Thank you for visiting our website and for your interest in our company. We see data protection as a customer-oriented quality feature. The protection of your personal data and the protection of your personal rights are important to us.
With this privacy policy, we would like to inform all visitors to our website transparently about the type, scope and purpose of the personal data we collect, use and process and to inform you about your rights.
It is generally possible to use our website without providing personal data. However, if you make use of our company’s services via our website, it may be necessary to process your personal data.
The data collected automatically when you visit our website or the personal data you enter when using our services will be processed in accordance with the current statutory provisions on the protection of personal data.
If it is necessary to process your personal data and there is no legal basis for such processing, we will always obtain your consent for the required purpose of the processing.
As the company responsible for processing, we have defined technical and organizational measures to ensure the highest possible level of protection for your personal data.
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
However, we would like to point out that data transmission over the Internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
1. Contact details of the controller responsible for processing
The controller within the meaning of the General Data Protection Regulation is:
GMI Project Development GmbH
Hauptstr. 28
15806 Zossen, Germany
E-mail: info@gmi-invest.com
Irina Chapiror has been appointed as data protection officer.
2. Collection of general access information
Every time you visit our website, server log file information that your browser transmits to us is automatically recorded. This is:
- IP address (Internet Protocol address) of the accessing computer
- the website from which you are visiting us (referrer)
- the website you visit on our site
- the date and duration of the visit
- Browser type and browser settings
- operating system
We would like to point out that this data cannot be assigned to a specific person. We use this technical access information exclusively for the following purposes:
- to improve the attractiveness and usability of our websites,
- to recognize technical problems on our website at an early stage,
- to deliver the content of our website correctly
- and to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.
This data is stored for a maximum of 7 days as a technical precaution to protect the data processing systems against unauthorized access.
3. Collection and disclosure of personal data
We only use your personal data for the purposes stated on this data protection information page. The following input masks exist on our website for the collection of personal data:
3.1 Request for documents for investor and partner prospects
To request documents (“Get access”, “Request a Blind Teaser”), we need the following information:
- Company
- First and last name
- Role in the company
- Email address (confirmed by a verification code)
- Which documents or assets you are interested in
The personal data you provide is collected and stored exclusively for internal purposes. The voluntary provision of personal data enables us to offer you content or documents only available to registered prospects. You can correct or update your personal data at any time.
3.2 Contacting via email or contact form
We offer you the option to contact us via email or a contact form on our website. When you contact us by email or through the contact form, the personal data you provide will be automatically stored. This voluntarily provided personal data is stored for the purpose of processing your request or contacting you. No personal data will be shared with third parties.
4. What are cookies used for?
Our website does not use tracking or advertising cookies. Only a technically necessary session cookie is set when you use one of our forms; it protects the form against misuse and is deleted when you close your browser. Because no consent-requiring cookies are used, this website does not show a cookie banner.
5. Use of tracking, analysis and other tools
We do not use analytics, tracking or remarketing tools. Fonts, scripts and media are delivered from our own server. Where a video is embedded from YouTube, it is only loaded after you actively click on it; only then is a connection to YouTube (Google Ireland Limited) established and YouTube may process your data. Until you click, no data is transmitted to YouTube.
6. Deletion, blocking and duration of personal data storage
We only process and store your personal data for as long as is necessary to achieve the purpose of storage or as required by law. Once the purpose of storage ceases or legal retention periods expire, personal data will be routinely blocked or deleted following legal requirements.
7. Data subject’s privacy rights
If you have questions about your personal data, you can contact us at any time. Under the GDPR, you have the following rights:
7.1 Right to information (Art. 15 GDPR)
You have the right to know what categories and types of personal data we process, for what purpose, for how long, and according to which criteria we store this data, and whether automated decision-making, including profiling, is applied. You also have the right to know who the recipients or categories of recipients of your data are, particularly in third countries or international organizations. In such cases, you have the right to be informed of appropriate safeguards regarding the transfer of your data. In addition to the right to complain to the relevant supervisory authority and the right to know the origin of your data, you have the right to deletion or correction, as well as the right to restrict or object to the processing of your personal data. In all the above cases, you have the right to request a free copy of your personal data processed by us. For any additional copies you request, we reserve the right to charge an appropriate administrative fee.
7.2 Right to correction (Art. 16 GDPR)
You have the right to request the immediate correction of incorrect personal data and, considering the purposes of processing, to request the completion of incomplete personal data, including by means of a supplementary statement. If you wish to exercise your right to correction, you can contact our Data Protection Officer or the responsible processor at any time.
7.3 Right to deletion (Art. 17 GDPR)
You have the right to request the immediate deletion of your data (“right to be forgotten”), especially if the data is no longer necessary, you withdraw your consent, the data has been unlawfully processed or collected, or there is a legal obligation to delete it under EU or national law. The right to be forgotten does not apply if an overriding right to freedom of expression or information exists, data retention is required to fulfill legal obligations (e.g., retention obligations), archiving purposes prevent deletion, or data is needed to assert, exercise, or defend legal claims.
7.4 Right to restriction (Art. 18 GDPR)
You have the right to request a restriction on the processing of your data if the accuracy of the data is contested by you, the processing is unlawful, you refuse deletion of your personal data and instead request a restriction on processing, the purpose of the processing is no longer applicable, or you have objected to the processing under Article 21(1) and it is not yet clear whether legitimate grounds on our side outweigh your interests.
7.5 Right to data portability (Art. 20 GDPR)
You have the right to request that we send your data to another controller in a structured, common, and machine-readable format. You can assert this right if you have consented to the data processing or the processing is necessary for the performance of a contract. You can also request that the data be sent directly to the other controller, provided that it is technically feasible and does not infringe on the rights and freedoms of other individuals.
7.6 The right to object (Art. 21 GDPR)
You have the right to object at any time to the collection, processing, or use of your personal data for the purposes of direct marketing, market and opinion research, or general business data processing, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms. Additionally, your right to object may be denied if a legal provision mandates or requires the collection, processing, or use of the data.
7.7 Right to lodge a complaint with the data protection supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG)
If you believe that the processing of your personal data violates legal requirements, you have the right to lodge a complaint with the competent supervisory authority.
7.8 Right to withdraw consent (Art. 7 Para. 3 GDPR)
You may withdraw your consent for the processing of your personal data at any time without providing reasons. This also applies to consents given to us before the GDPR came into effect.
8. Legal basis for processing
When processing personal data for which we obtain the data subject’s consent, the legal basis is Art. 6 Para. 1, Sentence 1 a) of the General Data Protection Regulation (GDPR).
When processing personal data necessary for the performance of a contract to which the data subject is a party, the legal basis is Art. 6 Para. 1, Sentence 1 b) GDPR. This also applies to processing operations necessary to take pre-contractual measures.
If the processing of personal data is required to fulfill a legal obligation to which our company is subject, Art. 6 Para. 1, Sentence 1 c) GDPR serves as the legal basis.
If processing is necessary for the purposes of the legitimate interests pursued by our company or a third party and such interests are not overridden by the interests, rights, and freedoms of the data subject, Art. 6 Para. 1, Sentence 1 f) GDPR serves as the legal basis. The legitimate interest of our company lies in the conduct of our business activities as well as the analysis, optimization, and safeguarding of our online offerings.
9. Transmission of data to third parties
We generally do not sell or lend user data. Data is only transmitted to third parties beyond the scope described in this privacy policy when it is absolutely necessary to fulfill the requested service.
We only transmit data when there is a legal obligation to do so. This is the case when government institutions (e.g., law enforcement authorities) request information in writing or a court order is presented.
Further transmission of personal data to so-called third countries outside the EU/EEA does not take place.
10. Legal or contractual requirements for the provision of personal data and potential consequences of non-provision
Please note that in certain cases (e.g., tax regulations), the provision of personal data is legally required, or it may result from contractual obligations (e.g., details about the contracting party). For instance, it may be necessary for the conclusion of a contract that the data subject/contracting party provides their personal data to allow us to process their request (e.g., contact request). A requirement to provide personal data mainly arises when contracts are being concluded. If no personal data is provided, the contract cannot be concluded with the data subject.
Before providing personal data, the data subject can contact our Data Protection Officer or the person responsible for the processing. The Data Protection Officer or the person responsible for the processing will inform the data subject whether the provision of the required personal data is legally or contractually mandated or necessary for the conclusion of the contract, and whether the data subject is obligated to provide the personal data or what consequences the failure to provide the requested data would have for the data subject.
11. Existence of automated decision-making
As a responsible company, we do not use automated decision-making or profiling in our business relationships.