Privacy

Our privacy policy

1. General information and principles for processing data

We are pleased to have you visit our website. Protecting your privacy and personal data is an important concern of ours when you visit our website.

According to GDPR Art 4(1), personal data refers to any information relating to an identified or identifiable person. This information can include your first name, surname, address, telephone number, email address or IP address, for example.

Data that cannot be used to establish a link to you as a person, e.g. because it has been anonymised, does not count as personal data. Processing your data within the meaning of GDPR Art 4(2) (e.g. collecting, storing, extracting, asking for, using, transferring, erasing or destroying it) also requires legal grounds or your consent. Processed personal data must be erased as soon as the purpose for processing it has been fulfilled and there are no legally required retention periods that must be complied with.

This document provides you with information about how your personal data is treated when you visit our website. We need to collect personal data that concerns you in order to provide the functions and services on our website. This privacy policy also explains to you the nature and scope of the data processing concerned, the purpose, the relevant legal grounds and the period for which data is stored.

This privacy policy only applies to this website. It does not apply to other websites to which we merely provide a hyperlink. We cannot be held responsible for these third-party websites treating your personal data as confidential because we do not have any influence over these companies’ compliance with legal data protection provisions. To learn about how these companies handle your personal data, please refer to the information directly on their websites.      

2. Controller

The controller of the processing of personal data on this website is (cf. legal notice):

BVT Beratungs-, Verwaltungs- und Treuhandgesellschaft für internationale Vermögensanlagen mbH   

Tölzer Strasse 2

82031 Grünwald          
Germany

Telephone number: +49 (0)89 381 650          
Fax number: +49 (0)89 3816 5201    
Email: info@bvt.de

3. Data protection officer

You can also contact our data protection officer at any time if you have questions regarding data protection:

Christian Volkmer
Projekt 29 GmbH & Co. KG
Telephone: +49 (0)941 2986 930
Email: datenschutz@bvt.de

4. Provision and use of website/server log files

a) Nature and scope of data processing
Each time a user accesses a page on our website or views a file, our Web server automatically stores and processes data about these actions in a log file.

If you use this website without transferring us data in some other way (e.g. by registering or using the contact form), we use server log files to collect the following data that is required for technological purposes and transferred to our server automatically:

• information about the user’s browser type and version used
• the user’s operating system
• the user’s IP address
• the date and time of the request
• the page/file viewed
• the volume of data transmitted
• a message stating if the access/view was successful
• the internet address from which the user navigated to the page/file or from which the desired function was activated (referrer URL)

b) Purpose of data processing
Our legitimate interest in collecting and processing the aforementioned data, including the IP address, is based on this data being necessary in order to enable usage of our online offering. Furthermore, we also have a legitimate interest in storing the IP address based on our need to ensure IT security, particularly to protect our IT systems against abuse and avert attacks.

c) Legal grounds
The legal grounds for collecting and processing data are provided in GDPR Art 6(1)(f).

d) Duration of storage
The aforementioned data is stored for the duration of the communication process. The IP address is further stored for a short period of no more than seven calendar days to ensure IT security. This data is then erased.

e) Right to object
You generally have a right to object pursuant to GDPR Art 21 in the event that your data is processed in accordance with GDPR Art 6(1)(f). However, in this specific instance of data processing, we have compelling legitimate grounds to process the data because we cannot provide or operate our website without processing this data.

5. Use of cookies

We use cookies. Cookies are small files that are stored on your computer by your browser. Some features of our website cannot be provided without using technologically necessary cookies. On the other hand, there are different cookies that allow us to perform various analyses. Some cookies, for example, can recognise the browser you use when you visit our website again and can convey various types of information to us. We use cookies to simplify and improve how our website is used. For example, we can use cookies to make our online offering more user-friendly and efficient for you by doing things such as seeing how you use our website and finding your preferred settings (e.g. country and language settings). If third parties process information using cookies, they will collect this information directly through your browser. Cookies do not cause any damage to your device. They cannot execute programs and they do not contain viruses. There are different types of cookies used on our website; the following explains their nature and function.

a) Temporary/session cookies
Our website uses what are called temporary or session cookies that are automatically deleted as soon as you close your browser. This type of cookie makes it possible to record your session ID, letting various requests from your browser be linked to the one session and enabling recognition of your device when you visit the website again later. These session cookies expire when the session expires.

b) Persistent cookies
Our website uses what are called persistent cookies. These cookies are stored in your browser over a longer period of time and can transmit information. The duration of time for which they are stored differs based on the cookie. You can delete persistent cookies yourself through your browser’s settings.

c) Configuring browser settings
Most Web browsers are preconfigured to accept cookies automatically. However, you can configure your browser to accept only certain cookies or none at all. Do be aware that you may not be able to use all of our website’s functions in this case.

You can also delete cookies that are already stored in your browser by using your browser’s settings. It is also possible to configure your browser to notify you before it stores cookies. Since different browsers can function in different ways, we ask you to consult your browser’s help menu for the relevant configuration options. You may need to save a persistent cookie to your computer to stop cookies from being set. If you delete this cookie, you will have to save it again for it to remain effective.

d)Cookie categories
We use the following types of categories:    

Essential cookies

Essential cookies safeguard functions that are needed in order to use our website as intended. These strictly necessary cookies can have purposes that include keeping logged-in users logged in when they access different pages, for example. These cookies are first-party cookies that are used exclusively by us. They are technologically necessary, so consent is not required for them. The legal grounds for processing your personal data are provided in GDPR Art 6(1)(f) as we have a legitimate interest in maintaining the functionality of our website. Cookies are deleted as soon as they are no longer needed for the given purposes. You generally have a right to object in accordance with GDPR Art 21. However, with technologically necessary cookies, we have compelling legitimate grounds to process data because we cannot provide our website or the relevant function or provide it properly without processing this data.

Statistics cookies

Statistics cookies gather information about how a website is used in order to improve its appeal, content and functionality. They collect the following data for example:

• number of times a site or page is accessed
• dwell time on a website
• order in which pages are visited
• search terms
• country, region and city from which page is accessed
• percentage of page visits from mobile devices
• analysis of the areas of our website that interest you most

The legal grounds for processing this personal data are your consent pursuant to GDPR Art 6(1)(a). These cookies are deleted as soon as they are no longer needed for the given purposes, the time period for their storage expires or you withdraw your consent.

Cookies from external services/other non-cookie data transmission to external services (external media)

We block external content from video and social-media platforms by default. If you give your consent to cookies being used and/or your data being disclosed to the external providers, we will display this external content and transfer your data to the external providers.

The legal grounds for processing this personal data are your consent pursuant to GDPR Art 6(1)(a). This personal data is deleted as soon as it is no longer needed for the given purposes, the time period for its storage expires or you withdraw your consent.

e) List of cookies that we use
A list and description of the cookies that we use can be found in the table below:

Essential cookies (category: essential)

Statistics cookies (category: statistics)

6. Services with essential cookies

Our website uses a consent management platform to obtain your consent to cookies being stored in your browser and documenting this consent in compliance with data protection regulations.

The consent management platform stores a cookie in your browser when you enter our website. The consent that you provide and the consent that you withdraw are documented in this cookie. It is an essential cookie and does not require your consent. The legal grounds for processing this data are provided in GDPR Art 6(1)(c). We use this cookie to fulfil our legal obligations.

The cookies are stored until you ask us to erase this data, you delete the cookie yourself or it is no longer necessary to store them for the purpose of the data processing.

You can change your cookie settings at any time under the cookie settings in the website’s footer "Cookie Einstellungen".

7. Services with statistics cookies

Google Analytics

a) Nature and scope of data processing       
We use Google Analytics on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, telephone: +353 (0)1 5431 000, fax: +353 (0)1 686 5660 6399 (‘Google’).

We have signed processing contracts with Google insofar as Google acts as a processor for us. The function for sharing data with Google has been disabled, which therefore means that Google does not share any responsibility.

Google Analytics uses cookies, which are text files that are stored on your computer and allow an analysis of how you utilise this website.

The information generated by cookies about your use of this website is usually transmitted to a Google server in the United States and stored there. Google uses this information on behalf of this website’s operator to analyse your use of the website systematically, compile reports on website activities and perform other services associated with website and internet usage for the website operator.

The following data is stored when individual pages on our website are viewed:

• three bytes of the IP address of the user system viewing the page (anonymised IP address)
• website viewed
• website from which the user reached our website (referrer)
• pages to which the user navigates from the page viewed
• dwell time on a website
• frequency at which the website is viewed
• dwell time on the website
• scrolling patterns and clicks
• when ‘website targets’ are reached (e.g. newsletter sign-ups)
• approximate location
• information about the browser, internet service provider and device used

We use Google Analytics with IP anonymisation activated. Consequently, the IP addresses are truncated by removing the last octet (e.g. 192.168.79.***; referred to as IP masking). This makes it impossible to link the truncated IP address to the user computer or device accessing the page or website.

b) Purpose of data processing
The purpose of the Google Analytics service is to analyse the user behaviours on our website.

c) Legal grounds
The legal grounds for using Google Analytics are your consent pursuant to GDPR Art 6(1)(a).

d) Duration of storage
The stored data is erased as soon as the set duration of the cookie expires or you withdraw your consent.

Google Analytics stores cookies in your Web browser for a period of fourteen months following your most recent visit. These cookies contain a randomly generated user ID which can be used to recognise you when you visit the website in future. The data recorded is stored along with the randomly generated user ID, enabling an analysis of user profiles kept under a pseudonym. This user-related data is automatically erased after fourteen months. Other data is stored in an aggregated form for an indefinite time period.

e) Right to withdraw
The stored data is erased as soon as you withdraw your consent by deselecting the ‘statistics’ cookie category in the cookie settings. In addition, you can stop the cookie from processing data by downloading and installing the browser add-on for deactivating Google Analytics.

f) Further information
More detailed information about the Google Analytics terms of service:
www.google.com/analytics/terms/gb.html

More detailed information about privacy and Google Analytics:
https://support.google.com/analytics/answer/6004245?hl=en

More detailed information about Google’s processing of data is available in Google’s privacy policy at https://www.google.com/policies/privacy/

8. Services with external media

Integration of YouTube videos (plug-in)

a) Nature and scope of data processing        

We have integrated YouTube videos into our online offering that are stored at www.YouTube.com and can be played directly from our website. YouTube is a service provided by the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, telephone: +353 (0)1 5431 000, fax: +353 (0)1 6865 660 (‘Google’).

We use YouTube in connection with ‘privacy-enhanced mode’ to display videos to you.

Thanks to ‘privacy-enhanced mode’, the data explained in more detail below is only transferred to the YouTube server when you actually start playing a video. YouTube records your IP address, the date, the time and the Web page that you are visiting. This occurs irrespective of whether YouTube provides an account to which you are logged in or whether there is no such account. A connection is also made to the Google advertiser network.

The videos will be activated and your IP address transmitted to Google as soon as you have consented to Google processing data through our consent management platform for the first time.

b) Purpose of processing
We use YouTube to play videos on our website. There is no automatic connection that is made to YouTube’s servers. YouTube videos are displayed on our website and your IP address transmitted to Google only when you have given your explicit consent to this in the ‘external services’ category.

c) Legal grounds
The legal grounds are your consent pursuant to GDPR Art 6(1)(a).

d) Duration of storage
The stored data is erased as soon as the set duration of the cookie expires or you withdraw your consent.

e) Right to withdraw
The stored data is erased as soon as you withdraw your consent by deselecting the ‘external services’ cookie category in the cookie settings.

f) Further information
You can find further information in Google’s privacy policy: http://www.google.de/intl/en/policies/privacy/

9. Google Tag Manager

We use the Google Tag Manager product on our website. Google Tag Manager is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, telephone: +353 (0)1 5431 000, fax: +353 (0)1 6865 660 (‘Google’). It is a solution that lets marketing companies manage website tags through a user interface.

Google Tag Manager only implements tags. Tags are small elements of code on your website that serve to do things such as measure traffic and visitor behaviours, record the effectiveness of online advertising and social media, use remarketing, focus on target audiences and test and optimise your website.

This means that there are no additional cookies that are used. Google Tag Manager triggers different tags that may subsequently collect data. Google Tag Manager does not access this data. If individual domains or cookies have been deactivated, including when you have chosen to opt out of Google Analytics in the manner described above or have configured the relevant settings in your browser, they will remain deactivated for all tracking tags insofar as they are implemented using Google Tag Manager.

Further information about privacy at Google can be found at: http://www.google.com/intl/en/policies/privacy

Privacy policy for advertising:

www.google.de/intl/en/policies/technologies/ads

10. Collecting data to take steps for contracts and perform contracts

a) Nature and scope of data processing        
We collect personal data concerning you when taking steps to initiate a contract and when entering into a contract (for example your first name, surname, address, email address, telephone number and bank account).

b) Purpose for processing data           
We collect and process this data solely for the purpose of performing the contract or fulfilling pre-contractual obligations.

c) Legal grounds
The legal grounds for this are provided in GDPR Art 6(1)(b).

d) Duration of storage
The data is erased as soon as it is no longer necessary for the purpose for which it is processed. Furthermore, there may also exist statutory retention obligations, such as retention obligations under commercial or tax laws that are part of the German Commercial Code (‘Handelsgesetzbuch’, HGB) or Tax Code (‘Abgabenordnung’, AO). If such retention obligations do exist, we block or erase your data when these retention obligations end.

11. Registration option

a) Nature and scope of data processing        
You can register on our website using details that we provide you with beforehand. When you register, we store the data that you enter into the input screen. This data is not disclosed to third parties.

b) Purpose of data processing             
Your registration is needed to use certain content and services on our website or to fulfil a contract or take steps prior to initiating a contract. After registering you have the option at all times to change the personal data entered during registration or to have it fully removed from the controller’s collection of data.

c) Legal grounds
The legal grounds for this processing are provided in GDPR Art 6(1)(b) additional legal grounds.          

d) Duration of storageThe data collected during registration is stored by us for as long as you are registered on our website. Statutory retention periods are not affected by this.

12. Data transfer

We only disclose your personal data to third parties if:

a) you have given your explicit consent to it pursuant to GDPR Art 6(1)(a)

b) it is legally permissible and necessary for performing a contract with you or taking steps to initiate a contract in accordance with GDPR Art 6(1)(b)

c) there is a legal obligation to disclose it in accordance with GDPR Art 6(1)(c); we are legally required to transfer data to government authorities such as tax collection offices, social-security agencies, health insurance funds, supervisory authorities and criminal prosecutors

d) it is in accordance with GDPR Art 6(1)(f) for the purposes of legitimate company interests or for establishing, exercising or defending legal claims and there is no reason to assume that you have an overriding, legitimate interest in not having your data disclosed

e) we engage external contractors (‘processors’) to process personal data in accordance with GDPR Art 28(3); we select them carefully and enter into a data processing contract that obliges them to handle personal data in accordance with privacy laws

We use this type of external contractor in the following areas:

• IT
• telecommunications
• marketing

When we transfer personal data to third countries, i.e. countries outside of the EU and EEA, we ensure that your personal data is treated with the same care as it is within the EU and EEA. We only ever transfer personal data to third countries for which the European Commission has confirmed an appropriate level of data protection or we have safeguarded the careful handling of personal data through contractual arrangements or other appropriate guarantees.

13. Job application option  

a) Nature and scope of data processing        
You can apply by email for our job vacancies advertised under the ‘Careers’ heading. When you apply, we collect and store the data that you send us by email.

b) Purpose of data processing             
We only process your data for the purpose of processing your application.

c) Legal grounds
The legal grounds for processing this data are provided in GDPR Arts 6(1)(b), 88(1) and 88(2) in conjunction with the German Federal Data Protection Act (‘Bundesdatenschutzgesetz’, BDSG) s 26(1) first sentence. If you give your consent to us adding you to our applicant database, the legal grounds are provided in GDPR Art 6(1)(a) in conjunction with BDSG s 26(2) first sentence.

d) Duration of storage
If we cannot offer you a position, we store your data for no more than six months after the application process concludes and follow the provisions of German Labour Court Act (‘Arbeitsgerichtsgesetz’, ArbGG) s 61b(1) in conjunction with German General Equal Treatment Act (‘Allgemeines Gleichbehandlungsgesetz’, AGG) s 15. This storage period begins when the rejection letter is received. If you have given your consent to us adding you to our applicant database, we will store your data for no more than two years.

e) Disclosure of data
The only entities and bodies that receive your data are the ones that are involved in making the decision (the relevant departments, human resources, management and the works council). In addition, we are required to transfer your data to government offices and institutions (e.g. criminal prosecutors, the police, supervisory authorities, tax collection offices, social-security agencies, etc.). Other data recipients may include entities for which you have given us your consent to transfer data.

f) Further information
You can find further information in our privacy policy for job applications (in German).

Contact form

a) Nature and scope of data processing
We allow you to send us messages using the contact form on our website.

You can enter your first name, surname, the contents of your message and your desired contact details when you use our contact form.

Entering this information is voluntary. We can only contact you and address you by your name when you share your name with us. We can only reach you using the contact details that you share with us. We cannot answer your enquiry if you do not share any contact details with us.

b) Purpose of data processing
If you send us a message using our contact form, we store and use your details if we need them to process your message, e.g. to answer your enquiry or fulfil your request for information.

c) Legal grounds
If your enquiry is for the purpose of preparing to enter into a contract or entering into a contract with us, the legal grounds for processing your personal data are provided in GDPR Art 6(1)(b). Otherwise, i.e. when you contact us using our contact form in instances that are not the ones listed previously, the legal grounds for processing your personal data are provided in GDPR Art 6(1)(f). Our legitimate interest in processing your personal data is in processing your message, e.g. answering your enquiry or fulfilling your request for information.

d) Duration of storage
Your details will be deleted once your message has been fully processed unless you have given us consent that provides us with grounds to store and use it in excess of this.
Binding statutory provisions, including HGB and AO retention periods, will remain effective regardless of the above.

15. Contact options via email

a) Nature and scope of data processing       
You can contact us by email. The data we collect through this is limited to the email address of the email account that you use to contact us and any personal data that you volunteer to us when you contact us. If you send us an unencrypted email, this email will not be protected against unauthorised access or even modification by third parties during transmission.

b) Purpose of data processing
The purpose for processing the data is the ability to resolve your concern properly.

c) Legal grounds
The legal grounds for this are provided in GDPR Art 6(1)(f). We have a legitimate interest in processing the personal data specified above so that we can process your concern properly, e.g. answer your enquiry or fulfil your request for information.

d) Duration of storage
The length of time for which the above data is stored depends on the nature of your contact with us. Your personal data will be routinely erased when the purpose of the communication no longer applies and storing the data is no longer necessary.

16. Newsletter

a) Nature and scope of data processing
Our website provides an option to sign up to a free, regular email newsletter. To send this newsletter to you regularly, we require your email address. Your data is disclosed to our newsletter contractor as part of the process for sending the newsletter. There is no further disclosure of personal data to third parties.

We use the double opt-in method to send out our newsletter. This means that we will only send you an email newsletter if you have explicitly confirmed your consent to being sent the newsletter. We will then send you a confirmation email asking you to confirm your desire to receive future newsletters from us by clicking on a corresponding link. The purpose of this is to ensure that only you, the owner of the email address provided, can sign up for the newsletter. You must confirm soon after receiving the confirmation email otherwise your newsletter sign-up will be automatically deleted from our database. We collect and store the data that you enter on the input screen (e.g. your surname, first name and email address) when you sign up for the newsletter. We also save the IP address assigned by your internet service provider (ISP) when you sign up for the newsletter along with the date and time that you sign up so that we can trace any misuse of your email address at a later point in time. For the confirmation email sent to check your email address (the double opt-in email), we also store the date and time that you click on the confirmation link and the IP address assigned by your internet service provider (ISP).

b) Purpose of data processing
The data that we collect when you sign up for the newsletter is used exclusively for marketing by way of our newsletter.

c) Legal grounds
The processing of your email address to send the newsletter is based on the declaration of consent that you voluntarily provide below, which can be withdrawn at any time with future effect, in accordance with GDPR Art 6(1)(a) and German Unfair Competition Act (‘Gesetz gegen den unlauteren Wettbewerb’, UWG) s 7(2)(3).

We also process your personal data to document your consent (GDPR Art 6(1)(c)).

d) Duration of storage
Your email address is stored for as long as you are signed up for our newsletter. If you unsubscribe from our newsletter, your email address will be deleted unless you have given your explicit consent to further usage of your data.

e) Recipients
Your personal data is transferred to our newsletter contractor. We have signed a data processing contract with this contractor.

17. Links to social networks

We have added links on this website to the LinkedIn social network (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland). No network connection is automatically established with the social network’s server when you visit our website. Only when you click on the ‘LinkedIn’ image integrated into our website will you be redirected to LinkedIn; only from this time will personal data be collected from you.

The following applies when you are directed to our LinkedIn profile through the link on our website as well as when you view our profile on LinkedIn directly.

We have joint responsibility with LinkedIn for the data processing under GDPR Art 26. BVT Holding GmbH & Co. KG and LinkedIn have entered into an agreement about their joint responsibility. In relation to page insights data, the agreement provides that LinkedIn take on the responsibility for providing this data and discharging all relevant, applicable obligations under the GDPR. In particular, LinkedIn fulfils the information disclosure obligations to data subjects under privacy laws. Nevertheless, you can also of course utilise your data subject rights under privacy law against BVT Holding GmbH & Co. KG; we will forward your enquiries accordingly.

Page insights are consolidated statistics that are compiled based on specific events and logged by the LinkedIn servers when people interact with pages and content connected to it.

LinkedIn uses cookies and similar technologies (e.g. pixels and display tags) to collect data (e.g. device IDs) in order to recognise you and your device(s) inside, outside and via various services and devices. You can obtain further information in the LinkedIn cookies policy.

In addition, LinkedIn processes the URL of the website from which you enter as well as the URL of the website that you next navigate to, the time of your visit, your IP address, your proxy server, your operating system, your Web browser, your add-ons, your device identifiers and functions, your cookie IDs and/or your internet service provider/mobile network operator and, based on your consent, your location details.

If you are a member of LinkedIn, LinkedIn processes the personal data that you provide to LinkedIn, such as your educational background, professional experience, skills or photograph.

If you are logged into your user account while you visit our LinkedIn profile, LinkedIn may be able to match the information collected about the specific visit with your user account.

If you wish to prevent this collected information being able to be directly matched with your user account, you must log out from LinkedIn before visiting or deactivate the ‘Stay logged in’ function, delete the cookies stored by your browser and refresh the browser window. You can also configure the relevant user account accordingly.

Further information about data processing at LinkedIn can be found in the LinkedIn privacy policy.

Your data may potentially be transferred by LinkedIn to countries outside of the European Union as part of the processing of this data. LinkedIn has EU–US Privacy Shield certification: www.privacyshield.gov LinkedIn is required to comply with the provisions of the GDPR even when data is processed in the United States.           

18. Data security and backup

We are committed to protecting your privacy and treating your personal data as confidential. We take extensive technical and organisational security measures which are reviewed regularly and adjusted to reflect technological developments. 

They include using recognised encryption methods (SSL or TLS), among other things. However, data that is provided without encryption, for example when it is sent through an unencrypted email, can be obtained by third parties. We do not have any influence over this. It is the relevant user’s responsibility to protect the data that he or she provides against misuse by encrypting it or using some other method.

19. Your rights as a data subject

These are your rights in relation to your personal data. Further details can be found in GDPR Arts 7, 15 to 22 and 77. You can contact the controller (section 2) or data protection officer (section 3) in regard to them.

a) Right to withdraw consent under privacy law pursuant to GDPR Art 7(3)   
You may withdraw consent you have given to the processing of your personal data at any time with future effect. The lawfulness of processing up until the time of withdrawal will not be affected by it.

b) Right to access pursuant to GDPR Art 15 in conjunction with BDSG s 34        
You have the right to obtain confirmation as to whether or not personal data concerning you is being processed by us. Where that is the case, you have the right to access the personal data and further information such as the purposes of the processing, categories of personal data processed, recipients and envisaged period for which data will be stored or the criteria used to determine that period.

c) Right to rectification and completion pursuant to GDPR Art 16
You have the right to obtain without undue delay the rectification of inaccurate personal data. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed.

d) Right to erasure (‘right to be forgotten’) pursuant to GDPR Art 17 in conjunction with BDSG s 35
You have the right to obtain the erasure of personal data insofar as processing it is unnecessary.
For example, this is the case if your data is no longer necessary in relation to its original purposes, if you have withdrawn your declaration of consent under privacy law or if the personal data has been processed unlawfully.           

e) Right to restriction of processing pursuant to GDPR Art 18
You have the right to obtain restriction of processing where, for example, you believe that the personal data is inaccurate.

f) Right to data portability pursuant to GDPR Art 20
You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format.

h) Automated individual decision-making, including profiling pursuant to GDPR Art 22
You are not subject to a decision based solely on automated processing of your data, including profiling, which would produce legal effects concerning you or similarly significantly affect you.

i) Complaint with a supervisory authority pursuant to GDPR Art 77
You may at any time lodge a complaint with a supervisory authority for data protection, for instance if you believe that the processing of your data conflicts with privacy regulations.

Relevant supervisory authority:

Bavarian Data Protection Authority (BayLDA)
Promenade 18
91522 Ansbach

Postal address:               
Postfach 1349, 91504 Ansbach
Telephone: +49 (0)981 1800 930
Fax: +49 (0)981 180 093 800
Email: poststelle@lda.bayern.de

20. Amendments to this privacy policy 

The purpose of our privacy policy is to fulfil statutory information obligations.
We update our privacy policy if this becomes necessary.

21. Privacy policy 

How we handle your data and rights: information under General Data Protection Regulation (GDPR) Arts 13, 14 and 21

See the BVT privacy policy

Last amended: March 2021