Data protection information in accordance with Articles 13, 14 EU General Data Protection Regulation (GDPR)

The following data protection information is intended to explain to you in an understandable, transparent and clear manner how we, PricewaterhouseCoopers GmbH Wirtschaftsprüfungsgesellschaft (hereinafter: "PwC WPG"), process your personal data in connection with your use of our website and online services. However, if you have any questions of understanding or other queries about data protection at PwC, you are welcome to contact our Data Protection Officer at DE_Datenschutz@pwc.com or the other contact details provided below.

 

1. Controller

The controller within the meaning of Art 4 No 7 GDPR for the processing of your personal data is:

 

PricewaterhouseCoopers GmbH Wirtschaftsprüfungsgesellschaft

Friedrich-Ebert-Anlage 35-37

60327 Frankfurt am Main

Email: DE_Kontakt@pwc.com

Switchboard: +49 69 9585-0

Fax: +49 69 9585-1000

 

2. Data Protection Officer

PwC WPG has appointed a data protection officer in accordance with Art 37 GDPR. You can reach the Data Protection Officer, Dr. Tobias Gräber, at the following contact details:

 

Email contact: DE_Datenschutz@pwc.com

Phone: +49 69 9585-0

 

Address for postal contact:

 

PricewaterhouseCoopers GmbH WPG

Dr. Tobias Gräber, Data Protection Officer

Friedrich-Ebert-Anlage 35-37

60327 Frankfurt am Main

 

3. Rights of the Data Subjects / Your Rights Under Data Protection Law

You have the following rights under applicable data protection law with respect to personal data concerning you.

Right of access: You can request information from us at any time about whether and which personal data we store about you. The provision of information is free of charge for you.

The right to information does not exist or only to a limited extent if and to the extent that confidential information, such as information that is subject to professional secrecy, would be disclosed.

Right to rectification: If your personal data stored by us is inaccurate or incomplete, you have the right to obtain rectification of this data from us at any time.

Right to erasure: You have the right to request that we erase your personal data if and to the extent that the data is no longer needed for the purposes for which it was collected or, if the processing is based on your consent, you have withdrawn your consent. In this case, we must stop processing your personal data and remove it from our IT systems and databases.

A right to erasure does not exist insofar as

- the data may not be deleted due to a legal obligation or must be processed due to a legal obligation;

- the data processing is necessary for the assertion, exercise or defence of legal claims.

Right to restrict processing: You have the right to request that we restrict the processing of your personal data.

Right to data portability: You have the right to receive from us the data you have provided in a structured, common and machine-readable format, as well as the right to have this data transferred to another controller. This right only exists if

- you have provided us with the data on the basis of consent or on the basis of a contract concluded with you;

- the processing is carried out by automated means.

Right to object to processing: If the processing of your data is based on Art 6 para 1 lit f GDPR, you may object to the processing at any time.

 

You may assert all of the data subject rights described above against PwC WPG by addressing your specific request to the following contact details:

By email: DE_Datenschutz@pwc.com

By mail:

PricewaterhouseCoopers GmbH WPG

Dr. Tobias Gräber, Data Protection Officer

Friedrich-Ebert-Anlage 35-37

60327 Frankfurt am Main

 

4. Right of Lodge a complaint with a Supervisory Authority

In accordance with Art 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes data protection law.

 

5. Provision of Data

Even if partial automatic transmission of data takes place when you access our website, you are not legally or contractually obliged to provide data in connection with the use of our website.

In connection with contacting us by email, you are free to send us data via this channel, but without providing the data accordingly in the context of contacting us in this way, we cannot process and answer any inquiries from you in this respect.

 

6. Description of Data Processing on the Website and Legal Basis for Processing

 

6.1 Recipients of data

In order to fulfil the processing purposes listed below, data is also be transferred to third parties. This may also include the transfer of personal data to other European and non-European countries and the storage of data outside the EU or the European Economic Area (EEA).

 

Recipients bound by instructions

We share your data with service providers bound by instructions, such as IT service providers, who support us in our activities, e.g. in the context of the administration and maintenance of the website and the related systems and/or for other internal or administrative purposes.

If we pass on data to service providers bound by instructions, we do not require a separate legal basis for this.

 

Independent recipients

In addition, in individual cases, we also pass on your data to other third parties, such as public authorities, courts or other bodies, if we are required by law or by official or court order of an EU member state to disclose personal data to these bodies. These bodies use the data on their own responsibility.

Insofar as there is a legal obligation to disclose the data, the legal basis for the data transfer is Art 6 para 1 lit c) GDPR.

 

Data transfer to recipients in third countries outside the EU/EEA

Insofar as any of the above-mentioned data transfers are made to a recipient outside the EEA (to so-called "third countries"), an appropriate level of data protection for the international transfer is ensured by suitable security measures.

 

6.2 Processing of personal data when accessing the website

When you visit our website, we collect the data that is technically necessary to display this website to you. This involves the following personal data which is automatically transmitted to our server by your browser:

 

IP address

Date and time of your request/access to the website

Time zone difference to Greenwich Mean Time (GMT)

Content of the request (information about which specific webpage you have accessed)

Access status/http status code

Transferred data volume

Website requesting the access

Browser (information about the browser you are use)

Operating system and its interface (operating system of the computer you use to access the website)

Language and version of the browser software

The processing of this personal data is based on Art 6 para 1 lit f) GDPR. The website cannot be accessed and offered to users without using such data, there is a legitimate interest in technically enabling the access and use of the website.

 

The aforementioned data will be stored for 7 days and then deleted.

 

This website is hosted by a service provider [T-Systems International GmbH, Friedrich-Ebert-Allee 140, 53113 Bonn], the data collected on our website is therefore stored on the service providers servers. The server locations are located in Germany, the Netherlands and Switzerland.

 

Data is transferred abroad, including to countries outside the EU or EEA. An adequate level of data protection is ensured by the use of standard contractual clauses of the EU Commission within the meaning of Art 46 para 2 lit c GDPR.

 

6.3 Contact by email

If you have any questions about the investment guarantees, our website and other inquiries, you can contact us by email.

When you contact us by email, the data you provide (in particular your email address, your first and last name and the text of your enquiry and, if applicable, any other information you have provided) will be stored by us in order to process your enquiry and answer your questions.

The data processing is justified in accordance with Art 6 para 1 lit f) GDPR. We have a legitimate interest in contacting you at your request. Insofar as your request is aimed at the fulfilment of a contractual or pre-contractual measure with you as a natural person, Art 6 para 1 lit b) GDPR is the legal basis for data processing.

We will delete the data generated in the course of your enquiry/contact as soon as it is no longer required for processing your enquiry. Insofar as there is a legal obligation to retain data, the data will be stored for the duration of the legally required retention obligation. Contacting us by email is completely voluntary for you and is not a prerequisite for the use of the website.

 

6.4. Newsletter

With our newsletter you will receive regular up-to-date information on the investment guarantees of the Federal Republic of Germany. If you subscribe to the newsletter, we will store and process the data you provide in this context (in particular your email address and, if applicable, your first and last name and gender) for the purpose of sending the newsletter to which you have subscribed. In doing so, we validate the email address you provided through the so-called double opt-in procedure.

The newsletter functionality is operated by an external service provider [dialogue1, Katharinenstraße 33, 20457 Hamburg]. The data collected on our website is therefore stored on the servers of the service provider. The server locations are located exclusively in Germany.

There is no data transfer abroad.

The data processing for the sending of the newsletter is based on your consent, which constitutes a permission according to Art 6 para 1 lit a) GDPR. Your data will be stored for this purpose as long as this is necessary for the sending of newsletters and you have not revoked your consent. The data will be deleted when you unsubscribe from the newsletter. Insofar as there is a legal obligation to retain data, the data will be stored for the duration of the legally required retention period.

You can revoke your consent at any time with effect for the future at no additional cost, e.g. by email. We provide you with the email address for the revocation in every newsletter message.

 

7. Use of cookies

In order to make visiting our website attractive and to enable the use of certain functions, we and certain third parties use cookies on our website. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your terminal device and enable us or our partner companies to recognise your browser the next time you visit (so-called persistent cookies).

The following categories of cookies are used:

 

7.1 Cookies technically necessary for the operation of our website

These cookies are required for the operation and functionality of the website. They make the website technically accessible, secure and usable and provide essential and basic functionalities, such as navigation on the website, correct display of the website in the internet browser or consent management.

Provider: www.investitionsgarantien.de, Name: ppms_privacy, Cookie category: technically required cookie, Function: Stores the visitor's consent to data collection and use. Duration: 365 days.

 

7.2 Analytics/analytics cookies:

The analytics cookies enable us to store data in an aggregated form about our website visitors and their experience on our website. We use this data to fix bugs and improve the experience for all visitors.

 

Provider: www.investitionsgarantien.de, Name: pk_ses.<websiteID>.<domainHash>, Cookie category: Analytics cookie, Function: Indicates an active session of the visitor. If the cookie is not present, the session ended over 30 minutes ago and was counted in a pk_id cookie. Duration: 30 minutes.

Provider: www.investitionsgarantien.de, Name: pk_id.<websiteID>.<domainHash>, Cookie category: Analytics cookie, Function: Used to recognise visitors and record their various characteristics. Duration: 13 months.

Provider: www.investitionsgarantien.de, Name: piwik_auth, Cookie category: Analytics Cookie, Function: Stores session information for the user interface (UI) of Piwik PRO. As long as this cookie is valid and contains a login and a token_auth parameter, a visitor is considered to be logged in and a PIWIK_SESSID cookie is updated. Duration: 24 minutes.

Provider: www.investitionsgarantien.de, Name: PIWIK_SESSID, Cookie category: Analytics Cookie, Function: Stores a PHP session-ID. Duration: 24 minutes.

 

The legal basis for the use of technically necessary cookies is Section 25 para 2 No 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG) or on the basis of Art 6 para 1 lit f) GDPR to protect our legitimate interests. In particular, our legitimate interests lie in being able to provide you with a technically optimised website that is user-friendly and tailored to your needs, and to ensure the security of our systems. The legal basis for consent with regard to the storage and reading of information is Section 25 para 1 TDDDG and, with regard to the processing of personal data, Art 6 para 1 lit a) GDPR.

 

The consent includes all cookies selected by you and the storage of information associated with them on your terminal device, as well as their subsequent reading and processing of personal data.

 

Insofar as we use cookies on the basis of your consent, you can revoke your consent at any time with effect for the future, e.g. by adjusting your cookie settings here.

 

 

Your revocation does not affect the lawfulness of the processing carried out until revocation.

 

7.3 Session Storage

Publisher: Neos Foundation e.V., Name: Neos.Neos.lastVisitedNode, Function: Used to store the last visited page or node in the Neos CMS. It allows the system to redirect users directly to the last page or area they visited on the next visit or within the same session. This improves the user experience, especially when editing content or navigating within the CMS.

The legal basis is Section 25 para 2 no 2 TDDDG.

 

7.4 Disabling cookie settings

Most browsers are pre-set to accept cookies automatically. You can object to the creation of cookies by disabling cookies in your browser’s system settings. Please note, however, that some of the cookies are technically necessary for the functioning of our website, otherwise the page cannot be accessed and displayed. By deactivating cookies, you will not be able to use parts of the website (without restrictions).

We only use cookies that are not technically necessary for the functioning of our website if you have provided us with your prior express consent.

In addition, you can also control the installation of cookies yourself at any time by changing your browser settings and/or deleting all cookies.

 

8. Links to social media

We currently link to the following social media provider: LinkedIn by means of a corresponding social media button. In order to prevent any unwanted transfer of your usage data (e.g. address of the currently visited page) to this service, you will only be able to access the service by clicking on the link. On the service page, this social network may collect usage and possibly user data. We have no influence on the collected data and data processing procedures, nor are we aware of the full extent of the data collection, the purposes of the processing or the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.

Therefore, we inform you according to our current knowledge:

Only when the link is called up does your browser establish a direct connection with the servers of the aforementioned service. As a result, the information that you have visited our website is indirectly (referrer) forwarded to this service. If you are already logged in to the service with your personal user account while visiting our website, you can usually click on the social media button to "share" the document (so-called "sharing") or leave a comment, etc. If you do not wish such data transmission, we advise against clicking on the social media button.

For the purpose and scope of data collection by the social services, as well as the further processing and use of your data there, as well as your rights in this regard and setting options to protect your privacy, please refer to the privacy policy of this service.

 

9. Integration of Mediasite

When you watch a video displayed with a thumbnail on the website (not just a link to another platform with a video), we collect the data necessary to be able to show you the video. The following personal data is required for this purpose:

 

IP address

Time and duration of use

The processing of this personal data is based on Art 6 para 1 lit f) GDPR. This is necessary, since the communication takes place via the internet/intranet and is established on the basis of the Internet Protocol (IP). Furthermore, the use of the stream is determined on the basis of the IP communication. The video cannot be accessed and offered without the use of this data, there is a legitimate interest in technically enabling the access and use of the video.

 

The above data will be stored for the duration of watching/streaming and then deleted. Insofar as there is a legal obligation to retain data, the data will be stored for the duration of the legally required retention obligation.

 

This data is stored on our servers. Our server location is exclusively in Germany. There is no data transfer abroad.

 

10. Integration of SmartMaps

On this website we use the "SmartMaps" service of YellowMap AG, CAS-Weg 1-5, 76131 Karlsruhe.

This allows us to show you maps directly on the website and enables you to use the map function conveniently.

In order to be able to show you the maps, SmartMaps uses your IP address when the SmartMaps components are retrieved by the browser. This is held in the memory of the web server for approx. 5 minutes to prevent DoS attacks, after which it expires and is neither processed nor stored in any other way.

YellowMap AG is therefore a recipient of data. However, YellowMap AG does not process the data for its own purposes, but exclusively on behalf of and on the instructions of PwC. PwC has concluded a data processing agreement with YellowMap AG in accordance with Art 28 GDPR.

 

11. Links

Our website contains hyperlinks to websites/services of other providers. When activating these hyperlinks, you will be redirected from our website directly to the website of the other provider. You will recognise this by the change of URL, among other things. We cannot accept any responsibility for the confidential handling of your data on these third-party websites, as we have no influence on whether these companies comply with data protection regulations. Please inform yourself about the handling of your personal data by these companies directly on these websites.

 

Legal Disclaimer

The copyright of PwC WPG covers the content and all information and illustrations on this website and serves only to present the state "Investment Guarantees" processed by PwC WPG to the interested Internet user. We do not assume any responsibility for decisions made by the user on the basis of the aforementioned information. We would like to point out that the present content does not constitute individual legal, accounting, tax or any other professional information or recommendation and is not suitable to replace individual advice by competent persons taking into account the specific circumstances of the individual case.

 

To the extent described above, all texts, images, graphics, sound, video and animation files as well as their arrangements are subject to the copyright of PwC WPG and other laws protecting intellectual property. They may not be copied for commercial purposes or for distribution, nor may they be modified and used on other websites. Some pages of the domain www.investitionsgarantien.de also contain images that are subject to the copyright of those who provided them.

 

The information has been compiled with due diligence. Nevertheless, we do not assume any liability, for whatever legal reason, for the accuracy, timeliness and completeness of the information provided.

 

This website contains links to websites set up by third parties. PwC WPG has no control over these websites and the information, goods or services offered there. PwC WPG therefore accepts no responsibility whatsoever, on whatever legal grounds, for the content of third-party websites.

 

PwC WPG reserves the right to change or update the information, products or services offered on this website at any time without prior notice.

 

The company names, logos and trademarks registered by PwC WPG are its property and may not be used without its prior written consent.

 

Any legal relationships that may exist or arise in the future shall be governed exclusively by German law and only German courts shall have jurisdiction.