DATA PROTECTION DECLARATION
1. Data Protection at a Glance
Scope of this Privacy Policy
This Privacy Policy applies to our website at https://s-ubg.de, including the German-language version available at https://s-ubg.de/de and the English-language version available at https://s-ubg.de/en. The controller responsible for this website is S-UBG AG.
General Information
The following information provides a brief overview of what happens to your personal data when you visit our website. Personal data means any information that can be used to identify you personally.
For detailed information on how we process your personal data, please refer to the full Privacy Policy set out below.
Data Collection on this Website
Who is responsible for data collection on this website?
The controller responsible for processing personal data on this website is the website operator. You can find the controller’s contact details in the section entitled “Information on the Controller” in this Privacy Policy.
How do we collect your data?
Some data is collected when you provide it to us directly. This may include, for example, information you enter into our contact form or information you provide to us together with documents relating to your company.
Other data is collected automatically by our IT systems when you visit the website, or following your consent where required. This primarily includes technical information such as your internet browser, operating system, or the time at which you accessed a particular page. This data is collected automatically as soon as you access our website.
What do we use your data for?
Some of the data is collected to ensure that our website functions properly and is provided without errors. Other data is processed in order to respond to your inquiries and communicate with you.
What rights do you have in relation to your personal data?
You have the right at any time to obtain, free of charge, information about the origin, recipients, and purposes of your stored personal data.
You also have the right to request the rectification or erasure of your personal data. Where you have given your consent to the processing of your data, you may withdraw that consent at any time with effect for the future.
Under certain circumstances, you also have the right to request the restriction of the processing of your personal data.
Furthermore, you have the right to lodge a complaint with the competent data protection supervisory authority.
If you have any questions about these rights or any other matter relating to data protection, you may contact us at any time.
2. Hosting
We host the content of our website with the following provider:
ALL-INKL.COM – Neue Medien Münnich
The provider is ALL-INKL.COM – Neue Medien Münnich, owned by René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany (hereinafter referred to as “ALL-INKL”).
When you visit our website, ALL-INKL collects various log files, including your IP address.
For further information, please refer to the Privacy Policy of ALL-INKL.
The use of ALL-INKL is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring that our website is provided and displayed as reliably as possible.
Where consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications and Telemedia Data Protection Act (TDDDG), insofar as the consent covers the storage of cookies or access to information stored on the user’s terminal device, such as for device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.
Data Processing Agreement
We have entered into a data processing agreement (DPA) with the provider for the use of the service described above.
This is a data protection agreement required under applicable law and ensures that the provider processes the personal data of our website visitors only on our documented instructions and in compliance with the GDPR.
External Hosting
This website is hosted by an external service provider. Personal data collected through this website is stored on the servers of the hosting provider.
This may include, in particular, IP addresses, contact inquiries, metadata and communication data, contractual data, contact details, names, information about website access, and other data generated through the use of a website.
External hosting is provided for the purpose of fulfilling our contractual obligations towards our potential and existing customers (Article 6(1)(b) GDPR) and on the basis of our legitimate interest in ensuring the secure, fast, and efficient provision of our online services through a professional service provider (Article 6(1)(f) GDPR).
Where consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information stored on the user’s terminal device, such as for device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.
Our hosting provider will process your personal data only to the extent necessary to fulfill its contractual service obligations and will process such data in accordance with our instructions.
3. General Information and Mandatory Disclosures
Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection laws and this Privacy Policy.
When you use this website, various types of personal data may be collected. Personal data means any information relating to an identified or identifiable individual. This Privacy Policy explains what data we collect, how we collect it, and for what purposes we use it.
Please note that data transmission over the internet, for example when communicating by email, may be subject to security vulnerabilities. Complete protection of data against access by third parties cannot be guaranteed.
Information on the Controller
The controller responsible for processing personal data on this website is:
S-UBG AG
Markt 45–47
52062 Aachen
Germany
Phone: +49 (0)241 / 47056–0
Email: info@s-ubg.de
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names, email addresses, and similar information.
Data Retention
Unless a more specific retention period is stated in this Privacy Policy, your personal data will be retained for as long as the purpose for which it was collected continues to apply.
If you submit a legitimate request for erasure or withdraw your consent to data processing, your personal data will be deleted unless we have other legally permissible grounds for retaining it, such as statutory retention obligations under tax or commercial law. In such cases, the data will be deleted once those grounds no longer apply.
General Information on the Legal Bases for Data Processing on this Website
Where you have given your consent to the processing of your personal data, we process your data on the basis of Article 6(1)(a) GDPR or, where special categories of personal data within the meaning of Article 9(1) GDPR are processed, on the basis of Article 9(2)(a) GDPR.
Where you have expressly consented to the transfer of personal data to third countries, the processing is additionally based on Article 49(1)(a) GDPR.
Where you have consented to the storage of cookies or to access to information stored on your terminal device, for example through device fingerprinting, the processing is additionally based on Section 25(1) of the German Telecommunications and Telemedia Data Protection Act (TDDDG), insofar as applicable. You may withdraw your consent at any time.
Where the processing of your personal data is necessary for the performance of a contract or for taking steps prior to entering into a contract, we process your data on the basis of Article 6(1)(b) GDPR.
Where processing is necessary for compliance with a legal obligation to which we are subject, the processing is based on Article 6(1)(c) GDPR.
Processing may also be carried out on the basis of our legitimate interests pursuant to Article 6(1)(f) GDPR.
The specific legal basis applicable in each individual case is set out in the relevant sections of this Privacy Policy.
Data Protection Officer
We have appointed a Data Protection Officer:
Sabine Thomas
Ing.-Büro Dr. Plesnik GmbH
Kaiserstraße 100
52134 Herzogenrath
Germany
Phone: +49 (0)241 149460
Email: datenschutz@plesnik.de
Information on Data Transfers to Third Countries with Inadequate Data Protection and Transfers to US Companies Not Certified under the DPF
We use, among other things, tools provided by companies based in third countries that do not provide a level of data protection deemed adequate under applicable data protection law, as well as tools provided by US companies whose providers are not certified under the EU–US Data Privacy Framework (DPF).
When these tools are active, your personal data may be transferred to and processed in these countries.
Please note that third countries that do not provide an adequate level of data protection comparable to that of the European Union may not guarantee a level of data protection equivalent to that within the EU.
The United States is generally recognized as providing an adequate level of data protection where the requirements for an applicable adequacy mechanism are met. Accordingly, transfers of personal data to the United States are permissible where the recipient is certified under the EU–US Data Privacy Framework (DPF) or where appropriate additional safeguards are in place.
Information on transfers to third countries, including the relevant recipients, is provided in the respective sections of this Privacy Policy.
Recipients of Personal Data
As part of our business activities, we work with various external parties. In certain cases, this requires us to disclose personal data to these external parties.
We disclose personal data to external parties only where this is necessary for the performance of a contract, where we are legally required to do so (for example, disclosure of data to tax authorities), where we have a legitimate interest in the disclosure pursuant to Article 6(1)(f) GDPR, or where another legal basis permits such disclosure.
Where we engage processors, we disclose our customers’ personal data only on the basis of a valid data processing agreement in accordance with applicable data protection law.
Where processing is carried out jointly with another controller, we enter into an appropriate joint controllership agreement.
Withdrawal of Consent to Data Processing
Many data processing operations are only permitted with your express consent. You may withdraw consent that you have already given at any time.
The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of your consent prior to its withdrawal.
Right to Object to Data Processing in Specific Cases and to Direct Marketing (Article 21 GDPR)
Where the processing of your personal data is based on Article 6(1)(e) or (f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation. This also applies to profiling based on these provisions.
The relevant legal basis for each processing activity can be found in this Privacy Policy.
If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims (right to object pursuant to Article 21(1) GDPR).
Where your personal data is processed for the purpose of direct marketing, you have the right to object to the processing of your personal data for such marketing at any time. This also applies to profiling to the extent that it is related to such direct marketing.
If you object, your personal data will subsequently no longer be used for the purposes of direct marketing (right to object pursuant to Article 21(2) GDPR).
Right to Lodge a Complaint with a Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of their habitual residence, place of work, or the place where the alleged infringement occurred.
This right is without prejudice to any other administrative or judicial remedies available to you.
Right to Data Portability
You have the right to receive personal data that we process automatically on the basis of your consent or in performance of a contract in a structured, commonly used, and machine-readable format, or to request that such data be transmitted to another controller.
Where you request the direct transfer of your personal data to another controller, this will only be carried out where technically feasible.
Right of Access, Erasure, and Rectification
Within the scope of applicable law, you have the right at any time to obtain, free of charge, information about your stored personal data, including its origin, recipients, and the purposes for which it is processed.
You may also have the right to request the rectification or erasure of your personal data.
If you have any questions about this or any other matter relating to your personal data, you may contact us at any time.
Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data. You may contact us at any time to exercise this right.
The right to restriction of processing applies in the following circumstances:
-
If you dispute the accuracy of your personal data: Where you dispute the accuracy of personal data we hold about you, we generally need time to verify its accuracy. During the verification period, you have the right to request restriction of the processing of your personal data.
-
If the processing is unlawful: Where the processing of your personal data is or was unlawful, you may request restriction of processing instead of erasure.
-
If we no longer require your personal data: Where we no longer need your personal data, but you require it for the establishment, exercise, or defence of legal claims, you have the right to request restriction of processing instead of erasure.
-
If you have objected to processing: Where you have objected to processing pursuant to Article 21(1) GDPR, a balancing of your interests against ours must be carried out. Until it has been determined whose interests prevail, you have the right to request restriction of the processing of your personal data.
Where the processing of your personal data has been restricted, such data may, apart from being stored, only be processed with your consent, for the establishment, exercise, or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content, such as inquiries that you send to us as the website operator, this website uses SSL/TLS encryption.
You can recognize an encrypted connection by the change in the browser’s address bar from “http://” to “https://” and by the padlock icon displayed in your browser.
When SSL/TLS encryption is enabled, the data you transmit to us cannot be read by third parties.
Objection to Promotional Emails
We hereby object to the use of contact details published as part of our legal notice requirements for the purpose of sending unsolicited advertising or informational materials.
The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of promotional information, including spam emails.
4. Data Collection on this Website
Cookies
Our websites use so-called “cookies”. Cookies are small data files that do not cause any damage to your device. They are either stored temporarily for the duration of a session (“session cookies”) or permanently on your device (“persistent cookies”). Session cookies are automatically deleted when you leave our website. Persistent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.
Cookies may be set by us (“first-party cookies”) or by third-party providers (“third-party cookies”). Third-party cookies enable certain services provided by third parties to be integrated into our websites.
Cookies serve various functions. Many cookies are technically necessary because certain website functions would not work without them, such as language selection. Other cookies may be used to analyze user behavior or for advertising purposes.
Cookies that are necessary for carrying out electronic communications, providing specific functions requested by you, or optimizing the website (“necessary cookies”) are stored on the basis of Article 6(1)(f) GDPR, unless another legal basis is specified.
The website operator has a legitimate interest in storing necessary cookies in order to provide its services in a technically reliable and optimized manner.
Where consent to the storage of cookies or the use of comparable technologies for recognizing users has been requested, processing is carried out exclusively on the basis of that consent pursuant to Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications and Telemedia Data Protection Act (TDDDG). You may withdraw your consent at any time.
You can configure your browser to notify you when cookies are being set, to allow cookies only on a case-by-case basis, to reject cookies in certain circumstances or generally, and to automatically delete cookies when you close your browser. Please note that disabling cookies may limit the functionality of this website.
We ourselves use only one technically necessary session cookie on this website, named wp-wpml_current_language. This cookie stores the language version selected by you and is automatically deleted when you end your visit.
When you access our contact pages, the Google reCAPTCHA service additionally sets a cookie named _GRECAPTCHA. Further information, including the applicable legal basis, can be found in the section “Google reCAPTCHA”.
Server Log Files
The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This information includes:
-
Browser type and browser version
-
Operating system used
-
Referrer URL
-
Hostname of the accessing device
-
Time of the server request
-
IP address
This data is not combined with data from other sources.
The collection of this data is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in ensuring the technically reliable presentation and optimization of its website. The collection of server log files is necessary for this purpose.
Contact Form
If you contact us using our contact form at https://s-ubg.de/eta and https://s-ubg.de/en/eta the information you provide in the form, including the contact details you enter, will be stored and processed by us for the purpose of handling your inquiry and in the event that we need to follow up with you.
The information requested includes your name, email address, location, and message. Providing your company name and telephone number is optional. We will not disclose this information to third parties without your consent, unless we are legally entitled or required to do so.
You may also voluntarily provide us with documents relating to your person via the form (file upload “CV”, up to five files of up to 20 MB each). We process these documents solely for the purpose of responding to your inquiry and assessing whether an investment or potential cooperation may be considered.
The processing of this data is based on Article 6(1)(b) GDPR where your inquiry relates to the performance of a contract or is necessary for taking steps prior to entering into a contract.
In all other cases, processing is based on our legitimate interest in effectively handling inquiries addressed to us pursuant to Article 6(1)(f) GDPR.
Providing documents is voluntary. To the extent that you provide us with additional personal data in connection with such documents, the processing is also based on your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future, for example by sending an email to info@tvf.vc.
The data you enter into the contact form and any documents you upload will remain with us until you request their deletion or the purpose for storing the data no longer applies, but no longer than six months after your inquiry has been fully processed.
A longer retention period may apply if you have consented to such retention, if we require the data for the establishment, exercise, or defence of legal claims, or if mandatory statutory retention obligations prevent us from deleting the data.
Inquiries by Email, Telephone, or Fax
If you contact us by email, telephone, or fax, your inquiry, including any personal data contained therein (such as your name and the details of your inquiry), will be stored and processed by us for the purpose of handling your request.
We will not disclose this information to third parties without your consent, unless we are legally entitled or required to do so.
The processing of this data is based on Article 6(1)(b) GDPR where your inquiry relates to the performance of a contract or is necessary for taking steps prior to entering into a contract.
In all other cases, processing is based on our legitimate interest in effectively handling inquiries addressed to us pursuant to Article 6(1)(f) GDPR or, where consent has been requested, on your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time.
The data you provide to us when contacting us will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies, for example once your inquiry has been fully processed.
Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.
5. Plugins and Tools
Google Fonts (Local Hosting)
This website uses so-called Google Fonts to ensure a consistent display of fonts. Google Fonts is a service provided by Google.
The Google Fonts used on this website are hosted locally on our own server. Under normal circumstances, accessing our website therefore does not establish a connection to Google’s servers.
On our contact pages, however, the Google reCAPTCHA service additionally loads a font from a Google server (fonts.gstatic.com).
Further information: Google Fonts – FAQ | Google Privacy Policy
Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on the contact pages of this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA is used to determine whether data is entered on this website, for example in a contact form, by a human being or by an automated program.
For this purpose, reCAPTCHA analyzes the behavior of website visitors based on various characteristics. The analysis may include information such as the IP address, the length of time a visitor spends on the website, and mouse movements performed by the user.
The information collected during the analysis is transmitted to Google. reCAPTCHA also stores a cookie on your device.
The reCAPTCHA analyses run entirely in the background and are not visible to the website visitor.
In this context, Google acts solely as a data processor within the meaning of Article 28 GDPR and will not use the data collected through reCAPTCHA for its own purposes. The use of the service is governed by a data processing agreement (DPA) with Google.
The storage and analysis of data is based on your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time.
Where consent is not requested, we rely on Article 6(1)(f) GDPR as the legal basis. In this case, we have a legitimate interest in protecting our online services against abusive automated access and spam.
Google is certified under the “EU–US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards when personal data is processed in the United States. Companies certified under the DPF undertake to comply with the applicable data protection standards.
Further information: DPF Certification of Google | Google Privacy Policy | Google Terms of Service
Links to Google Maps
On our contact page, we provide a link to our location on Google Maps. No map is embedded directly into our website. Consequently, no data is transmitted to Google Maps when you access our website.
Only when you click the link will you leave our website and the data protection provisions of Google will apply.
Further information: Google Privacy Policy
6. Our Social Media Presences
This Privacy Policy Applies to the Following Social Media Presences
We maintain the following social media profile:
LinkedIn: https://www.linkedin.com/company/techvision-fonds/
Data Processing by Social Networks
We maintain publicly accessible profiles on the social network LinkedIn.
Social networks are generally able to comprehensively analyze your user behavior when you visit their websites or websites that contain integrated social media content. Visiting our social media profiles may trigger a number of data processing activities relevant to data protection.
In particular:
If you are logged into your social media account and visit our social media profile, the operator of the social media platform may be able to associate your visit with your user account.
However, your personal data may also be collected if you are not logged in or do not have an account with the relevant social media platform. In such cases, data may be collected, for example, through cookies stored on your device or through the collection of your IP address.
The data collected in this way may be used by the operators of social media platforms to create user profiles containing information about your preferences and interests. This may enable interest-based advertising to be displayed to you both on and outside the respective social media platform.
If you have an account with the relevant social network, interest-based advertising may be displayed across all devices on which you are or have been logged into your account.
Please also note that we cannot fully track or control all data processing activities carried out by the operators of social media platforms. Depending on the provider, additional processing activities may therefore be carried out by the respective platform operator.
For further details, please refer to the terms of use and privacy policies of the respective social media platforms.
Legal Basis
Our social media profiles are intended to ensure a broad and comprehensive presence on the internet. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.
Any analytics and other processing activities initiated by the social media platforms may be based on different legal grounds, which must be specified by the respective platform operators, such as consent pursuant to Article 6(1)(a) GDPR.
Controller and Exercise of Your Rights
When you visit one of our social media profiles, we are jointly responsible with the operator of the respective social media platform for the data processing activities triggered by your visit.
You may generally exercise your data protection rights — including the rights of access, rectification, erasure, restriction of processing, and data portability, as well as your right to lodge a complaint — against either us or the operator of the respective social media platform.
Please note, however, that despite our joint responsibility with the operators of the social media platforms, we do not have comprehensive control over their data processing activities. Our ability to influence such processing is largely determined by the policies and practices of the respective provider.
Data Retention
Personal data collected directly by us through our social media profiles will be deleted from our systems as soon as you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies.
Cookies stored on your device will remain there until you delete them.
Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.
We have no influence over how long the operators of social networks retain data that they collect and store for their own purposes. For further information on data retention by the respective providers, please refer directly to their privacy policies.
Your Rights
You have the right at any time to obtain, free of charge, information about the origin, recipients, and purposes of your stored personal data.
You also have the right to object to processing, the right to data portability, and the right to lodge a complaint with the competent data protection supervisory authority.
In addition, you may request the rectification, blocking, or erasure of your personal data and, under certain circumstances, the restriction of its processing.
We maintain a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
LinkedIn uses advertising cookies. You can disable these cookies through your LinkedIn settings.
Transfers of personal data to the United States are based on the European Commission’s Standard Contractual Clauses. Further information about how LinkedIn handles your personal data can be found in LinkedIn’s Privacy Policy.
LinkedIn is certified under the “EU–US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards when personal data is processed in the United States. Companies certified under the DPF undertake to comply with the applicable data protection standards.
Further information:
How to disable LinkedIn advertising cookies
LinkedIn Data Processing Agreement |
Auftragsverarbeitung bei LinkedIn
7. Our Own Services
Handling of Applicant Data
We offer you the opportunity to apply for a position with us, either by email or by post. Below, we provide information about the scope, purpose, and use of the personal data collected from you as part of the application process.
We assure you that your personal data will be collected, processed, and used in accordance with applicable data protection laws and all other relevant statutory provisions and that your data will be treated as strictly confidential.
Scope and Purpose of Data Collection
When you submit an application to us, we process the personal data associated with your application, such as contact and communication details, application documents, notes taken during interviews, and similar information, insofar as this is necessary to decide whether to establish an employment relationship.
The legal basis for this processing is Section 26 of the German Federal Data Protection Act (BDSG) under German law, insofar as the processing is necessary in connection with the establishment of an employment relationship, Article 6(1)(b) GDPR with regard to general steps taken prior to entering into a contract, and, where you have given your consent, Article 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future.
Within our company, your personal data will only be disclosed to those individuals who are involved in processing your application.
If your application is successful, the data you have submitted will be stored in our data processing systems on the basis of Section 26 BDSG and Article 6(1)(b) GDPR for the purpose of establishing and administering the employment relationship.
Data Retention Period
If we are unable to offer you a position, you decline a job offer, or you withdraw your application, we reserve the right to retain the data you have provided for up to six months following the conclusion of the application process (rejection or withdrawal of the application), on the basis of our legitimate interests pursuant to Article 6(1)(f) GDPR.
After this period, the data will be deleted and any physical application documents will be destroyed.
The retention of the data serves, in particular, to provide evidence in the event of a legal dispute. If it is apparent that the data will be required beyond the six-month retention period, for example due to an impending or ongoing legal dispute, the data will only be deleted once the purpose for continued retention no longer applies.
Data may also be retained for a longer period if you have given your consent to such retention pursuant to Article 6(1)(a) GDPR or if statutory retention obligations prevent its deletion.