DATA PROTECTION INFORMATION

SOLUTIO provides the SOLUTIO-website under the web address www.solutio.ag (for the purpose of this document: “website”) The website intends to inform you about the SOLUTIO Group, the SOLUTIO AG and the SOLUTIO Fund Management GmbH & Co. KG.
In context with the provision of the website personal data are processed.
Below you find information on the controller, and the data protection officer of the controller (Section A) as well as on your rights regarding the processing of your personal data (Section B).
Below you also find information on the processing of your personal data (Section C) as well as information on the use of cookies (Section D).

Table of contents

 

A. Information on the controller

I. Identity and contact details of the controller
II. Contact details of the controller’s data protection officer

B. Information on the rights of data subjects
I. Right of access
II. Right to rectification
III. Right to erasure (“right to be forgotten”)
IV. Right to restriction of processing
V. Right to data portability
VI. Right to object
VII. Right to withdraw consent
VIII. Right to lodge a complaint with a supervisory authority

C. Information on the processing of personal data
I. Informational use of the website
II. Use of web analysis technologies
III. Use of third-party provider plug-ins (e.g. online map service plug-ins)

D. Information on the use of cookies
I. General information on cookies
II. Management of the cookies used on this website
III. Cookies used on this website

Change cookie settings

E. Effective date of and changes to this Data Protection Information

A. Information on the controller
I. Identity and contact details of the controller

SOLUTIO AG
Building 100
Bavariafilmplatz 7
82031 Grünwald, Germany
info@solutio.ag
Phone: +49 89 360 357 0

II. Contact details of the controller’s data protection officer

Daniel Popp
Building 100
Bavariafilmplatz 7 
82031 Grünwald, Germany
dsb@solutio.ag
Phone: +49 89 360 357 0

B.Information on the rights of data subjects

You may contact us for the purpose of exercising your rights using the contact information in Section A.II

Where applicable, you find information on any specific modalities and mechanisms which facilitate the exercise of your rights, in particular the exercise of your rights to data portability and to object, in the information on the processing of personal data in Section C of this Data Protection Information.

Below you find detailed information on your rights with regard to the processing of your personal data:

 

I. Right of access

As a data subject, you have a right to obtain access and information under the conditions provided in Article 15 of the General Data Protection Regulation.

This means in particular that you have the right to obtain confirmation from us as to whether we are processing your personal data. If so, you also have the right to obtain access to the personal data and the information listed in Article 15 paragraph 1 of the General Data Protection Regulation. This includes information regarding the purposes of the processing, the categories of personal data that are being processed and the recipients or categories of recipients to whom the personal data have been or will be disclosed (points (a), (b) and (c) of Article 15 paragraph 1 of the General Data Protection Regulation).

You can find the full extent of your right to access and information in Article 15 of the General Data Protection Regulation, which can be accessed using the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

II. Right to rectification

As a data subject, you have the right to rectification under the conditions provided in Article 16 of the General Data Protection Regulation.

This means in particular that you have the right to receive from us without undue delay the rectification of inaccuracies in your personal data and completion of incomplete personal data. You can find the full extent of your right to rectification in Article 16 of the GDPR, which can be accessed using the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

 

 

III. Right to erasure (“right to be forgotten”)

As a data subject, you have a right to erasure (“right to be forgotten”) under the conditions provided in Article 17 of the General Data Protection Regulation.

 

This means that you have the right to obtain from us the erasure of your personal data and we are obliged to erase your personal data without undue delay when one of the reasons listed in Article 17 paragraph 1 of the General Data Protection Regulation applies. This can be the case, for example, if personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed (point (a) of Article 17 paragraph 1 of the General Data Protection Regulation).

 

If we have made the personal data public and are obliged to erase it, we are also obliged, taking account of available technology and the cost of implementation, to take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of those personal data (Article 17 paragraph 2 of the General Data Protection Regulation).

 

The right to erasure (“right to be forgotten”) does not apply if the processing is necessary for one of the reasons listed in Article 17 paragraph 3 of the General Data Protection Regulation. This can be the case, for example, if the processing is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims (points (a) and (e) of Article 17 paragraph 3 of the General Data Protection Regulation). You can find the full extent of your right to erasure (“right to be forgotten”) in Article 17 of the GDPR, which can be accessed using the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

IV. Right to restriction of processing

As a data subject, you have a right to restriction of processing under the conditions provided in Article 18 of the General Data Protection Regulation.

This means that you have the right to obtain from us the restriction of processing if one of the conditions provided in Article 18 paragraph 1 of the General Data Protection Regulation applies. This can be the case, for example, if you contest the accuracy of the personal data. In such a case, the restriction of processing lasts for a period that enables us to verify the accuracy of the personal data (point (a) of Article 18 paragraph 1 of the General Data Protection Regulation).

Restriction means that stored personal data are marked with the goal of restricting their future processing (Article 4 Nr. 3 of the General Data Protection Regulation).
You can find the full extent of your right to restriction of processing in Article 18 of the GDPR, which can be accessed using the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

V. Right to data portability

As a data subject, you have a right to data portability under the conditions provided in Article 20 of the General Data Protection Regulation.

This means that you generally have the right to receive your personal data with which you have provided us in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from us if the processing is based on consent pursuant to point (a) of Article 6 paragraph 1 point (a) or of Article 9 paragraph 2 of the General Data Protection Regulation or on a contract pursuant to point (b) of Article 6 paragraph 1 of the General Data Protection Regulation and the processing is carried out by automated means (Article 20 paragraph 1 of the General Data Protection Regulation).

You can find information as to whether an instance of processing is based on consent pursuant to point (a) of Article 6 paragraph 1 or point (a) of Article 9 paragraph 2 of the General Data Protection Regulation or on a contract pursuant to point (b) of Article 6 paragraph 1 of the General Data Protection Regulation in the information regarding the legal basis of processing in Section C of this Data Protection Information. In exercising your right to data portability, you also generally have the right to have your personal data transmitted directly from us to another controller if technically feasible (Article 20 paragraph 2 of the General Data Protection Regulation).

 

You can find the full extent of your right to data portability in Article 20 of the General Data Protection Regulation, which can be accessed using the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

VI. Right to object

As a data subject, you have a right to object under the conditions provided in Article 21 of the General Data Protection Regulation.

At the latest in our first communication with you, we expressly inform you of your right, as a data subject, to object.

More detailed information on this is given below:

1. Right to object on grounds relating to the particular situation of the data subject

As a data subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Article 6 paragraph 1, including profiling based on those provisions.

You can find information as to whether an instance of processing is based on point (e) or (f) of Article 6 paragraph 1 of the General Data Protection Regulation in the information regarding the legal basis of processing in Section C of this Data Protection Information.

In the event of an objection relating to your particular situation, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

You can find the full extent of your right to objection in Article 21 of the General Data Protection Regulation, which can be accessed using the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

2. Right to object to direct marketing

Where your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. You can find information as to whether and to what extent personal data are processed for direct marketing purposes in the information regarding the legal basis of processing in Section C of this Data Protection Information.

If you object to processing for direct marketing purposes, we no longer process your personal data for these purposes.

You can find the full extent of your right to objection in Article 21 of the General Data Protection Regulation, which can be accessed using the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

VII. Right to withdraw consent

Where an instance of processing is based on consent pursuant to point (a) of Article 6 paragraph 1 or point (a) of Article 9 paragraph 2 of the General Data Protection Regulation, as a data subject, you have the right, pursuant to Article 7 paragraph 3 of the General Data Protection Regulation, to withdraw your consent at any time. The withdrawal of your consent does not affect the legitimacy of the processing that occurred based on your consent until the withdrawal. We inform you of this before you grant your consent.

You can find information as to whether an instance of processing is based on point (a) of Article 6 paragraph 1 or point (a) of Article 9 paragraph 2 of the General Data Protection Regulation in the information regarding the legal basis of processing in Section C of this Data Protection Information.

VIII. Right to lodge a complaint with a supervisory authority

Als betroffene Person haben Sie unter den Voraussetzungen von Artikel 57 Absatz 1 Buchstabe f der Datenschutz-Grundverordnung das Recht, Beschwerde bei der zuständigen Aufsichtsbehörde einzulegen.

Die für uns zuständige Aufsichtsbehörde ist:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

Promenade 27

91522 Ansbach

E-Mail: poststelle@lda.bayern.de

Telefon: +49 (0) 981 53 1300

C. Information on the processing of personal data

In context with the website different personal data are processed for different purposes.

Insofar as we, as controller, alone or jointly with others, determine the purposes and means of the processing of personal data, you will find information below in particular on

  • the personal data or categories of personal data concerned,
  • the purposes for which the personal data are intended to be processed,
  • the legal basis for the processing and, where the processing is based on point (f) of Article 6 paragraph 1 of the General Data Protection Regulation, the legitimate interests pursued by us or by a third party,
  • the recipients or categories of recipients of the personal data, if any,
  • where applicable, the fact that we intend to transfer personal data to a third country or international organisation and the existence or absence of an adequacy decision by the EU Commission, or in the case of transfers referred to in Article 46 or 47 of the General Data Protection Regulation, or the second subparagraph of Article 49 paragraph 1 of the General Data Protection Regulation, reference to the appropriate or suitable safeguards and the means by which to obtain a copy of them or where they have been made available,
  • the period for which the personal data will be stored, or if that is not possible, the criteria used to determine that period,
  • the existence of automated decision-making, including profiling, referred to in Article 22 paragraphs 1 and 4 of the General Data Protection Regulation and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you. [Only relevant if automated decision-making is relevant (Article 22 GDPR)]

Where we obtain your personal data from you as the data subject, you also find below information on whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the personal data and the possible consequences of failure to provide such data.

Where we do not obtain personal data from you as the data subject, you will also find below information on from which source the personal data originate, and if applicable, whether it came from publicly accessible sources.

I. Informational use of the website

When the use of the website is purely informational, certain information, for example your IP address, is for technical reasons sent to our server by the browser used on your end device. We process this information in order to provide the website content requested by you. To ensure the security of the IT infrastructure used to provide the website, this information is also stored temporarily in what is referred to as a “web server log file”. You receive more detailed information on this below:

Details on the personal data which are processed

Categories of personal data processed Personal data included in the categories Sources of the data Obligation to provide the data Storage duration
Certain protocol data which accrue via the Hypertext Transfer Protocol (Secure) (HTTP(S) (“HTTP Data”) for technical reasons when the website is visited. IP address, type and version of your internet browser, operating system used, last site accessed before visiting the site (referrer URL), date and time of visit. User of the website. Provision is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. There is no obligation to provide the data.
If the data is not provided, we cannot provide the requested website content.		 Data are stored in server log files in a form allowing the identification of data subject for a maximum period of 7 days, unless any security related event occurs (e.g. a DDoS attack).
If there is a security related event, server log files are stored until the security relevant event has been eliminated and clarified in full.
Data stored on the user’s end device in strictly necessary cookies (Section D) to manage the cookie consents for this website (“Opt-In Cookie Data”) Consent and, where applicable, your individual selection for the use of cookies on your end device. User of the website. Provision is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. There is no obligation to provide the data.
If the data is not provided, we cannot take any cookie consents on this website into account.		 We do not store this data on our systems.
See Section D.III on the validity period of the cookie.

 

Details on the processing of the personal data

Purpose of processing the personal data Categories of personal data processed Automated decision-making Legal basis and, where applicable, legitimate interests Recipient
HTTP data are temporarily processed on our web server for provision of the website content requested by the user. HTTP Data. No automated decision-making takes place. Balancing of interests (Article 6 paragraph 1 point f of the General Data Protection Regulation). Our legitimate interest is the provision of the website content requested by the user. Hosting provider.
HTTP data are processed temporarily in web server log files to ensure the security of the IT infrastructure used to provide the website, in particular to identify, eliminate and preserve evidence of disruptions (e.g. DDoS attacks). HTTP Data. No automated decision-making takes place. Balancing of interests (Article 6 paragraph 1 point f of the General Data Protection Regulation). Our legitimate interest is ensuring the security of the IT infrastructure used to provide the website, in particular to identify, eliminate and preserve evidence of disruptions (e.g. DDoS attacks). Hosting provider.
Data from strictly necessary cookies to provide the management of cookie consents (Section D) are processed temporarily on our web server in order to identify, when the site is visited again, whether you have already given consent. Opt-in Cookie Data. No automated decision-making takes place. Balancing of interests (Article 6 paragraph 1 point f of the General Data Protection Regulation). Our legitimate interest is the management of the cookie consents given by the user for this website. Hosting provider.

 

Details on the recipients of personal data and the transfer of personal data to third countries and/or international organisations

 

Recipient Recipient’s role Recipient’s location Adequacy decision or appropriate or suitable safeguards for transfers to third countries and/or international organisations
Hosting provider Processor EU –
II. Use of web analysis technologies

If you have granted your consent to this, we also use web tracking technologies in order to record and analyse usage behaviour on our website by means of cookies (Section D of this Data Protection Information) for the purposes of improving the website and to meet objectives of the website (e.g. frequency of page views, increasing number of page views).

You receive more detailed information on this below:

1. Details on personal information which are processed

Categories of personal data processed Personal data included in the categories Sources of data Obligation to provide the data Storage duration
Google Analytics
Protocol data which accrue via the Hypertext Transfer Protocol (Secure) (HTTP(S)) for technical reasons when the web analysis tool Google Analytics is used on the (“Google Analytics HTTP Data”). IP address, type and version of your internet browser, operating system used, site accessed before visiting the site (referrer URL), date and time of the visit. User of the website. Provision is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. There is no obligation to provide the data.
If the data is not provided, we cannot carry out web analysis.		 IP anonymisation is used on this website for the use of the web analysis tool Google Analytics. This means that the IP address transmitted via the browser for technical reasons is anonymised before being stored by shortening the IP address (by deleting the last octet of the IP address).
Storage duration of the protocol data is 14 month.
Data which are stored in Cookies (Section D) on the user’s end device for the web analysis tool Google Analytics an can be retrieved when visiting the website (“Google Analytics Cookie-Data”). Unique visitor ID for recognising returning visitors, number of visitor’s visits, time of first visit, earlier visits and the current visit, begin and expected end of the current visit, visitor category to which a user belongs, source or campaign which explains how a user arrived at the website. User of the website. Provision is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. There is no obligation to provide the data.
If the data is not provided, we cannot carry out web analysis.		 Data will be stored for 14 month.
Data collected by the web analysis tool Google Analytics and stored in pseudonym usage profiles (“Google Analytics Profile Data”). Data about the use of the website, in particular page visits, visit frequency and time spent on the pages visited. Generated autonomously. – Data will be stored for 14 month.

 

2. Details on the processing of personal data

Purpose of the processing of personal data Categories of personal data processed Automated decision-making Legal basis and, where applicable, legitimate interests Recipient
To improve the website and better achieve the objectives of the website (e.g. frequency of visits, increase in number of page visits), the behaviour of users on our website is recorded and analysed in pseudonymised form. Users of the website are marked in pseudonymised form so that they can be recognised again on the website. Pseudonymised usage profiles are created from this information. The pseudonymised usage profiles are not combined with data regarding the bearer of the pseudonym. The objective of this process is to examine where users come from, which areas of the website they visit and how often and how long which subpages and categories are looked at.
For these purposes we use the web analysis tool Google Analytics provided by Google.
For these purposes cookies (Section D) of the web analysis tool Google Analytics are used.		 Google Analytics HTTP Data, Google Analytics Cookie Data, Google Analytics Profile Data. No automated decision-making takes place. Consent (point (a) of Article 6 paragraph 1 of the General Data Protection Regulation) Google

 

3. Details on the recipients of personal data and the transfer of personal data to third countries and/or international organisations

Recipient Recipient’s role Recipient’s location Adequacy decision or appropriate or suitable safeguards for transfers to third countries and/or international organisations
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google”) Processor USA Google is certified under the EU-U.S. Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
III. Use of third-party provider plug-ins (e.g. online map service plug-ins)

“Third-party provider plug-ins” are embedded in the website, with which you can use functions on the website offered by third-party providers. The plug-ins are embedded in the website by way of a “2-click solution”. With this solution, the relevant plug-in is not activated directly when the website is accessed, but first when you click on the activation button provided for the relevant plug-in. The provider of the relevant plug-in can receive personal data from you when the relevant plug-in is activated.
You receive more detailed information on this below:

1. Third-party provider plug-ins embedded in the website

The following third-party provider plug-ins are embedded in the website, with which you can use the functions on the website offered by third-party providers:

Third-party provider Third-party plug-in Further information of the provider of the third-party provider plug-in Adequacy decision or suitable or appropriate safeguards for transfers to third countries and/or international organisations
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google”) Google Maps More detailed information on the function can be found in the provider’s description:
https://developers.google.com/maps/
Additional information on data processing by the provider can be found in the data protection information of the provider:
https://www.google.com/policies/privacy/		 Google is certified under the EU-U.S. Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

 

2. Processing of personal data by provider of the third-party provider plug-in

The third-party provider plug-ins are embedded in the website by means of a “2-click solution”. With this solution, the relevant plug-in is not activated directly when the website is accessed, but first when you click on the activation button provided for the relevant plug-in. The activation button contains the designation of the relevant plug-in and if applicable a logo of the third-party provider.

It is ensured with the 2-click solution that your internet browser does not initially connect to the servers of the provider of the relevant plug-in when you access the website. When you access the website, the provider of the relevant plug-in therefore initially cannot collect any personal data regarding you via the relevant plug-in. The relevant plug-in is first activated when you click on the button provided for activating the relevant plug-in. Once activated, a connection is made to the servers of the provider of the relevant plug-in. The provider of the relevant plug-in can also receive personal data from you when the relevant plug-in is activated. The activation of the relevant plug-in can be compared technically with clicking on a link to an external website, with the difference that the content requested in the process does not appear in a new window/tab of your internet browser, but visually embedded in our website. The data exchange initiated by you by activating and using the plug-in only takes place between your internet browser and the servers of the provider of the relevant plug-in. If you activate a third-party provider plug-in, you therefore use the function offered by the provider of the relevant plug-in under its responsibility, which is visually embedded in the layout of our website.

When the relevant plug-in is activated, the provider of the relevant plug-in can (comparable to accessing an external website via a link) in particular receive your IP address and the address (URL) of the website, from where you carried out the activation. The provider of the relevant activated plug-in can also receive information from any cookies of the relevant provider stored in your internet browser. The provider of the relevant plug-in can therefore due to the activation of the relevant plug-in initiated by you already receive at least the information that our website has been accessed from the IP address allocated to you at the time of access. If you are registered as a user with the relevant third-party provider, the provider of the relevant plug-in can also normally allocate the data received to your user account. We advise you that we do not have any knowledge about the specific purposes of the processing of data collected by the provider of the relevant plug-in or about any further details of the data processing of the relevant provider. In particular, ee also do not know whether the relevant provider only processes the data collected to provide the function of the relevant plug-in (e.g. to share certain content or to make a comment) or beyond this for any other purposes (e.g. to create usage profiles or to personalise advertising).

D. Information on the use of cookies

We use cookies in connection with the website. We use the processing and storage functions of your end device’s browser and collect information from the memory of your end device’s browser.

You will find more detailed information on this below. (F. Cookies)

 

I. General information on cookies

Cookies are small text files with information that can be placed on a user’s end device through its browser when a website is visited. When the website is visited again with the same end device, the cookie and the information it contains can be retrieved.

1. First-party and third-party cookies

Depending on where a cookie comes from, a distinction can be made between first-party cookies and third-party cookies:

First-party cookies Cookies that are placed and accessed by the operator of the website as the controller or a processor engaged by it.
Third-party cookies Cookies that are placed and accessed by controllers other than the operator of the website that are not processors engaged by the operator of the website.

 

2. Transient and persistent cookies

A distinction can be made between transient and persistent cookies depending on how long they remain active:

Transient cookies
(session cookies)		 Cookies that are automatically deleted when you close your browser.
Persistent cookies Cookies that remain stored on your end device for a certain period of time after the browser is closed.

 

3. Consent-free cookies and cookies requiring consent

Users’ consent is required for some cookies depending on their function and purpose of use. Thus, a distinction can be made between cookies that require users’ consent and those that do not:

Consent-free
cookies		 Cookies that have as their sole purpose to transmit a message using an electronic communication network.
Cookies that are necessary so that the party offering a service that has been expressly requested by a participant or user can provide this service (“strictly necessary cookies”)
Cookies requiring consent Cookies for all purposes of use other than the abovementioned.

 

II. Management of the cookies used on this website

1. Granting consent to the use of cookies and management of cookies using a cookie dashboard

If a user’s consent is necessary for the use of certain cookies, we only use these cookies when you use our website if you have previously granted your consent to this. You can find information as to whether the use of a particular cookie requires consent in the information on the cookies used on this website in Section D.III. of this cookie information.

When you visit our website, we display a “cookie banner” in which you can declare your consent to the use of cookies on this website by clicking on a button. When you click on the button, you have the option of giving your consent to the use of all of the cookies described in detail in Section D.III of this cookie information.

We also store your consent and any individual cookies you have selected in the form of a cookie (“opt-in cookie”) on your end device in order to determine, when you visit the website again, whether you have granted your consent. The opt-in cookie has a limited effective period of six months.

Necessary cookies cannot be deactivated using the cookie management function of this website. However, you can deactivate these cookies in general at any time in your browser.

2. Managing cookies using browser settings

You can also manage cookies using your browser’s settings. Different browsers have different ways to configure cookie settings. You can find more extensive information on this, for example at https://www.allaboutcookies.org/ge/cookies-verwalten/.

However, we would like to point out that some functions of the website may not work properly or at all if you deactivate cookies in general in your browser.

 

E. Effective date of and changes to this Data Protection Information

The effective date of this Data Protection Information is May 28, 2018. It may be necessary to modify this Data Protection Information due to technical developments and/or amendment of statutory or official requirements. An up-to-date version of this Data Protection Information can be retrieved at any time at https://www.solutio.ag/en/data-protection-information-en/

F. Cookies

This website uses cookies.

Dear Investor,

Thank You for Your visit. The functionality of the Investor Portal is currently being revised and will be available again soon.
Until then, please contact SOLUTIO AG directly by phone +49 89 360 357-0 or email info@solutio.ag.
We will gladly support You.