Privacy policy Afinum
Updated: 20. November 2024
Afinum Management GmbH (hereinafter ‘Afinum’, ‘we’ or ‘us’), Theatinerstr. 7, D-80333 Munich, Tel: +49 89 255433-01, Fax: +49 89 255433-99, E-Mail: [email protected], takes the protection of your personal data very seriously. Personal data is any information relating to an identified or identifiable natural person, such as your name or e-mail address. This data is only processed by us as the controller in accordance with applicable law, in particular the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
This data protection information applies to the processing of your personal data in connection with your visit to our website and business communication with us.
1. purposes of processing
We process your personal data for the following purposes:
1.1 Accessing the website
Each time you visit our website, certain information is automatically transmitted by your browser. This includes, for example, your IP address and information about your browser. We process your personal data to provide our website (legal basis: Art. 6 para. 1 lit. f GDPR). We also store this information in log files for seven days to investigate faults and for security reasons, for example to investigate attempted attacks (legal basis: Art. 6 para. 1 lit. f GDPR).
1.2 Newsletter
This website uses the services of MailChimp for sending newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. MailChimp is certified under the “EU-US Privacy Shield.” The “Privacy Shield” is an agreement between the European Union (EU) and the USA designed to ensure compliance with European data protection standards in the USA.
With the help of MailChimp, we can analyze the effectiveness of our newsletter campaigns. When you open an email sent via MailChimp, a file contained in the email (known as a web beacon) connects to MailChimp’s servers in the USA. This allows us to determine whether a newsletter message has been opened and which links, if any, were clicked. Additionally, technical information is collected (e.g., time of retrieval, IP address, browser type, and operating system). This information cannot be attributed to the specific newsletter recipient. It is used solely for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of the recipients.
If you do not wish to have your data analyzed by MailChimp, you need to unsubscribe from the newsletter. For this purpose, we provide an unsubscribe link in every newsletter message. Additionally, you can unsubscribe directly on the website.
Data processing is based on your consent (Art. 6(1)(a) GDPR). You can revoke this consent at any time by unsubscribing from the newsletter via the link provided in the newsletter itself. The legality of the data processing operations already carried out remains unaffected by the revocation.
For more details, please refer to MailChimp’s privacy policy at: https://mailchimp.com/legal/terms/.
1.3 Contact Inquiries and Applications
If you contact us via phone, email, or our contact form, we process your data to respond to your inquiry (legal basis: Art. 6(1)(f) GDPR). If we are in a business relationship with you, we also process your data to maintain this relationship (legal basis: Art. 6(1)(b) GDPR). If you send us your application documents, we process them to carry out the selection process (legal basis: Art. 6(1)(b) GDPR in conjunction with § 26(1) BDSG).
1.4 Other
Furthermore, we process your data to protect and defend our rights (legal basis: Art. 6(1)(f) GDPR) or because we are legally obligated to do so (legal basis: Art. 6(1)(c) GDPR).
2. Cookies
We use cookies on our website. Cookies are small text files stored on your computer by your browser. They help make our offering more user-friendly, efficient, and secure.
We use only technically necessary session cookies, which are automatically deleted after your visit. You can set your browser to notify you about the placement of cookies, allow cookies only in individual cases, block cookies for certain cases or in general, and enable automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
3. Security
Afinum strives to implement all technical and organizational security measures to prevent the accidental or unlawful deletion, alteration, unauthorized use, or disclosure of your data and to protect it.
Our employees are obligated to confidentiality and data protection.
4. Data Deletion and Retention Period
We only store the personal data transmitted to us for as long as it is needed for the agreed purpose or as long as required by law. Once the purpose is fulfilled or the prescribed retention period expires, the data will be deleted.
Specific retention periods:
- Personal data in log files is deleted after a maximum of seven days.
- Applicant data is deleted no later than six months after the position is filled.
- Other data related to your inquiries is deleted no later than six months afterward.
- The deletion of cookies from service providers depends on their privacy policies.
5. Your Rights
You can revoke any consent you have given us at any time free of charge with future effect. A notification in text form to one of the addresses listed in this document is sufficient.
The same applies to any objection you may make at any time to the use of your personal data by us when the legal basis is Art. 6(1)(f) GDPR.
You may request information at any time about the personal data we process about you, as well as its correction or deletion or a restriction on its processing. You also have a legal right to data portability.
Finally, you have the option to lodge a complaint with a supervisory authority regarding our data processing.
6. International Data Transfers and Categories of Recipients
Unless otherwise described in this privacy policy, we and our service providers process personal data within the European Union. In addition to those mentioned in this policy, recipients to whom we may transmit personal data include hosting providers and postal service providers.
7. Data Protection Officer
If you have any questions about the processing of your personal data, please contact our Data Protection Officer:
PROLIANCE GmbH
Leopoldstr. 21
80802 München
Please specify the company your inquiry pertains to when contacting the Data Protection Officer.
Kindly refrain from including sensitive information, such as a copy of your ID, in your inquiry.