Privacy policy

Data Protection Information according to the EU General Data Protection Regulation - As of May 2020

We take the protection of your personal data very seriously. Your privacy is an important concern for us.

The following provisions serve to inform you about the processing of personal data in accordance with the requirements of the General Data Protection Regulation (GDPR). This includes fulfilling the information obligations under Articles 12 to 14 of the GDPR, as well as providing information about the data subject rights established by Articles 15 to 22 and Article 34 of the GDPR.

Information about the responsible entity

As the data protection responsible entity, Cofinpro AG, Untermainkai 27-28, 60329 Frankfurt am Main (hereinafter referred to as "provider," "we," or "us") clarifies with this privacy policy the nature, scope, and purpose of the collection and use of data on this website and online offerings.

Data protection officer

Our Data Protection Officer can be reached at: datenschutz@cofinpro.de

or by mail at: 
-Data Protection Officer-
Cofinpro AG
Untermainkai 27-28
D-60329 Frankfurt am Main

We process your personal data in accordance with the applicable legal data protection requirements for the purposes listed below for each group of data subjects:

• Privacy policy for website users
• Privacy policy for social media
• Privacy policy for customers, interested parties, providers, suppliers and other data subjects
• Privacy policy for applicants
• Privacy policy for employees

Use of service providers

Some of the aforementioned processes or services are carried out by carefully selected and commissioned service providers. We transmit or receive personal data of these service providers solely on the basis of a processing contract. If the registered office of a service provider is outside the European Union or the European Economic Area, a third-country transfer takes place. With these service providers, data protection agreements corresponding to legal requirements are contractually established to ensure an adequate level of data protection, and appropriate guarantees are agreed upon.

Information about your rights

You have the right to:

• Request confirmation from us as to whether personal data concerning you is being processed; if so, you have the right to access this personal data and the information listed in Article 15 of the GDPR.
• Request the release of your data in the restrictions of Article 20 of the GDPR in a common electronic, machine-readable format. This also includes disclosure (as far as possible) to another controller directly nominated by you.
• Request the correction of your data if it is incorrect, inaccurate, and/or incomplete. Correction also includes supplementation by explanations or communication.
• Request the immediate deletion of personal data concerning you if one of the grounds listed in Article 17 of the GDPR applies. Unfortunately, we cannot delete data subject to a legal retention period. If you wish for us to never collect data from you or contact you again, we will store your contact details on a blocking list.
• Revoke any consent given by you for the future without any disadvantage to you.
• Request the restriction of processing if one of the conditions listed in Article 18 of the GDPR is met.
• Object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims (Article 21 of the GDPR).
• Without prejudice to any other administrative or judicial remedy, if you believe that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint with:
  • Our Data Protection Officer (see contact details above)
  • A supervisory authority in the member state of your residence, your place of work, or the place of the alleged violation. The competent supervisory authority for us is the Hessian Data Protection Authority.

If you have any questions or comments regarding data protection (for example, concerning access to and updating of your personal data), please contact our Data Protection Officer under the keyword "Datenschutz" (privacy).

Deletion of your data

Unless otherwise specified in more detailed privacy statements, we delete your personal data when the contractual relationship with you is terminated, you have exercised your right to deletion, all mutual claims have been fulfilled, and there are no other legal retention obligations or legal justifications for storage. Commercial retention periods for financial data usually range up to 10 years. Furthermore, we may retain data for as long as necessary to protect ourselves against claims that could be made against us. These periods may extend up to 30 years.

Changes to the privacy policy

We reserve the right to change our privacy policy if necessary and to publish it at this location. Please check this page regularly. The updated statement takes effect upon publication, subject to applicable legal regulations. If we have already collected data about you that is affected by the change and/or subject to a legal obligation to inform, we will additionally inform you about significant changes to our privacy policy.