1. Data protection at a glance
The following information gives an overview of what happens to your personal data when you visit this website.
Data collection on this website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Contact details for the website operator can be found in the legal notice of this website.
How do we collect your data?
Some data is collected when you provide it to us. This could be data that you enter in a contact form, for example.
Other data is collected by our IT systems automatically or with your consent when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of accessing a page). This data is collected automatically as soon as you access this website.
What do we use your data for?
Part of the data is collected to ensure the proper functioning of the website. Other data can be used to analyse the behaviour patterns of visitors to the website.
What rights do you have with regard to your data?
You have the right to receive information free of charge about your stored data, its origin, its recipients, and the purpose of its collection at any time. You also have the right to request that it be rectified or erased. If you have given your consent to data processing, you have the option to revoke this consent at any time, which shall affect all future data processing. Moreover, you have the right to request that the processing of your personal data be restricted under certain circumstances. You also have the right to lodge a complaint with the competent supervisory authority.
For this purpose, as well as for further questions regarding data protection, you can contact us at any time at the address provided in the legal notice.
Analytics and third-party tools
When you visit this website, statistical analyses may be made of your behaviour while using our website. This is primarily carried out using analysis programs.
2. Hosting and content delivery networks (CDN)
This website is hosted by an external service provider (host). Personal data collected on this website is stored on the host’s servers. This may include, but is not limited to, IP addresses, contact requests, metadata and communications, contract information, contact details, names, website accesses and other data that is generated via a website.
The host is used for the purpose of contract performance with our potential and existing customers (Article 6 (1) (b) GDPR) and in the interest of a secure, fast and efficient provision of our online services by a professional provider (Article 6 (1) (f) GDPR).
Our host will only process your data to the extent necessary to fulfil its performance obligations and follow our instructions with regard to this data.
We host our website with the following third-party provider:
Conclusion of a data processing agreement
In order to ensure processing in compliance with data protection regulations, we have concluded a data processing agreement with our host.
3. General information and mandatory information
Please note that data transferred over the internet (e.g. via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.
The data controller for this website is:
Co-Investor Deutschland GmbH
Bockenheimer Landstr. 51-53
D – 60325 Frankfurt am Main
Telefon: +49 69 40 32 59 70
The data controller is the natural or legal person who, either alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Data archiving period
Statutory data protection officer
A separate data protection officer in accordance with Article 37 GDPR has not been specified.
Data transfer to the United States
Our website includes tools from companies based in the United States. When these tools are active, your personal data may be transferred to the US servers of the respective companies. Please note that the USA is not a safe third country within the meaning of EU data protection law. US companies are required to disclose personal data to government security agencies without you as the data subject being able to take legal action against this. It is therefore possible that US authorities (e.g. intelligence services) will process, evaluate, and permanently store your data on US servers for monitoring purposes. We have no control over these processing activities.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You may revoke your consent at any time. The legality of the data processing carried out up to the time of the revocation remains unaffected.
Right to object to data collection in special cases and to direct marketing (Article 21 GDPR)
IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT, AT ANY TIME, TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING, INSOFAR AS IT IS ASSOCIATED WITH SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NOT BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ARTICLE 21 (2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of any infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. This right to lodge a complaint is without prejudice to other administrative or judicial remedies.
Right to data portability
You have the right to have any data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another data controller, this will only take place to the extent that it is technically feasible.
SSL or TLS encryption
This website uses SSL or TLS encryption for security reasons and to protect the transfer of confidential content, such as the orders or enquiries you send to us as the site operator. You can recognise an encrypted connection in your browser’s address line when it changes from “http://” to “https://” and the padlock icon is displayed in your browser’s address bar.
If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.
Information, erasure and rectification
Within the framework of the applicable statutory provisions, you have the right to receive information free of charge and at any time about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, the right to rectification or erasure of that data. For this purpose, as well as for further questions regarding personal data, you can contact us at any time at the address provided in the legal notice.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. To do so, you can contact us at any time at the address provided in the legal notice. The right to restriction of processing exists in the following cases:
- If you dispute the correctness of your personal data stored with us, we usually require some time to review this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.
- If the processing of your personal data was/is unlawful, you may request the restriction of data processing rather than erasure.
- If we no longer need your personal data, but you do need it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data rather than its erasure.
- If you have lodged a complaint pursuant to Article 21 (1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data, with the exception of its storage, may only be processed with your consent or for the purpose of asserting, exercising or defending legal claims, protecting the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.
Objection to marketing emails
We hereby object to the use of the contact data published as part of our obligation to issue a legal notice to send any marketing and information material not expressly requested. The operators of this website expressly reserve the right to take legal action in the event that unsolicited marketing information is sent, for example by spam emails.
4. Data collection on this website
In some cases, cookies from third-party companies may also be stored on your device when you access our website (third-party cookies). These enable us or you to use certain third-party services (e.g. cookies for processing payment services).
Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. shopping basket function or displaying videos). Other cookies are used to evaluate the behaviour patterns of visitors to the website or to display advertisements.
Cookies that are required to carry out the electronic communication process (necessary cookies) or to provide certain functions that you have requested (functional cookies, e.g. for the shopping basket function) or to optimise the website (e.g. cookies to measure the web audience) are stored on the basis of Article 6 (1) (f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in the storage of cookies in order to optimise and provide its services free of technical errors. If consent to the storage of cookies has been requested, the cookies in question are stored exclusively on the basis of this consent (Article 6 (1) (a) GDPR). This consent may be revoked at any time.
You can configure your browser to inform you about the setting of cookies, to allow cookies only in individual cases, to prevent the acceptance of cookies in specific cases or in general and to delete cookies automatically when you close your browser. If you disable cookies, the functionality of this website may be limited.
Server log files
The website provider automatically collects and stores information in server log files, which your browser transfers to us automatically. This information includes:
- Browser type and version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data will not be combined with data from other sources.
This data is collected on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in the optimisation and display of its website free of technical errors. This requires the collection of server log files.
If you send us enquiries via the contact form, your details from the contact form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not share this data without your consent.
This data is processed on the basis of Article 6 (1) (b) GDPR, provided that your enquiry is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Article 6 (1) (f) GDPR) or on your consent (Article 6 (1) (a) GDPR), provided that such consent was requested.
The data you enter in the contact form will remain with us until you ask us to erase it, revoke your consent to its storage or until the purpose for which it was stored no longer applies (e.g. after your enquiry has been processed). Mandatory statutory provisions, in particular retention periods, remain unaffected.
5. Analysis tools and advertising
This website uses Google Analytics, a web analytics service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyse the behaviour patterns of visitors to the website. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the operating system used and the user’s origin. Google may consolidate these data in a profile that is allocated to the respective user or the user’s device.
Google Analytics uses technologies that enable recognition of the user for the purpose of analysing user behaviour patterns (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the United States and stored there.
This analysis tool is used on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in the analysis of user behaviour patterns in order to optimise both the services offered online and its advertising activities. If corresponding consent has been requested (e.g. consent to the storage of cookies), processing is carried out exclusively on the basis of Article 6 (1) (a) GDPR. This consent may be revoked at any time.
Data transfer to the United States is based on the standard contractual clauses of the European Commission. For details, please consult: https://privacy.google.com/businesses/controllerterms/mccs/.
On this website, we have activated the IP anonymisation function. This means your IP address will be truncated by Google within Member States of the European Union or in other states party to the Agreement on the European Economic Area before being transferred to the United States. Only in exceptional cases will the full IP address be transferred to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet use. The IP address transferred in conjunction with Google Analytics from your browser will not be combined with other data in Google’s possession.
You can prevent Google from collecting and processing your data by downloading and installing the browser plug-in available at the following link:
We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographic parameters provided by Google Analytics
This website uses the “demographic characteristics” function of Google Analytics, to be able to display compatible advertisements to the website user within the Google advertising network. This enables reports to be generated that contain information on the age, gender and interests of visitors to the website. This information is derived from interest-based advertising by Google as well as visitor data obtained from third-party providers. This data cannot be allocated to a specific individual. You have the option to disable this function at any time via the advertising settings in your Google account or you can generally prohibit the collection of your data by Google Analytics as described under “Objection to data collection”.
Data archiving period
User-level and event-level data stored by Google that are associated with cookies, user-identifiers (e.g. user-IDs) and advertising identifiers (e.g., DoubleClick cookies, Android’s Advertising ID) are anonymised or deleted after 14 months. For details, please refer to the following link: https://support.google.com/analytics/answer/7667196?hl=de
6. Plugins and Tools
This website uses Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
To use the features of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the United States and stored there. The provider of this website has no control over this data transfer.
The use of Google Maps is in the interest of making our online services visually appealing and to make it easy to find the places we have indicated on the website. This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR. If corresponding consent has been requested, processing is carried out exclusively on the basis of Article 6 (1) (a) GDPR. This consent may be revoked at any time.
Data transfer to the United States is based on the standard contractual clauses of the European Commission. For details, please consult: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of reCAPTCHA is to check whether data is entered on this website (e.g. in a contact form) by a person or by an automated program. To do this, reCAPTCHA analyses the behaviour patterns of visitors to the website based on various parameters. This analysis begins automatically as soon as a visitor accesses the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, how long the visitor stays on the website or mouse movements made by the user). Data collected during the analysis is forwarded to Google.
reCAPTCHA analyses run entirely in the background. Visitors to the website are not informed that an analysis is taking place.
Data is stored and analysed on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in the protection of its website from improper automated spying and from SPAM. If corresponding consent has been requested, processing is carried out exclusively on the basis of Article 6 (1) (a) GDPR. This consent may be revoked at any time.