Data protection

Liability:

As a service provider pursuant to Section 7 Paragraph 1 of the German Telemedia Law (TMG), Steinbeis is responsible for all content made available for public use in keeping with general laws and provisions. Steinbeis cannot be held liable for damage of a material nature or otherwise resulting from the use of this website or its contents, provided that it is not caused deliberately or is the result of gross negligence.
Website content generated by third parties is directly attributable to the named author. Any such content is thus the responsibility of the author or the party that commissioned the other to generate the content.
Pursuant to Section 7 paragraph 2 of the German TMG, Steinbeis is not obliged to monitor or investigate third-party information that it has subsequently communicated to others or stored. In particular this relates to the unlawful nature of third-party information.
Steinbeis is not responsible for the content of websites linked to via this website, directly or indirectly, and cannot therefore guarantee in any form or manner that the quality or content of the information on this website is either complete, accurate, available or up-to-date. Steinbeis has no influence whatsoever over the current or future design or content of pages referred to via hyperlink.

Data & Privacy Policy:

Steinbeis Consulting Centre Impact Investing values your privacy, is committed to protecting your privacy and cares about the way in which your personal information is treated.

This Privacy Policy explains our approach to various aspects of personal information we may have on you.

1. What personal data we collect on you
We may collect personal information from you in the course of our business, including through your use of our website, when you contact or request information from us, when you engage our services or as a result of your relationship with one or more of our staff.

The personal information that we process includes:

Basic information: such as your name (including name prefix or title and suffix), the company you work for, your title or position and your relationship to a person;
Contact information: such as your postal address, email address, phone and fax numbers, including your home address, where you have provided this to us, when and where contact was made;
Information you provide to us for the purposes of attending meetings and events, including access and dietary requirements;
You may possibly be included in photographs and videos taken at our events that you may be invited to, and choose to attend. These images may be published in our reports and website but shall never be sold;
Financial information, such as payment-related information during the ordinary course of business;
Technical information, such as information from your visits to our website or applications or in relation to materials and communications we send to you electronically;
Identification and background information provided by you or collected as part of our business acceptance processes;
Personal information provided to us by or on behalf of our clients or generated by us in the course of providing services to them, which may include special categories of data;
Any other information relating to you which you may provide to us.

2. Why is the personal data being collected and what we use that information for
All the data you provide to us will be processed subject to the restrictions and for the purposes mentioned in this notice, namely:

To advise you through e-mail, phone call, or personal meeting in the course of an ordinary commercial relationship, about services/products related to your professional interests
To promote our services, including publications/reports
From time to time we would like to contact you about events or conferences or seminars organised /sponsored by us or about our new services/products which will be communicated to you by email, post or phone call
To provide and improve our services to you and to our clients, including handling personal information
To provide information requested by you
To manage and administer our relationship with you and our clients
To fulfil our legal, regulatory and risk management obligations, including establishing, exercising or defending legal claims
For the purposes of recruitment
To perform a contract, such as engaging with an individual to provide our services
For legitimate business purposes. Please see 'How we use your personal information' for more detail.

3. Who collects your data and how is it processed

We are a "data controller" for the purposes of the Data Protection Act 1998 and (from 25 May 2018) the EU General Data Protection Regulation (GDPR) 2016/679 ("Data Protection Law"). This means that we are responsible for, and control the processing of, your personal information
Data will be collected by Steinbeis Consulting Centre Impact Investing (the "Data Controller"), Zeilweg 44, 60439 Frankfurt am Main. You may contact us at: info@steinbeis-impact.com
Personal data is processed both manually and electronically in accordance with the above-mentioned purposes and, in any case, in order to guarantee data security and data confidentiality in compliance with current regulations. All the data will be processed until the withdrawal of consent or at the end of a defined retention period.

4. How we obtain your personal data:

When you interact with us directly: This could be when you engage with our staff, provide us with your personal information, if you ask us about our activities, register with us for an event or register on one of our digital platforms or applications. This includes when you visit our website.
Steinbeis Consulting Centre Impact Investing collects and processes personal information about you in a number of ways, including through your use of our website and in the provision of services by us.
We collect information from you as part of our business acceptance processes and about you and others as necessary in the course of providing our services. including for compliance and statutory purposes.
We collect your personal information while monitoring our technology tools and services, including our websites and email communications sent to and from Steinbeis Consulting Centre Impact Investing.
We may collect or receive information about you from other sources, such as keeping the contact details we already hold for you accurate and up to date using publicly available sources.

5. How is data processed

Data is recorded on paper, databases and IT systems.
We may share your Personal Data with authorised service providers who perform services for us (including cloud services, data storage, support and marketing assistance). Our contracts with our service providers include commitments that they agree to limit their use of Personal Data to our specific instructions and to comply with privacy and security standards.
Without prejudice to any communications made to comply with legal or contractual obligations, data may also be disclosed to external parties as required by laws or regulations (e.g. court, tribunal, Regulatory Authority or Governmental Entity).
When we share your information with contracted Third Party companies we take all reasonable steps to ensure that your information and privacy are protected in line with the applicable legal obligations.

6. How long do we keep your personal information
Your data will be retained unless consent is withdrawn or an erasure request is made. If you change your mind after an "opt-out", you can easily request us to retain your information by emailing us at: info@steinbeis-impact.com

7. Who we share your personal information with
We may share your personal information with certain trusted third parties in accordance with contractual arrangements in place with them, including:

Our professional advisers, including investment, legal and accounting
IT service providers
Third parties involved in hosting or organising events or seminars
Where necessary, our partners/associates who help us to carry out our services to you on capital introduction.

While it is unlikely, we may be required to disclose your information to comply with legal or regulatory requirements. Where necessary, or for the reasons set out in this policy, personal information may also be shared with regulatory authorities, courts, tribunals, government agencies and law enforcement agencies. We will use reasonable endeavours to notify you before we do this, unless we are legally restricted from doing so.

If in the future we re-organise or sell/transfer all or part of our business, we may need to transfer your information to a new organisation which shall abide with GDPR and privacy rules.

8. How we protect your information
Security precautions are in place to protect the loss, misuse or alteration of your information
We use a variety of technical and organisational measures to help protect your personal information from unauthorised access, use, disclosure, alteration or destruction consistent with applicable data protection laws.

9. Your rights
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:

Access to your personal information: You have the right to request access to a copy of the personal information that we hold about you, along with information on what personal information we use, why we use it, who we share it with, how long we keep it for and whether it has been used for any automated decision making. You can make a request for access free of charge. Please make all requests for access in writing, and provide us with evidence of your identity to:
Mr. Lothar Jakab
Data Protection Officer
Zeilweg 44
60439 Frankfurt am Main, Germany
Email: info@steinbeis-impact.com
Right to object: You can object to our processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes. Please contact us as noted above, providing details of your objection
Consent: If you have given us your consent to use personal information (for example, for marketing), you can withdraw your consent at any time
Rectification: You can ask us to change or complete any inaccurate or incomplete personal information held about you
Erasure: You can ask us to delete your personal information where it is no longer necessary for us to use it, you have withdrawn consent, or where we have no lawful basis for keeping it
Portability: You can ask us to provide you or a third party with some of the personal information that we hold about you in a structured, commonly used, electronic form, so it can be easily transferred
Restriction: You can ask us to restrict the personal information we use about you where you have asked for it to be erased or where you have objected to our use of it
No automated-decision making: Automated decision-making takes place when an electronic system uses personal information to make a decision without human intervention. We do not carry out any automated decision-making
Your objection (or withdrawal of any previously given consent) could mean that we are unable to perform the actions necessary to achieve the purposes set out above (see 'How we use your personal information') or that you may not be able to make use of the services and products offered by us. Please note that even after you have chosen to withdraw your consent we may be able to continue to process your personal information to the extent required or otherwise permitted by law, in particular in connection with exercising and defending our legal rights or meeting our legal and regulatory obligations.

If you consider that the processing of your personal data infringes applicable data protection laws, as a data subject you have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority, in particular, in the Member State of your habitual residence, place of work or place of the alleged infringement. The European Union's General Data Protection Regulation and other applicable data protection laws provide certain rights for data subjects.

We may change this Policy from time to time so please check this page regularly to ensure that you're happy with any changes. By using our website, being on our mailing list or by attending our events, you are agreeing to be bound by this Policy.

Last updated: May 2023