Afinum – Privacy Notice

Updated: 16. January 2023

Afinum Man­age­ment GmbH (here­inafter re­ferred to as “Afinum”, “we” or “us”), The­atin­er­str. 7, D-80333 Mu­nich, Ger­many, tel: +49 89 255433-01, fax: +49 89 255433-99, email: info@​afinum.​de, takes the pro­tec­tion of your data very se­ri­ously. Per­sonal data means any in­for­ma­tion re­lat­ing to an iden­ti­fied or iden­ti­fi­able nat­ural per­son such as a name or an email ad­dress. As the re­spon­si­ble data con­troller, we will only process this data in line with ap­plic­a­ble law, in par­tic­u­lar the Gen­eral Data Pro­tec­tion Reg­u­la­tion (GDPR) and the Fed­eral Data Pro­tec­tion Act (Bun­des­daten­schutzge­setz – BDSG).

This pri­vacy no­tice ap­plies to our pro­cess­ing of your per­sonal data in busi­ness com­mu­ni­ca­tion and when you visit our web­site.

1. Pur­poses of the pro­cess­ing
We process your per­sonal data for the fol­low­ing pur­poses:

1.1 Ac­cess to our web­site
Your browser au­to­mat­i­cally trans­mits cer­tain data each time you visit our web­site, for ex­am­ple your IP ad­dress and in­for­ma­tion about your browser. We process your per­sonal data in or­der to make our web­site avail­able to you (Art. 6 (1) f GDPR. We also store this in­for­ma­tion in log files for seven days to de­tect any dis­rup­tions and for se­cu­rity rea­sons, for ex­am­ple to de­tect any at­tacks (Art. 6 (1) f GDPR).

1.2 Newslet­ter
This web­site uses MailChimp to send out newslet­ters, a ser­vice pro­vided by Rocket Sci­ence Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, At­lanta, GA 30308, USA. MailChimp has self-cer­ti­fied its ad­her­ence to the EU-US Pri­vacy Shield prin­ci­ples. This “Pri­vacy Shield” is an agree­ment be­tween the Eu­ro­pean Union (EU) and the USA to en­sure com­pli­ance with Eu­ro­pean data pro­tec­tion stan­dards.

We are able to analyse our newslet­ter cam­paigns us­ing MailChimp. If and when you open an email sent via MailChimp, a file con­tained in the email (web bea­con) con­nects to MailChimp’s servers in the USA. This makes it pos­si­ble to tell whether a newslet­ter mes­sage has been opened and which links have been clicked. Tech­ni­cal data is also col­lected (e.g. time of page view, IP ad­dress, browser type and op­er­at­ing sys­tem). These data can­not be as­signed to the re­spec­tive newslet­ter re­cip­i­ent. They are only used for the sta­tis­ti­cal analy­sis of newslet­ter cam­paigns. The re­sults of this analy­sis may be used to tai­lor fu­ture newslet­ters to the in­ter­ests of the re­cip­i­ents.

If you do not wish an analy­sis by MailChimp you will have to un­sub­scribe to the newslet­ter which you can do us­ing the link in each newslet­ter mes­sage or di­rectly on our web­site.

This data pro­cess­ing is car­ried out on the ba­sis of your con­sent (Art. 6 (1) a GDPR), which you may with­draw at any time by un­sub­scrib­ing to the newslet­ter as de­scribed above. Such a with­drawal will not af­fect the law­ful­ness of data pro­cess­ing op­er­a­tions car­ried out in the past. For fur­ther de­tails please re­fer to MailChimp’s pri­vacy no­tice at: https://​mailchimp.​com/​legal/​terms/.​

1.3 Con­tact query and job ap­pli­ca­tions
If you con­tact us by tele­phone, email or by us­ing our con­tact form, we will process your data in or­der to an­swer your re­quest (Art. 6 (1) f GDPR). If we have on­go­ing busi­ness re­la­tions with you we will process your data in or­der to carry out these busi­ness re­la­tions (Art. 6 (1) b GDPR). If you send us job ap­pli­ca­tion doc­u­ments we will process these in or­der to carry out the se­lec­tion process (Art. 6 (1) b GDPR in con­nec­tion with sec­tion 26 (1) BDSG).

1.4 Fur­ther pro­cess­ing
We also process your data to safe­guard and de­fend our rights (Art. 6 (1) f GDPR) or be­cause we are re­quired to do so by law (Art. 6 (1) c GDPR).

2 Cook­ies
We use cook­ies on our web­sites to make our of­fer more user-friendly, ef­fec­tive and safe. Cook­ies are small text files which are de­posited on your com­puter and stored by your browser.

The only cook­ies we use are tech­ni­cally es­sen­tial ses­sion cook­ies, which are au­to­mat­i­cally deleted af­ter the end of your visit to our web­site. You can con­trol cook­ies via your browser set­tings. You may, for in­stance, choose to be no­ti­fied about the stor­ing of cook­ies and to only al­low cook­ies in spe­cific sit­u­a­tions, as well as gen­er­ally or in a spe­cific sit­u­a­tion ex­clude the use of cook­ies and au­to­mat­i­cally delete them with each clo­sure of your browser. Please note that the de­ac­ti­va­tion of cook­ies may im­pair the func­tion­al­ity of this web­site.

3. Se­cu­rity
Afinum en­deav­ours to take all the tech­ni­cal and or­gan­i­sa­tional se­cu­rity mea­sures to safe­guard your data from un­in­ten­tional or un­law­ful dele­tion, al­ter­ation, unau­tho­rised use or trans­fer.

Our em­ploy­ees are obliged to ob­serve con­fi­den­tial­ity and data pro­tec­tion.

4. Era­sure of data and re­ten­tion
We will only store the per­sonal data we re­ceive for the pe­riod of time re­quired for the spec­i­fied pur­pose or pre­scribed by law. Once the data is no longer nec­es­sary for the pur­pose orig­i­nally processed for or if a stor­age pe­riod ex­pires, the data will be deleted.

In de­tail, the fol­low­ing ap­plies:

Per­sonal data in log files are deleted at the lat­est af­ter seven days.
We delete your ap­pli­ca­tion data at the lat­est six months af­ter the po­si­tion has been filled.
We delete other data re­lat­ing to your con­tact queries at the lat­est af­ter one year.
The dele­tion of cook­ies of ser­vice providers is based on their own data pro­tec­tion guide­lines.

5. Your rights
You may re­voke your con­sent at any time free of charge with ef­fect for the fu­ture. All you need to do is to send a com­mu­ni­ca­tion in text form to one of the ad­dresses listed in this no­tice.

The same ap­plies to your ob­jec­tion – which may be made at any time – to us us­ing your per­sonal data if the le­gal ba­sis for this pro­cess­ing is Art. 6 (1) f GDPR.

You may at any time re­quest in­for­ma­tion about the per­sonal data re­lat­ing to you which we process, its rec­ti­fi­ca­tion or era­sure or the re­stric­tion of our pro­cess­ing. You also have a statu­tory right to data porta­bil­ity.

Fi­nally, you may also file a com­plaint about our data pro­cess­ing ac­tiv­i­ties with the re­spon­si­ble su­per­vi­sory data pro­tec­tion au­thor­ity if in your opin­ion our pro­cess­ing ac­tiv­i­ties do not com­ply with data pro­tec­tion laws.

6. In­ter­na­tional data trans­fer and cat­e­gories of re­cip­i­ents
Un­less oth­er­wise stated in this pri­vacy no­tice, we and our ser­vice providers process per­sonal data within the Eu­ro­pean Union. In ad­di­tion to those al­ready men­tioned in this no­tice, re­cip­i­ents to whom we may dis­close your data in­clude host­ing providers and postal ser­vice providers.

7. Data pro­tec­tion of­fi­cer
If you have any ques­tion re­gard­ing the pro­cess­ing of your per­sonal data, please con­tact our data pro­tec­tion of­fi­cer:

PROLIANCE GmbH

www.datenschutzexperte.de

Leopoldstr. 21

80802 München

datenschutzbeauftragter@datenschutzexperte.de

When contacting the Data Protection Officer, please state the company to which your enquiry relates.

Please refrain from enclosing sensitive information such as a copy of an identity card with your request.