Investor Login

Privacy Policy

Data protection information for addressing possible cooperation with companies

We, AURELIUS Wachstumskapital SE & Co KG (hereinafter also referred to as “AURELIUS”, “we” or “us”), hereby inform you about the processing of your personal data and the rights to which you are entitled.

1. Name and contact details of the controller

AURELIUS Wachstumskapital SE & Co KG

Ludwig-Ganghofer-Strasse 6

82031 Grünwald

Germany

Phone: +49 89 544799-0

E-mail: info@aureliusinvest.de

2. Contact details of the data protection officer

E-mail: awk.datenschutz@aureliusinvest.de

3. Information on relevant processing purposes

3.1 Addressing possible cooperation with companies

3.1.1 Purpose(s) of the data processing:

We process your personal data for the purpose of establishing a business relationship in the sense of an exchange regarding a possible strategic operational cooperation of AURELIUS or subsidiaries of AURELIUS with the company for which you work and/or regarding possible investments of subsidiaries of AURELIUS in companies in which you hold shares.

3.1.2 Legal basis for the data processing:

The data processing is based on Art. 6 para. 1 subpara. 1 f) GDPR (balancing of interests).

The legitimate interest is to promote the economic success of the business of the companies belonging to our group.

3.1.3. Recipients:

The following recipients/categories of recipients may have access to your data to the extent necessary:

Processors who are entrusted with the following services/processing on our behalf:

    • IT services:

        • salesforce.com Germany GmbH, Erika-Mann-Str. 31-37, 80636 Munich,

        • Salesfive GmbH, Sendlinger Str. 44, 80331 Munich,

    • Establishing the contact with you: AURELIUS WK Management SE, Ludwig-Ganghofer-Straße 6, 82031 Grünwald, Germany

3.1.4 Intended third country transfer:

Insofar as your data is transferred to third countries, AURELIUS ensures that either an adequacy decision of the European Commission exists for these (see https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en) or that an appropriate safeguard in terms of Art. 46 GDPR exists (see https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en on standard contractual clauses; https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/binding-corporate-rules-bcr_en on Binding Corporate Rules (BCR)) and, if necessary, supplementary measures are agreed with the recipient in the third country. For further information, you can contact the controller (see Section 1.).

3.1.5. Retention period:

We only store your data for as long as is necessary for the purposes of initiating a business relationship, for a maximum of six months after sending the covering letter, unless further processing is still necessary for other purposes (see Sections 3.2 and 3.3).

3.1.6 Categories of personal data:

We process the following categories of personal data that we have not collected directly from you:

    • Name

    • Title, if applicable

    • Position in the company

    • Postal address

    • Shareholder shares

3.1.7 Source of personal data:

Where we have collected your personal data from third parties, we have informed you of the source(s) in the covering letter. For further information on this, you can contact the controller (see Section 1.).

3.2 Establishing, exercising or defending legal claims

3.2.1 Purpose(s) of the data processing:

We may process your personal data for establishing, exercising or defending legal claims.

3.2.2. Legal basis for the data processing:

The data processing is based on Art. 6 para. 1 subpara. 1 f) GDPR (balancing of interests).

The legitimate interests are to establish, exercise or defend legal claims.

3.2.3. Recipients:

The following recipients/categories of recipients may access your data to the extent necessary:

    • legal service providers whom we entrust with the representation of our legal interests in individual cases if necessary

    • the recipients named in Section 3.1.3.

3.2.4 Intended third country transfer:

Insofar as your data is transferred to third countries, AURELIUS ensures that either an adequacy decision of the European Commission exists for these (see https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en) or that an appropriate safeguard in terms of Art. 46 GDPR exists (see https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en on standard contractual clauses; https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/binding-corporate-rules-bcr_en on Binding Corporate Rules (BCR)) and, if necessary, supplementary measures are agreed with the recipient in the third country. For further information, you can contact the controller (see Section 1.).

3.2.5. Retention period:

We store your data for as long as it is necessary for the purposes pursued by us of establishing, exercising or defending legal claims, i.e. in principle until the legal issue has been legally settled, our legal claims have been fulfilled or legal claims can no longer be brought against us (e.g. due to the statute of limitations).

3.2.6 Categories of personal data

We process the categories of personal data referred to in Section 3.1.6. that we have not collected directly from you.

3.2.7 Source of personal data

Where we have collected your personal data from third parties, this data originates from the sources mentioned in Section 3.1.7.

3.3 Fulfilment of legal obligations

3.3.1. Purpose(s) of the data processing:

We also process your personal data in order to comply with legal obligations to which we are subject. In this respect, the purposes of the processing result from the respective legal obligation.

3.3.2. Legal basis for the data processing:

The data processing is carried out on the basis of Art. 6 para. 1 subpara. 1 c) GDPR (legal obligation) in conjunction with the relevant norm establishing this obligation.

3.3.3. Recipients:

The following recipients/categories of recipients may have access to your data to the extent necessary:

    • the recipients named in Section 3.1.3.

3.3.4 Intended third country transfer:

Insofar as your data is transferred to third countries, AURELIUS ensures that either an adequacy decision of the European Commission exists for these (see https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en) or that an appropriate safeguard in terms of Art. 46 GDPR exists (see https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en on standard contractual clauses; https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/binding-corporate-rules-bcr_en on Binding Corporate Rules (BCR)) and, if necessary, supplementary measures are agreed with the recipient in the third country. For further information, you can contact the controller (see Section 1.).

3.3.5. Retention period:

We delete your data after the legal obligation ceases to apply, unless another legal basis applies.

3.3.6 Categories of personal data:

We process the categories of personal data referred to in section 3.1.6. that we have not collected directly from you.

3.3.7 Source of personal data

Where we have collected your personal data from third parties, this data originates from the sources mentioned in Section 3.1.7.

4. Data subject rights

If the legal requirements are met, you are entitled to the following rights:

    • request confirmation as to whether or not we are processing personal data concerning you; where this is the case, you have the right of access to this processing (Art. 15 GDPR).

    • request the rectification of inaccurate personal data concerning you and the completion of incomplete personal data concerning you (Art. 16 GDPR).

    • request the erasure of personal data concerning you, inter alia, if the processing was carried out unlawfully or is no longer necessary (Art. 17 GDPR).

    • request the restriction of the processing of personal data concerning you, inter alia instead of erasure of the data (Art. 18 GDPR).

 

Right to object on a case-by-case basis:

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6 para. 1 subpara. e) of the GDPR (performance of tasks in the public interest or in the exercise of official authority) or Article 6 para. 1 subpara. f) of the GDPR (balancing of interests); this also applies to profiling based on these provisions.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

Objection to data processing for the purpose of direct marketing:

Insofar as we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for such purposes; this also applies to profiling insofar as it is related to such direct marketing.

If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes.

You can contact us at any time to assert your data subject rights. To do so, please use the contact details of the data controller mentioned above under Section 1.

If you believe that the processing of your personal data violates data protection law, you can also lodge a complaint with a supervisory authority, in particular in the EU member state or federal state of your habitual residence, place of work or the place of the alleged violation you are complaining about.

You can also contact the supervisory authority competent for us:

Bayerisches Landesamt für Datenschutzaufsicht (Bavarian State Office for Data Protection Supervision)

Promenade 18

91522 Ansbach

Germany

Status: 12/07/2023