitted for up to six months after any rejection for the purpose of answering questions in connection with your application and rejection. This does not apply if statutory provisions prevent deletion, if further storage is necessary for the purpose of providing evidence or if you have expressly consented to longer storage. The legal basis for data processing is Section 26 (1) sentence 1 BDSG. Should we retain your applicant data beyond a period of six months and you have expressly consented to this, we would like to point out that this consent can be freely withdrawn at any time in accordance with Art. 7 (3) GDPR. Such a withdrawal does not affect the lawfulness of the processing carried out on the basis of the consent up to the withdrawal.