TerraMirum

Cookies

Cookies

 

Credipto GmbH uses cookies on its websites. Cookies are text files that are placed and stored on a computer system via an internet browser.

 

Many websites and servers use cookies. Many cookies contain an ID, the so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters that enables websites and servers to be assigned to the specific internet browser in which the cookie is stored. This enables the websites and servers visited to distinguish the individual browser of the data subject from other Internet browsers containing other cookies. A specific internet browser can be recognized and identified through the unique cookie ID.

 

Through the use of cookies, Credipto GmbH can provide the users of this website with more user-friendly services that would not be possible without the cookie setting.

 

Through a cookie, the information and offers on our website can be optimized for the benefit of the user. As already mentioned, cookies allow us to recognize users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, the user of a website that uses cookies does not have to re-enter access data every time he or she visits the website, as this is taken over by the website and the cookie is stored on the user's computer system. Another example is the cookie for the shopping cart in an online shop. The online shop remembers the products that a customer has placed in the virtual shopping cart by means of a cookie.

 

The person concerned can prevent the setting of cookies by our website at any time via a corresponding setting of the internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an internet browser or other software programs. This is possible in all common internet browsers. If the person concerned deactivates the cookie setting in the internet browser used, not all functions of our website may be fully usable.

 

1.     Collection of general data and information

 

The website of Credipto GmbH collects a series of general data and information when a data subject or automated system calls up the website. This general data and information is stored in server log files. (1) the browser types and versions used, (2) the operating system used by the access system, (3) the website from which the access system accessed our website (so-called referrer), (4) sub-websites on our website that were accessed via an access system may be recorded, (5) the date and time of access to the website, (6) an internet protocol address (IP address), (7) the internet service provider of the access system and (8) other similar data and information used for security purposes in the event of attacks on our information technology systems.

 

When using these general data and information, Credipto GmbH does not draw any conclusions about the data subject. Rather, this information is necessary to (1) correctly present the content of our website, (2) optimize the content of our website and the advertising for it, (3) ensure the long-term functionality of our information technology systems and the technology of our website and (4) provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack. Therefore, Credipto GmbH analyzes anonymously collected data and information statistically, with the aim of increasing the data protection and data security of our enterprise, and to ensure an optimal level of protection for the personal data we process. The anonymized data of the server log files are stored separately from all personal data provided by a data subject.

 

2.     Subscription to our newsletter

 

On the website of Credipto GmbH, users are given the opportunity to subscribe to our enterprise's newsletter free of charge. The input mask used for this purpose determines which personal data is transmitted to the controller when the newsletter is ordered.

 

Credipto GmbH informs its customers and business partners regularly by means of a newsletter about enterprise offers. The newsletter of our company can only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject has registered to receive the newsletter. For legal reasons, a confirmation e-mail will be sent to the e-mail address entered for the first time by a data subject for the sending of the newsletter using the double opt-in procedure. This confirmation e-mail is used to check whether the owner of the e-mail address as a data subject has consented to the receipt of the newsletter.

 

When registering for the newsletter, we store the IP address assigned by the Internet service provider (ISP) of the computer system used by the data subject at the time of registration, as well as the date and time of registration. The collection of this data is necessary to be able to trace the (possible) misuse of a data subject's e-mail address at a later date and therefore serves as legal protection for the controller.

 

The personal data collected within the scope of newsletter registration is used exclusively for sending our newsletter. Furthermore, newsletter subscribers may be informed by e-mail if this is necessary for the operation of the newsletter service or for a registration in this regard, as in the event of changes to the newsletter offer or a change in the technical conditions. Personal data collected as part of the newsletter service will not be transferred to third parties. Subscription to our newsletter can be canceled by the data subject at any time. The consent to the storage of personal data that the data subject has given us for the sending of the newsletter can be revoked at any time.

 

When you open one of our newsletters or click on a link in it, this can be recorded via the web server (date, time, e-mail address). This is for internal statistical purposes so that we can further tailor our information offer to the interests of our newsletter users. This is also our legitimate interest in data processing. This data is not merged with personal user profiles.

 

If you give us your consent to do so, we will further personalize the newsletter you select, taking into account the data you provide us with (e.g. your experience with financial products and the investments you have made), so that you receive information that is particularly relevant to you.

 

Each newsletter contains a link to revoke your consent. It is also possible to unsubscribe from the newsletter at any time directly on the website of the controller or to inform the controller in another way.

 

3.     Newsletter follow-up

 

Credipto GmbH newsletters contain tracking pixels. A tracking pixel is a miniature graphic that is embedded in emails sent in HTML format to enable log file recording and log file analysis. This enables statistical analysis of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, Credipto GmbH can see whether and when an e-mail was opened by a data subject and which links in the e-mail were called up by data subjects.

Such personal data collected via tracking pixels embedded in newsletters are stored and evaluated by the controller in order to optimize the sending of the newsletter and to better adapt the content of future newsletters to the interests of the data subject. This personal data is not passed on to third parties. Data subjects have the right to revoke their separate declaration of consent in this regard at any time via the double opt-in procedure. After revocation, this personal data will be deleted by the controller. Credipto GmbH automatically regards a withdrawal from the receipt of the newsletter as a revocation.

 

4.     Possibility of contact via the website

 

The website of the Credipto GmbH contains information that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the data controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data voluntarily transmitted by a data subject to the controller are stored for the purpose of processing or contacting the data subject. This personal data will not be transferred to third parties unless you have given your prior express consent to the transfer or the transfer is required or permitted by law. The exceptions to this are our service partners commissioned by us to process personal data necessary to execute the contractual relationship and in accordance with our instructions as part of an order processing agreement, as well as the responsible institution and issuers and providers from whom you acquire financial instruments and who require personal data (name, address, date of birth, e-mail address, telephone number, account data, custody account data, tax identification number) necessary to perform and process the acquisition of financial instruments. When accepting subscription and purchase declarations for investment in financial instruments (investment brokerage), the Platform acts as an “affiliated intermediary” within the meaning of Section 3(2) of the German Securities Depositories Act (Wertpapierinstitutsgesetz) and acts solely on behalf of, for the account and under the responsibility of Effecta GmbH, Florstadt (“responsible institution”).

5.     Routine deletion and blocking of personal data

 

The controller shall process and store the personal data of the data subject only for the period necessary to achieve the purpose of retention or to the extent permitted by the European legislator or other legislators in the laws or regulations to which the controller is subject.

 

In the event that the purpose of retention ceases to apply or a retention period stipulated by the European Directive and Regulation Issuer or another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with the legal provisions.

 

6.     Rights of the data subject

 

a) Right to confirmation

Every data subject has the right granted to him or her by the European legislator to obtain from the controller confirmation as to whether personal data concerning him or her are being processed. If a data subject wishes to exercise this right to confirmation, he or she may at any time contact our Data Protection Officer or another employee of the controller.

 

b) Right to information

Any person affected by the processing of personal data has the right, recognized by the European Directive and Regulation, to obtain from the controller at any time free of charge information about the personal data stored about him or her and to obtain a copy of that information. Furthermore, the European legislator has granted the data subject the right of access to the following information

 

-processing purposes

-categories of personal data processed

-the recipients or categories of recipients to whom personal data have been or will be disclosed, in particular recipients in third countries or international organizations

-the foreseen period for which the personal data will be retained, if possible, or if not possible, the criteria used to determine this period

-the existence of the right to request the controller to rectify or erase personal data or to restrict the processing of personal data concerning the data subject, or to object to such processing

the right to lodge a complaint with a supervisory authority

-in case the personal data is not collected from the data subject: All available information about the source of the data

the existence of automated decision-making, including profiling as referred to in Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic concerned, as well as the significance and the envisaged consequences of such processing for the data subject

-Furthermore, the data subject has the right to be informed whether personal data are transferred to a third country or an international organization. In such a case, the data subject also has the right to obtain information on the appropriate safeguards in connection with the transfer.

If a data subject wishes to exercise this right of access, he or she may at any time contact our Data Protection Officer or another employee of the controller.

-c) Right to rectification

Any person affected by the processing of personal data has the right granted by the European legislative directives and regulations to demand the immediate rectification of inaccurate personal data concerning him or her. Furthermore, the data subject has the right to request the completion of incomplete personal data, including by means of an additional declaration, taking into account the purposes of the processing.

If a data subject wishes to exercise this right to rectification, he or she may at any time contact our data protection officer or another employee of the controller.

-d) Right to erasure (right to be forgotten)

Any person affected by the processing of personal data has the right, recognized by the European legislator, to obtain from the controller the erasure of personal data concerning him or her without undue delay, where one of the following grounds applies and the processing is no longer necessary

-the personal data have been collected or otherwise processed for purposes for which they are no longer necessary.

-the data subject withdraws the consent on which the processing is based pursuant to point (a) of Article 6(1) GDPR or point (a) of Article 9(2) GDPR and there is no other legal ground for the processing.

-the data subject objects to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing or the data subject objects to the processing pursuant to Article 21(2) GDPR.

-the personal data have been unlawfully processed.

-The personal data must be erased to comply with a legal obligation under Union or Member State law to which the controller is subject.

-The personal data were collected in connection with the provision of information society services referred to in Article 8(1) of the GDPR.

-If one of the aforementioned reasons applies, and a data subject wishes to request the erasure of personal data stored by Credipto GmbH, he or she may, at any time, contact our Data Protection Officer or another employee of the controller. Our Data Protection Officer or another employee of Credipto GmbH shall promptly ensure that the erasure request is complied with immediately.

If personal data has been made publicly available by Credipto GmbH and our company is obliged to erase personal data pursuant to Art. 17 para. 1 GDPR, Credipto GmbH shall take appropriate measures, including technical measures taking into account available technology and implementation costs, to inform other data controllers who process the published personal data that the data subject has requested the erasure of all links to or copies of such personal data or copies of such personal data from these other data controllers, unless processing is necessary. The Data Protection Officer of Credipto GmbH or another employee will arrange the necessary measures in individual cases.

- e) Right to restrict processing

Any person affected by the processing of personal data has the right granted by the European legislative directives and regulations to request the controller to restrict the processing if one of the following conditions is met

 

-The accuracy of the personal data is contested by the data subject for a period of time enabling the controller to verify the accuracy of the personal data.

-the processing is unlawful and the data subject opposes the erasure of the personal data and instead requests the restriction of their use.

-The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims.

-The data subject has objected to the processing pursuant to Article 21(1) GDPR pending verification whether the controller's legitimate grounds override those of the data subject.

 

-If one of the aforementioned conditions is met, and a data subject wishes to request the restriction of the processing of personal data stored by Credipto GmbH, he or she may at any time contact our Data Protection Officer or another employee of the controller. The Data Protection Officer of Credipto GmbH or another employee of the controller will arrange the restriction of the processing.

 

- f) Right to data portability

Any person affected by the processing of personal data has the right granted by European legislative directives and regulations to receive personal data concerning them, provided by the data subject to a controller, in a structured, commonly used and machine-readable format. They also have the right, where the processing is based on consent pursuant to Article 6(1) (a) of the GDPR or Article 9(2) (a) of the GDPR or on a contract pursuant to Article 6(1) (b) of the GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, to transmit such data to another controller without hindrance by the controller to whom the personal data have been provided.

Furthermore, when exercising the right to data portability pursuant to Article 20(1) GDPR, the data subject shall have the right to request the transfer of personal data directly from one controller to another controller, to the extent technically feasible and provided that this does not adversely affect the rights and freedoms of other persons.

In order to assert the right to data portability, the data subject may at any time contact the Data Protection Officer designated by Credipto GmbH or another employee.

 

-g) Right to object

Any person affected by the processing of personal data has the right to object at any time to processing of personal data concerning him or her based on point (e) or (f) of Article 6(1) of the GDPR on grounds relating to his or her particular situation by the European legislator. This also applies to profiling based on these provisions.

Credipto GmbH shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims.

If Credipto GmbH processes personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing. This also applies to profiling insofar as it is related to such direct advertising. If the data subject objects to Credipto GmbH to the processing for direct marketing purposes, Credipto GmbH will no longer process the personal data for these purposes.

In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to processing of personal data concerning him or her by Credipto GmbH for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

In order to exercise the right to object, the data subject may directly contact the Data Protection Officer or another employee of Credipto GmbH. The data subject is also free to exercise the right to object in the context of the use of information society services and, notwithstanding Directive 2002/58/EC, by automated means using technical specifications.

 

-h) Automated decisions in individual cases, including profiling

Each data subject shall have the right, recognized by the European legislator, not to be subject to a decision based solely on automated processing, including profiling, which has legal effects concerning him or her or similarly significantly affects him or her, provided that the decision (1) is not necessary for the conclusion or performance of a contract between the data subject and a data controller, or (2) is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the rights and freedoms and legitimate interests of the data subject, or (3) is based on the data subject's explicit consent.

If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) it is based on the data subject's explicit consent, Credipto GmbH shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and contest the decision.

If the data subject wishes to exercise the rights concerning automated individual decision-making, he or she may at any time directly contact our Data Protection Officer of the controller or another employee of the controller.

 

i) Right to withdraw consent under data protection law

Any person affected by the processing of personal data has the right granted by the European legislative directives and regulations to withdraw his or her consent to the processing of personal data at any time.

If the data subject wishes to exercise his or her right to withdraw consent, he or she may at any time contact our data protection officer or another employee of the controller.

 

7.     Data protection provisions regarding the implementation and use of Facebook

 

Credipto GmbH has integrated components of Facebook into this website. Facebook is a social network.

 

A social network is a social meeting place operated on the Internet, usually an online community that enables users to communicate with each other and interact in virtual space. A social network can serve as a platform for the exchange of ideas and experiences or allow the Internet community to provide personal or company-related information. Facebook allows social network users to create private profiles, upload photos and network through friend requests, among other things.

 

The operating company of Facebook is Facebook, Inc, 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the controller responsible for the processing of personal data is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

 

Each time one of the individual pages of this website operated by the controller on which a Facebook component (Facebook plug-in) is integrated is accessed, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Facebook component to download a representation of the respective Facebook component from Facebook. A complete overview of all Facebook plug-ins is available at https://developers.facebook.com/docs/plugins/?locale=de_DE. During this technical procedure, Facebook becomes aware of which subpage of our website was visited by the data subject.

 

If the data subject is logged in to Facebook at the same time, Facebook recognizes which specific subpage of our website the data subject visits each time he or she accesses our website and during his or her stay on our website. This information is collected by the Facebook component and assigned by Facebook to the respective Facebook account of the data subject. If the data subject clicks on one of the Facebook buttons integrated on our website, for example the “Like” button, or if the data subject leaves a comment, Facebook assigns this information to the personal Facebook user account of the data subject and stores this personal data.

 

If the data subject is logged in to Facebook at the same time as accessing our website, Facebook will always receive information via the Facebook widget that the data subject has visited our website, regardless of whether the data subject clicked on the Facebook widget or not. If the data subject does not want this information to be transmitted to Facebook, he or she can prevent the transmission by logging out of his or her Facebook account before accessing our website.

 

The data policy published by Facebook, which can be found at https://de-de.facebook.com/about/privacy/abrufbar, provides information on the collection, processing and use of personal data by Facebook. It also explains which settings options Facebook offers to protect the privacy of the data subject. In addition, various apps are available that make it possible to prevent the transfer of data to Facebook. Such apps can be used by the data subject to prevent the transfer of data to Facebook.

 

8.     Data protection for apps and in the application process

 

The Controller collects and processes personal data of applicants for the purpose of carrying out the application process. The processing may also take place electronically. This applies in particular if an applicant sends the relevant application documents to the controller electronically, for example by e-mail or via a web form on the website. If the controller concludes an employment contract with the applicant, the transmitted data will be stored for the purpose of processing the employment relationship in accordance with the statutory provisions. If the controller has not concluded an employment contract with the applicant, the application documents will be automatically deleted two months after the notification of the rejection decision, unless the deletion conflicts with other legitimate interests of the controller. Other legitimate interests in this sense are, for example, the burden of proof in proceedings under the General Equal Treatment Act (AGG).

9.     Data protection regulations regarding the implementation and use of Google Analytics (with anonymization function)

 

The person responsible for processing has integrated the Google Analytics component (with anonymization function) on this website. Google Analytics is a web analysis service. Web analysis is the collection, aggregation and evaluation of data on the behavior of visitors to websites. A web analysis service collects data on, among other things, the website from which the data subject came to a website (also known as the referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. Web analytics is primarily used to optimize a website and analyze the cost-benefit of internet advertising.

 

The operating company for the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

 

The person responsible for processing uses the suffix “_gat._anonymizeIp” for web analysis via Google Analytics. By using this suffix, the IP address of the Internet connection of the data subject is shortened and anonymized by Google if our website is accessed from a member state of the European Union or from another state party to the Agreement on the European Economic Area.

 

The purpose of the Google Analytics component is to analyze the flow of visitors to our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us that show the activities on our website and to provide other services relating to the use of our website.

 

Google Analytics places a cookie on the information technology system of the data subject. What cookies are has already been explained above. Google can analyze the use of our website by setting the cookie. Each time you access one of the individual pages of this website, which is operated by the controller and on which a Google Analytics component has been integrated, the Internet browser on the information technology system of the data subject is automatically triggered by the respective Google Analytics. The component that transmits data to Google for the purpose of online analysis. As part of this technical process, Google obtains information on personal data, such as the IP address of the data subject, which Google uses, among other things, to track the origin of visitors and clicks and subsequently activate commission billing.

 

The cookie is used to store personal information such as the duration of the access, the location from which the access was made and the frequency with which the data subject visits our website. Each time you visit our website, this personal data, including the IP address of the Internet connection used by the data subject, is transmitted to Google in the United States. This personal data is stored by Google in the United States of America. Google may transfer the personal data collected through the technical process to third parties.

 

As already explained above, the data subject can prevent the placing of cookies via our website at any time by means of an appropriate setting in the Internet browser used and thus permanently object to the placing of cookies. Such a setting of the Internet browser used will also prevent Google from placing a cookie on the information technology system of the data subject. Furthermore, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.

 

The data subject also has the possibility to object to and prevent the collection of data generated by Google Analytics regarding the use of this website and the processing of this data by Google. To do this, the data subject must download and install a browser plug-in under the link https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics that no data or information about website visits may be transmitted to Google Analytics via JavaScript. The installation of the browser add-on is seen by Google as a contradiction. If the information technology system of the data subject is deleted, formatted or reinstalled at a later date, the data subject must reinstall the browser plug-in to deactivate Google Analytics. If the browser plug-in has been uninstalled or deactivated by the data subject or another person within his or her sphere of control, it is possible to reinstall or reactivate the browser plug-in.

 

Further information and the applicable data protection regulations of Google can be found at https://www.google.de/intl/de/policies/privacy/ and http://www.google.com/analytics/terms/de.html. Google Analytics is described in more detail at https://www.google.com/intl/de_de/analytics/.

10.  Data protection regulations regarding the use of Mouseflow

 

This website uses Mouseflow, a web analysis tool from Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark. The data processing serves the purpose of analyzing this website and its visitors. For this purpose, data is collected and stored for marketing and optimization purposes. Pseudonymized usage profiles can be created from this data. Cookies may be used for this purpose. The web analysis tool Mouseflow records randomly selected individual visits (only with anonymized IP addresses). This creates a record of mouse movements and clicks in order to randomly replay individual website visits and derive potential improvements for the website from this. The data collected by Mouseflow will not be used to identify the personal identity of the visitor to this website without the separate consent of the person concerned and will not be merged with the personal data of the pseudonymous person. The processing is carried out on the basis of Article 6 (1) f) GDPR due to the legitimate interest in direct customer contact and the needs-based design of the website. For reasons arising from your particular situation, you have the right to object to this processing of your personal data in accordance with Art. 6(1)f GDPR at any time. To do so, you can generally deactivate the registration on all websites that use Mouseflow for the browser you are currently using by using the following link: https://mouseflow.de/opt-out/

11.  Legal basis, purpose and scope of processing

 

Article 6 I GDPR serves our company as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the fulfillment of a contract to which the data subject is a party, e.g. processing operations necessary for the delivery of goods or the provision of any other service, or when under consideration, the processing is based on Article 6 I GDPR. The same applies to processing operations that are necessary for the implementation of pre-contractual measures, for example in cases such as investigations into our products or services. Registration and investment (investment brokerage): You also have the option to register on our website in order to receive detailed information about the project and to invest in financing projects. Personal data is also processed for this purpose. If our company is subject to a legal obligation that requires the processing of personal data, such as to fulfill tax obligations, the processing is based on Art. 6 I lit. GDPR. In rare cases, the processing of personal data may be necessary for the protection of vital interests of the data subject or another natural person. This may be the case, for example, if a visitor to our company is injured and his or her name, age, health insurance details or other vital information needs to be transmitted to a doctor, hospital or other third party. The processing would then be based on Article 6 of the GDPR.

 

Ultimately, processing operations may be based on Article 6 I GDPR. Processing operations that do not fall under any of the aforementioned legal bases shall be based on this legal basis, taking into account the interests, fundamental rights and freedoms of the data subject, if the processing is necessary for the protection of a legitimate interest of our Company or a third party to which the data subject is not entitled. We are permitted to carry out such processing operations in particular because they are specifically provided for by the European legislator. In this context, it is of the opinion that a legitimate interest can be assumed if the data subject is a customer of the controller (GDPR Recital 47 Sentence 2).

 

Scope of data processing - The data you enter in the input mask will be transmitted to us and stored. The data will only be transferred to third parties if explicitly stated below. When accepting subscription and purchase declarations for investments in financial instruments (investment brokerage), the platform acts as an “affiliated agent” within the meaning of Section 3 (2) of the Securities Dealers Act and is operated exclusively on behalf of Effecta GmbH, Florstadt (“responsible entity”). The data required for the realization and processing of the subscription of a financial instrument is provided to both the responsible entity and the respective issuer or provider of the financial instrument and, if applicable, to the service providers involved by them for processing the contract (e.g. securities clearing bank and/or payment service provider).

 

The following data is also stored during registration:

 

(1) IP address of the user

 

(2) Date and time of registration

 

We use your e-mail address and telephone number as the method of contact for information and inquiries regarding the status of processing. We make it clear that communication via e-mail can be potentially insecure.

 

The provision of your personal data by you is not required by law and is not contractually required in the case of information only. You are under no obligation to provide us with your personal information. Failure to provide personal data, unless it is mandatory information, means that we cannot provide you with detailed project information and that it is not possible for you to invest in the projects.

 

Legal basis for data processing: If the user has given his consent, the legal basis for data processing is Art. 6 para. 1 lit. 1 GDPR. If the data input serves the fulfillment of a contract to which the user is a party (such as a subscription or purchase contract for a financial instrument) or serves the fulfillment of pre-contractual measures, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.

 

Purpose of data processing - If you only want and request detailed project information, the purpose of the data entry is to be able to provide you with this information. If you are investing in projects, i.e. purchasing financial instruments, the data entry serves the purpose of concluding and executing the subscription or purchase contract and, if applicable, the contractual relationship established by this contract (financial instrument).

 

12.  Legitimate interests in the processing pursued by the controller or a third party

 

If the processing of personal data is based on Article 6 I, f GDPR, our legitimate interest is to conduct our business activities for the benefit of all our employees and shareholders.

 

13.  Duration of Retention of Personal Data

 

The criterion for the retention period of personal data is the respective statutory retention period. After expiry of the deadline, the relevant data will be routinely deleted as long as it is no longer required to fulfill the contract or to initiate a contract.

 

14.  Legal or contractual regulations governing the provision of personal data;

 

Necessity for the conclusion of the contract; Obligation of the data subject to provide personal data; Possible consequences of non-responsiveness

We would like to clarify that the provision of personal data is partly required by law (e.g. tax regulations) or may result from contractual provisions (e.g. information on the contractual partner).

 

For the conclusion of a contract, it may sometimes be necessary for the data subject to provide us with personal data that is subsequently processed by us. For example, the data subject is obliged to provide us with personal data if our Company enters into a contract with him or her. Failure to provide personal data will mean that the contract with the data subject cannot be concluded.

 

Before providing the data subject's personal data, the data subject must contact our data protection officer. Our data protection officer will explain to the data subject on a case-by-case basis whether the provision of personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data, and what consequences failure to provide the personal data will have.

 

15.  Google Maps

 

This site uses the Google Maps mapping service. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. In order to use the functions of Google Maps, you must register your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this website has no influence on this data transfer. The use of Google Maps is used for the purpose of providing an attractive presentation of our online offers and making it easier to find the locations we indicate on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Further information on the processing of user data can be found in Google's data protection declaration.

16.  YouTube

The Credipto GmbH website also contains a plug-in for YouTube, which is owned by Google Inc. based in San Bruno, California, USA. When you visit pages of our website equipped with the YouTube plug-in, a connection to the YouTube servers is established. The YouTube server is informed which page of our website you have visited. If you are also logged in to your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can revoke this assignment option if you log out of your account beforehand. You can find more information on the collection and use of your data by YouTube in the data protection information at https://www.youtube.com.