PRIVACY POLICY

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal regulations of the relevant data protection laws, in particular the EU General Data Protection Regulation (GDPR) as well as this privacy policy


Controller
 
The data controller for the processing of your personal data is KLITSCHKO Ventures GmbH, Große Elbstraße 86, 22767 Hamburg, Germany, Phone: +49 40 25 499 46-0, E-mail: info@klitschko-ventures.com. You can contact our data protection officer at our postal address, with the addition “To the data protection officer” or at the following e-mail address: dpo@klitschko-ventures.com.


Data processing for the provision of contractual services

You can use our website and the contact data provided there to request contractual services and orders, the products offered by us, as well as address requests for appointments, consultation meetings and cooperation or licence partnership. Insofar as personal data are transmitted from you to us this way or in any other way, we will process your data for the purpose of answering your requests, for the performance of the order/contract and for invoicing. We require your name, if you are a corporate customer, the name of your company (if different from your name), your address data, your e-mail address and your telephone number. Without these data we cannot conclude the contract with you. If you also provide us with the telephone number or name of a contact person, we will use this information for the contract-related clarification of queries. Other data that you provide us with in this way or by other means will also be used for the above-mentioned purposes, but this data is not required for the conclusion of a contract. Depending on the service/contract, we may need additional data, which we will then inform you about on a case-by-case basis.

In the case of distributors/service providers, we process the personal data made available by you in this way or in another way for the purpose of ordering and calling up services and for payment for the services provided. For this purpose, we require your name, the name of your company (if different), your address data, your e-mail address and bank account data. Other data that you provide us with in this way or by other means will also be used for the above-mentioned purposes, but this data is not required for the conclusion of a contract. Depending on the service/contract, we may also require additional data, which we will inform you about on a case-by-case basis.

The basis for data processing is Art. 6 para. 1 s. 1 lit. b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.


Data processing for communication

In addition to the contract data, we process the communication data provided by you (name of contact persons, address, telephone number, fax number, e-mail address) in order to be able to contact and communicate with you. Personal data that you provide us with in writing, by e-mail or by telephone will only be processed for correspondence with you or for the purpose for which you provided us with the data.

The basis for data processing is Art. 6 para. 1 s. 1 lit. b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures, or Art. 6 para. 1 lit. f GDPR, whereby the legitimate interest lies in responding to enquiries.


Data processing for enquiries about partnerships

You can use the Inspiration and Solutions contact box on our website to make enquiries about cooperation with our company. Personal data that you provide us with for this purpose by e-mail or via the contact form on our website will only be processed for the purpose of corresponding with you or for the purpose for which you provided us with the data. We need your name, the name of your company in order to answer your enquiry, as well as an e-mail address and a telephone number for further communication. Other data that you provide us with in this way or by other means will also be used for the above-mentioned purposes, but these data are not required for the conclusion of a contract.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.


Data processing for applications

You can send us applications for apprenticeships and jobs in our company via our website and the contact details provided there. Insofar as personal data is transmitted to us by you in this way or in any other way in connection with applications, we process your data for the purpose of checking, processing and answering your application and, possibly, for preparing the employment relationship.

The basis for data processing is Art. 88 Para. 1 GDPR, § 26 Para. 1 BDSG which allows the processing of data for the purpose of deciding on the establishment, for the establishment and for the execution of employment relationships.


Data processing for advertising purposes

We use the address data provided by you to send you recommendations and information on our products and services by post.

The basis for data processing is Art. 6 para. 1 s. 1 lit. f GDPR, which permits the processing of data for legitimate interests, provided that the interests or fundamental rights and freedoms of the data subject do not prevail. Our interest is economic and lies in the promotion and sale of our products and services.

We also use your e-mail address to send you information about our products and services by e-mail if you have already purchased products or services from us. You will receive these recommendations from us regardless of whether you have requested the electronic transmission of the information. In this way, we want to provide information about similar products and services from our range that might interest you based on your last purchases/orders from us. In doing so, we strictly comply with the legal requirements.

If you no longer wish to receive recommendations on products or services or any advertising messages from us, you can object to this at any time. A message in text form to the above-mentioned contact data (e.g. e-mail, fax, letter) is sufficient for this purpose.

The basis for data processing is Art. 6 para. 1 s. 1 lit. f GDPR, which permits the processing of data for the controller’s legitimate interests, provided that the interests or fundamental rights and freedoms of the data subject do not prevail. Our interest is economic and lies in the promotion and sale of our products and services.


Newsletter
With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The respective content of a newsletter is explained in the respective declaration of consent. If you would like to receive a newsletter offered by us, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. For this purpose, we will send you an e-mail with a confirmation link (double opt-in) to the e-mail address you have entered. If you do not confirm your registration within [24 hours], your information will be blocked and automatically deleted after one month.

Your e-mail address is the only mandatory information for sending the newsletter. The entering of further, separately marked data is voluntary and will be used to address you personally. In addition, we store the IP addresses you use and the dates of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to clarify any possible misuse of your personal data. We do not collect any further data in this context. We use these data exclusively for the dispatch of the requested newsletter.

We use the services of MailChimp as order processor for sending newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. MailChimp is a service that can be used to organise and analyse the distribution of newsletters. If you enter data for the purpose of subscribing to the newsletter (e.g. e-mail address), these data are stored on the servers of MailChimp in the USA.

With the help of MailChimp we can analyse our newsletter campaigns. When you open an e-mail sent with MailChimp, a file contained in the e-mail (so-called web beacon) connects to the servers of MailChimp in the USA. In this way it can be determined whether a newsletter message has been opened and which links have been clicked on. In addition, technical information is collected (e.g. time of access, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. It is used exclusively for statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.

If you do not want to receive any analysis by MailChimp, you have to unsubscribe from the newsletter. For this purpose we provide a link in every newsletter message. You can also unsubscribe directly on the website.

Important in the context of data processing in the USA: The European Court of Justice considers the data protection standard in the USA to be insufficient and there is a risk that your data may be processed by US authorities, for control and monitoring purposes and possibly without any possibility of legal recourse.

The data will be processed on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with Art. 49 para. 1 s. 1 lit. a GDPR. You can revoke this consent at any time by unsubscribing to the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data that you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of MailChimp after you unsubscribe from the newsletter. Data, which were stored for other purposes, remain unaffected.

You can find more details in the privacy policy of MailChimp under: https://mailchimp.com/legal/privacy.


Log files
 
Each time our website is accessed, usage data is transmitted by the respective Internet browser and stored in log files, the so-called server log files. The stored data records contain the following data: date and time of server request, name of the page called up, IP address, referrer URL (URL from which you came to the websites), the amount of data transferred, as well as product and version information of the browser used and the operating system of your PC. The IP addresses of users are deleted or made anonymous after the end of use. The data is not evaluated in any other way, except for statistical purposes and then generally in anonymised form. No personal “surfing profiles” or similar are created or processed.

The basis for data processing is Art. 6 para. 1 s. 1 lit. f GDPR, which permits the processing of data for the controller’s legitimate interests, provided that the interests or fundamental rights and freedoms of the data subject do not prevail. It is in our interest to guarantee data security on the website and to optimise our web offering.


Cookies
 
We use so-called cookies on some of our websites, among other things to be able to offer you website-specific services, to recognize you when you visit our website again, and/or to adapt our offer to your personal preferences.

Cookies are small text files that are stored on a visitor’s computer and contain data on the respective user in order to enable access to various functions. Both session cookies and persistent cookies are used on our website. A session cookie is temporarily stored on your computer as you navigate through the site. A session cookie is deleted as soon as you close your Internet browser or as soon as your session has expired after a certain period of time. A persistent cookie remains on your computer until it is deleted. The storage of a cookie ensures that you do not have to repeatedly enter your personal settings and preferences every time you visit our website. This saves you time and makes using our website more convenient for you.

We may work with third parties on some of our websites, and therefore, when you visit such a website, cookies from partner companies may be stored on your hard drive (third-party cookies). We inform you below about the use of such cookies and the scope of the data collected in each case.

You can delete permanently installed cookies via the settings of your browser. Most browsers accept cookies automatically – so if you want to suppress the use of cookies, you may have to actively delete or block cookies or prevent the storage of cookies by setting your browser software. Please note, however, that if you choose not to accept cookies, you may still be able to visit our website, but some features may not work as intended.

We use necessary cookies, which are required to enable us to provide the services we owe or to ensure the functionality of our services. The data processing in this respect is then based on Art. 6 para. 1 s. 1 lit. b DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures or Art. 6 para. 1 s. 1 lit. f GDPR, which permits data processing to serve the legitimate interests of the data controller, provided that the interests or the fundamental rights and freedoms of the data subject do not prevail. Our interest lies in the functionality of our website.

We may obtain your consent for the use of other, unnecessary cookies. The data processing is then carried out on the basis of your consent in accordance with Art. 6 para. 1 s. 1 lit. a GDPR. You can revoke your consent at any time. The legality of the data processing already carried out remains unaffected by the revocation.


YouTube
On our website we may use plugins from the YouTube website. The operator of these sites is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in advanced privacy mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the extended privacy mode does not necessarily exclude the sharing of information with YouTube partners. For example, YouTube connects to the Google DoubleClick network whether or not you are watching a video.

As soon as you start a YouTube video on our website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged in to your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, YouTube can store various cookies on your device after starting a video. With the help of these cookies, YouTube can obtain information about visitors to our website. This information is used, among other things, to gather video statistics, improve the user experience and prevent fraud. The cookies remain on your device until you delete them.

It is possible that after the start of a YouTube video, further data processing processes may be triggered over which we have no influence. For more information about YouTube’s privacy policy, please see their privacy policy at: https://policies.google.com/privacy?hl=de.

If cookies are set by YouTube, the processing of personal data is based on your consent in accordance with Art. 6 para. 1 S. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. The legality of the data processing already carried out remains unaffected by the revocation.


Instagram
Our website also uses plug-ins of the Instagram service, offered by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, to display Instagram content directly on our website. The plug-in establishes a direct connection between your browser and the Instagram server and exchanges data with the data stored in the Instagram/Facebook servers. During this process, information about your use of this website (including your IP address) is passed on. In addition, Instagram/Facebook may then be able to associate your visit to our website with you and your user account, if you are logged into your Instagram account. However, we have no knowledge of the other content of the transmitted (personal) data or its use by Instagram/Facebook. For further information, please refer to the Instagram Privacy Policy (https://help.instagram.com/519522125107875).

The processing of personal data is based on your consent in accordance with Art. 6 para. 1 s. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. The legality of the data processing already carried out remains unaffected by the revocation.


Calendly
We use the service Calendly, of the provider Calendly, LLC from the USA, as a plugin to simplify the appointment arrangement with our website users.

The plug-in establishes a direct connection between your browser and the Calendly server and exchanges data with the data stored in the Calendly servers. Information about your use of this website (including your IP address) is transferred.

When using the service, you will also be asked to provide personal information such as your name, email address and telephone number. You also have the opportunity to state your concern and provide us with additional information. When you use the tool, all information from the form, including the information you provide there, will be stored and transmitted to Calendly.

You can find the calendly privacy policy at: https://calendly.com/pages/privacy

The processing of personal data is based on your consent in accordance with Art. 6 para. 1 s. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. The legality of the data processing already carried out remains unaffected by the revocation.


Facebook Connect
On this website we use Facebook Connect, a service of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).

Through the service, a direct connection is established between your browser and the Facebook server and data is exchanged with the data stored in Facebook’s servers. Information about your use of this website (including your IP address) is transferred.

When you use Facebook Connect, Facebook profile data and public data on Facebook from your Facebook profile are also transferred to us. Conversely, data can be transferred to your Facebook profile. Your transferred data is stored and processed by us for the purpose of registration on our site.

The processing of personal data on the basis of your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. The legality of the data processing already carried out remains unaffected by the revocation.


Privacy policy for our Facebook Fanpage
We operate a company page (fan page) in the social network facebook.com. We are jointly responsible with Facebook for the operation of the Facebook fan page within the meaning of Art. 26 GDPR. The agreement on joint responsibility can be found here: https://www.facebook.com/legal/terms/page_controller_addendum. The primary controller of the data processing is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).

For the nature and scope of the information you provide to Facebook, the related purposes of data processing by Facebook, its lawfulness and information on how to exercise your rights, please refer to the Data Policy and other information provided by Facebook on the processing of “Insights Data”. https://de-de.facebook.com/policy.php

Facebook provides us with so-called page insights for our site. Page-Insights (https://www.facebook.com/business/a/page/page-insights) are summarised data, through which we can gain information about how people interact with our site. The creation and provision of these page insights is the responsibility of Facebook, we have no influence on it. This also applies, of course, to data processing, which is carried out exclusively for the purposes of Facebook. Facebook also assumes all obligations arising from the GDPR with regard to the processing of Insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR).

The purpose of the data processing of the data provided by Facebook by us is the statistical evaluation of the use of our fan page. This enables us, for example, to determine the preferred visiting and contribution times of our users and to use this information to optimise our contributions and our fan page.

In addition, we process personal data made publicly available by you on Facebook (e.g. clear names in the user profile) as well as data directly related to activities on our fan page (e.g. contributions, posts, likes, marks), also for the purpose of communicating with you.

The basis for data processing is Art. 6 para. 1 s. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures, insofar as the data is processed in accordance with the Facebook terms of use, otherwise, insofar as we are responsible for data protection, Art. 6 para. 1 s. 1 lit. f GDPR, which permits the processing of data for the purpose of safeguarding the legitimate interests of the controller, provided that the interests or fundamental rights and freedoms of the data subject do not prevail. Our interest lies in the provision of content and communication with Facebook users and in improving the range and effectiveness of our contributions.

Please assert your rights to information, correction, deletion, restriction of processing and data transferability of your stored Insights data vis-à-vis Facebook, as Facebook has assumed the corresponding obligations:

Facebook Ireland Ltd.

4 Grand Canal Square, Grand Canal Harbour

Dublin 2, Irland

Privacy Policy: https://www.facebook.com/about/privacy/

Opt-out: https://www.facebook.com/settings?tab=ads

Data processing for the fulfilment of legal obligations
In addition, we process your data to fulfil legal obligations (e.g. regulatory requirements, commercial and tax storage and proof obligations).
The basis for data processing is Art. 6 para. 1 s. 1 lit. c GDPR, which permits processing to fulfil a legal obligation.


Categories of receipt of personal data

Your personal data will be transferred to the responsible employees within our company for the purpose of contract performance or Invoicing and for contract-related communication with you. 

Insofar as it is necessary for the purpose of contract processing or for the dispatch and delivery of products or to provide our services, data will be transferred to partner companies which have been commissioned to support contract processing. Our partners are boliged to comply with and observe the provisions of data protection law. Furthermore, our partners are not permitted to use the data in any other way than to perform the contract.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

Your personal data will otherwise only be passed on or otherwise transferred to third parties outside our company if this is necessary for the purpose of contract processing or invoicing or if you have given your prior consent or if there is a legal basis or obligation for the transfer.

Insofar as we use the services of third parties for the implementation and handling of processing procedures, the provisions of the GDPR are adhered to. Service providers supporting us in providing our services to you are IT service providers (incl. online appointment allocation), e-mail providers, hosting providers as well as web design and marketing service providers. Some of the data is transferred to a third country and compliance with the EU data protection standard has been ensured by appropriate contractual clauses in accordance with Article 46 of the General Data Protection Regulation (GDPR).


Duration of data storage

In principle, we delete your data as soon as they are no longer required for the above-mentioned purposes, e.g. if you revoke your consent or if the period of time for which you gave your consent has expired, unless temporary storage is still necessary. Thus, we store data due to legal obligations to provide evidence and to retain data, which result among others from the German Commercial Code and the German Fiscal Code. The storage periods thereafter are up to ten full years. In addition, we retain data for the period during which claims can be asserted against our company (usually the statutory limitation period of three years at the end of the year).


Data Security

Your personal data will be transmitted securely by us through encryption. We use the coding system SSL (Secure Socket Layer). Furthermore, we secure our websites and other systems by technical and organizational measures against loss, destruction, access, alteration or distribution of your data by unauthorized persons. Our security measures are continuously improved in line with technical developments. However, we expressly point out that data transmission on the internet is subject to security gaps and cannot be completely protected against access by third parties, which applies in particular and above all to communication by e-mail.


Rights of the data subject
 
Within the framework of the applicable legal provisions, you have the right to access information free of charge at any time about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to rectification, restriction or erasure of this data.

You may also have a right to restriction of processing of your data and a right to the release or transmission of data provided by you in a structured, common and machine-readable format.

If you have given us your consent to process personal data for specific purposes, you can revoke your consent at any time with effect for the future.
If we process your data to protect legitimate interests, you may object to such processing for reasons arising from your particular situation.
You can also contact a data protection supervisory authority.