Data protection
We, MVP Management GmbH (hereinafter “MVP” or “we”), take the protection of your personal data seriously. Personal data is any information relating to an identified or identifiable natural person, such as name, email address, IP address or postal address. We process your personal data in accordance with the statutory data protection regulations and this data protection notice.
The purpose of this data protection notice is to inform you about what data we collect when you visit our website at www.munichvp.com and during your other interactions with our company (e.g. when you apply for a job or contact us for any other purpose) and how we process and use your data.
I. Data Controller
MVP Management GmbH
Rumford Street 34
80469 Munich
Germany
Tel.: +49 (0) 89 / 2000 123 – 0
Fax: +49 (0) 89 / 2000 123 – 29
E-mail: office@munichvp.com
II. Data collected by us, purposes and legal basis of processing and storage period
We collect and process the personal data mentioned below for the purposes, on the basis of the legal grounds and for the duration stated therein.
1. Visit of our website
When visiting our website the internet browser you use automatically sends information to the server of our website for technical reasons and temporarily stores it in a so-called log file. The following information is automatically recorded and stored until it is automatically deleted: the IP address of your device, the date and time of access, the name and URL of the file accessed, the website from which the access was made (referrer URL), the internet browser used by you and, if applicable, the operating system of your device as well as the name of your access provider.
We process the aforementioned data for the following purposes: ensuring a smooth connection of the website, ensuring a comfortable use of the website, evaluation of system security and stability. The legal basis for the above data processing is Art. 6 (1) 1 lit. f) of the GDPR. Our legitimate interest follows from the aforementioned purposes.
Furthermore, we use cookies and web analysis tools on our websites. The cookies and tools involved and how your data is processed in this context is explained in the following sections.
2. Cookies
We use cookies on our websites. Cookies are small data packages that contain certain information (e.g. the time of your server request, the operating system you are using, the browser type, the previously visited website and the IP address) and that are stored on the user’s device when visiting a website. If you call up the corresponding server again, your browser sends the previously stored cookie back to the server.
We use so-called session cookies on our websites. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. The session cookies are automatically deleted when you close the browser. In addition, we also use persistent cookies that are stored for more than a session. These cookies are automatically deleted after a specified period of time, between one day and 24 months depending on the type of cookie.
Some of the cookies we set are used to enable certain functions of our websites, e.g. so that you do not have to edit our cookie banner each time you visit again. Other cookies that are set for analysis purposes (see also the section “Web analysis tools”) help us to understand how visitors interact with our websites. These cookies are used to statistically record the use of our websites and to evaluate them for the purpose of optimizing our offer. Details on the cookies used and the respective storage period can be found in the explanations in our cookie notice, which appears at the bottom of the page when you first visit our websites.
The processing of the cookies essential for the smooth operation of our websites is carried out on the basis of Art. 6 (1) 1 lit. f of the GDPR to protect our legitimate interests. For all other cookies that are not essential, the processing of your data is based on your consent in accordance with Art. 6 (1) 1 lit. a of the GDPR. We request your consent in our cookie notice. There you can set whether and which of the non-essential cookies you would like to allow. You can revoke your consent at any time with effect for the future by calling up the cookie notice again via the “Cookie settings” link and changing your settings.
3. Web analysis tools
On our website we use Google Analytics, a web analysis service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses cookies that are stored on your device and that enable an analysis of your use of our websites (see also the section “Cookies”). The information generated by the cookie about your use of our websites is transmitted to a Google server in the USA and stored there. In addition to your IP address, this information includes, for example, the number of times certain sub-pages of our website are accessed, the length of time spent on individual pages, the pages from which you left our website, data on the location of your access (e.g. city or country) or information on the conversion rate of sub-pages. As a rule, however, your IP address is anonymized before it is transmitted to the USA. Only after anonymization is the shortened IP address then transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to the USA and only shortened there. For these exceptional cases in which personal data is transferred to the USA, the transfer takes place on the basis of EU Standard Contractual Clauses in accordance with Art. 46 (2) lit. c of the GDPR, which we have agreed with Google.
Google will use the aforementioned information for the purpose of evaluating your use of our website, compiling reports on website activity for us and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.
As explained, you can decide whether you agree to the setting of such non-essential analysis cookies by setting this accordingly in our cookie notice (under statistics).
4. Contact us
When you contact us (e.g. by e-mail or telephone), the data you provide will be stored by us in order to answer your enquiry.
The processing of the data you have provided is based on your consent, which you have expressed by contacting us, in accordance with Art. 6 (1) 1 lit. a of the GDPR. You can revoke your consent at any time with effect for the future.
The personal data collected will be deleted immediately after we have dealt with your enquiry, unless it is required for the initiation or execution of a contract with you or for other purposes. We archive e-mail correspondence in accordance with the Principles for the proper keeping and storage of records and documents in electronic form and for data access (GoBD). Archived e-mails are automatically deleted after 10 years.
5. Initiation and performance of business relationships with customers, suppliers and other business partners
For the initiation, performance and termination of business relationships/contracts with customers, suppliers and other business partners, we process the contact data of the contact persons at our business partners (first and last name, position, business contact data such as e-mail address, telephone number and, if applicable, fax number) as well as substantive information about the business relationship/contractual relationship (e.g. contractual documents, bank data, other information that you provide to us about your company, e.g. presentations about your company and your employees, product specifications, business plans, investment documents, etc.). The provision of the aforementioned data is not legally obligatory, but it may be impossible or difficult to carry out the business relationship without this data.
We process this data on the basis of Art. 6 (1) 1 lit. b, c and f of the GDPR and on the basis of your consent pursuant to Art. 6 (1) 1 lit. a of the GDPR. Insofar as the legitimate interest within the meaning of Art. 6 (1) 1 lit. f of the GDPR is relied upon, our legitimate interest lies in the general maintenance of the business relationship and the analysis, evaluation and optimization of our business activities. You may revoke your consent to the processing of the aforementioned data at any time with effect for the future. The data will then be deleted unless there is another legal basis for the processing.
We store the data collected for the processing of the contract for the duration of the contractual relationship and, if applicable, after the end of the contract until the expiry of statutory or contractual warranty and guarantee rights. Insofar as we are obliged to store data for a longer period of time due to tax and commercial law retention and documentation obligations (e.g. from the German Commercial Code (HGB) or the German Tax Code (AO)), the data is stored for the legally specified periods of time (up to 10 years) on the basis of Art. 6 (1) 1 lit. c of the GDPR.
6. Job applications
If you send us a job application by post or e-mail, you should at least provide us with your full name, your postal or electronic contact address, a covering letter and your CV. There is no legal or contractual obligation to provide this data. However, we will not be able to process your application without this data.
We process the data you provide in your application for the purpose of deciding on the establishment of an employment relationship. The legal basis for this is Sec. 26 (1) of the German Data Protection Act (BDSG) as well as your consent pursuant to Art. 6 (1) 1 lit. a of the GDPR, which you expressed by sending the application, and, insofar as special categories of personal data (e.g. information on your health, religion, ethnic origin, political orientation or other “sensitive” data) are concerned, your consent pursuant to Art. 9 (2) lit. a of the GDPR. If you wish to exclude the processing of such special categories of data by us from the outset, we recommend that you do not submit such information and remove it from your documents or make it unrecognizable.
Mutual legal claims may arise in connection with the application process (e.g. claims under the General Equal Treatment Act (AGG)). The processing of your personal data may therefore be necessary for the assertion of or defense against such claims. Data processing for these purposes is carried out on the basis of Art. 6 (1) 1 lit. f of the GDPR to protect our legitimate interests.
You can revoke your consent to the processing of your application data at any time with effect for the future. The data will then be deleted immediately. Please note that we will then no longer be able to consider your application. However, even in this case, we reserve the right to continue to store certain data for a period of up to six months in order to be able to comply with legal provisions, in particular the obligations to provide evidence under the General Equal Treatment Act (AGG).
In the event of a negative decision on your application, we store your data for up to six months from the date of sending the rejection decision in order to be able to comply with the obligations to provide evidence under the General Equal Treatment Act (AGG). If an AGG complaint is filed by the applicant, we store the data until the legal conclusion of the complaint proceedings.
If your application is successful, your data may also be processed for personnel matters within the scope of employment in accordance with Sec. 26 of the BDSG or in accordance with Art. 6 (1) 1 lit. c of the GDPR to fulfil our legal obligations. In this case, the data will be stored for the duration of the employment relationship and deleted after its termination, at the latest after expiry of the statutory limitation periods or exclusion periods under the employment contract that apply to the employment relationship.
7. Advertising
Furthermore, we may use your data to send you advertising for our company’s services (e.g. newsletters, information on products, invitations to events, etc.). You can object to the use of your data for advertising purposes in total or for individual measures at any time. If you have given us your consent, we will also send you advertising by e-mail. You can revoke your consent to this at any time with effect for the future by clicking on the unsubscribe link in the advertising e-mail or by sending us a message.
The use of your data for advertising purposes is based on our legitimate interest in sending direct advertising pursuant to Art. 6 (1) 1 lit. f of the GDPR or, as far as e-mail advertising is concerned, based on your consent pursuant to Art. 6 (1) 1 lit. a of the GDPR.
III. Recipients of your data
In the first instance, personal data that you provide to us will only be processed by us. However, it may be necessary for us to disclose your personal data to third parties. In particular, the following categories of recipients come into consideration:
- IT service providers (e.g. hosting service providers for the provision of this website, web analysis service providers, service providers who maintain our IT systems),
- other service providers who support us in our business activities (e.g. corporate/legal/tax advisors, auditors, banks),
- Authorities, courts and other public bodies,
- Investment partners, e.g. Demeter Partners SA and Demeter Ventures SA (see www.demeter-im.com/).
IV. Third country transfer
There may be a transfer of data to the USA if you have consented to the use of analytics cookies. For details, please refer to the section “Web analysis tools”.
No further transfer of your data to third countries takes place.
V. Data subjects’ rights
You have the right to obtain information about the personal data we process about you in accordance with Art. 15 of the GDPR. Furthermore, you have the right to have incorrect data corrected and, if necessary, to have incomplete data completed in accordance with Art. 16 of the GDPR. You also have the right to have your personal data stored by us deleted under the conditions of Art. 17 of the GDPR. Furthermore, you have the right to restrict the processing of your data under the conditions of Art. 18 of the GDPR. In addition, in accordance with Art. 20 of the GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller. In addition, you may object to data processing, provided that the requirements of Art. 21 of the GDPR are met. In addition, in accordance with Art. 7 (3) of the GDPR, you can revoke your consent once given at any time with effect for the future.
You also have the right to lodge a complaint with a data protection supervisory authority if you are of the opinion that the processing of your personal data violates legal data protection regulations. As a rule, you can contact the supervisory authority of your usual place of residence or our registered office for this purpose.