Data protection has a particularly high priority for us, IKAV Capital Partners GmbH (hereinafter referred to as “IKAV” or “we”). Therefore, we operate our website in accordance with the applicable legal regulations regarding the protection of personal data and data security, in particular the provisions of the General Data Protection Regulation (EU) 2016/679 (GDPR), the German Federal Data Protection Act (BDSG), the Telemedia Act (TMG) and the Telecommunications-Telemedia Data Protection Act (TTDSG).
In this context, we would like to inform you about which data we collect, process and use during the use of our website, for which purpose and the legal basis on which this is carried out in each case and with whom we may share it.
1. Scope and data controller
Data controller within the meaning of the GDPR, other national data protection laws and other data protection provisions is:
IKAV Capital Partners GmbH
Regional court of Hamburg, certificate of registration (HRB) 132563
Phone: +49 (0) 40 / 228 68 68 20
2. Legal basis for processing
We process your personal data only to the extent necessary for the provision of our offering. In addition, we only process personal data if you provide us with this data, for example in the context of a registration, by filling out forms, subscribing to our newsletter, sending e-mails and inquiries or through other services. We will only use the personal data which you have provided for the purposes of contract fulfilment and processing your requests. Legal ground for this is Art. 6 (1)(b) GDPR.
The processing and use of your personal data for other purposes, such as consulting, advertising and market research, only occurs if you have previously consented to the corresponding use or if we are required or entitled to process the data because of a statutory provision. If a corresponding consent was requested, the processing of your data is based on Art. 6 (1)(a) GDPR or Section 25 (1) TTDSG, insofar as the consent includes access to information on your terminal device within the meaning of the TTDSG.
3. Collection of general data and information
If you use our website for purely informational purposes (i.e. without actively providing us with data of your own accord, e.g. by making inquiries by e-mail or using contact forms or other data transmissions), we will only collect the data that is technically required to enable you to use our website and to ensure the stability and security of the IT systems we use. The legal basis for this is Article 6(1)(f) GDPR. This general data and information are stored in the server’s log files. The following data are processed:
- the browser types and versions used
- the operating system used by the accessing system
- the website from which an accessing system accesses our website (so-called referrer)
- the sub-websites that use an accessing system on our website can be controlled
- the date and time of access to the website
- an internet protocol address (IP address)
- the internet service provider of the accessing
This data is analysed for statistical purposes only. No personal evaluation takes place. Rather, this information is technically required to deliver the content of our website correctly, to ensure the long-term functionality of our information technology systems and the technology of our website and to provide law enforcement authorities with the information necessary for law enforcement in the event of a cyber-attack.
The data stored in the server’s log files are stored separately from all personal data provided by a data subject.
We use Google Analytics on our website. This is a web analytics service provided by Google Inc.,
1600 Amphitheatre Parkway, Mountain View,
Through certification according to the EU-US Privacy Shield
Google guarantees that it will follow the EU’s data protection regulations when processing data in the United States.
The Google Analytics service is used to analyze how our website is used. The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our site.
Usage and user-related information, such as IP address, place, time, or frequency of your visits to our website will be transmitted to a Google server in the United States and stored there. However, we use Google Analytics with the so-called anonymization function, whereby Google truncates the IP address within the EU or the EEA before it is transmitted to the US.
The data collected in this way is in turn used by Google to provide us with an evaluation of visits to our website and what visitors do once there. This data can also be used to provide other services related to the use of our website and of the internet in general.
Google states that it will not connect your IP address to other data. In addition, Google provides further information with regard to its data protection practices at https://www.google.com/intl/de/policies/privacy/partners, including options you can exercise to prevent such use of your data.
4. Data security
We take appropriate technical and organizational measures to ensure that the data collected in connection with the use of the services provided by us is protected against loss, incorrect modification or unauthorized access by third parties. Our security measures are continuously revised in line with technological developments and adapted accordingly.
For security reasons and to protect the transmission of confidential content, such as data that you send to us as site operator, our website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
In order to optimize the functionality and usability of the website, we use so-called cookies. Cookies do not harm your computer and do not contain any viruses. Cookies help make our website more user-friendly, efficient, and secure. Cookies are small text files that are stored on your computer and saved by your browser.
The cookies we use are both session cookies and persistent cookies. Session cookies are automatically deleted when you end your session and close your browser. Persistent cookies are stored beyond the duration of your session until their storage time expires or until they are deleted. Most of the cookies used on our website are set by us (so-called “first-party cookies”). However, we also work with third-party providers (e.g. for analysis and marketing purposes) who also set cookies when you use the website (so-called “third-party cookies”).
behaviour for the display of personalized content (so-called “marketing cookies”). These cookies are not technically necessary for the provision of the services, content and functionalities offered via the website, but help us to offer you a more pleasant and attractive user experience.
You can prevent the setting of cookies by our website at any time by means of a corresponding setting of your internet browser and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time using an Internet browser or other software programs. If you deactivate the setting of cookies in your internet browser, you may not be able to use all functions of our website to their full extent.
6. Data protection for job applicants
You have the option to send us a job application via our website. When you send us an application, we collect your associated personal data (your name, your email address, the message you would like to send us as well as your CV) and process the data to the extent necessary to decide on the establishment of an employment contract. The legal basis for this is Sec. 26 BDSG, Art. 6 (1)(b) GDPR. Your personal data will be processed within our company exclusively by people who are involved in the processing of your application (these are the employees of the personnel department and the decision-makers of the respective departments).
If the application is successful, the data submitted by you will be processed based on Art. 6 (1)(b) GDPR in conjunction with Sec. 26 BDSG for the purpose of implementing the employment contract stored in our data processing systems in compliance with the statutory provisions.
If we are unable to offer you an employment relationship, if you reject an offer of employment or withdraw your application, we reserve the right to retain the data you have provided for up to 2 (two) months from the termination of the application process (rejection or withdrawal of the application). Thereafter, the data will be deleted. Retention serves in particular for purposes of proof in the event of a legal dispute. If it is apparent that the data will be required after the 2-month period has expired (e.g. due to an impending or pending legal dispute), the data will not be deleted until the purpose for continued storage no longer applies.
7. Contact via the website
You can contact us via the contact form provided on our website. The data you will have to provide us with are your name, your email address and the message with your contact request. This personal data is processed for the purpose of responding and handling your contact request. Legal ground for this is Art. 6 (1)(b) GDPR. This personal data is not passed on to third parties.
8. Your rights
Insofar as we process personal data from you, you have the following rights pursuant to GDPR:
8.1 Right of access
You can request confirmation from us as to whether we process personal data related to you. If this is the case, you can request information from us about the following:
- The purposes for which the personal data is processed;
- The categories of personal data which are processed;
- The recipients or categories of recipients to whom your personal data has been disclosed or will be disclosed;
- The planned duration of the storage of your personal data or, if this specific information is not available, the criteria for determining the storage duration;
- The existence of a right to correction or deletion of personal data relating to you, the right to limitation of processing by the responsible body or the right to refuse this processing;
- The existence of a right of complaint to a supervisory authority;
- All available information about the origin of the data if personal information is not provided by yourself but rather by third parties;
- The existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4)
You have the right to demand information as to whether or not your personal data is transferred to a third country or an internationalorganization. In this context, you have the right to request the appropriate guarantees in accordance with Article 46 GDPR with regard to the transmission.
8.3 Right to rectification
You have the right to request correction/completion within undue delay if your personal data processed by us is incorrect or incomplete.
8.4 Right to restriction of processing
Under the following conditions, you are entitled to request a restriction of the processing of your personal data:
- if you contest the correctness of your personal data for a period of time that allows us to verify the correctness;
- the processing is unlawful and you reject the deletion of your personal data and, instead, demand the restriction of the use of the personal data;
- we no longer require your personal data for the purposes of the processing, yet you still require this data in order to assert, exercise or defend against legal claims, or
- if you have submitted an objection to the processing in accordance with Article 21(1) GDPR and it has not yet been decided whether our legitimate reasons as the body responsible outweigh your reasons as the affected
If the processing of your personal data has been restricted, this data – with the exception of its storage
- may only be processed with your consent or for the assertion, exercise or defence of legal claims, or
to protect the rights of another natural or legal person or for reasons of substantial public interests of the Union or a Member State can be processed.
If the restriction of processing itself has been restricted as a consequence of the above-mentioned requirements, we will inform you before the restriction is lifted.
8.5 Right to erasure
Obligation to erasure
You are entitlted to request that we delete your personal data without undue delay if one of the following reasons apply:
- Your personal data is no longer necessary for the purposes for which it was collected or processed otherwise.
- If the processing was based on Article 6 (1)(a) GDPR or Art. 25 (1) TTDSG, and you withdraw your consent and there is no further legal basis for the Processing.
- You object to the processing in accordance with Article 21 (1) GDPR and there are no superseding, legitimate reasons for the processing, or you object to the use of your personal data for advertising purposes in accordance with Article 21 (2) GPDR.
- Your personal data has been processed unlawfully.
- The deletion of your personal data is required to fulfil a legal obligation.
The right of deletion does not apply to the extent that processing is necessary:
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation or performance of a task carried out in the public interest
- for the establishment, exercise or defence of legal claims.
8.6 Right to file a complaint with a supervisory authority
Regardless of other legal remedies you have the right to file a complaint with the responsible supervisory authority if you are of the opinion that processing of your personal data violates GDPR provisions.
Update: August 2022