Privacy Policy

Introduction and General Information 

Thank you for your interest in our website. The protection of your personal data is very important to us. In the following you will find information on how we handle your data collected by your use of our website. Your data will be processed in accordance with the legal provisions on data protection. 

How do we collect your data? 

On the one hand, your data is collected when you provide it to us. This may be data that you enter in a contact form, for example.
Other data is automatically collected by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of the page call). This data is collected automatically as soon as you enter our website. 

 

Responsible according to GDPR 

AIF Capital GmbH
Börsenplatz 170174 Stuttgart
info@aif.capital
+49(0)711 / 490579 0

 

Contact to Data Protection Officer 

Proliance GmbH / www.datenschutzexperte.de
Datenschutzbeauftragter
Leopoldstr. 21
80802 München
datenschutzbeauftragter@datenschutzexperte.de

 

Definitions  

Our privacy policy should be simple and understandable for everyone. In this Data Protection Declaration the official terms of the General Data Protection Regulation (GDPR) are generally used. The official definitions are explained in Art. 4 GDPR.
 

Server log files 

When you call up our website, it is technically necessary for data to be transmitted to our web server via your internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:
 

  • Browser type and browser version 
  • Operating system used 
  • Referrer URL 
  • Hostname of your computer 
  • Time of server request 
  • IP address 

We collect the listed data to ensure a smooth connection of the website and to enable a comfortable use of our website by the visitors. In addition, the log file serves to evaluate system security and stability as well as for administrative purposes. The legal basis for the temporary storage of the data or log files is Art. 6 Para. 1 lit. f GDPR.
 

Cookies 

We use so-called cookies on our website. Cookies are small text files which are stored on the storage medium of your terminal device, e.g. on a hard disk, and which provide us with certain information. Cookies cannot execute programs or transfer viruses to your end device. This website uses the following types of cookies, the scope and function of which are explained below. 

Cookies stored with your web browser: 

  • Transient cookies: these cookies are automatically deleted when you close your web browser. They include in particular session cookies. These store a so-called session ID, which can be used to assign various requests from your web browser to the session in cooperation. This enables your terminal device to be recognised when you return to our website. Session cookies are deleted as soon as you log out or close your web browser. 
  • Persistent cookies: these cookies are automatically deleted after a defined period of time, which may vary depending on the cookie. You can delete these cookies at any time in the settings of your web browser.

The processing of personal data by the above-mentioned cookies helps to make our website more user-friendly and effective for you. Some functions of our website cannot be offered without the use of these cookies. In particular, some functions of our website require that your web browser can still be identified after a page change. The data processed by cookies, which are necessary for the provision of our website functions, are not used to create user profiles. As far as cookies are used for analysis purposes, the individual application is dealt with separately below. 

As far as cookies are technically necessary, our legitimate interest in data processing lies in the above-mentioned purposes. The legal basis in these cases is Art. 6 Para. 1 lit. f GDPR. In all other cases, the legal basis is Art. 6 Para. 1 lit. a GDPR (your consent). 

The above-mentioned cookies are stored on your terminal device and transmitted from there to our server. You can therefore configure the processing of data and information by cookies yourself. You can make appropriate configurations in the settings of your web browser, by which you can, for example, reject third-party cookies or cookies altogether. In this context, we would like to point out that you may then not be able to use all functions of our website properly. In addition, we recommend that you delete cookies and your browser history on a regular basis. 

 

Contact form and contact per email  

If you send us enquiries by email, your details from your email including the contact details provided there will be stored by us for the purpose of processing the enquiry and for follow-up questions. An email address is required for contact purposes; the provision of your name and telephone number is voluntary. Under no circumstances will we pass on this data without your consent. The legal basis for the processing of the data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit. f GDPR and Art. 6 Para. 1 letter b GDPR, in case your request is aimed at the conclusion of a contract. Your data will be deleted after the final processing of your enquiry, provided that there are no legal storage obligations to the contrary. In case of Art. 6 Para. 1 lit. f GDPR, you can object to the processing of your personal data at any time.
 

Job applications  

When you apply for a job with us, we collect personal data. This includes in particular your contact details (such as first and last name, title, postal address, telephone number and email address of the user) as well as other data provided about your background (e.g. curriculum vitae, qualifications, academic degrees and professional experience) and your person (e.g. cover letter, personal interests). This may also include special categories of personal data (e.g. information on a severe disability). As a rule, your personal data is collected directly from you during the application procedure and is encrypted during electronic transmission. 

The data processing serves to initiate an employment relationship. The primary legal basis for this is Art. 6 Para. 1 b GDPR in conjunction with Art. 26 Para. 1 BDSG. In addition, consent pursuant to Art. 6 (1) lit. a, 7 GDPR in conjunction with Art. 26 (2) BDSG can be used as a permission requirement under data protection law. If the processing of your data is based on consent, you have the right to revoke this consent at any time with effect for the future. 

Within our company, only those persons and positions (e.g. human resources) have access to your personal data who absolutely need it to carry out the application procedure or to fulfil our legal obligations. For this purpose, your application will be forwarded to the responsible person for examination. Under no circumstances will your personal data be passed on to third parties without authorisation. 

Your data for an application for a specific job advertisement will be stored and processed by us during the on-going application process. Once the application process has been completed (e.g. in the form of an acceptance or rejection), the application process including all personal data will be deleted from the system 6 months after the application process is completed. In the event of an acceptance, we reserve the right to keep your application for a longer period of time if the date of entry is more than six months in the future.

 

Analysis tools and advertisement  

Google Analytics  

Our website uses Google Analytics, an internet analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses so-called cookies and web beacons.  

Google will use this information on behalf of the operator of this website to evaluate your use of the website and to generate reports on website activity. Google will also use this information to provide the website operator with further services related to the use of the website and the internet. The IP address sent by your browser in the context of Google Analytics is not combined with other data from Google. Processing is carried out in accordance with Art. 6 Para. 1 letter a GDPR on the basis of the consent you have given. 

We only use Google Analytics with activated IP anonymisation. This means that your IP address will only be processed by Google in abbreviated form. 

We have concluded an order processing contract with the service provider in which we oblige him to protect the data of our customers and not to pass them on to third parties.  

As a transfer of personal data to the USA takes place, further protective mechanisms are required to ensure the level of data protection of the GDPR. In order to guarantee this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 Para. 2 lit. c GDPR. These clauses oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases in which this cannot be guaranteed even by this contractual extension, we will endeavour to obtain additional regulations and commitments from the recipient in the USA.  

The terms of use of Google Analytics and information on data protection can be accessed via the following links:  

http://www.google.com/analytics/terms/de.html 

https://www.google.de/intl/de/policies/  

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. Data at user and event level linked to cookies, user identification (e.g. User ID) and advertising IDs (e.g. DoubleClick cookies, Android advertising ID, IDFA [Apple identifier for advertisers]) will be deleted at the latest 14 months after their collection. 

You can prevent the saving of cookies by adjusting the settings of your browser software accordingly. Please note that in this case you may not be able to use all functions of this website without restriction. You can also prevent Google from collecting the data generated by the cookie and analysing your use of the website (including your IP address) and processing this data by Google by downloading and installing the browser plugin available at https://tools.google.com/dlpage/gaoptout?hl=de. 

 

Plugins and tools  

YouTube 

On our website we include videos from “YouTube”, a social media platform of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as “Google”). 

By using the Service, personal data is transferred to the USA. The legal basis for the transfer of your personal data to the USA is your consent pursuant to Art. 49 Para. 1 sentence 1 lit. a GDPR. Please note that such a transfer of personal data without an Adequacy Decision and without suitable guarantees involves a risk for you. The risk is that due to legislation in the USA, the personal data may be accessed by American authorities (in particular the intelligence services). Legal protection options or information on the handling of your data by the US authorities are only possible to a very limited extent or not at all. A level of data protection in accordance with the provisions of the GDPR can therefore not be guaranteed. 

If the playback of embedded YouTube videos is started by your consent, the provider YouTube will use cookies to collect information about user behaviour. According to information from YouTube, these serve, among other things, to record video statistics, improve user friendliness and prevent abusive behaviour. If you are logged in to Google, your information is directly associated with your account when you click on a video. If you do not wish to be associated with your YouTube profile, you must log out before activating the button. Google stores this data as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its websites. In particular, such an evaluation is carried out (also for users who are not logged in) for the purpose of presenting need-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. Please contact Google directly. 

Third party information: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland 

Further information on data protection and data use by Google can be found on the following Google website: 
http://www.google.de/intl/de/policies/privacy
Further information on Google Web Fonts you can find at:
http://www.google.com/webfonts/, https://developers.google.com/fonts/faq?hl=de-DE&csw=1 und
https://www.google.com/fonts#AboutPlace:about. 

 

Google Maps 

On our website, we use the offer of Google Maps, an online map service of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as “Google”). This enables us to display interactive maps directly on the website and allows you to use the map function conveniently. When you visit our website, Google receives information that you have visited the relevant subpage of our website. Your IP address is transmitted in the process. This happens regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account. If you do not wish to be assigned to your profile on Google, you must log out first. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or need-based design of the website. Such evaluation is carried out in particular (even for users who are not logged in) to provide need-based advertisement and to inform other users about your activities on our website. 

We use Google Maps to display interactive maps from Google Maps to provide you with a better user experience of our website.  

By using the service, personal data is transferred to the USA. The legal basis for the transfer of your personal data to the USA is your consent pursuant to Art. 49 Para. 1 sentence 1 lit. a GDPR. Please note that such transfers of personal data without a Adequacy Decision and without suitable guarantees involve a risk for you. The risk is that due to legislation in the USA, the personal data may be accessed by American authorities (in particular the intelligence services). Legal protection options or information on the handling of your data by the US authorities are only possible to a very limited extent or not at all. A level of data protection in accordance with the provisions of the GDPR can therefore not be guaranteed. 

Information of the third party provider: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland 

You can find further information on data use by Google, on setting and objection possibilities as well as on data protection on the following Google website: 

https://policies.google.com/privacy?hl=de&gl=de. 

  

Data transfer and receiver 

Your personal data will not be transferred to third parties, unless: 

  • We have explicitly pointed this out in the description of the respective data processing 
  • You have given your express consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR 
  • The disclosure pursuant to Art. 6 Para. 1 sentence 1 letter f GDPR is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data 
  • There is a legal obligation to pass on the data pursuant to Art. 6 Para. 1 sentence 1 lit. c GDPR 
  • This is necessary for the processing of contractual relationships with you in accordance with Art. 6 Para. 1 sentence 1 lit. b GDPR 

In addition, we use external service providers for the processing of our services, which we have carefully selected and commissioned in writing. They are bound by our instructions and are regularly checked by us. If necessary, we have concluded contract processing agreements with them in accordance with Art. 28 GDPR. These are service providers for web hosting, the sending of emails and the maintenance and servicing of our IT systems etc. The service providers will not pass on this data to third parties.
 

Storage period of personal data 

The duration of the storage of personal data is determined by the relevant legal retention periods (e.g. under commercial law and tax law). After expiry of the respective period, the corresponding data is routinely deleted. If data is required for the fulfilment or initiation of a contract, or if we have a legitimate interest in its further storage, the data will be deleted when it is no longer required for these purposes or when you exercise your right of revocation or objection.
 

Data security 

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. 

If the SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties. 

 

Your rights 

In the following, you will find information on the rights of data subjects which the applicable data protection law grants you towards the responsible party with regard to the processing of your personal data: 

The right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you may request information on the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of automated decision making including profiling and, where applicable, meaningful information on the details of such data. 

The right to demand, in accordance with Art. 16 GDPR, the immediate correction of incorrect or incomplete personal data stored by us. 

The right, in accordance with Art. 17 GDPR, to demand the deletion of your personal data stored with us as far as the processing is not necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims. 

The right to demand, in accordance with Art. 18 GDPR, the restriction of the processing of your personal data as far as the accuracy of the data is disputed by you, the processing is unlawful but you refuse to have it deleted and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or you have filed an objection to the processing in accordance with Art. 21 GDPR 

The right, in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another responsible party. 

The right to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you may contact the supervisory authority of the federal state in which our registered office is located or, if applicable, that of your usual place of residence or workplace. 

The right to revoke any consent granted pursuant to Art. 7 Para. 3 GDPR: you have the right to revoke any consent to the processing of data once granted at any time with effect for the future. In the event of revocation, we will immediately delete the data concerned, unless further processing cannot be based on a legal basis for processing without consent. Revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation. 

 

Right of objection 

As far as your personal data is processed by us on the basis of legitimate interests according to Art. 6 Para. 1 sentence 1 letter f GDPR, you have the right to object to the processing of your personal data according to Art. 21 GDPR, as far as this is done for reasons arising from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct advertising, you have a general right of objection without the need to indicate a special situation. 

If you wish to exercise your right of withdrawal or objection, simply send an email toinfo@aif.capital.

 

Competent supervisory authority 

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg 

Königstraße 10a, 70173 Stuttgart
07 11/61 55 41-0
poststelle@lfdi.bwl.de
Postfach 10 29 32
70025 Stuttgart 

Right of modification 

We reserve the right to adapt or update this Data Protection Declaration if required and in accordance with the applicable data protection regulations. In this way, we can adapt it to current legal requirements and take into account changes in our services, e.g. when introducing new services. The most recent version applies to your visit. 

 

Status of this Data Protection Declaration: 31 August 2020