I. Name and address of the Controller
The Controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
Invest Region Leipzig GmbH
Managing Director: Michael Körner
Telephone: +49 341 2682 77 70
II. Name and contact details of the Data Protection Officer
The Data Protection Officer of the Controller is:
Telephone: +49 341 2682 7771
III. General Information on Data Processing
We only collect and use personal data of our users insofar as this is necessary to provide a functional website as well as our contents and services. The collection and use of our users' personal data only takes place with the user's consent.
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6, para. 1, point a EU General Data Protection Regulation (GDPR) serves as the legal basis.
The processing of personal data necessary for the fulfilment of a contract to which the data subject is a contracting party is subject to, Art. 6, para. 1 point. b of the GDPR. This also applies to processing operations required to carry out pre-contractual actions.
If the processing of personal data is necessary to fulfil a legal obligation to which our company is a party, Art. 6, para. 1 point c of the GDPR serves as the legal basis.
In the event, that the vital interests of the data subject or another natural person require the processing of personal data, Art. 6, para. 1 point d of the GDPR serves as the legal basis.
If the processing is necessary to safeguard the legitimate interests of our company or a third party, and the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the former interest, Art. 6, para. 1 point f of the GDPR serves as the legal basis for processing.
The personal data of the data subject will be deleted or restricted as soon as the purpose of storage ceases to apply. The data may also be stored if the European or national legislator has provided for this in EU regulations, laws or other provisions to which the Controller is subject. The data will also be restricted or deleted if the specified storage period expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
IV. Provision of the website
Every time you visit our website, our system automatically collects data and information from the computer system of the visiting computer. In this instance the following data may be collected:
- Information about the browser type and version used
- The operating system of the user
- The Internet service provider of the user
- The IP address of the user
- The date and time of the access
- Sites from which the user's system reaches our website
- Websites that are accessed by the user's system through our website
Our hosting provider (C2 Media, Käthe-Kollwitz-Straße 115, 04109 Leipzig) is also technically required to receive this data. No log files will be created.
The legal basis for the temporary storage of data is Art. 6, para. 1, point f of the GDPR. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this the IP address of the user must remain stored for the duration of the session. For this purpose, we also have a legitimate interest in data processing according to Art.6, para. 1, point f of the GDPR.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of the data collection for the provision of the website, this will be when the respective session has ended.
The collection of data for the provision of the website is mandatory for the operation of the website. As a result, the user has no right of objection.
V. Contact form and e-mail contact
On our website there is a contact form which can be used for making contact electronically. If a user takes advantage of this service, the data entered in the submission form will be transmitted to us and stored.
At the time the message is sent, the user's IP address and the date and time of registration are also stored. Your consent is obtained for the processing of the data within the scope of the sending process and reference is made to this data protection declaration.
Alternatively, you can contact us via the e-mail address provided. In this event, the user's personal data transmitted by e-mail will be stored.
The data is used exclusively for processing the conversation.
Our e-mail provider C2 Media, Käthe-Kollwitz-Straße 115, 04109 Leipzig, is technically required to receive the data.
The legal basis for the processing of this data is Art. 6, para. 1, point a of the GDPR. The legal basis for the processing of the data transmitted in the course of making contact is Art. 6 para. 1 point f of the GDPR. If the aim of establishing contact is to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 point b of the GDPR.
Processing of personal data from the submission form is used solely for the purpose of establishing contact. In the event of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of personal data from the contact submission form and/or data sent via e-mail, this will be the done when the conversation with the user is concluded. The conversation is considered to be concluded when it can be inferred from the circumstances that the matter in question has been finally resolved.
The additional personal data collected during the submission process will be deleted after a period of seven days at the latest.
The user has the right to revoke consent to the processing of personal data at any time. If the user contacts us by e-mail, he can revoke consent to the storage of personal data at any time. In such cases, the conversation will not continue.
Any personal data stored in the course of establishing contact will be deleted in this case.
VI. Customer database
When we receive contact information from business partners, we store it in our CRM database for communication purposes. In the event that the business partner has consented to this as well as to establishing contact, the legal basis is Art. 6, para. point a of the GDPR. If the establishment of contact serves the preparation or completion of a contract, Art. 6, para. point b of the GDPR.
Our cloud-based CRM database is provided by our processor, Microsoft Corporation. It is therefore technically necessary that they are also recipients of this data.
Any consent given can be revoked at any time without affecting the legality of the processing carried out on the basis of the consent until revocation. At the same time, we will delete the data of the business partner. The data will be deleted as soon as they are no longer necessary to achieve the purpose for which it was collected. This is the case if the business partner is no longer interested in further information from us.
VII. Google Analytics
We use the web analysis service Google Analytics from Google LCC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA (hereinafter referred to as "Google"). We use this service to collect information such as from which Internet page the user came to our website, which page of our website a user accessed, or how often and for how long a page was viewed. This analysis is used to optimise our website. The IP anonymisation function truncates the IP address of your Google Internet connection in EU and EEA countries. The IP address may only be shortened in the USA in exceptional cases, for example in the event of technical failures in Europe. The legal basis for the processing is Art. 6, para. 1, point f of the GDPR. The above purposes are also our legitimate interest.
Google has committed to comply with the EU-US Privacy Shield Agreement published by the US Department of Commerce on the collection, use and retention of personal data from EU member states.
The data collected by Google Analytics will be automatically deleted after 26 months.
VIII. Google Double Click
We also use Pixel or transparent GIF files to support online advertising. These GIF files are provided by our ad management partner DoubleClick, a service of Google. These can be used by DoubleClick to recognise a unique cookie on the user's web browser, which in turn allows the provider to know what advertisements lead users to the website. Cookies have been placed by the provider or another advertiser working with DoubleClick. Information collected and shared using cookies or Spotlight technology is anonymous and not personally identifiable.
You can view and modify Google's ad settings at www.google.com/ads/preferences/html/blocked-cookies.html.
IX. Google Double Click Ad Exchange
We use Doubleclick Ad Exchange for marketing and optimisation purposes, in particular to display relevant and interesting ads to you, to improve campaign performance reports or to avoid you seeing the same ads more than once. This is also our legitimate interest in the processing of the above data by the third party. Legal basis is Art. 6, para. 1 page 1 point f of the GDPR.
You can prevent the installation of cookies by deleting existing cookies and deactivating the storage of cookies in the browser settings. Please note that in this case you may not be able to use all functions of our website to their full extent. You can also prevent cookies from being stored by setting your web browser to block cookies from the "www.googleadservices.com" domain (https://www.google.de/settings/ads). Please note that this setting will be deleted if you delete your cookies. You can also deactivate interest-based ads via the link http://www.aboutads.info/choices. Please note that this setting will be deleted if you delete your cookies.
X. Google Maps
This website also uses Google's "Google Maps" service to display maps or portions of maps and thus enables you to conveniently use the map function on the website.
When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data specified in the "Access data" section will be transmitted to Google. This happens regardless of whether you are logged in to a Google Account or not. When you're logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out before clicking the link.
Google stores your data as usage profiles and processes them for purposes of advertising, market research and/or tailor-made design of its website. In particular, such analysis is carried out (even for users who are not logged in) to provide advertising tailored to needs and to inform other users of the Social Network about their activities on our website.
The legal basis for the processing is Art. 6, para. 1 page 1 point f of the GDPR. The purpose of the processing is to make our website more attractive and to offer you additional services. We have no knowledge of the storage time at Google and have no influence over it.
You have the right to object to processing, but you must contact Google to exercise it. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Previously saved cookies can be deleted at any time. This can be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.
XI. Rights of the Data Subject
You have the following rights if the legal requirements are met:
- Right to information about your personal data (Art. 15 GDPR)
- Right to rectify any inaccurate personal data (Art. 16 GDPR)
- Right to the deletion of personal data (Art. 17 GDPR)
- Right to restriction of the processing of personal data (Art. 18 GDPR)
- Right to object to the processing of personal data (Article 21 GDPR)
- Right to data portability (Article 20 GDPR)
XII. Right of appeal to a supervisory authority
You also have the right of appeal to a supervisory authority if you believe that the processing of your personal data is contrary to the GDPR.