Principles of data processing at Equity Holding
Consulting and Holding Company mbH & Co KG
Informing our customers about data protection and how we handle this data is the basis of our trustful cooperation.
In order to fulfill our information obligations according to Art. 12 et seq. of the General Data Protection Regulation (DSGVO), we are pleased to present the details of data processing below:
Who is responsible for data processing?
The responsible party in terms of data protection law is
Equity Holding
Consulting and investment company mbH & Co KG
Egerländer Str. 37
65779 Kelkheim
You can find further information about our company, details of the persons authorized to represent us and also further contact options in the imprint of our website: https://equity-holding.de/.
Which of your data do we process? And for what purposes?
If we have received data from you, we will only process it for the purposes for which we received or collected it.
Data processing for other purposes will only be considered if the legal requirements necessary in this respect pursuant to Art. 6 (4) DSGVO exist. We will of course comply with any information obligations pursuant to Art. 13 (3) DSGVO and Art. 14 (4) DSGVO in that case.
On what legal basis is this based?
The legal basis for the processing of personal data is basically – unless there are other specific legal provisions – Art. 6 DSGVO. In particular, the following possibilities come into consideration here:
– Consent (Art. 6 para. 1 lit. a) DSGVO).
– Data processing for the fulfillment of contracts (Art. 6 (1) (b) DSGVO)
– Data processing on the basis of a balancing of interests (Art. 6 para. 1 lit. f) DSGVO)
– Data processing for the fulfillment of a legal obligation (Art. 6 para. 1 lit. c) DSGVO)
If personal data is processed on the basis of your consent, you have the right to revoke your consent to us at any time with effect for the future.
If we process data on the basis of a balance of interests, you as the data subject have the right to object to the processing of personal data, taking into account the requirements of Art. 21 DSGVO.
How long is the data stored?
We process the data as long as this is necessary for the respective purpose.
Insofar as statutory retention obligations exist – e.g. in commercial law or tax law – the personal data in question will be stored for the duration of the retention obligation. After expiry of the retention obligation, it is checked whether there is a further necessity for processing. If there is no longer a necessity, the data is deleted.
As a matter of principle, we carry out an examination of data towards the end of a calendar year with regard to the need for further processing. Due to the volume of data, this check is carried out with regard to specific types of data or purposes of processing.
Of course, you can request information about the data we have stored about you at any time (see below) and, if there is no need for further processing, you can request deletion of the data or restriction of processing.
To which recipients is the data passed on?
Your personal data will only be passed on to third parties if this is necessary for the performance of the contract with you, the transfer is permissible on the basis of a balancing of interests within the meaning of Art. 6 (1) f) DSGVO, we are legally obliged to pass on the data or you have given your consent to do so.
Where is the data processed?
Your data will only be processed within the European Union and states within the European Economic Area (EEA).
What rights do you have as a “data subject”?
You have the right to information about the personal data we process about you.
In the case of a request for information that is not made in writing, we ask for your understanding that we may then require evidence from you that proves that you are the person you claim to be.
Furthermore, you have a right to rectification or deletion or to restriction of processing, insofar as you are entitled to this by law.
Furthermore, you have a right to object to processing within the scope of the law. The same applies to a right to data portability.
In particular, you have a right to object to the processing of your data in connection with direct marketing, pursuant to Article 21 (1) and (2) DSGVO, if this is carried out on the basis of a balancing of interests.
Collection of general information when visiting our website
Nature and purpose of processing
When you access our website, i.e., when you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like.
In particular, they are processed for the following purposes:
Ensuring a smooth connection setup of the website,
Ensuring a smooth use of our website,
evaluating system security and stability, and
for other administrative purposes.
We do not use your data to draw conclusions about your person. Information of this kind is statistically evaluated by us, if necessary, in order to optimize our Internet presence and the technology behind it.
Legal basis
The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website.
Recipients
Recipients of the data may be technical service providers who act as order processors for the operation and maintenance of our website.
Storage period
The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for data used to provide the website when the respective session has ended.
Provision prescribed or required
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services and services may not be available or may be limited. For this reason, an objection is excluded.
Use of Google Web Fonts
Nature and purpose of processing
In order to display our content correctly and graphically appealing across browsers, we use “Google Web Fonts” of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”) on this website to display fonts.
The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/.
Legal basis
The legal basis for the integration of Google Webfonts and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).
Recipient
Calling up script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible – although it is currently also unclear whether and, if so, for what purposes – that the operator collects Google data in this case.
Storage period
We do not collect any personal data through the integration of Google Web Fonts.
Third country transfer
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Provision mandatory or required
The provision of personal data is neither required by law, nor by contract. However, the correct display of the contents of standard fonts cannot be made possible without it.
Revocation of consent
The JavaScript programming language is regularly used to display the content. You can therefore object to the data processing by deactivating the execution of JavaScript in your browser or by installing a JavaScript blocker. Please note that this may result in functional restrictions on the website.
SSL encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.
Right of complaint
You have the right to complain about the processing of personal data by us to one of the supervisory authorities for data protection in the respective federal state.
Status: 01.09.2018