PRIVACY POLICY

 

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal rules of the relevant data protection laws, in particular the European General Data Protection Regulation (GDPR) and this privacy policy.

 

A. Controller

The controller for the processing of your personal data is KLITSCHKO Ventures GmbH, Winterstraße 2, 22765 Hamburg, Germany, phone: +49 40 25 499 46-0,
e-mail: info@klitschko-ventures.com.

Data Protection Officer at KLITSCHKO Ventures GmbH:

Niklas Hanitsch

secjur GmbH

Steinhöft 9

20459 Hamburg

You can reach our data protection officer at the above postal address, with the addition of “To the data protection officer” or at the e-mail address:
dpo@klitschko-ventures.com.

In the following, we inform you about the processing of your personal data on the websites https://klitschko-ventures.com/, https://klitschko.com and https://www.face-the-challenge.com/ (hereinafter collectively referred to as “our sites”) and on our social media sites.

 

B. Legal basis for the processing of personal data

The legal basis for the processing of personal data are according to Art. 6 para. 1 GDPR as follows:

  • 6 (1) 1 lit. a) GDPR, insofar as we obtain the consent of the data subject for our processing activities.
  • Article 6 (1) 1 lit. b) GDPR, insofar as the processing of personal data is necessary for the performance of a contract to which the data subject is a party. This also applies to processing activities that are necessary for the performance of pre-contractual measures.
  • 6 para. (1) 1 lit. c) GDPR, insofar as processing of personal data is necessary for compliance with a legal obligation to which our company is subject to.
  • 6 (1) 1 lit. f) GDPR, provided that the processing is necessary to protect a legitimate interest of our company or a third party and this outweighs the interests, fundamental rights and freedoms of the data subject.

 

C. Data processing for the provision of the contractual services

You can use our pages and our contact data stored there to send us inquiries about orders for contractual services and orders, the products we offer as well as inquiries about appointments, inquiries about   and inquiries about cooperations or as a license partner.Insofar as personal data is transmitted by you to us in this way or in any other way for this purpose, we process your data for the purpose of answering your inquiries, for the execution of the order/contract as well as for invoicing. For this purpose, we need your name, if you are a corporate customer, the name of your company (if different from your name), your address data, your e-mail address and your telephone number. Without these data we cannot execute the contract with you. If you also provide us with the name of a contact person, we will use the aforementioned data for the contract-related clarification of queries. We also use other data that you provide to us in this way or by other means for the purpose of placing an order. However, this data is not required for the conclusion of a contract. Depending on the service/contract, we may require additional data, which we will then explain on a case-by-case basis.

In the case of suppliers/service providers, we process the personal data provided by them in this way or in another way for the purpose of ordering and calling up services on our part and to pay for the services provided. For this purpose, we require your name, the name of your company (if different), your address data, your e-mail
address and the account data. We also use other data that you provide to us in this way or by other means for commissioning for the aforementioned purposes, but this data is not required for the conclusion of a contract. Depending on the service/contract, we may require additional data, which we will then explain on a case-by-case basis.

The basis for the data processing is Art. 6 para. 1 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

 

D. Data processing for communication

In addition to the contractual data, we process the communication data provided by you (names of contact persons, address, telephone number, e-mail address) in order to be able to contact and communicate with you. Personal data that you provide to us in writing, by e-mail, or by telephone will only be processed for correspondence with you or only for the purpose for which you provided us with the data.

The basis for this processing activity is Art. 6 para. (1) 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures, or Art. 6 para. (1) lit. f GDPR, where the legitimate interest is responding to inquiries.

 

E. Data processing for partnership requests

You can make inquiries about cooperations with our company on our pages. Personal data that you provide to us for this purpose by e-mail or via the contact form on our pages will only be processed for correspondence with you or only for the purpose for which you have provided us with the data. We need at least your name to answer your inquiry and an e-mail address for further communication. The specification of the name of your company as well as a telephone number and the input of a concrete inquiry text are optional. We also use other personal data that you provide to us in this way or by other means for the aforementioned purposes, but this data is not required for the conclusion of a contract.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

 

F. Data processing for applications

You can send us applications for apprenticeships, internships and other jobs in our company via our pages and the contact details we have stored there. Insofar as personal data is transmitted to us by you in this way or in any other way when applying, we will process your data for the purpose of reviewing, processing and responding to your application and, if necessary, for preparing the employment relationship.

The basis for the data processing is Art. 88 (1) GDPR, § 26 (1) BDSG which allows the processing of data for the decision on the establishment, for the establishment as well as for the implementation of employment relationships.

We generally store the application documents for six months. Afterwards, they are deleted in accordance with data protection regulations, unless you give us your consent to include the applications in our applicant pool in accordance with Art. 6 Para. (1) 1 lit. a) GDPR. In this case, the data will be stored for 1 year.

 

G. Data processing for advertising purposes

We use the address information you provide to send you recommendations and information about our products and services by mail.

In addition, we may use your e-mail address to send you information about our
products and services by e-mail if you have already purchased products or services from us. You will receive these recommendations from us regardless of whether you have requested that the information be sent electronically. In this way, we want to send you information about similar products and services from our range that may be of interest to you based on your most recent purchases/orders from us. In doing so, we strictly comply with the legal requirements.

If you no longer wish to receive recommendations on products or services or any promotional messages from us, you can object to this at any time. A notification in text form to the above contact details (e.g. e-mail, fax, letter) is sufficient for this.

The basis for the data processing is Art. 6 para. 1 lit. f GDPR, which permits the processing of data to protect the legitimate interests of the controller, provided that the interests or fundamental rights and freedoms of the data subject do not prevail. Our interest is economic and lies in the promotion and sale of our products and services.

 

H. Newsletter

With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The respective content of a newsletter is explained in the respective declaration of consent. If you would like to receive a newsletter offered by us, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and agree to receive the newsletter. For this purpose, we will send you an e-mail to the specified e-mail address with a confirmation link after your entry (so-called double-opt-in). If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month.

The only mandatory information for sending the newsletter is your e-mail address. The provision of further data is voluntary and may be used to address you personally. In addition, we store your IP address and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data. We do not collect any other data in this context. We use this data exclusively for sending the requested newsletter.

We use the services of MailChimp as a data processor for sending newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. MailChimp is a service with which, among other things, the sending of newsletters can be organized and analyzed. If you enter data for the purpose of receiving newsletters (e.g. e-mail address), this data will be stored on MailChimp’s servers in the USA.

With the help of MailChimp, we can analyze our newsletter campaigns. When you open an email sent with MailChimp, a file contained in the email (so-called web beacon) connects to MailChimp’s servers in the USA. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked. In addition, technical information is recorded (e.g. time of retrieval, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. It is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.

If you do not want any analysis by MailChimp, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. Furthermore, you can also unsubscribe from the newsletter directly on the website.

Important in connection with data processing activities within the USA: According to the European Court of Justice, the data protection standard in the USA is insufficient and there is a possibility that your data will be processed by US authorities for control and monitoring purposes and possibly without any legal remedy.

Data processing is based on your consent pursuant to Art. 6 para. (1) lit. a GDPR in conjunction with Art. 49 para. 1. Art. 49 para. (1) 1 lit. a GDPR. You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of MailChimp after you unsubscribe from the newsletter. Data that has been stored by us for other purposes remains unaffected by this.

For more details, please refer to MailChimp’s privacy policy at: https://mailchimp.com/legal/privacy/.

 

I. Log files

Each time our pages are accessed, usage data is transmitted by the respective Internet browser and stored in log files, the so-called server log files. The data records stored in this process contain the following data: Date and time of access, name of the page accessed, IP address, referrer URL (origin URL from which you came to the web pages), the amount of data transferred, as well as product and version information of the browser used and the operating system of your PC. The IP addresses of the users are deleted or anonymized after termination of use. Any other evaluation of the data, except for statistical purposes and then basically in anonymized form, does not take place. No personal “surf profiles” or similar are created or processed either.

The basis for this processing of personal data is Art. 6 (1) 1 lit. f GDPR, which permits the processing of personal data to protect the legitimate interests of the controller, unless the interests or fundamental rights and freedoms of the data subject prevail. Our interest is ensuring the functionality of the pages, the security of our IT systems and the optimization of our web offer.

 

J. Cookies

We may use cookies on some of our pages, among other things, to offer you website-specific services, to recognize you when you return to our site, and/or to tailor our services to your personal preferences.

Cookies are small text files that are stored on a visitor’s IT system (e.g. laptop, tablet, smartphone) and contain data about the respective user in order to provide access to various functions. Both session cookies and persistent cookies are used on our pages. A session cookie is temporarily stored on the computer you are using while you
navigate through the website. A session cookie is deleted as soon as you close your Internet browser or as soon as your session has expired after a certain period of time. A persistent cookie remains on your computer until it is deleted. Storing a cookie
ensures that you do not have to repeatedly enter your personal settings and
preferences each time you visit. This saves you time and makes the use of our pages more comfortable for you.

We may work with third parties on some of our websites and therefore, when you visit such a website, cookies from partner companies may also be stored on your hard drive (third-party cookies). We inform you below about the use of such cookies and the scope of the data collected in each case.

You can delete permanently installed cookies via your browser settings. Most
browsers accept cookies automatically – so if you want to suppress the use of
cookies, you may need to actively delete or block cookies, or prevent the storage of cookies by setting your browser software. Please note, however, that if you refuse the use of cookies, you can continue to visit our pages, but some functions may be impaired in their operation.

We use necessary cookies that are required to enable the provision of the services owed by us or to ensure the functionality of our services. The data processing in this regard is then carried out on the basis of Art. 6 (1) 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures, or according to Art. 6 (1) 1 lit. f GDPR, which permits data processing to protect the legitimate interests of the controller, unless the interests or the fundamental rights and freedoms of the data subject outweigh the interest of the controller in the data processing. Our interest is the functionality of our website.

For the use of other, non-essential cookies, we may obtain your consent. The data processing is then based on your consent in accordance with Art. 6 para. (1) 1 lit. a GDPR. You can revoke your consent at any time. The legality of the data processing already carried out remains unaffected by the revocation.

 

K. YouTube

On our pages, we may use plugins of the website YouTube. The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended privacy mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the disclosure of data to YouTube partners is not necessarily excluded by the extended data protection mode. Thus, YouTube – regardless of whether you watch a video – establishes a connection to the Google
DoubleClick network.

As soon as you start a YouTube video on our pages, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have
visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by
logging out of your YouTube account.

Furthermore, YouTube may store various cookies on your end device after starting a video. With the help of these cookies, YouTube can obtain information about visitors to our pages. This information is used, among other things, to collect video statistics, improve the user experience and prevent fraud attempts. The cookies remain on your terminal device until you delete them.

If applicable, further data processing activities may be triggered after the start of a YouTube video over which we have no control. You can find more information about data protection at YouTube in their privacy policy at: https://policies.google.com/privacy?hl=de.

If cookies are set by YouTube, the processing of personal data is based on your consent pursuant to Art. 6 (1) 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. The legality of processing activities already carried out remains unaffected by the revocation.

 

L. Instagram

Our pages also use plug-ins of the service Instagram, offered by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, in order to display content from Instagram directly on our pages. Via the plug-in, a direct connection is established between your browser and the Instagram server and an exchange of data with the servers of Instagram/Facebook takes place. In this process, information about your use of this website (including your IP address) is forwarded. In addition, it may then be possible for Instagram/Facebook to associate your visit to our pages with you and your user account – provided you are logged into your user account on Instagram. However, we have no knowledge of the other content of the transmitted (personal) data and its use by Instagram/Facebook. For more information, please see the privacy policy of Instagram (https://help.instagram.com/519522125107875).

The processing of personal data is based on your consent pursuant to Art. 6 para. (1) 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. The legality of the data processing already carried out remains unaffected by the revocation.

 

M. Calendly

We use the service Calendly, of the provider Calendly, LLC from the USA, as a plugin to simplify the appointment arrangement with our website users.

Via the plug-in, a direct connection between your browser and the Calendly server is established and an exchange of data with the Calendly servers takes place. In this process, information about your use of our pages (including your IP address) is forwarded.

When using the service, you will also be asked for personal data such as name, e-mail address and telephone number. You also have the opportunity to present your request and provide us with additional information. If you use the tool, all data from the form, including the information you provide there, will be stored and transferred to Calendly.

You can find calendly’s privacy policy at: https://calendly.com/pages/privacy.

The processing of personal data is based on your consent pursuant to Art. 6 para. (1) 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. The legality of the data processing already carried out remains unaffected by the revocation.

 

N. Facebook Connect

On our pages, we use Facebook Connect, a service provided by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).

Through the service direct connection between your browser and the Facebook server is established and there is an exchange of data with the servers of Facebook. In this process, information about your use of our pages (including your IP address) is forwarded.

When you use Facebook Connect, Facebook profile data and data that is public on Facebook from your Facebook profile is also transferred to us. Conversely, data may be transferred to your Facebook profile. Your transferred data will be stored and processed by us for the purpose of registration on our site.

The processing of personal data is based on your consent pursuant to Art. 6 para. (1) 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. The legality of the data processing already carried out remains unaffected by the revocation.

 

O. Data protection with regard to our social media presences

KLITSCHKO Ventures GmbH operates its own social media pages together with the respective operator of the respective social media platform. The operator of the respective social media platform is solely responsible for the processing of your personal data on the social media platform itself (for further information on the processing of your personal data by the operator of the respective social media platform, please refer to section 2 in this section).

The operators are as follows:

– Facebook (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) for the
Facebook page at [https://www.facebook.com/KlitschkoOfficial; https://www.facebook.com/wyllit.lifestyle].

 

– Instagram (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) for the Instagram page at [ https://www.instagram.com/klitschko/?hl=de; https://www.instagram.com/tatjanakiel/?hl=de; https://www.instagram.com/wyllit/?hl=de].

 

– LinkedIn (if you are located within the European Union, the European Economic Area and Switzerland LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2
Ireland; if you are located outside the European Union, the European Economic Area and Switzerland LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 98585, USA). Maude Avenue, Sunnyvale, CA 94085, USA) for the LinkedIn page at
[https://www.linkedin.com/in/drwladimirklitschko/; https://www.linkedin.com/company/18081680/admin/;https://www.linkedin.com/company/18081680/admin/].

 

– YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) for the YouTube page at [https://www.youtube.com/channel/UCCQ3Tp3Qn5b0byhH1rvCjLA].

– XING (New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany) for the XING page at [https://www.xing.com/profile/Tatjana_Kiel/cv].

 

– Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 IRELAND for the Twitter pages at https://twitter.com/Klitschko and https://twitter.com/TatjanaKiel.

 

  1. processing by KLITSCHKO Ventures GmbH

When you visit a KLITSCHKO Ventures GmbH social media page, we, as the operator of the social media page, process your actions as well as your interactions with our social media page (this includes, for example, the content of your messages, your requests, posts or comments that you address to us or leave on our social media pages) as well as your publicly viewable profile data (e.g. your profile picture and your name). It depends on your specific profile settings which personal data from your profile is publicly viewable. We generally advise against transmitting or sharing sensitive data or confidential information (e.g. application documents, bank or payment data) via social media platforms.  

 

 

 

We operate our social media sites and process the aforementioned data in order to provide you with information about us and our products and to communicate with you. This data processing is based on our aforementioned legitimate interests (Art. 6 para. (1) lit. f GDPR) and, if necessary, to respond to your messages, requests, contributions or comments that you send to us (Art. 6 para. 1 lit. b GDPR).

The social media platforms also provide us with anonymous usage statistics
(so-called analytics services or page insights data) of our social media pages based on the actions and interactions of our followers (e.g. likes, shares, comments, etc.).
These statistics help us to get in touch with our followers and interested parties, to understand the use and reach of our posts, to evaluate content and to identify usage
preferences, and to be able to design our social media pages in a way that is as
targeted as possible. We have no influence or access to the creation and processing of these usage statistics. The operator of the respective social media platform is responsible for creating and processing these usage statistics. It is not possible for us to identify personal data of individual followers or users. This processing of personal data is based on our aforementioned legitimate interests (Art. 6 para. 1 lit. f GDPR).

We also use the anonymous usage statistics to display targeted advertisements based on your interests on the social media platforms we use or to highlight our posts. The display of interest-based advertisements or the highlighting of posts on the social media platforms we use is based on an analysis of the user’s previous usage behavior by the respective social media platform. In doing so, we cannot view personal data of individual users or merge it with any personal data we may process or gain knowledge of the identity of the users to whom interest-based advertisements are displayed (for more information, see section 2 in this section). This data processing is based on our aforementioned legitimate interests (Art. 6 para. 1 lit. f GDPR). Insofar as we would exceptionally carry out a so-called extended matching with customer lists to be uploaded by us to the respective social media platform in individual cases within the scope of interest-based advertising, this would only take place on the basis of consent granted by you for this purpose (Art. 6 para. 1 lit. a GDPR).

We process your personal data as long as this is necessary for the aforementioned purposes. In the event of an objection to processing based on our legitimate interests (Art. 6 para. 1 lit f GDPR), we will delete the relevant personal data unless its further processing is permitted by law. We also delete personal data if we are obliged to do so for other legal reasons. Applying these general principles, we generally delete personal data immediately after the legal basis ceases to apply, if it is no longer required for the stated purposes or if the stated purposes cease to apply and if no other legal basis (e.g. retention periods under commercial and tax law) is relevant, otherwise
after the other legal basis ceases to apply.

As part of the use and provision of our social media sites, we also work with service providers. Insofar as these service providers process personal data on our behalf, we have concluded a data processing agreement with these service providers and agreed on appropriate guarantees to ensure the protection of personal data. We also select our service providers extremely carefully. The service providers process personal data exclusively for the fulfillment of their tasks and are contractually bound to our instructions, have appropriate technical and organizational measures in place to protect personal data, and are regularly monitored by us.

We only transfer your personal data to third parties if you have given us your consent to do so or if this is absolutely necessary to fulfill a contract with you or to protect our legitimate interests (Art. 6 para. (1) lit. a, b and/or f GDPR).

  1. Processing by the operator of the respective social media platform

The operator of the respective social media platform is solely responsible for the processing of personal data on the social media platform itself on which we operate our social media pages. As a rule, the operator processes your personal data when you visit one of our social media sites, regardless of whether you have a user account on the respective social media platform or are logged in on the respective social media platform. It also usually uses cookies and other storage and possibly cross-device tracking technologies. Further information on the processing of your personal data by the operator of the respective social media platform can be found in the information on data protection on the following websites of the respective social media platform

– Facebook Data Policy at https://www.facebook.com/policy

– Instagram Privacy Policy at https://help.instagram.com/519522125107875

– LinkedIn Privacy Policy at https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy

– YouTube privacy policy at https://policies.google.com/privacy?hl=de&gl=de

– Xing privacy policy at https://privacy.xing.com/de/datenschutzerklaerung

The social media platforms also provide us with anonymous usage statistics (so-called page insights data) of our social media pages based on the actions and interactions of our followers (for further information, please refer to this section O under item 1). We have no influence or access to the creation and processing of these usage statistics and the underlying data; it is carried out under the sole responsibility of the operator of the respective social media platform and we are not able to view personal data of individual users. It is possible that the social media platforms themselves process personalized usage statistics. This is done, for example, for their own market research and advertising purposes. It is also possible that the social media platforms process personal data outside the European Union. We have no influence on this. Further information on the processing of your personal data by the operator of the respective social media platform in the context of the creation and processing of usage statistics can be found in the information on usage statistics on the following web pages of the respective social media platform:

– Facebook Page Insights Data Information at https://de-de.facebook.com/legal/terms/information_about_page_insights_data

– Instagram Insights at https://help.instagram.com/788388387972460?helpref=faq_content

– LinkedIn Privacy Policy (Aggregated Insights) at https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy

– YouTube Insights at https://support.google.com/youtube/answer/9002587/grundlagen-von-youtube-analytics?hl=de

– Xing at https://privacy.xing.com/de/datenschutzerklaerung/informationen-die-wir-auf-grund-ihrer-nutzung-von-xing-automatisch-erhalten

  1. Your data subject rights

With regard to data processing by KLITSCHKO Ventures GmbH, you may assert your data subject rights against KLITSCHKO Ventures GmbH free of charge at any time (see section T).

With regard to data processing by the operator of the respective social media platform, you can assert your data subject rights against the respective operator at any time free of charge. You can find more information on exercising these rights in the following section O number 4.

  1. Contact person

The contact person for exercising your rights is primarily the operator of the respective social media platform, who alone can provide direct access to the required information or the functionality of the respective platform and take immediate appropriate measures. The contact persons for exercising your rights vis-à-vis the
operator of the respective social media platform and further information can be found in the information on data protection on the following web pages of the respective social media platform:

– Facebook Data Policy at https://www.facebook.com/privacy/explanation

  – Instagram Privacy Policy at https://help.instagram.com/519522125107875

– LinkedIn Privacy Policy at https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy

– YouTube privacy policy at https://policies.google.com/privacy?hl=de&gl=de

– Xing at https://privacy.xing.com/de/datenschutzerklaerung/welche-rechte-koennen-sie-geltend-machen

 

P. Data processing for compliance with legal obligations

In addition, we process your data to fulfill legal obligations (e.g. regulatory requirements, commercial and tax law retention and verification obligations).

The basis for the data processing is Art. 6 para. (1) 1 lit. c GDPR, which permits the processing for the fulfillment of a legal obligation.

 

Q. Categories of recipients of the personal data

Your personal data will be forwarded to the responsible employees within our company for the purpose of implementing and processing contractual relationships and for contract-related communication with you.

If it is necessary for executing the contract or for the dispatch and delivery of
products or for the provision of our services, data is passed on to partner companies that have been commissioned to executing the contract. Our partners undertake to comply with and observe the provisions of data protection law. Our partners are not permitted to use the data for any other purpose than the processing of the contract.

 

 

 

The basis for this is Art. 6 para. (1) 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

Your personal data will otherwise only be disclosed or otherwise transferred to third parties outside our company if this is necessary for the purpose of contract
processing or billing or if you have previously consented or if there is a legal basis or obligation for the disclosure.

Insofar as we use the services of third parties for the implementation and handling of processing activities, the provisions of the General Data Protection Regulation will be complied with. Service providers that support us in the provision of our service to you are IT service providers (incl. online appointment allocation), e-mail providers, hosting providers and web design and marketing service providers. Here, the data is partly transferred to a third country, compliance with the EU data protection standard was ensured by appropriate contractual clauses pursuant to Art. 46 GDPR.

 

R. Duration of data storage

As a matter of principle, we delete your data as soon as it is no longer required for the above-mentioned purposes, e.g. if you revoke your consent or if the period of consent has expired, unless temporary storage is still required. For example, we store data on the basis of legal obligations to provide proof and to retain data, which result, among other things, from the German Commercial Code and the German Fiscal Code. The storage periods are then up to ten full years. In addition, we retain data for the period during which claims can be asserted against our company (generally the statutory limitation period of three years at the end of the year).

 

S. Data security

Your personal data is transferred securely by us through encryption. We use the SSL (Secure Socket Layer) coding system for this. Furthermore, we secure our pages and other systems by technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. Our security measures are continuously improved in line with technical developments. However, we expressly point out that data transmission on the Internet may have security gaps and cannot be completely protected against access by third parties, which applies in particular and especially when communicating by e-mail.

 

T. Data subject rights

Right to confirmation: You have the right to request confirmation from us as to whether personal data concerning you is being processed.

Right to information Art. 15 GDPR: You have the right to receive from us at any time free of charge information about the personal data stored about you, as well as a copy of this data in accordance with the legal provisions.

Right to rectification Art. 16 GDPR: You have the right to request the rectification of inaccurate personal data concerning you. Furthermore, you have the right to request the completion of incomplete personal data, taking into account the purposes of the processing.

Deletion Art. 17 GDPR: You have the right to demand that we delete the personal data concerning you without delay, provided that one of the reasons provided for by law applies and insofar as the processing or storage is not necessary.

Restriction of processing Art. 18 GDPR: You have the right to demand that we restrict processing if one of the legal requirements is met.

Data portability Art. 20 GDPR: You have the right to receive the personal data concerning you, which has been provided to us by you, in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from us to whom the personal data has been provided, provided that the processing is based on consent pursuant to Art. 6 (1) 1 lit. a) GDPR or Art. 9 (2) lit. a GDPR or on a contract pursuant to Art. 6 (1) 1 lit. b) GDPR and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us. Furthermore, when exercising your right to data portability pursuant to Article 20 (1) the GDPR, you have the right to have the personal data transferred directly from one controller to another controller, to the extent that this is technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.

Objection Art. 21 GDPR: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. 6 (1) 1 lit. e) (data processing in the public interest) or f) (data processing on the basis of a legitimate interests) GDPR. This also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. In individual cases, we process personal data to conduct direct marketing. You may object to the processing of personal data for the purpose of such advertising at any time. This also applies to profiling, insofar as it is related to such direct advertising. If you object to us processing for direct marketing purposes, we will no longer process the personal data for these purposes. In addition, you have the right, on grounds relating to your particular situation, to object to processing of personal data concerning you which is carried out by us for scientific or historical research purposes, or for
statistical purposes pursuant to Article 89(1) of the GDPR, unless such processing is
necessary for the performance of a task carried out in the public interest. You are free to exercise your right to object in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.

Revocation of consent under data protection law: You have the right to revoke
consent to the processing of personal data at any time with effect for the future. The processing of your personal data up to this point remains lawful. You can send your revocation by e-mail to: dpo@klitschko-ventures.com or call us at
+49 40 25 499 46-0.

Complaint to a supervisory authority: You have the right to complain about our processing of personal data to a data protection supervisory authority. The Hamburg Commissioner for Data Protection and Information Security, Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany, Tel.: (+49) 40 428 54 – 4040, e-mail:
mailbox@datenschutz.hamburg.de, is generally responsible for us. You can also use the online complaint form on the website of the Hamburg Commissioner for Data Protection and Information Security.

 

U. Actuality and modification of the privacy policy

This privacy policy is currently valid and has the status: September 2021.

Due to the further development of our pages and offers or due to changed legal or official requirements, it may become necessary to change this privacy policy. The current privacy policy can be accessed and printed out by you at any time on our pages in the respective area for “Data protection”.