Information on data protection and privacy for the website www.the-plant.de

Data protection and privacy settings
Click on this [borlabs-cookie type=”btn-cookie-preference” title=”Link” element=”link”/] to check your data protection and privacy settings or to revise them.

Valid from 15 May 2018
The protection of your privacy and your personal data is very important to us. We want to collect and process personal data about you only with your knowledge or consent. Personal data in the sense of this information is all information that can be related to your person, e.g. name, address, email and IP address, user behaviour.
We therefore inform you which information we may store and for which purposes we use it. We undertake to observe national and European data protection regulations.

1. Responsible body and data protection officer
(1) The responsible body in accordance with Article 4 para. 7 of the General Data Protection Regulation (GDPR), or the service provider in accordance with §13 of the German Telemedia Act (Telemediengesetz, TMG), respectively, is:

Investa Capital Management GmbH
Düsseldorfer Strasse 15
65760 Eschborn, Germany

(2) The data protection officer of both responsible bodies can be reached at:

Investa Capital Management GmbH
Der Datenschutzbeauftragte / The data protection officer
Düsseldorfer Strasse 15
65760 Eschborn, Germany
Email: info@the-plant.de

2. Source of personal data
We process personal data that we receive from you throughout the duration of your visit to our website, when you contact us by email, or via a contact form.

3. Categories of personal data processed
(1) If you visit or use our website purely for informational purposes, i.e. if you do not register or send us information in any other way, we only collect the personal data that your browser sends to our server. If you wish to view our website, we collect the following data which is technically necessary for us to display our website and to ensure its stability and security:

– Your IP address,
– Date, time and duration of your visit,
– Content of request (concrete page),
– Access status / http status code,
– Amount of data transmitted in each case,
– Website from which the request originates,
– Your browser,
– Your operating system.

This data is for internal statistical purposes only.
(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files which are stored on your hard disk in relation to the browser you are using and through which certain information is sent to the site that set the cookie. Cookies cannot run programmes or transfer viruses to your computer. They serve to make the Internet offer as a whole more user-friendly and effective.
(3) We use cookies to identify you for subsequent visits if you have an account with us. Otherwise you would have to log in again each time you visit our website.
(4) Most browsers are set to accept cookies. However, you can deactivate the storage of cookies in your browser at any time, or set your browser so that you receive a message as soon as cookies are sent. However, please note that in such a case you may not be able to use all functions of this website.
(5) This stored information is stored separately from any other data that may be provided to us. In particular, the cookie data is not linked to your other data.

4. Further functions and offers of our website
(1) In addition to the purely informational use of our website, we offer a variety of services which you can use if you are interested. As a rule, you have to provide other personal data for this which we use to provide the respective service and to which the aforementioned data processing principles apply.
(2) When you contact us by email or via a contact form, the data you provide (your email address, your surname and first name and, if applicable, your telephone number) will be stored by us to answer your questions. We either delete the data arising in this connection after storage is no longer required, or restrict processing if there are legal storage obligations.

5. Google Universal Analytics with IP anonymisation
(1) This website uses Google Universal Analytics with IP anonymisation, a web analysis service of Google Inc. (“Google”). Google Universal Analytics uses “Cookies”. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, by activating IP anonymisation on this website, your IP address will first be shortened by Google within member states of the European Union, or in other signatory states to the Agreement on the European Economic Area. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, for compiling reports on website activity, and for providing other services relating to website activity and internet usage to the operator of this website.
(2) The IP address transmitted by your browser as part of Google Universal Analytics is not merged with other Google data.
(3) In addition to the cookie settings of your browser, you can prevent the data generated by the cookie and related to your use of the website (including your IP address) from being sent to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
(4) We would like to point out that on this website, Google Universal Analytics has been extended by the code “ga(‘set’, ‘anonymizeIp’, true);” in order to ensure anonymous recording of IP addresses (so-called IP masking). As a result, IP addresses are further processed in a shortened form, so that a direct personal reference can be excluded.
(5) We use Google Analytics to analyse and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield.
(6) Information of the third party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: http://google.com/analytics/terms/de.html, Privacy overview: https://www.google.com/analytics/learn/privacy.html?hl=de, as well as data protection and privacy statement: http://www.google.de/intl/de/policies/privacy.

6. Integration of the Facebook pixel
(1) On this website, we use the visitor action pixel of Facebook on the basis of our justified interest in the analysis, optimisation, and economic operation of our online offer.
This pixel allows us to track users’ actions after they have seen or clicked on a Facebook ad. This takes place in order to capture the effectiveness of the Facebook ads, both for statistical purposes and for market research purposes. The data is collected anonymously, so that the personal data of individual users is not visible to us.
(2) By means of the Facebook pixel, Facebook is able to determine the visitors of our offer as a target group for the presentation of ads, so-called “Facebook Ads”. Facebook stores these data as user profiles and uses them for the purposes of advertising, market research, and/or the demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the purpose of presenting targeted advertising and to inform other users of the social network about your activities on our website.
(2) We have no influence on the collected data and data processing procedures, nor are we aware of the full extent of the data collection, the purposes, or the storage periods. We also do not have any information regarding the deletion of the collected data by Facebook. Further information on data processing by Facebook can be found at https://www.facebook.com/about/privacy.
(3) The visitor action pixel is only used with your consent in the form of the “opt-out” procedure. When you visit our website, you will be informed about the use of the Facebook pixel. By clicking on the greyed box you have the possibility to prevent the use of the Facebook pixel.

7. Categories of recipients of personal data
(1) We have some of the aforementioned processes and services carried out by carefully selected service providers commissioned in accordance with data protection regulations. These external service providers are bound by our instructions and are regularly monitored. They will not pass on your data to third parties.
(2) With regard to the passing on of data to other recipients, we only pass on information about you if this is required by law, if you have consented to it, or if we are authorised to pass it on.

8. Purposes for which the personal data are to be processed and the legal basis of the processing
We process your personal data in compliance with the applicable statutory data protection regulations. The processing is lawful if the following conditions are met:
– Consent (Article 6 para. 1 a) GDPR:
The lawfulness for the processing of personal data is given when you give your consent to the processing for specific purposes (e.g. processing of your request, use of the data for marketing purposes). A granted consent can be revoked at any time with effect for the future. This also applies to the revocation of declarations of consent that were issued to us before the GDPR came into force, i.e. before 25 May 2018.
– Due to legal obligations (Article 6 para. 1 c) GDPR:
The GBP2 GmbH & Co. Bauprojekt KG is subject to various legal obligations. These include:
– Commercial and tax storage regulations according to the German Commercial Code and General Fiscal Law,
– Compliance with fiscal control and reporting obligations.
– As part of the weighing of interests (Article 6 para. 1 f) GDPR):
As far as necessary, we process your data beyond the actual fulfilment of the contract to protect our legitimate interests or those of third parties. Examples:
– Assertion of legal claims and defence in legal disputes,
– Ensuring IT security and IT operation,
– To analyse and improve the use of our website.

9. The intention to transfer the personal data to a third country or an international organisation
An active transfer of personal data to a third country will only take place if this has been expressly indicated in the context of the aforementioned services.

10. Criteria for determining the period for which personal data are stored
(1) The data will be stored in accordance with the statutory provisions on data processing and in compliance with statutory retention periods. We process and use your data exclusively for the purposes to which you have authorised us and for as long as the data is required for these purposes.
2. When the data are no longer necessary for the purpose or for complying with legal obligations, they will, as a rule, be erased, unless their further processing – limited in time and wherever appropriate – is necessary for the following purposes:
– The fulfilment of commercial and tax law retention obligations: In particular the German Civil Code (Handelsgesetzbuch, HGB) and General Fiscal Law. (Abgabenordnung, AO) According to these, the retention and documentation periods are specified for up to ten years.
– The preservation of evidence within the framework of the legal statute of limitations: According to §§195 ff. of the German Civil Code (Bürgerliches Gesetzbuch, BGB), the regular limitation period is three years, but under special circumstances up to 30 years.

11. Your data protection rights
(1) Every data subject has the Right of Access under Article 15 GDPR, the Right to Rectification under Article 16 GDPR, the Right to Erasure under Article 17 GDPR, the Right to Restriction of Processing under Article 18 GDPR, the Right to Object under Article 21 GDPR, and the Right to Data Portability under Article 20 GDPR. The Right of Access and the Right to Erasure are subject to the restrictions in accordance with §§34 and 35 German Data Protection Act (Bundesdatenschutzgesetz, BDSG) Moreover, there is also a Right to Lodge a Complaint with a Supervisory Authority (Article 77 GDPR in conjunction with §19 German Data Protection Act).
(2) You can revoke your consent to the processing of personal data at any time with effect for the future. This also applies to the revocation of declarations of consent that were issued to us before the General Data Protection Regulation came into force, i.e. before 25 May 2018.
(3) You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 para. 1 e) GDPR (data processing for the performance of a task carried out in the public interest) and Article 6 para. 1 f) GDPR (data processing based on a weighing of interests).
If you lodge an objection, we will no longer process your personal data unless we can prove compelling reasons for processing worthy of protection that outweigh your interests, rights, and freedoms, or unless the processing serves to assert, exercise, or defend legal claims.
The objection can be made informally and should be addressed, if possible, to

Investa Capital Management GmbH
Der Datenschutzbeauftragte / The data protection officer
Düsseldorfer Strasse 15
65760 Eschborn, Germany
Email: info@the-plant.de

12. Obligation to provide and possible consequences of not providing personal data
In the context of the use of our offers, you must provide those personal data which are necessary to fulfil the purpose, or which we are legally obliged to collect. Without this data, we will normally not be able to conclude or execute the contract with you.

13. Changes to the data protection and privacy information
We continuously develop and optimise our services. So it may be that we add new functionalities. Should this influence the way in which your personal data is processed, we will inform you in a timely manner in our data protection and privacy information.