Privacy Policy
The protection of your privacy is very important to us. As Marvest GmbH and operator of the crowdfunding platform www.marvest.de (hereinafter also referred to as “platform” or “website”), we attach great importance to the protection and confidentiality of your data. The collection and use of your personal data takes place exclusively within the framework of the statutory provisions, in particular the applicable data protection law (EU General Data Protection Regulation (GDPR) and the German Data Protection Act (Bundesdatenschutzgesetz – BDSG)). Below we inform you in detail about the handling of your data.
Responsible person in the sense of data protection
Marvest GmbH
Elbchaussee 370
22609 Hamburg
Managing Director: Nikolaus Reus
Tel.: +49 (0)40 / 88881 2020
E-Mail: info@marvest.de
Website: www.marvest.de
You can reach our data protection officer as follows:
Tel.: +49 (0)40 / 88881 2020
E-Mail: info@marvest.de
Personal data:
Personal data are individual details about personal or factual circumstances of a specific or identifiable natural person. This includes, for example, your name, address, date of birth, user name, password, e-mail address and payment data, but also your IP address. In the following, we describe how we process your personal data.
Provision of the website and creation of log files:
You can visit our website at any time without having to register or provide any personal details. Each time you visit our website, however, our system automatically collects data and information from the computer system of the accessing computer.
Description and scope of data processing:
The following data is automatically collected when a page is called up:
- Browser type and version
- The operating system used and its user interface
- Language and version of the browser software
- Website from which you visit us (referrer URL)
- Website you are visiting
- Access status/HTTP status code
- Date and time of your access
- Time zone difference to Greenwich Mean Time (GMT)
- Your Internet Protocol (IP) address
Legal basis for data processing:
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.
Purpose of data processing:
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the IP address of the user must remain stored for the duration of the session. The purpose of storage in log files is to ensure the functionality and stability of the website. The data is also used to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes also include our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f GDPR.
Duration of storage:
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data to provide the website, this is the case when the respective session is terminated.
Registration
You can register on our website to receive detailed project information and invest in projects. We process your data as follows:
Description and scope of data processing: The data you enter in the input mask will be transmitted to us and stored. The data will not be passed on to third parties.
The following data will also be stored at the time of registration:
- The IP address of the user
- Date and time of registration.
As part of the registration process, the user’s consent to the processing of this data is obtained.
We use your e-mail address and telephone number as a contact method for information and queries about the processing status. We would like to point out that communication by e-mail can potentially be insecure. The provision of personal data by you is not legally required and in the case of pure information also not contractually required. You are not obliged to provide us with personal data. If you do not provide us with the required personal data, we will not be able to provide you with detailed project information and you will not be able to invest in projects.
Legal basis for data processing:
The legal basis for data processing is Art. 6 para. 1 lit. a GDPR if the user has given his consent. If the data input serves to fulfil a contract to which the user is a party or if it serves to implement pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR.
Purpose of data processing:
If you only request detailed project information, the data input serves to send you this information. If you invest in projects, the data input is used for the purpose of concluding and executing the loan agreement.
Duration of storage:
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. After completion of the contract, the storage only takes place for the legally prescribed periods. Your personal data will then be deleted unless you have agreed to further use or processing.
Newsletter
Description and scope of data processing:
When registering for our free newsletter, the data from the input mask are transmitted to us. Your consent will be obtained for the processing of your data during the registration process and reference will be made to this data protection declaration.
The following data will also be stored at the time the registration is sent:
- The IP address of the user
- Date and time of registration.
If you open one of our newsletters or click on a link in it, this may be logged via the web server (date, time, e-mail address). This serves internal statistical purposes, so that we can tailor our information offer even better to the interests of our newsletter users. This is also our legitimate interest in data processing. This data is not combined to form personal user profiles.
The provision of personal data by you is neither legally nor contractually prescribed nor necessary for the conclusion of a contract. You are not obliged to provide us with personal data. If personal data is not made available, we will not be able to send you a newsletter, as long as this information is mandatory.
Legal basis for data processing:
The legal basis for the processing of data after registration for the newsletter is your consent (Art. 6 para. 1 lit. a GDPR). The legal basis for any statistical evaluations carried out is Art. 6 para. 1 lit. f GDPR.
Purpose of data processing:
The collection of your e-mail address serves to send you the newsletter. If other personal data is voluntarily provided by you during the registration process, this serves to individualise the newsletter and to prevent misuse of the services or the e-mail address used.
Duration of storage:
The personal data provided by you will be stored until you revoke your consent to receive the newsletter. Upon receipt of your revocation, your e-mail address will be provided with a blocking notice in order to document that you no longer wish to be contacted by us by e-mail in the future. Any other personal data collected with the newsletter registration will be deleted immediately. The blocking notice and your e-mail address will be deleted three years after the end of the calendar year in which the blocking notice was set.
Newsletter distribution via MailChimp
Our e-mail newsletter is distributed by the technical service provider The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (http://www.mailchimp.com/), to whom we pass on the data you provided when registering for the newsletter. This disclosure is made in accordance with Art. 6 Para. 1 lit. f GDPR and serves our legitimate interest in the use of an effective, secure and user-friendly newsletter system. Please note that your data is usually transferred to a MailChimp server in the USA and stored there.
MailChimp uses this information for the dispatch and statistical evaluation of the newsletter on our behalf. For evaluation purposes, the e-mails sent contain so-called web beacons or tracking pixels, which represent one-pixel image files stored on our website. This enables us to determine whether a newsletter message has been opened and which links have been clicked. Technical information is also recorded (e.g. time of access, IP address, browser type and operating system). The data is collected exclusively under a pseudonym and is not linked to your other personal data, a direct personal reference is excluded. This data is used exclusively for statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.
If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
In addition, MailChimp can use this data in accordance with Art. 6 Para. 1 lit. f GDPR itself on the basis of its own legitimate interest in the demand-oriented design and optimisation of the service as well as for market research purposes in order to determine, for example, from which countries the recipients come. However, MailChimp does not use the data of our newsletter recipients to write to them itself or to pass them on to third parties.
In order to protect your data in the USA, we have concluded a data processing agreement with MailChimp based on the standard contractual clauses of the European Commission to enable the transfer of your personal data to MailChimp. This data processing agreement can be viewed at the following Internet address if you are interested: http://mailchimp.com/legal/forms/data-processing-agreement/.
Furthermore, MailChimp is certified under the US-European data protection agreement “Privacy Shield” and is thus committed to complying with EU data protection regulations.
You can view the privacy policy of MailChimp here: https://mailchimp.com/legal/privacy/.
Contact form and e-mail contact
Description and scope of data processing:
By sending a contact request via our contact form, the data entered in the input mask is transmitted to us and stored. At the time the message is sent, the following data will also be stored:
- The IP address of the user
- Date and time of the message dispatch.
The provision of personal data by you is neither legally nor contractually prescribed nor necessary for the conclusion of a contract. You are not obliged to provide us with personal data. If personal data is not provided, this means that it is not possible to establish contact via the contact form, insofar as this is mandatory information.
Alternatively, you can contact us via the e-mail address provided. In this case your personal data transmitted with the e-mail will be stored.
Legal basis for data processing:
The legal basis for the processing of data transmitted via the contact form or in the course of an e-mail is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in answering the sender’s contact request. If the purpose of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Article 6(1)(b) DS Block Exemption Regulation.
Purpose of the data processing:
The processing of the personal data from the input mask serves alone for the treatment of the contact inquiry. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
Duration of storage:
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with you has ended, unless contractual or legal obligations prevent a deletion. The conversation ends when it can be inferred from the circumstances that the facts in question have been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
Transmission of personal data:
Marvest GmbH will not pass on your data to third parties unless you have given your explicit prior consent to such a transfer or the transfer is required or permitted by law. Excluded from this are our service partners who are required to process the contractual relationship and who have been commissioned by us to process personal data in accordance with our instructions within the framework of an order processing contract, as well as those project owners to whom you grant a loan and who require the necessary personal data (name, address, date of birth, e-mail address, telephone number, account data, tax identification number) for the implementation and processing of the loan agreement. We will neither sell your data to third parties nor otherwise pass them on to third parties for advertising purposes. Our employees are bound to secrecy and compliance with data protection regulations.
Cookies
Description and scope of data processing:
In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your mobile device.
You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or whether to exclude the acceptance of cookies in certain cases or in general. If cookies are not accepted, the functionality of our website may be restricted. The following links will show you how to adjust the settings for the following common browsers:
Chrome: https://support.google.com/chrome/answer/95647?hl=de
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Safari: https://support.apple.com/kb/PH21411?viewlocale=de_DE&locale=de_DE
Legal basis for data processing:
If personal data are processed using cookies, the legal basis is Art. 6 para. 1 lit. f GDPR.
Purpose of data processing:
The purpose of processing is to make visiting our website attractive and to enable the use of certain functions. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized also after a page change.
The user data collected through cookies are not used to create user profiles.
Duration of storage:
So called transient cookies are automatically deleted when you close your browser. This includes session cookies in particular. They store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This allows your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close your browser. Permanent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
Website analysis
Use of Google Analytics
Our website [URL] uses Google Analytics, a web analysis service of Google Inc, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) in Universal Analytics mode. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus analyse the activities of a user across devices. Google Analytics uses cookies, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website will generally be transmitted to and stored by Google on servers in the United States. Since this website uses Google Analytics with the extension “_anonymizeIp()”, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. Our legitimate interest in data processing also lies in these purposes. The legal basis for the use of Google Analytics is Art. 6 para. 1 lit. f GDPR and, with your consent, Art. 6 para. 1 lit. a GDPR. The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month. You can find further information on the terms of use and data protection at https://www.google.com/analytics/terms/de.html, or at https://policies.google.com/?hl=de.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de. Opt-out cookies prevent the future collection of your data when you visit this website. To prevent Universal Analytics from capturing across multiple devices, you must opt-out on all systems in use.
Use of Google Fonts
This website uses the product Google Fonts of Google LLC, this is an offering of fonts on the internet. By the integration of the service on our website at least the following data will be transmitted to Google, Inc. located in the USA:
Name of the browser used, version of the browser, website from which the request was initiated, operating system of the user, screen resolution of the user as well as IP address of the user and language settings of the browser or operating system used by the user, as well as search terms.
Data is transmitted regardless of whether you have a Google user account that you are logged on to or whether you do not have a user account. If you are logged in, this data is assigned directly to your account. If you do not wish to be assigned to your profile, please log out before calling up the website. By using this website, you consent to the collection, processing and use of automated data by Google Inc. and third parties. The data protection regulations for Google services can be found here: https://policies.google.com/privacy?hl=de.
Online Marketing
Use of Google Conversion Tracking
When using the Google AdWords service, we use what is known as conversion tracking. When you click on an ad placed by Google, a conversion tracking cookie is placed on your computer/device. These cookies lose their validity after 30 days, contain no personal data and are therefore not used for personal identification. The information collected through the Conversion cookie is used to compile conversion statistics for AdWords customers who have opted for Conversion Tracking.
Legal basis for this data processing is Art. 6 para. 1 lit. f GDPR.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. In addition, you can deactivate interest-related ads on Google and interest-related Google ads on the web (within the Google display network) in your browser by activating the “Off” button http://www.google.de/settings/ads or deactivating it at http://www.aboutads.info/choices/. You can find further information on your settings in this regard and data protection at Google at: https://www.google.de/intl/de/policies/privacy/?fg=1 /.
Use of Google Tag Manager
Google Tag Manager is a solution that allows marketers to manage website tags through a single interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain and does not collect any personal information. The tool triggers other tags that may themselves collect data. Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, it will persist for all tracking tags implemented with Google Tag Manager. http://www.google.de/tagmanager/use-policy.html.
Use of Facebook Custom Audiences
On our website, the Facebook Custom Audience function of the social network Facebook is used if you have given Facebook permission to do so. The Facebook Custom Audience function enables us to measure, optimise and create target groups for our advertising campaigns. By capturing cross-device actions, we can make our advertising campaigns even more efficient. In addition, we can create advertisements that are relevant to target groups.
According to the website www.facebook.com this service is offered by Facebook Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland). However, we cannot exclude the possibility that data collected may also be transferred to Facebook Inc. (1601 Willow Road, Menlo Park, California 94025, USA) (collectively, “Facebook”).
If you use a Facebook user account, Facebook can recognize this by a set Facebook pixel, which is used to transmit the collected usage data to Facebook. The Facebook pixel is a Javascript code that transmits the following data to Facebook: HTTP header information (including IP address, Web browser information, page location, document, Web page URL and Web browser user agent, and date and time of use); pixel-specific data, including pixel ID and Facebook cookie data, including your Facebook ID (this data is used to associate events with a specific Facebook advertising account and associate them with a Facebook user); additional information about your visit to our Web sites; and standard and custom data events.
The above data processing only affects users who have a Facebook account or have accessed a Facebook affiliate page (which has set a cookie).
If it is possible to match the Facebook ID contained in the Facebook cookie to a Facebook user, Facebook will match that user to a target audience based on the rules we have established, if the rules are relevant. We use the information thus obtained to present our advertisements on Facebook (affiliate) pages. Playing advertisements on Facebook (affiliate) pages using the target audience feature does not affect users who are not Facebook members.
For more information about advertising on Facebook and how you can control what advertising you see, please visit: https://www.facebook.com/about/basics/advertising. For instructions on how to adjust ad settings and avoid unwanted ads, please visit: https://www.facebook.com/about/basics/advertising/ad-preferences. You can access Facebook’s data policy by clicking on the following link: https://www.facebook.com/privacy/explanation.
Automated decision making including profiling
There is no automated decision making including profiling.
Rights of the data subject
If personal data is processed by you, you are the data subject within the meaning of the GDPR and you are entitled to the following rights vis-à-vis the person responsible:
Right of access:
Pursuant to Art. 15 GDPR, you have the right to request access to your personal data processed by us; in particular, you may request information on the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right of rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data if not collected from us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details.
Right to rectification:
Pursuant to Art. 16 GDPR, you have the right to demand immediate correction of incorrect or incomplete personal data stored by us.
Right to deletion:
Pursuant to Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.
Right to limitation:
Pursuant to Art. 18 GDPR, you have the right to request the limitation of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing pursuant to Art. 21 GDPR.
Right to data transfer:
Pursuant to Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transfer to another responsible person.
Right of appeal:
Pursuant to Art. 77 GDPR, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our place of business. The competent supervisory authority for our registered office is: Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Str 22, 20459 Hamburg, E-Mail: mailbox@datenschutz.hamburg.de, Telefon: (040) 428 54 – 4040, Telefax: (040) 428 54 – 4000.
Right of objection:
You have the right to object at any time, for reasons related to your particular situation, to the processing of personal data concerning you carried out pursuant to art. 6 par. 1 lit. f GDPR.
If the personal data concerning you are processed for the purpose of direct advertising, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising.
Right of revocation:
You have the right to revoke your consent to the processing of your personal data at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation. Revocation is possible at any time by e-mail to info@marvest.de or by post at the above address.
Data security
We use the most common SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can recognize the encryption by the closed representation of the key or lock symbol in the lower status bar or the address bar of your browser (https). We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
Changes to our privacy policy
We reserve the right to amend this data protection declaration from time to time so that it always complies with current legal requirements or in order to implement changes to our services in the data protection declaration, e.g. when introducing new services. The current data protection declaration applies to your renewed visit to our website.
Status: December 2019