Privacy Policy

Thank you for visiting our website and for your interest in our company. We see data protection as a customer-oriented quality feature. The protection of your personal data and the protection of your personal rights are important to us.

With this privacy policy, we would like to inform all visitors to our website transparently about the type, scope and purpose of the personal data we collect, use and process and to inform you about your rights.

It is generally possible to use our website without providing personal data. However, if you make use of our company’s services via our website, it may be necessary to process your personal data.

The data collected automatically when you visit our website or the personal data you enter when using our services will be processed in accordance with the current statutory provisions on the protection of personal data.

If it is necessary to process your personal data and there is no legal basis for such processing, we will always obtain your consent for the required purpose of the processing.

As the company responsible for processing, we have defined technical and organizational measures to ensure the highest possible level of protection for your personal data.

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

However, we would like to point out that data transmission over the Internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

If you would like to make use of our company’s services and do not wish to use data transmission via the World Wide Web, you can also contact us by telephone at any time.

1. Contact details of the controller responsible for processing

The controller within the meaning of the General Data Protection Regulation is:

GMI projekt entwicklung GmbH
Hauptstr. 28
Zossen
Telephone: [Insert Number if available]
E-mail: info@gmi-invest.com

Irina Chapiror has been appointed as data protection officer.

2. Collection of general access information

Every time you visit our website, server log file information that your browser transmits to us is automatically recorded. This is:

We would like to point out that this data cannot be assigned to a specific person. We use this technical access information exclusively for the following purposes:

This data is stored for a maximum of 7 days as a technical precaution to protect the data processing systems against unauthorized access.

3. Collection and disclosure of personal data

We only use your personal data for the purposes stated on this data protection information page. The following input masks exist on our website for the collection of personal data:

3.1 Receipt of Press Releases

We offer you the option to subscribe to our press releases on our website, through which we will regularly inform you about company offers, products, and news. To receive press releases, you need a valid email address. For personalized delivery of press releases, we require the following information from you:

After submitting your registration, you will receive a confirmation email for legal reasons to complete your subscription request. A web tracking service from Mailjet GmbH is used when sending press releases via email. The analysis of the geographical distribution of the press releases or recipient behavior helps us optimize them, making them more informative and reader-friendly. The data collected by Mailjet GmbH is transmitted to a server in Germany and stored there. Mailjet GmbH complies with GDPR and is certified according to the ISO27001 standard. You can stop receiving press releases and revoke your consent for data usage at any time. Each press release contains a corresponding unsubscribe link.

3.2 Registration on Our Website (Partner Portal/Digital Customer Portal)

On our website, you can register by providing your personal data. For customer area registration, we need the following details from you:

For partner area registration, we require the following information:

The personal data you provide is collected and stored exclusively for internal purposes. Depending on the purpose of the processing, data may be shared with processors, such as shipping companies, to fulfill the requested services. The voluntary provision of personal data during registration enables us to offer you content or services only available to registered users. You can correct or update your personal data at any time.

3.3 Request for Documents for Investor and Partner Prospects

To request documents, we need the following information:

The personal data you provide is collected and stored exclusively for internal purposes. Depending on the purpose of the processing, data may be shared with processors, such as shipping companies, to fulfill the requested services. The voluntary provision of personal data during registration enables us to offer you content or services only available to registered users. You can correct or update your personal data at any time.

3.4 Submission of Application Documents

When applying by email, we collect and process your personal application data, which includes:

After submitting your application, you will receive a confirmation email regarding the receipt of your application documents. The collection and processing of your personal data are exclusively for filling positions within our company. Your data will generally only be forwarded to the internal departments responsible for the application process. Your personal application data will not be shared with other companies without your prior, explicit consent. Your personal application data will automatically be deleted six months after the conclusion of the application process unless legal provisions prevent deletion, further storage is necessary for legal purposes, or you have explicitly agreed to a longer retention period, for example, for future job postings. If employment is established, your data will be stored for the purpose of employment, in accordance with legal regulations.

3.5 Contacting via Email or Contact Form

We offer you the option to contact us via email or a contact form on our website. When you contact us by email or through the contact form, the personal data you provide will be automatically stored. This voluntarily provided personal data is stored for the purpose of processing your request or contacting you. No personal data will be shared with third parties.

4. What Are Cookies Used For?

Our website uses cookies at several places. You can find detailed information on which cookies are used in our cookie policy.

5. Use of Tracking, Analysis, and Other Tools

5.1 Google Analytics

This website uses Google Analytics and Google Remarketing, services of Google Inc. (“Google”). Google uses cookies, text files stored on your computer, to analyze your use of the website. Information generated by the cookie about your use of this website (including your IP address) is transmitted to a server in the USA and stored there. Please refer to our cookie policy for more information. If IP anonymization is activated on this website, Google will shorten your IP address within member states of the European Union or in other contracting states of the European Economic Area agreement. Only in exceptional cases will the full IP address be transmitted to a server in the USA and shortened there. IP anonymization is active on this website. Google uses this information to evaluate your website usage, compile reports on website activity for website operators, and provide other services related to website and internet usage. Google may transfer this information to third parties if required by law or if third parties process this data on Google’s behalf. Third-party providers, including Google, place ads on websites across the internet and use stored cookies to display ads based on previous visits to this website. Google will not associate your IP address with any other data held by Google. You can prevent cookies from being stored by adjusting your browser settings; however, you may not be able to fully use all features of this website. You can also prevent the data generated by the cookie and related to your website use (including your IP address) from being sent to Google by downloading and installing the browser plugin available at: http://tools.google.com/dlpage/gaoptout?hl=en

Further information on disabling Google ads or opting out of Google ads can be found on Google’s advertising opt-out page or on the Network Advertising Initiative’s opt-out page. You can object to the collection and storage of data at any time with effect for the future. For more information on Google’s privacy policy, click here.

5.2 Friendly Capture

To protect our online offerings from spam and abuse, we use the “Friendly Capture” tool. This privacy-friendly tool processes browser user requests and uses an algorithm to determine whether the request is legitimate or abusive, typically automated. Data processed by this tool is anonymized, so no conclusions can be drawn about specific users. Some services cannot be used without this tool. The data is stored anonymously. The legal basis for processing is our legitimate interest arising from the processing purpose (Art. 6 Para. 1 lit. f GDPR).

6. Deletion, Blocking, and Duration of Personal Data Storage

We only process and store your personal data for as long as is necessary to achieve the purpose of storage or as required by law. Once the purpose of storage ceases or legal retention periods expire, personal data will be routinely blocked or deleted following legal requirements.

7. Data Subject’s Privacy Rights

If you have questions about your personal data, you can contact us at any time. Under the GDPR, you have the following rights:

7.1 Right to Information (Art. 15 GDPR)

You have the right to know what categories and types of personal data we process, for what purpose, for how long, and according to which criteria we store this data, and whether automated decision-making, including profiling, is applied. You also have the right to know who the recipients or categories of recipients of your data are, particularly in third countries or international organizations. In such cases, you have the right to be informed of appropriate safeguards regarding the transfer of your data. In addition to the right to complain to the relevant supervisory authority and the right to know the origin of your data, you have the right to deletion or correction, as well as the right to restrict or object to the processing of your personal data. In all the above cases, you have the right to request a free copy of your personal data processed by us. For any additional copies you request, we reserve the right to charge an appropriate administrative fee.

7.2 Right to Correction (Art. 16 GDPR)

You have the right to request the immediate correction of incorrect personal data and, considering the purposes of processing, to request the completion of incomplete personal data, including by means of a supplementary statement. If you wish to exercise your right to correction, you can contact our Data Protection Officer or the responsible processor at any time.

7.3 Right to Deletion (Art. 17 GDPR)

You have the right to request the immediate deletion of your data (“right to be forgotten”), especially if the data is no longer necessary, you withdraw your consent, the data has been unlawfully processed or collected, or there is a legal obligation to delete it under EU or national law. The right to be forgotten does not apply if an overriding right to freedom of expression or information exists, data retention is required to fulfill legal obligations (e.g., retention obligations), archiving purposes prevent deletion, or data is needed to assert, exercise, or defend legal claims.

7.4 Right to Restriction (Art. 18 GDPR)

You have the right to request a restriction on the processing of your data if the accuracy of the data is contested by you, the processing is unlawful, you refuse deletion of your personal data and instead request a restriction on processing, the purpose of the processing is no longer applicable, or you have objected to the processing under Article 21(1) and it is not yet clear whether legitimate grounds on our side outweigh your interests.

7.5 Right to Data Portability (Art. 20 GDPR)

You have the right to request that we send your data to another controller in a structured, common, and machine-readable format. You can assert this right if you have consented to the data processing or the processing is necessary for the performance of a contract. You can also request that the data be sent directly to the other controller, provided that it is technically feasible and does not infringe on the rights and freedoms of other individuals.

7.6 The Right to Object (Art. 21 GDPR)

You have the right to object at any time to the collection, processing, or use of your personal data for the purposes of direct marketing, market and opinion research, or general business data processing, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms. Additionally, your right to object may be denied if a legal provision mandates or requires the collection, processing, or use of the data.

7.7 Right to Lodge a Complaint with the Data Protection Supervisory Authority (Art. 77 GDPR in conjunction with § 19 BDSG)

If you believe that the processing of your personal data violates legal requirements, you have the right to lodge a complaint with the competent supervisory authority.

7.8 Right to Withdraw Consent (Art. 7 Para. 3 GDPR)

You may withdraw your consent for the processing of your personal data at any time without providing reasons. This also applies to consents given to us before the GDPR came into effect.

8. Legal Basis for Processing

When processing personal data for which we obtain the data subject’s consent, the legal basis is Art. 6 Para. 1, Sentence 1 a) of the General Data Protection Regulation (GDPR).

When processing personal data necessary for the performance of a contract to which the data subject is a party, the legal basis is Art. 6 Para. 1, Sentence 1 b) GDPR. This also applies to processing operations necessary to take pre-contractual measures.

If the processing of personal data is required to fulfill a legal obligation to which our company is subject, Art. 6 Para. 1, Sentence 1 c) GDPR serves as the legal basis.

If processing is necessary for the purposes of the legitimate interests pursued by our company or a third party and such interests are not overridden by the interests, rights, and freedoms of the data subject, Art. 6 Para. 1, Sentence 1 f) GDPR serves as the legal basis. The legitimate interest of our company lies in the conduct of our business activities as well as the analysis, optimization, and safeguarding of our online offerings.

9. Transmission of Data to Third Parties

We generally do not sell or lend user data. Data is only transmitted to third parties beyond the scope described in this privacy policy when it is absolutely necessary to fulfill the requested service.

We only transmit data when there is a legal obligation to do so. This is the case when government institutions (e.g., law enforcement authorities) request information in writing or a court order is presented.

Further transmission of personal data to so-called third countries outside the EU/EEA does not take place.

10. Legal or Contractual Requirements for the Provision of Personal Data and Potential Consequences of Non-Provision

Please note that in certain cases (e.g., tax regulations), the provision of personal data is legally required, or it may result from contractual obligations (e.g., details about the contracting party). For instance, it may be necessary for the conclusion of a contract that the data subject/contracting party provides their personal data to allow us to process their request (e.g., contact request). A requirement to provide personal data mainly arises when contracts are being concluded. If no personal data is provided, the contract cannot be concluded with the data subject.

Before providing personal data, the data subject can contact our Data Protection Officer or the person responsible for the processing. The Data Protection Officer or the person responsible for the processing will inform the data subject whether the provision of the required personal data is legally or contractually mandated or necessary for the conclusion of the contract, and whether the data subject is obligated to provide the personal data or what consequences the failure to provide the requested data would have for the data subject.

11. Existence of Automated Decision-Making

As a responsible company, we do not use automated decision-making or profiling in our business relationships.