We are pleased that you are interested in our website www.ri-management.de (‘website’) and our firm. This website is operated by RI Invest GmbH & Cie. KG (hereinafter ‘RI Invest’ or ‘we’/‘us’/‘our’) and offers you, the user (hereinafter ‘user’ or ‘you’/‘your’), the opportunity to learn about our company and our services and to contact us if you are interested.
The following provides you information about the data we collect and to what end we use it if you visit our website or contact us. This privacy policy explains the legal grounds for collecting and using data and the purpose for which it is done. Furthermore, it informs you about the rights to which you are entitled in connection with our use of your personal data. If you have questions about our use of your personal data, please contact us, the controller (contact details in section 1).
The operator of this website and, by extension, the controller of the processing of data is:
RI Invest GmbH & Cie. KG
Fuhlentwiete 10
D-20355 Hamburg
Telephone: +49 (0)40 80809200
E-Mail: info@ri-partners.de
Some data processing procedures are only possible with your explicit consent. You may at any time withdraw consent that you have previously given with effect for the future. You may do so by sending us a simple email (see contact details in section 1).
The lawfulness of data processing up to the time of withdrawal will not be affected by this withdrawal of consent.
We have appointed a data protection officer. You can contact her at:
Kerstin Ann-Susann Schäfer, PhD (UCT)
Kaschae Datenschutz & Compliance GmbH
An der Alster 62
20099 Hamburg
E-Mail: kerstin.schaefer@kaschae.de
Or:
Different types of personal data are collected when you visit this website.
Personal data is information that is matched or can be matched with you personally, either directly or indirectly, e.g. your name, address, email address, IP address and usage patterns.
Personal data is generally only collected and processed if such action is authorised by a legal standard or if you have given your consent to such action. The data is erased as soon as the purpose for its processing no longer applies unless you have consented to its further usage or there exist statutory retention periods conflicting with such erasure. The following individual data processing operations collect personal data:
5.1 Description of the data processing
Users can visit our website without registering. When visiting our website and whenever you access a file, information is automatically sent to our website’s server by the browser being used on your device. RI Management and the hosting provider temporarily collect this information in what are called server log files. The information includes:
This data is collected automatically as soon as you access our website. This data is not merged with other data sources.
5.2 Legal grounds and purpose
The legal grounds for processing data are provided in General Data Protection Regulation (‘GDPR’) Article 6(1)(f), which authorises processing for a legitimate interest unless the user has overriding interests, basic rights or basic freedoms that conflict with our legitimate interest.
It is necessary for this data to be stored temporarily so that the website’s content can be displayed to the user. It is therefore required to collect this information for the display of our website offering. The user’s IP address must also be stored for the duration of the session for this reason. Data is stored in log files to ensure the functionality of the website and optimise it in order to improve our services. This additionally serves the purpose of ensuring the security of our IT systems. Therefore, we reserve the right to review the server log files at a later date if there are tangible indicators of unlawful usage. We also have a legitimate interest within the meaning of GDPR Article 6(1)(f) in processing data for these purposes.
5.3 Duration of storage and option to object
This data is erased if further retention is not required for the purpose for which it is stored. For the purpose of providing the website, this is the case when the relevant session ends. This is the case after seven days when the data is stored in log files. Data retention for a longer period is possible if the users’ IP addresses are erased or truncated in such a way that the data cannot be matched with the user accessing the website.
It is absolutely necessary to collect data in order to provide the website and absolutely necessary to store the data in log files in order to operate the website. Users consequently do not have an option to object to these actions.
6.1 Description of the data processing
We treat personal data confidentially and normally do not disclose it to third parties unless required for the provision of our website or to respond to or process an enquiry, or you have given your consent to the processing of the data or we are legally required to disclose the data.
IT service providers are engaged as external contractors for the provision of our website. We select and contract these providers carefully, and they are required to follow our instructions and are regularly monitored.
Depending on the enquiry, we partner with external service providers to process and resolve enquiries and obtain their support on a fully or partially contracted-out basis when performing contracts that we have entered. Personal data is only transferred to these service providers for the purpose of satisfying contractual obligations.
6.2 Purpose and legal grounds
Data is disclosed in this manner on the grounds provided in GDPR Article 6(1)(b) if your enquiry is connected to the performance of a contract or if the disclosure is required in order to take steps prior to entering a contract. In other situations, the processing is based on your consent under GDPR Article 6(1)(a) and/or our legitimate interests under GDPR Article 6(1)(f), since we have a legitimate interest in the efficient processing of enquiries directed towards us and in the design of our website. Each service provider only receives the data that is required for the performance of the relevant service. These service providers are required to treat your data confidentially.
This website may occasionally contain interactive links to third-party websites for which we have no responsibility. We do not have any influence over the content and design of external pages that are linked or of websites that the user accesses via these links. The relevant provider has sole responsibility for the content and design of these websites and for compliance with provisions of data protection law.
This website uses SSL and/or TSL encryption for security reasons and to protect the transmission of confidential information, such as orders or queries you send to us. You can tell that a connection is encrypted by looking at the address line of your browser to see if the ‘http://’ has changed to ‘https://’ and if the line contains a padlock icon.
If SSL and/or TLS encryption is activated, the data you send us cannot be viewed by third parties.
However, please note that transmission of data via the Internet (e.g. in email communications) may involve security loopholes. Complete protection of data from third-party access is not possible.
You have the right at any time to obtain information regarding the origin, recipient and purpose of your stored personal data free of charge. You also have the right to obtain the rectification, blocking or erasure of this data. To do this, or for other queries regarding the issue of data protection, you can contact us at any time using the contact details in section 1. You also have the right to lodge a complaint with the relevant supervisory authority. You, the data subject, have the following individual rights that you may enforce against us:
9.1 Right to access
You may obtain confirmation as to whether or not personal data concerning you is being processed by us. If such processing does take place, you can obtain information about the following:
You have the right to be informed about the appropriate safeguards under GDPR Article 46 if your data is transferred to a third country or international organisation.
9.2 Right to rectification
You have the right to obtain the immediate rectification of incorrect or incomplete personal data concerning you.
9.3 Right to restriction of processing
You have the right to obtain from us the restriction of processing where one of the following conditions has been met:
9.4 Right to erasure
You are entitled to obtain from us the erasure of personal data concerning you without delay and we will be obliged to erase this data without delay where one of the following grounds applies:
9.5 Right to information
If you have exercised your rights to rectification, erasure or restriction of processing against us, we will be required to inform all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure of the data or the restriction of its processing unless such action proves to be impossible or would involve disproportionate effort. You have the right to be informed by us about those recipients.
9.6 Right to data portability
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another controller without hindrance from the controller to whom the personal data was provided, on condition that:
In exercising this right, you can obtain the personal data transmitted directly from one controller to another, where technically feasible. This cannot adversely affect the freedoms and rights of others. The right to data portability does not apply to the processing of personal data which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
9.7 Right to objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on one of the following:
You also have the right to object to any profiling based on the above forms of processing.
Where we process your personal data for direct-marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. The right to objection includes profiling if it is related to such direct marketing.
If we process your personal data for scientific or historical-research purposes or statistical purposes, you also have the right, on grounds relating to your particular situation, to object to the processing of your personal data unless the processing is necessary for the performance of a task carried out in the public interest.
9.8 Right to lodge a complaint with a supervisory authority
In the event of violations of data protection law, the data subject has the right to lodge a complaint with the supervisory authority. A list of the Data Protection Commissioners and their contact details may be found at the following link:
www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
In order to ensure that this privacy policy corresponds with legal requirements, we reserve the right to amend it at any time. This also applies if the privacy policy must be adapted because of a change in our offering over the website. The new privacy policy will apply as of the user’s next visit to the website.
Updated August 2019
Copyright RI Invest GmbH & Cie. KG © 2021. All rights reserved.