Data protection and legal information

Westfälische Corporate Finance GmbH is looking forward to your visit. Despite careful control of the content, we cannot accept any liability for external links to third-party content. The protection of your personal data during the collection, processing and use during your visit to our homepage is important to us. Your data is protected in accordance with legal regulations. We want you to feel safe when visiting our website.

This data protection declaration describes what data is collected during your visit to the homepage and how it is used.

The protection of your personal data is very important to us. Therefore, we process your data exclusively on the basis of the legal regulations.

The employees of Westfälische Corporate Finance GmbH are obliged to comply with special confidentiality obligations in accordance with Section 5 of the Federal Data Protection Act.

§ 1 Information about the collection of personal data and provider identification
(1) In the following we inform about the purpose, collection and processing of your personal data when using our website. Personal data are all data that can be related to you personally. B. Name, address, email addresses, user behavior.

(2) Service provider acc. § 13 Telemedia Act (TMG) and responsible body acc. Section 3 (7) of the Federal Data Protection Act (BDSG) is Westfälische Corporate Finance GmbH, Am Lotteberg 26, 33790 Halle Westfalen, represented by the managing director Mathias Westerbarkei, cf. our imprint.

(3) Responsible according to Art. 4 para. 7 EU General Data Protection Regulation (GDPR) is Mathias Westerbarkei, Westfälische Corporate Finance GmbH, Am Lotteberg 26, 33790 Halle Westfalen, mathias.westerbarkei@westfaelische-corporate-finance.de.

(4) If we use contracted service providers for individual functions of our offer or would like to use your data for other purposes, we will inform you in detail below about the respective processes. We also state the specified criteria for the storage period.

§ 2 rights to information and revocation
(1) You have the right to request information from us at any time regarding the personal data concerning you, the data we have stored about you, its origin, recipients or categories of recipients to whom this data is passed on and the purpose of the storage , such as
Right to information,
Right to correction or deletion,
Right to restriction of processing,
Right to object to processing,
• Right to data portability.

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

(3) If you have given your consent to the processing of your data, you can revoke it at any time. Such a revocation affects the admissibility of processing your personal data after you have given it to us.

(4) If we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if the processing is not particularly necessary to fulfill a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either discontinue or adjust the data processing or show you our compelling reasons worthy of protection, on the basis of which we will continue the processing.

(5) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to the address given under § 1 (3).

§ 3 data security
We maintain current technical measures to ensure data security, in particular to protect your personal data from dangers during data transmission and from knowledge of third parties. These are adapted to the current state of the art.

§ 4 Collection of personal data for informational use
(1) If you only use the website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you would like to view our website, we collect the following data, which is technically necessary for us to display our website to you and to guarantee stability and security (legal basis is Art. 6 Para. 1 S. 1 lit. f GDPR ):

Name of the retrieved file and directories,
Date and time of access,
Error codes,
Operating system information (including language and version of the browser software), web browser & querying domain & IP addresses of the requesting computers are also logged, as well as the content of the request (specific page), access status / HTTP status code, the amount of data transferred and the website from which the request was made is coming.

These are saved in a log file on the server of our provider.

(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using and through which certain information flows to the location that sets the cookie (here by us). Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall.

a) This website uses cookies to the following extent:

- Transient cookies (temporary use)
- Persistent cookies (temporary use)
- Third-party cookies (from third-party providers)

b) Transient cookies are automatically deleted when you close the browser. This includes session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This enables your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.

c) Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

d) You can configure your browser settings according to your wishes and e.g. B. refuse to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all functions of this website.

e) The flash cookies used are not recorded by your browser, but by your flash plug-in. These save the necessary data regardless of the browser you use and do not have an automatic expiry date. If you do not want Flash cookies to be processed, you must install an appropriate add-on, e.g. B. "AdBlock for Firefox" for Mozilla Firefox (https://addons.mozilla.org/de/firefox/extensions/privacy-security/) or Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using the private mode in your browser. We also recommend that you regularly delete your cookies and browser history manually.

§ 5 establishment of contact
(1) When you contact us by email or via a contact form, the personal data you provide (such as your email address, your name, if applicable, or other data that you send us by email on a voluntary basis share) saved by us to answer your questions. These are special types of personal data that are collected, stored or used for the purpose of processing your request. We delete the data arising in this context after the storage is no longer necessary, or restrict the processing if there are statutory retention requirements. We would like to point out that data transmission over the Internet (e.g. when communicating by email) can have security gaps. It is not possible to completely protect data from third-party access.

(2) When you send your online application by e-mail, we collect and process the following personal application data:
(Last name, first name, address, telephone number, email, application documents (application letter, curriculum vitae, photo, certificates, certificates, etc.)). Your personal application data is collected and processed exclusively for the purpose of filling positions within our association. In principle, your data will only be forwarded to the internal departments and specialist departments of our association responsible for the specific application process. Your personal application data will not be passed on to other companies without your prior express consent. Your application data will not be used or passed on to third parties beyond this. Your personal application data will generally be deleted no later than three months after the application process has been completed. This does not apply if statutory provisions prevent deletion, further storage is necessary for the purpose of providing evidence or you have expressly agreed to longer storage. According to Article 15 GDPR, you have the right to request information from us about the stored data or to revoke your consent to storage in accordance with §2.

§ 6 Further functions and offers on our website

(1) In addition to the purely informational use of our website, we offer various offers that you can use if you are interested. To do this, you generally have to provide further personal data that we use to provide the respective offers and for which the aforementioned data processing principles apply.

(2) We sometimes use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked.

(3) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this in the description of the offer.

§ 7 Use of Shopify

(1) This website uses Shopify to analyze and regularly improve the use of the website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. For more information about Shopify, visit https://help.shopify.com/pdf/gdpr-whitepaper.pdf and https://www.shopify.com/legal/privacy.

§ 8 Integration of third party services

1. Use of social media plug-ins
(1) We currently use the following social media plug-ins: Facebook and Twitter. The data mentioned under § 4 of this declaration will be transmitted. In the case of Facebook, according to the respective provider in Germany, the IP address is anonymized immediately after collection. By activating the plug-in, personal data is transmitted from you to the respective plug-in provider and stored there (for US providers in the USA).
(2) We have no influence on the data collected and data processing operations, nor are we aware of the full scope of the data collection, the purposes of the processing or the storage periods. We also have no information on the deletion of the data collected by the plug-in provider.
(3) The plug-in provider saves the data collected about you as usage profiles and uses them for the purposes of advertising, market research and / or the design of its website according to needs. Such an evaluation is carried out in particular (also for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. With the plug-ins, we offer you the opportunity to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for using the plug-ins is Art. 6 Para. 1 S. 1 lit. f GDPR.
(4) The data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected from us will be assigned directly to your account with the plug-in provider. If you press the activated button and e.g. For example, if the page is linked, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this way you can avoid being assigned to your profile by the plug-in provider.
(5) Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers given below. There you will also find further information about your rights and setting options to protect your privacy.
(6) Addresses of the respective plug-in providers and URL with their data protection information:
a) [Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; Further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http: //www.facebook .com / about / privacy / your-info # everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
b) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

§ 9 Use of our online shop
(1) The online shop is operated by Shopify Inc. and its subsidiaries, including Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., Shopify (USA) Inc., and Shopify International Limited (hereinafter “ Shopify ”). When you fill out the order form, your data will be transmitted to Shopify and saved there. Shopify is committed to protecting the privacy of everyone who purchases from Shopify and treats personal information confidentially.

(2) If you want to order something from the online shop, you have the choice whether you only provide the data you need for the order once for this order or whether you want to create a customer account in which your data is stored for later purchases. If you do not create a customer account, Shopify stores your data for the purpose of fulfilling the contract and deletes it as soon as you are no longer legally obliged to save it. Mandatory information required for the execution of the contracts is marked separately, further information is voluntary.
When you create an account, the data you provide there will be stored revocably.

(3) Shopify will only use the data to fulfill the contract concluded with you. Further use of the data collected, for example for advertising purposes, will not take place without your consent. This consent can be withdrawn at any time by simply notifying Shopify.

(4) When transmitting personal data, Shopify uses encryption technology for maximum confidentiality. The servers use various security mechanisms and authorization procedures to make unauthorized access more difficult.

(5) With your order, you expressly agree to the collection, processing and use of personal data described above and the general terms and conditions of Shopify.

§ 10 Use of Acuity
(1) If you book appointments with Acuity, you must enter mandatory data.
This mandatory information consists of:
• First name Last Name
• E-mail address
• Company name
• VAT identification number of the company
In addition to the mandatory information, you can provide additional information (hereinafter referred to as "voluntary information") on a voluntary basis. You can also upload files if you wish.
With the registration the registrant assures the correctness of his data and undertakes to keep his personal data up to date.
You can revoke voluntary information at any time with future effect by notifying us by email. You can view Acuity's privacy policy at https://acuityscheduling.com/privacy.php.

§ 11 newsletter
(1) With your consent, you can subscribe to our newsletter, which we use to inform you. The specific newsletter is named in the corresponding declaration of consent.

(2) The newsletter can also contain advertisements that are clearly marked with the term "advertisement". The advertisements contain links to external third-party websites, the content of which we have no influence on. For this reason, we cannot accept any liability for this external content. The respective provider or operator of the pages is always responsible for the content of the linked pages. The linked pages were checked for possible legal violations at the time the link was created. No illegal content was discernible at the time the link was created. A permanent control of the content of the linked pages is not reasonable without concrete evidence of an infringement. As soon as we become aware of legal violations, we will remove such links immediately.

(3) The only mandatory information for sending the newsletter is your email address. The provision of further, separately marked data is voluntary and is used to be able to address you personally. After your confirmation, we will save your email address for the purpose of sending the newsletter. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.

(4) You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in each newsletter email, by email or by sending a message to the contact details given in the imprint.

(6) We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which represent one-pixel image files that are stored on our website. For the evaluations, we link the data mentioned in § 3 and the web beacons with your email address and an individual ID. The data is only collected in a pseudonymized form, so the IDs are not linked to your other personal data. The newsletter provider stores the information collected in this way on its server.


§ 12 links to other websites, providers
Our website contains links to other websites. We have no influence on whether their operators comply with data protection regulations.
As a provider, we are responsible for our own content according to general laws. From this own content, links to the content provided by other providers may be differentiated. We assume no responsibility for third-party content that is provided for use via links and that is specially marked and do not adopt the content as our own. The provider of the websites referred to is solely liable for illegal, incorrect or incomplete content and for damage caused by the use or non-use of the information.



Section 13 Copyright
Text, images, graphics, sound, animations and videos as well as their arrangement on the websites of Westfälische Corporate Finance GmbH are protected by copyright and other protective laws. Use is only permitted for private, personal use. Any other use is not permitted unless otherwise expressly stated. We would like to point out that some of the works on the website are subject to the copyright of third parties. As a rule, Westfälische Corporate Finance GmbH cannot grant a license for use.
Anyone who violates copyright, trademark or naming law must expect the rights holder to assert injunctive relief and compensation claims, and in the event of violations of copyright and trademark law, criminal prosecution.


§ 14 responsibility / liability
(1) Westfälische Corporate Finance GmbH compiles all information and components of the website to the best of its knowledge and belief. No liability or guarantee can be assumed for the topicality, correctness and completeness of the information provided. Westfälische Corporate Finance GmbH is also not liable for any damage caused by computer viruses when accessing or downloading data. Westfälische Corporate Finance GmbH cannot guarantee the availability of the website and the functions provided on it (such as the communication system) or parts thereof.

(2) Insofar as damage claimed due to inaccurate contributions is not already excluded from liability according to other provisions of these terms of use, the amount is limited by the damage that would have occurred if other sources of information were reasonably used.



§ 15 validity of data protection regulations
The data protection regulations are to be regarded as part of the website of Westfälische Corporate Finance GmbH. If parts or individual formulations of this text should not, no longer or not completely correspond to the applicable legal situation, the remaining parts of the document remain unaffected in their content and validity. German law applies to the use of mit-bund.de.
Westfälische Corporate Finance GmbH is entitled to change these data protection provisions in whole or in part at any time.



§ 16 Accessibility of data protection regulations
You can access and print out these data protection regulations from every page of the website under the link "data protection".
Status of data protection regulations: February 2019