Processing of (personal) data by the entity in charge of the online application process
Privacy Policy
We, Dupuis Investment GmbH, operate the website https://www. dupuisinvest.com and collect certain data from our visitors and customers, where necessary. In the following privacy policy, you will be informed what we do with your data, so-called personal data, and why we do this. We will also inform you how we protect your data, when this data is deleted and what rights you have within data protection.Who can I contact?
Responsible for this website is:Dupuis Investment GmbH
Geschwister-Scholl-Str. 5
10117 Berlin
dsb@freshcompliance.de
Via the contact data you can reach our Data Protection Officer or another data protection relevant contact. Don't hesitate to contact us if you have specific questions about your personal data, deletion of your personal data or similar things.
What are my rights?
You can contact us at any time if you have any questions about your rights regarding data protection or if you wish to exercise any of the following rights:- Right to withdraw your consent in accordance with Art. 7 para. 3 GDPR (e.g. you can contact us if you wish to cancel a previously given consent to a newsletter)
- Right to access your data in accordance with Art. 15 GDPR (e.g. you can contact us if you would like to know what data we have stored about you)
- Right to correct your data in accordance with Art. 16 GDPR (e.g. you can contact us if your e-mail address has changed and we should replace your old e-mail address)
- Right to have your data deleted in accordance with Art. 17 GDPR (e.g. you can contact us if you want us to delete certain data that we have stored about you)
- Right to limit data collection in accordance with Art. 18 GDPR (e.g. you can contact us if you do not want us to delete your e-mail address, but only to send absolutely necessary e-mails)
- Right to data portability in accordance with Art. 20 GDPR (e.g. you can contact us to receive your data in a zipped format, if you want to upload it to another website)
- Right to object how your data is handled in accordance with Art. 21 GDPR (e.g. you can contact us if you do not agree with advertising or user analytics procedures as described within this privacy policy)
- Right to send complaints to the supervisory authority in accordance with Art. 77 para. 1 f GDPR (e.g. you can contact the data protection supervisory authority directly: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm)
Deletion of data and storage periods
Unless otherwise stated, we will delete or anonymize your data as soon as it is no longer needed (e.g. your e-mail address after you have unsubscribed from a newsletter). Your data will also be deleted or anonymized automatically if the mandatory storage period expires, except when such data is required to be stored for a contract or performance of contract. Such data may be needed for longer periods of time for legal reasons. You can request information about all personal data we have stored about you.Visiting our website
If you merely wish to browse our website, we do not collect any personal data, with the exception of the data that your browser sends to us, e.g.:- IP address (e.g. 97.93.116.example or 2a02:7122:99222:1112:bdb2:723f:example)
- Approximate location based on IP range (e.g. "Berlin city")
- Internet provider (e.g. "Telecom" or „AT&T")
- Internet connection speed (e.g. 120 Mbit)
- Date and time of visit (e.g. 11:45 on 25.05.2018)
- Last visited website (e.g. google.com)
- Browser and version (e.g. Chrome or Safari)
- Operating system (e.g. Mac OS)
- Hardware (e.g. Intel processor)
The data transmitted as part of your application is transferred via TLS encryption and stored in a database. This database is operated by Personio GmbH, which offers a personnel administration and applicant management software (https://www.personio.de/impressum/). Personio is our data processor in this context according to Art. 28 DS-GVO. The basis for the processing here is an data processing agreement between us as the controller and Personio.
Translated with www.DeepL.com/Translator (free version)
DATA PROCESSING IN THE APPLICATION PROCESS
If you respond to one of the positions offered or to one of our job advertisements, we collect and process the personal applicant data for the purpose of handling the application process. The data is processed electronically if an applicant submits the relevant application documents electronically, for example by e-mail, via an external platform or via the form on the website.If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If no employment contract is concluded with the applicant, the application documents will be stored for a maximum of 6 months after notification of the rejection decision and then deleted. This storage period is primarily due to mutual interests in the context of any claims arising from Section 15 (4) of the General Equal Treatment Act (AGG). The application documents will only be stored for longer if the applicant has given their express consent.
If you apply via the external platforms LinkedIn, Xing or Indeed, we will receive access to your profile with information about yourself that you have provided on the respective platforms. You can find out exactly what data is involved before you establish the connection with the respective platform. You can disconnect from these platforms at any time and prevent us from accessing your data. Further information on this and on the data protection of the respective platform can be found at https://privacy.linkedin.com/de-de (when applying via LinkedIn) or https://de.indeed.com/legal#privacy (when applying via Indeed).
The legal basis for the above-mentioned storage and processing of the application documents is Section 26 (1) BDSG-new, as the purpose of the application procedure is the recruitment or rejection of the applicant. The application procedure in this form is therefore absolutely necessary in the course of personnel recruitment. The legal basis in the context of the application via the external platforms described above is your consent in accordance with the European data protection regulations pursuant to Art. 6 para. 1 lit. a GDPR. You can revoke this at any time by disconnecting from the platform or sending us a corresponding message.
Transfer of data to third parties:
The data transmitted as part of your application will be transferred using TLS encryption and stored in a database. This database is operated by Personio GmbH, which offers personnel administration and applicant management software (https://www.personio.de/impressum/). Personio is our processor in this context in accordance with Art. 28 GDPR. The basis for the processing is an order processing contract between us as the controller and Personio.As a safeguard to protect your privacy, we ask for a so-called "Double-Opt-In" to ensure that the registered e-mail address actually belongs to you. Furthermore, we have entered into a data processing agreement with the assigned service provider. You also have the possibility to unsubscribe from the newsletter at any time and thus delete your e-mail address from the service provider's database. The purpose of the data requested is to send the newsletter to your personal e-mail address in order to fulfil your request for updates about our company or our products. The legal basis is your consent in accordance with the European data protection requirements under Art. 6 para. 1 lit. a GDPR.
Newsletter
If you are interested in receiving updates about our company or our products, you can subscribe to our newsletter. You will then receive an e-mail in which you must click on a link to confirm receipt of the newsletter. We will then save your e-mail address until you unsubscribe from the newsletter. For this purpose you will find a corresponding link to unsubscribe in every e-mail of our newsletter. The delivery of the newsletter is carried out by a professional service provider.As a safeguard to protect your privacy, we ask for a so-called "Double-Opt-In" to ensure that the registered e-mail address actually belongs to you. Furthermore, we have entered into a data processing agreement with the assigned service provider. You also have the possibility to unsubscribe from the newsletter at any time and thus delete your e-mail address from the service provider's database. The purpose of the data requested is to send the newsletter to your personal e-mail address in order to fulfil your request for updates about our company or our products. The legal basis is your consent in accordance with the European data protection requirements under Art. 6 para. 1 lit. a GDPR.
DATA PROCESSING OF PROSPECTIVE TENANTS/ TENANT SELF-DISCLOSURE
We process your data for the purpose of concluding a tenancy agreement. We carry out a credit check immediately before concluding the tenancy agreement. There are no plans to change these purposes.Type of data:
Address data/contact details of contact persons (name, address, e-mail address)
Details of the business, details of rental space/ details of the rental application, credit information
Documents as evidence: Proof of income (e.g. business management analysis (BWA), SCHUFA information or Creditreform information, copy of ID of owners/managing directors (for all natural persons) with the following details: Name, current registration address, date/place of birth, validity of the document, photo
The legal basis for the processing is Article 6(1)(b) GDPR (pre-contractual measure for the rental agreement). The credit check is carried out on the basis of Article 6(1)(f) GDPR (legitimate interest, namely checking the creditworthiness of contractual partners).
The provision of data is both legally and contractually mandatory for interested parties. Without providing data, no offers can be made and no tenancy can be established. Data is not transferred to third countries. We do not use any automated individual decision-making processes.
Storage period: Unless a contract is concluded, the data will be deleted immediately after the purpose of processing no longer applies (usually after 6 months). If a contract is concluded, the data for which there is no statutory retention obligation will be deleted upon termination of the contractual relationship.
DATA PROCESSING OF PROSPECTIVE BUYERS
We process your data for the purpose of concluding a purchase contract. When checking a prospective buyer, we carry out a credit check. There are no plans to change these purposes.Type of data:
Address data/contact details of contact persons (name, address, e-mail address)/credit rating information
Documents as evidence: Proof of income (e.g. business management analysis (BWA), bank and deposit statements, land register extracts, SCHUFA information or Creditreform information, copy of ID of owners/managing directors (for all natural persons) with the following details: Name, current registration address, date/place of birth, validity of the document, photo
The legal basis for the processing is Article 6(1)(b) GDPR (pre-contractual measure for the purchase contract). The credit check is carried out on the basis of Article 6(1)(f) GDPR (legitimate interest, namely checking the creditworthiness of contractual partners).
The provision of data is both legally and contractually mandatory for interested parties. Without providing data, no offers can be made and no tenancy can be established. Data is not transferred to third countries. We do not use any automated individual decision-making processes.
Storage period: Unless a contract is concluded, the data will be deleted immediately after the purpose of processing no longer applies (usually after 6 months). If a contract is concluded, the data for which there is no statutory retention obligation will be deleted 12 months after the purchase price has been paid.
Cookies
Our website partially uses so-called cookies. Cookies are small text files that are usually stored in a folder of your browser. Cookies contain information about the current or last visit to the website:- Name of the website
- Expiration date of the cookie
- Any value
We use the following three types of cookies on our website:
- required cookies (cookies that are required, e.g. to display the website correctly for you and to store certain settings temporarily)
- functional and performance-related cookies (cookies that help us improve our website, e.g. to evaluate technical data of your visit and avoid error messages)
- advertising and analytics cookies (cookies that provide analytics and personalized ads, e.g. advertising for shoes is displayed if you have previously searched for shoes)
Google Fonts
For the visual improvement of the fonts we use Google Fonts (https://fonts.google.com) from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"), a font collection from Google. These fonts are transferred to the storage folder of your browser and activated when you visit this website or other websites. If this is not supported, the text on the web page will only be displayed in a default font. To make this possible, a request is sent to domains such as fonts.googleapis.com or fonts.gstatic.com, which for technical reasons contains your IP address. However, your data will not be merged with other data or traced back to your person.As a safeguard to protect your privacy, we have assured ourselves that the retrieval of Google's font collection does not merge the data with other Google services, e.g. if you have a Google user account. Information on data protection at Google Fonts confirms this (https://developers.google.com/fonts/faq). In addition, the high security standards of the Google platform and the associated privacy policy of Google (http://www.google.com/privacy) apply. Since Google is based in the USA and thus a so-called third country, further guarantees are required to ensure an adequate level of European data protection. Google provides standard contractual clauses which help to contractually ensure an adequate level of data protection. The standard contractual clauses have been evaluated and mutually coordinated.
The purpose of transmitting the data is the correct display of the fonts in the layout specified by us. The IP address is required to connect to Google's servers to download the font library, if it is not already stored on the device. The legal basis is the legitimate interest which we evaluated in accordance with the European data protection requirements under Art. 6 para. 1 lit. f GDPR.
Google Analytics
We use Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses the advertising and analytics cookies described above to analyze our website with regard to your usage behavior. The information generated by these cookies is transferred to a Google server in the USA and stored there. However, your IP address is shortened before the usage statistics are evaluated, so that no direct connection to you as a person can be made. For this purpose, we use the "anonymizeIp" function to ensure anonymous collection of IP addresses. Google will use the anonymous information collected by the cookies to evaluate the usage of the website and to compile reports on website activity. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.You can also configure your browser to refuse cookies, or you can prevent Google from collecting and analyzing the data by downloading and installing a browser plug-in (https://tools.google.com/dlpage/gaoptout?hl=en) from Google. As an alternative to the browser add-on or within browsers on mobile devices, you can set an opt-out cookie to prevent future collection by Google Analytics within this website (the opt-out only works in the browser and only for this domain). If you delete your cookies in this browser, you must click this link again.
As a safeguard to protect your privacy, we use the anonymization feature offered by Google as mentioned above, whereas analytics are not based on you as a person, but only on a statistical basis. In addition, the high security standards of the Google platform and its data privacy policy apply (http://www.google.com/privacy). We have also concluded a special data protection agreement with Google, which ensures to protect your data through technical and organizational security measures. Since Google is based in the USA and thus in a third country, further safeguards are required to ensure that your data is protected in accordance with a European level of data protection. Google provides standard contractual clauses which help to contractually ensure an adequate level of data protection. The standard contractual clauses have been evaluated and mutually coordinated. The purpose of the use of Google Analytics is to anonymously analyze usage behavior of our websites. The information collected helps us to improve our services. The legal basis is your consent in accordance with the European data protection requirements under Art. 6 para. 1 lit. a GDPR.
Date of the privacy policy: November 2023