Postera Capital GmbH (“we” or “us”) is committed to safeguarding the privacy of visitors to our website (“you”). By means of this data protection information / privacy policy, we would like to inform you of the nature, scope, and purpose of the processing of the personal data on our website. Furthermore, we would like to inform you of the rights to which you are entitled.
- Name and address of the data controller
The controller for the purposes of the General Data Protection Regulation (“GDPR“) and the German Federal Data Protection Law New (“BDSG-New“) is:
Postera Capital GmbH
Wilhelm-Tell-Str. 26
40219 Düsseldorf
info(at)postera.io
For further information and questions, or if you wish to exercise your rights (detailed information can be found under section 7 below), you may, at any time, contact us at the contact details indicated above.
- Processing purposes and legal basis for the processing activities
We will comply with the applicable data protection laws in relation to the processing of personal data. We will process personal data of the users of this website for the following purposes:
a) Log Files
The website collects a series of general data and information when you calls up our website. This general data and information are stored in the server log files.
We will collect the following information:
- the browser types and versions,
- the operating system,
- the website from which you reach our website (so-called referrers),
- the sub-websites,
- the date and time of access to our website,
- an Internet protocol address (IP address), and
- the Internet service provider.
When using these general data and information, we do not draw any conclusions about you. Rather, this information is needed to
- deliver the content of our website correctly,
- ensure the long-term viability of our information technology systems and website technology, and
- for criminal prosecution in case of a cyber-attack.
The data of the server log files are stored separately from all personal data provided by you. We process data of the server log files based on Article 6 (1) f GDPR. Our legitimate interests are to ensure that the website (and the respective services) function properly from a technical point of view and to detect and prosecute cyber-attacks.
The data of the server log files are deleted no later than 14 days after collection, unless a legal justification or statutory retention obligation exists for the continued retention.
b) Contact possibility via e-mail and contact form
If you contact us by e-mail or via our contact form, the personal data transmitted by you are automatically stored. Such personal data transmitted on a voluntary basis are stored for the purpose of processing your request and/or contacting you. This processing activity can be based on Article 6 (1) f GDPR. Our legitimate interest is the enabling of an easy communication platform with you. The information received will be automatically deleted no later than six months after the contact request was fulfilled and no legal justification (e.g. continued client relationship) or statutory retention obligation exists for the continued retention.
c) Newsletter
If you sign up to our newsletter on our website, we will process your e-mail address provided by you for the purpose of receiving newsletters on our products and upcoming events from us. This processing is based on your consent obtained when clicking “subscribe”. We will delete your e-mail address used for this purpose after one year, unless you have reconfirmed your consent in receiving our newsletter.
d) Cookies and Tracking Tools
Google Analytics
This website uses Google Analytics, a web analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Google Analytics cookies are stored based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.
IP anonymization
We have activated the IP anonymization feature on this website. Your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.
Browser plugin
You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout.
Objecting to the collection of data
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics.
For more information about how Google Analytics handles user data, see Google’s privacy policy: support.google.com/analytics/answer/6004245.
Outsourced data processing
We have entered into an agreement with Google for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographic data collection by Google Analytics
This website uses Google Analytics’ demographic features. This allows reports to be generated containing statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google and third-party visitor data. This collected data cannot be attributed to any specific individual person. You can disable this feature at any time by adjusting the ads settings in your Google account or you can forbid the collection of your data by Google Analytics as described in the section “Refusal of data collection”.
Google Tag Manager
This website uses Google Tag Manager. This service allows website tags to be managed via an interface. Google Tag Manager only implements tags. This means that no cookies are set and no personal data is recorded. Google Tag Manager triggers other tags which, in turn, may record data. However, Google Tag Manager does not access this data. If tags have been disabled at the domain or cookie level, this remains in place for all tracking tags if these are implemented with Google Tag Manager. You can find out more about Google Tag Manager by clicking the following link: http://www.google.de/tagmanager/use-policy.html
- Registered Area
We offer you the possibility to retrieve financial analyses from a password protected part of our website. You are able to login to this part of our website with your access data received separately. We will process your login data for the purposes of offering you this service.
This data processing is based on Article 6 (1) f GDPR. Our legitimate interest is the offering of additional services.
- Data processing based on your consent (Article 6 (1) c GDPR)
Where we process personal data based on your consent (Article 6 (1) c GDPR), we will ask for your consent on a case-by-case basis.
Where processing is based on consent, you have the right to withdraw your consent to processing of your personal data at any time with effect for the future. If you wish to exercise your right to withdraw consent with effect for the future, you can directly contact us at the contact details indicated above (see section 1).
- Data transfer
In the context of our newsletter offer, we cooperate with MailChimp LLC, with seat in the USA. In order to ensure a protection of your personal data also while transferring your personal information outside the European Economic Area to a country that does not have data protection laws substantially similar to those in the EEA, we have implemented sufficient safeguards to protect your privacy rights and provide you with remedies in the unlikely event that your personal information is misused. You are entitled to obtain a copy of the individual safeguards.
- Existence of automated decision-making
We do not use automatic decision-making or profiling.
- Your Rights
Subject to applicable data privacy laws, you have the following rights regarding the processing of your personal data:
- You have the right to obtain confirmation as to whether or not personal data concerning you are being processed and, where this is the case, access to the personal data and information (Article 15 GDPR).
- You have the right to rectification of personal data concerning you (Article 16 GDPR).
- You have the right to obtain the erasure of personal data concerning you in accordance with Article 17 GDPR (“right to be forgotten”).
- You have the right to obtain restriction of processing (Article 18 GDPR).
- You have the right to data portability in accordance with Article 20 GDPR.
- You have the right not to be subject to a decision based solely on automated processing, including profiling (Article 21 GDPR).
- You have the right to object to the processing of personal data concerning you (Article 21 GDPR). For details, please see below.
————
Information regarding the right to object, Article 21 GDPR
1. You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you, which is based on Article 6 (1) e GDPR (data processing for purposes of public interest) or Article 6 (1) f GDPR (data processing for purposes of prevailing legitimate interests pursued by us). This also applies to profiling based on these provisions.
2. If you object, we will no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.
If you would like to object, please contact us at:
Postera Capital GmbH
Wilhelm-Tell-Str. 26
40219 Düsseldorf
info(at)postera.io
————
If you wish to exercise any of these rights, you may contact us. You also has the right, at any time, to lodge a complaint about the processing activities of your personal data by us with the competent supervisory authority (Article 77 GDPR):
Landesbeauftragte für Datenschutz und Informationsfreiheit
Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Tel.: 0211/38424-0
Fax: 0211/38424-10
E-Mail: poststelle@ldi.nrw.de