DATA PROTECTION POLICY
We, Goodyields Capital GmbH, are pleased that you are visiting our website and are interested in our company. We know that careful handling of your personal data is important to you. We are, of course, committed to protecting your data in compliance with the statutory provisions for the protection of personal data.
In the following Data Protection Policy, we would like to inform you in particular about how we collect and process your personal data when you use our website as well as about your rights in this respect.
1. Controller
Controller within the meaning of Article 4(7) of the EU General Data Protection Regulation (GDPR) for the processing of your personal data in accordance with the statutory provisions on data protection is:
Goodyields Capital GmbH
Prinzregentenstrasse 66
81675 München
Germany
Email: info@goodyields.com
2. Data protection officer
If you have any questions regarding data protection or need additional information on data protection-related processes on our website, please feel free to contact our data protection officer:
Christian Auer
Prinzregentenstrasse 66
81675 München
Germany
Email: auer@goodyields.com
3. Information on the collection and processing of data
You can, in principle, visit our website without registration or logging in. Data is only collected and used to the extent governed by the following provisions. We only collect, store or use personal data to the extent that we have a lawful basis to do so or you have consented to such collection, storage and use. The provision of personal data or giving consent is, in principle, voluntary. If you do not give us your consent or provide us with personal data it will, in principle, have no negative effects for you.
“Personal data” means any information relating to an identified or identifiable natural person. These include, in particular, name, address, email address, gender, birthday, phone number, age and bank details.
We collect and process the following data on our website:
3.1. Standard log files when visiting our website (server log)
When you access our websites, the web server automatically collects and stores information. The automatically collected information specified below is collected and processed to ensure the operability and safety of our website.
This automatically collected data includes:
• Domain name or IP address
• Date and time of the server request
• File names and URL you have accessed
• Access status/http status code
• Referrer URL (i.e. the website you have previously accessed)
• Web browser
• Operating system and its interface as well as
• Browser software version and language.
The legal basis for the collection of the IP address is Article 6(1) sentence 1 lit. (f) GDPR. It is necessary to record the IP address in order to ensure the safety and stability of our internet services, e.g. in the event of hacker attacks.
This information is stored separately from the further data you might have transmitted to us, in particular with a view to processing your inquiries. The data specified above is not linked to such further data. The data cannot be traced back to your person or your individual behaviour.
3.2. Under what circumstances and based on what legal basis is further “personal data” collected and processed?
We collect and process further personal data only if this is permissible under the applicable statutory provisions regarding the protection of personal data or you have given us your consent to do so.
If we collect personal data based on your consent, you may withdraw consent at any time notifying the controller (see section 1. above) or the data protection officer (see section 2. above) without the withdrawal of consent affecting the lawfulness of processing based on consent before its withdrawal.
3.2.1. Processing of personal data after contacting us
We collect and store the information and personal data that you provide us with via email for the purpose of making contact or within the context of an inquiry or job application (e.g. email address, name etc.). In order to be able to respond to such inquiries in the first place and to adequately deal with such inquiries as requested and according to the purpose of your inquiry, we need to make use of the personal data provided to us in connection with the respective inquiry by collecting, processing and using such data.
The legal basis for processing your personal data which is provided to us via email and used to respond to and process your email is Article 6(1) sentence 1 lit. (f) GDPR.
3.3. Cookies
We use so-called cookies in some areas of our websites in order to be able to provide our services and website features to you as individually and comfortably as possible. Cookies are files that are generated by a web server when you use your browser to visit a website. Cookies are used to explicitly identify your computer for a certain period of time. You can set your browser so that it will inform you about the placement of cookies. This way, the use of cookies will become transparent for you.
Furthermore, our career website uses persistent cookies. Persistent cookies lead to a faster and more convenient access to websites by remembering certain settings and ensuring that these are set in advance when you visit the website again, e.g. by saving your previous selection of language. Persistent cookies are stored for a specified period of time and are only deleted automatically after the expiry of such time.
If you do not agree to the use of cookies by us, you can deactivate the storage of cookies in the settings of your browser for our site or in general. Information on this can be found in the help function of your browser. You also have the option of deleting stored cookies in the settings of your browser at any time.
3.4. Use of Google Analytics
We use Google Analytics, a web analysis service, to analyse the website activities of our visitors and web traffic to our website as well as to optimise our website. Using Google Analytics provides us with statistics the evaluation of which helps us improve our website and enhance its attractiveness to our visitors. Google Analytics is a service of Google LLC, 1600 Parkway, Mountain View, CA 94043, USA, and Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.
In order to be able to analyse the use of the website, Google Analytics stores cookies (cf. section 3.3) on your terminal device. As soon as you access our website, the information generated by these cookies is transferred to the servers of Google for the purpose of web analytics. In this context, it is also possible that personal data is transferred to the USA. The set of data generated by the cookies includes not only functional data but also personal data such as your IP address and identifiers generated by Google (e.g. user ID if you have a Google account).
In addition, we use the advertising features of Google Analytics to increase the awareness of our company in the market. These features allocate Google advertising cookies to our users, which are then used to show personalised ads and target ads to particular audiences in the Google Display Network. To this end, you will be allocated a so-called advertiser ID/Advertising ID by Google.
We use Google Analytics in the “anonymizeIP” mode. In this mode, your IP address is truncated prior to being processed ensuring that your terminal device is not identifiable and thus the data cannot be traced back to your person. Hence, a link between the data and an individual can only be established by the identifiers generated by Google itself (e.g. user ID, advertising ID).
Please note that Google analyses the data generated by the cookies on our behalf and merely provides us only with anonymous statistical data that is required for web analytics. At no time, we are able to identify your person on the basis of Google Analytics and the statistical information and advertising services delivered by Google Analytics.
The legal basis for the processing of the data mentioned above is Article 6(1) sentence 1 lit. (f) GDPR.
Please note that we have concluded a data processing agreement with Google (for more information see section 6 of this Data Protection Policy).
You can deactivate the placement of cookies by our website and thus the use of Google Analytics in the settings of your browser. Information on this can be found in the help function of your browser. You can also terminate the evaluation of the collected information by deleting the cookies set by Google Analytics in the settings of your browser. In addition, you can also prevent your data from being processed by Google by downloading the opt-out browser add-on to deactivate Google Analytics (which is available at tools.google.com/dlpage/gaoptout) and installing it on your terminal device. Please note that in such cases you may not be able to fully use all the functions of our website.
For further information as well as the applicable data protection provisions of Google, please see https://policies.google.com/privacy?hl=de.
Please also note that in cases where personal data is also transferred to the USA, Google has subjected itself to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework), which was designed to promote data protection, and is thus required to comply with the data protection standards set forth therein.
4. Duration of the storage of personal data
Your personal data, which we are allowed to process on a lawful basis or to the processing of which you have given your consent, is principally only stored for the duration required for the purposes specified above or, alternatively, until you withdraw your previously given consent to the processing of your personal data or you object to such processing in accordance with section 9 of this Data Protection Policy.
5. Data backup and location of processing activities
All our systems on which personal data is stored are password-protected and only accessible to a limited group of persons. Processing and use of the data will take place exclusively in the territory of the Federal Republic of Germany, in a Member State of the European Union or another contracting state of the Agreement on the European Economic Area.
6. Forwarding of data
We will not pass your personal data on to any third parties, except if we are legally entitled to do so or if you have given your consent.
6.1. Forwarding of data to any state facilities and/or public authorities shall only take place when we are required to do so by mandatory legal provisions or official or judicial orders.
6.2. If necessary, in order to ensure and improve the operability of our website, we pass the data collected in accordance with section 3 above on to IT or web service providers. These service providers require the forwarded data for the processing and maintenance of the website as well as for the purpose of web hosting and technical works to be carried out on our server environment. The legal basis for this forwarding of the data is Article 6(1) sentence 1 lit. (f) GDPR.
6.3. In addition, we cooperate with a processor within the meaning of Article 28 GDPR, which processes your personal data in accordance with section 3 herein exclusively on our behalf pursuant to our instructions and in line with the contracts concluded for this very purpose. In this context, your personal data is forwarded to our web analytics service provider which carries out, on our behalf, the statistical evaluation of the visits to our website to help make sure that our website targets your interests and assists us in the placement of advertisements. The legal basis for such forwarding of your personal data is Article 6(1) sentence 1 lit. (f) GDPR.
6.4. If the aforementioned requirements are not met, we only forward personal data to third parties if you have consented thereto (Article 6(1) sentence 1 lit. (a) GDPR).
7. Your rights
You have the following rights vis-à-vis us regarding your personal data:
• Right of access (Article 15 GDPR),
• Right to rectification or erasure (Articles 16 and 17 GDPR),
• Right to restriction of processing (Article 18 GDPR),
• Right to data portability (Article 20 GDPR).
8. Right to lodge a complaint with the data protection supervisory authority
If you believe that our processing of your personal data is not in compliance with the provisions described herein and/or the applicable data protection laws, you have the right to lodge a complaint with one of the competent data protection supervisory authorities.
9. Right to object
According to Article 21(1) GDPR, you have the right to object at any time to the processing of your personal data within the meaning of Article 6(1) sentence 1 lit. (e) or (f) of GDPR. Furthermore, you can at any time object to the processing of your personal data for advertising purposes and for purposes of market and opinion research. We kindly ask you to indicate in your objection the reasons why we should no longer process your personal data. You may address your objection to the controller (see section 1.) or to our data protection officer (see section 2.). In case of a substantiated objection, we shall no longer use your personal data for the respective purposes and erase them from our system, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.