Privacy policy statement of CORESTATE Capital Holding S.A.

In the following, we would like to inform you about our privacy policy concerning your visit to our website. Protecting your privacy and personal data is a matter of importance to us. We collect and process your personal data only with your knowledge and consent. We always inform you which information we may store and for which purpose we may use it. We fully comply with the data protection legislation as laid out in the EU’s General Data Protection Regulation (EU GDPR) and the new German Federal Data Protection Act (BDSG-new).

This privacy policy informs you, under the terms of applicable data protection legislation, of data collection at the data subject (user), especially in consideration of Art. 13 GDPR in connection with § 4 BDSG-new, and the processing of personal data during website visits.

1. Name and address of responsible entity

The responsible entity for this website as defined in the GDPR, the BDSG-new and other data protection legislation valid in member states of the European Union and other privacy provisions of legal nature is:

CORESTATE Capital Holding S.A.
4, rue Jean Monnet
L-2180 Luxembourg

Phone: +352-26-637220
Fax: +352-26-637245
Email: info@corestate-capital.com

Website: https://www.ir.corestate-capital.com, www.corestate-capital.com

2. Name and address of data protection officer

Contact information of our data protection officer:

Postal mail:

Kathrin Aigner

CORESTATE Capital Group GmbH

Friedrich-Ebert-Anlage 35-37 | Tower 185

60327 Frankfurt am Main, Germany

Email: kathrin.aigner@corestate-capital.com

Phone: +49 69 3535630-139

Fax: +49 69 3535630-29

Please feel free to contact our data protection officer directly at any time if you have any questions or suggestions regarding data protection matters.

3. Collection and processing of personal data

Personal data refers to information that can identify an individual or describes their behavior, i.e. information that can be traced back to a specific person. Personal data includes, among other things, names, email addresses and phone numbers, as well as IP addresses or websites visited. In accordance with the principle of data minimization, personal data will be processed only if absolutely necessary, and exclusively for the purposes stated in this privacy policy and/or for the purposes of services you have requested. We do not pass on your data to third parties if not necessary or without your consent. Your personal data is used to process your request, answer your inquiry, or give you access to specific information and offers.  

4. Access data / Server log files

When a website is visited, access data is recorded in server log files. Access data includes: name of the website visited, file, access date and time, volume of data transmitted, notification of successful retrieval of data, browser type and version, operating system of the user, referrer URL (previously visited website), IP address, and querying provider. 

We use this technical access data in keeping with Art. 6 (1f) GDPR (legitimate interests) exclusively for the purpose of improving our websites and/or identifying potential technical issues or malfunctions at an early stage. Data is stored for a period of four weeks.

5. Newsletter

Our newsletter informs you about our company and updates you on current corporate news. If you want to receive our newsletter, we will need to know your first name, last name, and a valid email address. No other data is collected. The provided information is exclusively used for the mailing list of our newsletter and not passed on to third parties. By subscribing to our newsletter, we will save your IP address and the date of registration. We only do so for documentation purposes in case a third party misuses your email address to subscribe to our newsletter without your knowledge. You can revoke your consent to the storage of personal data, the email address and its use for sending the newsletter at any time, either via the link provided in the newsletter or by sending a message to the contacts listed above.

Data provided when subscribing to our newsletter is exclusively processed based on your consent (Art. 6 (1a) GDPR). You can revoke your consent to the storage of personal data, the email address and its use for sending the newsletter at any time, e.g. by clicking “Unsubscribe” in the newsletter. Revocation of your consent will not affect the legality of previous data processing based on your consent. Data recorded for the purpose of sending the newsletter will remain stored until you unsubscribe from the newsletter, at which point it will be deleted.

6. Integration of third-party content and services

Our websites may include third-party content, such as YouTube videos, Google Maps data, RSS feeds or illustrations from other websites. By viewing this content, the IP address of the user will be transmitted to the respective content provider (referred to as “third parties” in the following). This is due to the fact that content cannot be transmitted to the user’s browser without an IP address, i.e. the IP address is necessary for the presentation of such content. We make every attempt to exclusively integrate content in our website by providers that use the IP address solely to provide their content. However, we have no influence on a third party’s decision to store the IP address, e.g. for statistical purposes. If  we are aware of such practices, we notify our users accordingly.

This processing is based on legitimate interests as defined in Art. 6 (1f) GDPR.

7. Cookies

Certain parts of our website use cookies. Cookies are small text files sent to your computer and stored in your browser. Session cookies are only stored for the duration of the website visit and are automatically deleted when the user exits the browser. These cookies do not contain any personal data but simply identify the browser used to access the website. They help us make our offering more user-friendly, effective and secure.

Session cookies are only stored for the duration of the website visit and are automatically deleted when the user exits the browser. These cookies do not contain any personal data but simply identify the browser used to access the website. Other cookies make it possible to store specific, device-related information on the user’s access device (PC, smartphone, etc.), which is stored beyond the individual session. These cookies serve the purpose of retaining user settings for future website visits. They remain on your end device until you delete them and allow us to recognize your browser the next time you visit our website.

Cookies required for successful electronic communications or the provision of specific features requested by you (e.g. shopping cart) are stored in accordance with Art. 6 (1f) GDPR (legitimate interests). The website operator has a legitimate interest in storing cookies to provide services free of technical errors and optimized for the user. If other cookies are used (e.g. to analyze your websurfing activities), these are mentioned separately in this privacy policy. Most browsers are set to automatically accept cookies. You can disable the use of cookies in the browser settings or request to receive a notification when cookies are transmitted.

8. Webfont by Fast.Fonts.Net

To ensure the uniform display of fonts, our website uses web fonts provided by Monotype GmbH. When you load our website, your browser stores the required web fonts in your browser cache to be able to accurately display texts and fonts.

To do so, your browser needs to connect to the fast.fonts.net servers. Consequently, fonts.com acquires knowledge about your IP address accessing our website. The use of fast.fonts.net web fonts serves the purpose of an attractive, uniform display of our online offering and is considered a legitimate interest in accordance with Art. 6 (1f) GDPR. If your browser does not support web fonts, one of your computer’s default fonts is used.

For further information on web fonts please see https://www.fonts.com/info/legal and the privacy policy of Fonts.com: https://www.fonts.com/info/legal/privacy/ and the privacy policy of Monotype GmbH: https://www.monotype.com/legal/privacy-policy/

9. Google Analytics

Our website uses Google Analytics, a web analysis service provided by Google LLC (“Google”), Amphitheatre Parkway, Mountain View, CA 94043, USA. Our business relationship to this web analysis provider complies with the Privacy Shield Framework developed by the U.S. Department of Commerce and the European Commission for transatlantic exchanges of personal data for commercial purposes. [MGP1] Google Analytics uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. You may refuse the use of cookies by selecting the appropriate settings on your browser. Data processing complies with the legal provisions of sec. 96 (3) TKG (German Telecommunications Act) and Art. 6 (1a) (consent) and/or (1f) (legitimate interests) GDPR. Our concern in the definition of the GDPR (legitimate interests) is to improve our offering and web presence. As the privacy of our users is a matter of importance to use, user data is anonymized by shortening the IP address.

Google shortens your IP address within the member states of the European Union of other countries party to the Agreement on the European Economic Area. Only in exceptional cases will your full IP address be transmitted to a Google server in the USA and shortened there. Google Analytics does not link the IP address transmitted by your browser to any other Google data. We have concluded a data processing agreement with the provider based on which Google uses this information to evaluate your use of the website, to produce reports on website activities, and to render further services connected with the usage of the website and of the internet on behalf of the website operator. 

For further information on the terms of use and privacy policy of Google Analytics please see www.google.com/intl/de/analytics/privacyoverview.html.

Deactivation of Google Analytics

You can disable the collection of data generated by cookies during your use of the website (including your IP address), its transfer to and processing by Google by downloading and installing the browser plugin available at this link: (http://tools.google.com/dlpage/gaoptout?hl=de).

Alternatively, you can also disable data collection through Google Analytics by clicking the following link: (Deactivate Google Analytics). In this case, an opt-out cookie is placed that will prevent data collection during future visits to this website. Please note that your browser settings have to be set to ‘Cookies enabled’ for this option.

10. Google Tag manager

This website uses Google Tag Manager, a service which allows website tags to be managed using a central interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not register personal data. The tool causes other tags to be activated which may, for their part, register data under certain circumstances. Google Tag Manager does not access this information. If recording has been deactivated on domain or cookie level, this setting will remain in place for all tracking tags implemented with Google Tag Manager.

For further information about the terms of use and privacy policy of Google Analytics please see http://www.google.de/tagmanager/use-policy.html.

11. Deletion of personal data

We store personal data of an individual only for the time period required to fulfill the relevant purpose. When the purpose of data storage ceases to apply or the storage period elapses, personal data is deleted in accordance with the applicable legal provisions.

12 .Rights of data subjects (users)

As data subject (user), you have the general right of access to information about which personal data has been stored. Provided that your interest does not collide with a legal obligation to store data, you have the right to require the rectification of incorrect data as well as erasure and/or restriction of processing of personal data. If data is processed based on your consent (in acc. with Art. 6 (1a) GDPR or Art. 9 (2a) GDPR), you can revoke your consent at any time. Revocation of your consent will not affect the legality of previous data processing based on your consent. In addition, you have the right to data portability.

To exercise these rights, please contact the responsible entity and/or your data protection officer. You can also contact the responsible regulatory authority directly. For CORESTATE Capital Holding S.A, this is the National Commission for Data Protection  (https://cnpd.public.lu).

13. Legal bases of data processing

Art. 6 (1a) GDPR provides our company with the legal basis for data processing activities, for which the data subject has given consent to the processing of his or her personal data for one or more specific purposes.

In cases where processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract, Art. 6 (1b) GDPR serves as the legal basis. In cases where processing is necessary for compliance with a legal obligation to which the controller is subject, Art. 6 (1c) GDPR serves as the legal basis.

In cases where processing is necessary in order to protect the vital interests of the data subject or of another natural person, Art. 6 (1d) GDPR serves as the legal basis.

In cases where processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6 (1f) GDPR serves as the legal basis.

14. Data security

We protect data you have provided through suitable technical and organizational means to protect it from intentional or unintentional manipulation, loss, destruction and/or access by unauthorized third parties. We continuously monitor and improve our security measures in keeping with technological developments and orga