DATA PROTECTION

PRIVACY BY DESIGN

vectorpouch – shutterstock.com

RESPONSIBLE

entrafin GmbH 
Kölner Str. 30
50859 Köln-Lövenich
Telefon: +49 (0)2234 250870
E-Mail: info@entrafin.de

Authorized
Executive Director:
Christoph Bauer &
Dr. Stefan Fenner

The operational data protection officer of entrafin GmbH is listed under o.g. Address, z.H. Mr. Christoph Bauer or at datenschutz@entrafin.de reachable.

PRIVACY STATEMENT

oxion2003 – pixabay.de

1.
COLLECTION AND STORAGE OF PERSONAL DATA AND TYPE AND PURPOSE AND USE THEREOF

We process the data of our customers, trading partners, interested parties and other contractual partners (hereinafter referred to as „contractual partners“) in accordance with Art. 6 para. 1 lit. b. DSGVO in order to provide them with our pre-contractual or contractual services as well as to carry out our commercial transactions with our contractual partners. The data processed in this process, their nature and extent as well as the purpose and the necessity of their processing, are determined by the underlying contractual relationship. The processed data includes:

Salutation, first name, last name
a valid, business email address
the business address
Telephone number (landline and / or mobile)
The IP address used to register and the last used IP address
The position within the company
Information that is necessary for the formation and maintenance of our commercial contracts as well as for the provision of our contractual services

In particular, this data is collected in order to identify you as our customer

for correspondence with you
for billing
to initiate and conclude commercial transactions with you or companies named by you on the basis of our commercial contracts.

In addition, we process and store personal information in the context of our administrative duties, the organization of our business, our financial accounting and compliance with legal obligations, such as: archiving. In doing so, we process the same data that we process in the course of rendering our pre-contractual and contractual services as well as within our trading business. The processing principles are Art. 6 para. 1 lit. c. DSGVO, Art. 6 para. 1 lit. f. DSGVO. Furthermore, we process and store personal data in order to operate our business economically, recognize market trends and conduct market research, carry out marketing measures and assess the wishes of our contractual partners and users. For this purpose, we analyze the data we have on trading transactions, contracts, inquiries, other business transactions etc. We process contract data, usage data, inventory data, communication data and metadata on the basis of Art. 6 para. 1 lit. f. DSGVO, whereby the affected persons include our contractual partners, prospective customers, customers as well as users and visitors of our online offer or our trade portal. The analyzes serve us to increase the user-friendliness, the optimization of our offer and the business economy. The analyzes are for us alone and will not be disclosed externally unless they are anonymous, aggregated value analyzes. If such analyzes or profiles are personal, they will be deleted or anonymised upon termination of the user, otherwise after two years from the conclusion of the contract. Incidentally, the overall business analyzes and general trend provisions are created anonymously if possible. As part of the use of our online services and our trade portal, we store the IP addresses used and the time of their respective use. The storage is based on our legitimate interests, both to avoid the misuse, as well as an unauthorized use of our online services or our trade portal. A transfer of these data to third parties does not take place, unless it is to prosecute and enforce our claims. Art. 6 para. 1 lit. f. DSGVO required or there is a legal obligation gem. Art. 6 para. 1 lit. c. DSGVO. In addition, we do not process any special categories of personal data unless they are part of a processing contracted by our contractors or through our commercial transactions. We point out the necessity of providing personal data, if this is not evident to the contractual partners. Disclosure to external persons or companies will only be made if required in connection with the initiation and conclusion of trade agreements. When processing the data provided to us, we act in accordance with the instructions of the client and the legal requirements. The data is deleted if the data is no longer required for the fulfillment of contractual or legal duties of care and for handling any warranty and comparable obligations, whereby the necessity of keeping the data is reviewed every three years; otherwise the statutory storage obligations apply.

2.
DISTRIBUTION OF PERSONAL DATA TO THIRD PARTIES

According to Art. 6 para. 1 lit. b. DSGVO, Art. 6 para. 1 lit. c. DSGVO and Art. 6 para. 1 lit. f. DSGVO we transfer company-related data, which may include personal data, to the following third parties for the following purposes:

to insurers, in particular trade credit insurers, for the purpose of obtaining insurance covers, which are the basis of our commercial transactions;
to banks, financial institutions, financial service providers and finance companies of all kinds, provided there is a legitimate interest in doing so
to credit bureaus for soliciting credit information concerning the respective company
to intermediaries, mediation platforms and financial portals, as far as necessary to obtain such offers, to submit offers, to correspondence or for any other contractual relationship with them.
to other partners not mentioned up to here, if this is necessary for the fulfillment of the contract
to financial administrations, consultants (such as accountants), auditors, and other fee and payment service providers.
to services that serve the operation of this website as well as the entire website, their optimization and analysis (see also paragraphs 8 to 11 of this privacy policy). We have no influence on the data and data processing operations collected here. We refer you to the respective data protection statements of the services mentioned under 8 to 11 with regard to the purpose, the scope of the data collection and the processing.

We have concluded order processing agreements with the parties involved pursuant to Art. 28 DS-GVO. Data transfer to third countries: If processing by third-party services takes place outside the European Union or the European Economic Area, these must meet the special requirements of Art. 44 et seq. DS-GVO, or in the case of US companies of the so-called „Privacy-Shield“ , fulfill.

3.
SURVEY OF ACCESS DATA AND LOGFILES

We, or our hosting provider, collects on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. DSGVO Data on every access to the server on which this service is located (so-called server log files). To access data belong

IP address of the requesting computer
Date and time of access
Name and URL of the retrieved file
Website from which access takes place (referrer URL)
used browser, browser version, operating system of your computer, as well as the name of your access provider
Access Status / HTTP status code;

The collection of the data for the provision of the website and the storage of data in log files is essential for the operation of the website or for the purpose of the user-friendly, functional and secure delivery of our website to you with functions and content as well as their optimization and statistical evaluation. For security reasons, we store this data in server log files for the retention period of 30 days. After this period, they will be automatically deleted, unless we require their storage for evidence in attacks on the server infrastructure or other violations. Further storage may be made in individual cases if required by law.

4.
REGISTRATION FUNCTION

Users can create a user account with us. As part of the registration, the required mandatory information is communicated to the users and based on Art. 6 para. 1 lit. b DSGVO processed for purposes of providing the user account. The processed data include in particular the login information (name, password and an e-mail address). The data entered during registration will be used for the purpose of using the user account. Users can access information relevant to their user account – e.g. technical changes – be informed by e-mail. If users have terminated their user account, their data will be deleted with respect to the user account, subject to a statutory retention obligation. It is the responsibility of the users to secure their data upon termination prior to the end of the contract. We are entitled to irretrievably delete all user data stored during the term of the contract. In the context of the use of our registration and registration functions as well as the use of the user account, the IP address and the time of the respective user action will be saved. The storage is based on our legitimate interests, as well as the user’s protection against misuse and other unauthorized use. A transfer of these data to third parties does not take place, unless it is necessary for the pursuit of our claims or there is a legal obligation in accordance with. Art. 6 para. 1 lit. c DSGVO.

5.
CONTACT

When contacting us (for example, by contact form, e-mail, telephone or via social media), the information of the user to process the contact request and their processing acc. Art. 6 para. 1 lit. b) DSGVO processed. User information can be stored in a Customer Relationship Management System („CRM System“) or comparable request organization. We delete the requests, if they are no longer required. We check the requirement every two years; Furthermore, the legal archiving obligations apply.

6.
AFFECTED RIGHTS

You have the right,

pursuant to Art. 7 para. 3 DSGVO your once granted consent to revoke against us at any time. As a result, we are not allowed to continue the data processing based on this consent for the future;
in accordance with Art. 15 DSGVO, to request information about your personal data processed by us. In particular, you may provide information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been disclosed, the planned retention period, the right of rectification, deletion, limitation of processing or opposition, the existence of a The right to complain, the source of your data, if it was not collected from us, and the existence of automated decision-making including profiling and, where appropriate, meaningful information about their details;
pursuant to Art. 15 DSGVO to demand the correction of incorrect or complete personal data stored with us without delay;
in accordance with Art. 17 DSGVO, to require the deletion of your personal data stored with us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims is;
in accordance with Art. 18 GDPR to demand the restriction of the processing of your personal data, as far as the accuracy of the data is disputed by you, the processing is illegal, you refuse their deletion and we no longer need the data, but you to assert, exercise or Defense of legal claims or you have lodged an objection to the processing pursuant to Art. 21 GDPR;
pursuant to Art. 20 DSGVO to receive your personal data provided to us in a structured, common and machine-readable format or to request the transfer to another person in charge and
to complain to a supervisory authority in accordance with Art.77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office.

7.
DATA PROTECTION IN APPLICATIONS AND IN THE APPLICATION PROCESS

Applications sent electronically or by post to the company’s office will be processed electronically or manually for the purposes of completing the application process. We expressly point out that application documents with „special categories of personal data“ according to Art. 9 DS-GVO (eg a photo, which gives an indication of your ethnic origin, religion or your marital status), with the exception of any severe disability, which you wanting to disclose a free decision are undesirable. You should submit your application without this data. This does not affect your candidate chances. Legal bases for processing are Art. 6 para. 1 p. 1 lit. b) DS-GVO and § 26 BDSG n.F. If an employment relationship with the applicant is received after the completion of the application process, the applicant data will be stored in compliance with relevant data protection legislation. If no job is offered to you after completing the application process, your application letter and documents will be deleted 6 months after the cancellation has been sent in order to be able to satisfy any claims and proof obligations according to AGG.

8.
HOSTING, E-MAIL & NEWSLETTER SHIPPING

a. The hosting services we use through mirumedia (mirumedia IT Services – Owner Michael Rudolph – Heeneser Weg 1 – D-36251 Ludwigsau) serve us for the following purposes: the provision of infrastructure and platform services, computing capacity, storage space and database services , E-mail, security and technical maintenance. Here we, or our hosting providers, process inventory data, contact data, content data, contract data, usage data, meta and communication data of contract partners, users, customers, interested parties and visitors of our online offers on the basis of our legitimate interests in an efficient and secure provision of our online offers acc. Art. 6 para. 1 lit. f DSGVO i. V. m. Art. 28 DSGVO (conclusion of contract processing contract). b. We use the following shipping service providers for e-mail and newsletter delivery:

Mailchimp (The Rocket Science Group, LLC – 675 Ponce de Leon Ave NE – Atlanta, GA 30308 USA),
Postmark (Wildbit, LLC – 225 Chestnut St – Philadelphia, PA 19106 USA)

c. You can subscribe to our newsletter with your voluntary consent by entering your e-mail address and confirming the „double opt-in procedure“. After you have registered, you will receive an e-mail from us confirming your registration with a confirmation link. Only after your click on this link will your e-mail be included in the newsletter mailing list and saved for the purpose of sending e-mails. To meet the legal requirements, we will log your IP address used when you log in, as well as the date and time of the double opt-in (login and confirmation). For the statistical analysis and optimization of our newsletters, we evaluate your user behavior (opening the newsletter, link clicks) with the help of so-called „web beacons“ or „tracking pixels“. At any time, you can object to the tracking and consent to sending the newsletter by clicking on the unsubscribe link at the end of the newsletter. In this case, the newsletter reception will also be terminated. If you disable the display of images in your e-mail software, tracking is also not possible. However, this may have limitations in terms of the features of the newsletter, and included images will not be displayed. We save your data as long as you have subscribed to the newsletter. After logging off, your data will only be stored anonymously for statistical purposes.

9.
ONLINE PRESENCES IN SOCIAL MEDIA

We maintain online presence within social networks and platforms in order to communicate with customers, prospects and users active there and to inform them about our services. When calling the respective networks and platforms, the terms and conditions and the data processing guidelines apply to their respective operators. The US providers are certified under the so-called Privacy Shield and thus obliged to comply with European data protection. When you use and access our profile in the respective network through you, the respective privacy policy and terms of use of the respective network apply. Unless otherwise stated in our data processing instructions, we process users‘ data as long as it communicates with us within social networks and platforms, e.g. send us messages.

10.
COOKIES

Our website uses so-called cookies whose content and purpose are described below. We inform you about this when you visit our website by means of a reference to our privacy policy on the use of cookies for the purposes mentioned above. Our website uses session cookies, persistent cookies and third-party cookies:

Session Cookies: We use so-called „cookies“ to recognize multiple uses of an offer by the same user (for example, to determine your login status when you log in). When you visit our site again, these cookies provide information to automatically recognize you. The information obtained in this way serves to optimize our offers and to give you easier access to our site. If you close the browser or log out, the session cookies will be deleted.
Persistent cookies: These are automatically deleted after a specified period, which may differ depending on the cookie. In the security settings of your browser, you can delete the cookies at any time.
Third party cookies (third party cookies):
Google Analytics (Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA, EU office: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) with IP anonymization enabled („anonymizeIP“) ), whereby the IP addresses are processed only shortened. In addition, the cross-device analysis of website visitors with so-called user ID. The IP address provided by Google Analytics within the framework of Google Analytics will not be merged with other data provided by Google. The use of Google Analytics is for the purpose of analyzing, optimizing and improving our website. The data sent by us and linked to cookies, user IDs (eg user IDs) or advertising IDs will be automatically deleted after 26 months. The deletion of data whose retention period has been reached is done automatically once a month.
Google Adwords with Conversion Tracking (Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA) This conversion tracking is for the purpose of analyzing, optimizing, and operating our advertising and website, by posting on third party websites by viewing our website Website is made aware. The full extent of the data processing is unknown to us. With a logged-in Google account, AdWords will allow the data to be associated with your account. If you do not want this, you’ll need to log out of Google before visiting our website.
Google & Google Adwords remarketing (Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA) Remarketing is designed to target previous visitors to our site to use third-party websites, including the economic operation of our advertising and website, as well as their analysis and optimization , The full extent of the data processing is unknown to us. According to Google, a collection of the data collected through remarketing with your personal data, which may be stored on Google, does not take place, but is processed by a pseudonym.
Embedded Youtube Videos (Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, United States, EU Office: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland) Watch videos via „Enhanced Privacy Mode“ embedded and does not affect your personal video recommendations. The data obtained is transferred to the USA and stored there. This is also done without a user account at Google. If you are logged in to your Google Account, Google may associate the above information with your account. If you do not want this, you will need to log out of your Google Account. Google creates user profiles from such data and uses this data for the purpose of advertising, market research or optimization of its websites.

According to your wishes, you can configure your browser setting. B. decline the acceptance of third-party cookies or all cookies. However, we would like to point out that you may not be able to use all features of our website. For more information, see Case 13. (OPPOSITION LAW) of this Privacy Policy.

11.
SOCIAL-MEDIA-PLUG-INS

We use social media plug-ins on our website as part of the so-called „two-click-solution“ collaboration from the following social networks:

Facebook (EU Headquarters: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland)
Twitter (Twitter Inc., 1355 Market St, Suite 900, San Francisco, California 94103, United States)
Xing (XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany)

When accessing our website, no personal data is transmitted to the providers of the plug-ins. Next to the social network logo or brand, you’ll find a slider that lets you activate the plug-in with a click. After activation, the respective provider of the social network receives the information (including your IP address) that you visited our website. In addition, your personal data will be transmitted to the provider of the plug-in and stored there. Using the functions of the plug-in, e.g. Pressing the „Like“ button, this information will also be transmitted from your browser to the Facebook servers in the US, stored there, and displayed in your Facebook profile and possibly your Facebook friends. The data collected about the user stores the plug-in provider as usage profiles. These are used for purposes of advertising, market research and / or customization of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the purpose of displaying demand-oriented advertising and to inform other users of the social network about the activities of the user on our website. The user is entitled to a right of objection to the formation of these user profiles, whereby one must turn to the exercise of this right to the respective plug-in provider.

12.
LEGAL BASIS

The legal basis for the processing of personal data, if not separately listed below, is our legitimate interest in communicating with users and our external presentation for the purpose of advertising in accordance with Art. 6 para. 1 sentence 1 lit. f) DS-GMO. The legal basis for the sending of the newsletter mentioned in paragraph 8, the measurement of success as well as the storage of the e-mail is your consent acc. Art. 6 para. 1 sentence 1 lit. a) DS-GMO i. In accordance with § 7 (2) no. 3 UWG and for the recording of consent Art. 6 para. 1 sentence 1 lit. f) DS-GVO, as this serves our legitimate interest of legal proof. Insofar as you have given consent to the processing of your personal data to the persons responsible for social networks (see points 9 to 11 of this Privacy Policy), the legal basis is Art. 6 para. 1 sentence 1 lit. a) and Art. 7 DS-BER. The legal basis for the use of cookies mentioned in Section 10 is Art. 6 para. 1 p. Lit. b) DS-GMO, if the cookies are set for the initiation of the contract. Otherwise, there is a legitimate interest in the effective functionality of our website, so that in the case of Art. 6 para. 1 sentence 1 lit. f) DS-GVO is the legal basis. The legal basis for the use of the plug-ins mentioned in Section 11 is our legitimate interest in improving and optimizing our website by increasing our awareness through social networks and the possibility of interacting with you and the users via social networks according to Art. 6 para. 1 p.1 lit. f) DS-GMO.

13.
RIGHT TO OBJECT

If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 (1) sentence 1 lit. f DSGVO, you have the right to object to the processing of your personal data in accordance with Art. 21DSGVO, provided that there are grounds for doing so arising from your particular situation. If you wish to make use of your objection, please send an e-mail to datenschutz@entrafin.de The storage of cookies (see also section 10 of this privacy policy) on your hard disk can generally be prevented by setting your browser settings to „no cookies“ accept „. However, this can result in a functional restriction of our offers. You may opt-out the use of third-party cookies for promotional purposes via the American website (https://optout.aboutads.info) or this European website (http://www.youronlinechoices.com/en / praferenzmanagement /) contradict. You can prevent the collection of data generated by the cookie and related to your use of the website to Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google .com / dlpage / gaoptout? hl = DE As an alternative to the above browser plug-in, you can prevent the collection by Google Analytics by setting the following „opt-out“ -Cookie that will prevent the collection of your data when visiting this website in the future: https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable. This cookie is only valid for our website and your current browser and is only valid until you delete your cookies. In that case you would have to set the cookie again. You can turn off cross-device user analytics in your Google Account under My Data> Personal Information. The deactivation of the function „Facebook Custom Audiences“ is available to logged in users at this link: https://www.facebook.com/settings/?tab=ads#. Furthermore, we refer you to the respective privacy statements of the named services with regard to the individual opt-outs of the respective services mentioned in paragraphs 8 to 11 of this Privacy Policy. In addition, you will also find information about your rights and options for the protection of your personal data. Please note that we can not guarantee or warrant the up-to-dateness of third-party links or services listed in this Privacy Policy. However, we endeavor to review such links at regular and appropriate intervals for their up-to-dateness. If any third party or service link provided by us in this Privacy Policy no longer results in the desired functionality, please let us know at datenschutz@entrafin.de.

PARTNERS & INVESTORS

Trumpf Einkaufsfinanzierung Umlaufvermögen Liquidität Entrafin
Fidor Bank Einkaufsfinanzierung Umlaufvermögen Liquidität Entrafin
Wirtschaftswoche Investor Entrafin Einkaufsfinanzierung Umlaufvermögen
Handelsblatt Investor Entrafin Einkaufsfinanzierung Umlaufvermögen