We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with statutory data protection requirements and this privacy policy. The following information provides an overview of how we process your personal data and your rights under data protection law.
1. Who is responsible for processing and whom can I contact?
Gesellschaft für Kryptoregisterführung mbH
Data Protection Officer
Bahnstraße 33
47877 Willich
2. Which sources and data does Gesellschaft für Kryptoregisterführung mbH use?
Gesellschaft für Kryptoregisterführung mbH processes personal data received from you when initiating and conducting a business relationship. Where necessary to provide our services, we also process personal data lawfully received from third parties (for example SCHUFA, intermediaries or affiliated companies), for example to execute orders, fulfil contracts or on the basis of your consent. We also process personal data lawfully obtained from publicly accessible sources (for example debtor directories, land registers, commercial and association registers, the press and media) where we are permitted to process it.
The above also applies to your personal data in your capacity as a representative or authorised agent of a legal entity.
- Relevant personal data when initiating a business relationship, granting a power of attorney or assuming a joint obligation may include:
Personal details, such as name, address, telephone number, email address, date and place of birth, nationality, legal capacity, occupation, occupational category (for example employed/self-employed), advertising and sales data. - Relevant personal data in a business relationship and when using products/services may include:
Account and payment transactions: order data (for example payment orders, payment transaction data, recipient, IBAN and payment reference).
Further personal data may be processed when initiating and conducting a business relationship, particularly through personal, written or telephone contact initiated by you or by Gesellschaft für Kryptoregisterführung mbH. This may include the contact channel, date, reason and outcome of contact, and electronic or other copies of correspondence.
3. Why do we process your data and on what legal basis?
Gesellschaft für Kryptoregisterführung mbH processes personal data in accordance with the GDPR and the revised German Federal Data Protection Act (BDSG).
3.1 On the basis of your consent (Article 6(1)(a) GDPR)
Where you have given Gesellschaft für Kryptoregisterführung mbH consent to process personal data for specific purposes (for example disclosure to cooperation partners, marketing or information about new services), this processing is lawful on the basis of your consent.
Consent is voluntary and may be withdrawn at any time. This also applies to consent given to Gesellschaft für Kryptoregisterführung mbH before the GDPR took effect on 25 May 2018.
Withdrawal only takes effect for the future. Processing carried out before withdrawal is therefore unaffected.
3.2 To fulfil contractual obligations (Article 6(1)(b) GDPR)
Personal data is processed to provide and arrange products and services, in particular to take pre-contractual steps, fulfil contracts with you, execute your orders and carry out all necessary activities involving Gesellschaft für Kryptoregisterführung mbH.
The purposes of processing depend primarily on the specific product or service.
3.3 To fulfil legal obligations (Article 6(1)(c) GDPR)
Processing is necessary to comply with a legal obligation to which Gesellschaft für Kryptoregisterführung mbH is subject.
3.4 To perform tasks in the public interest (Article 6(1)(e) GDPR)
Processing is necessary to perform a task in the public interest or to exercise a public mandate entrusted to Gesellschaft für Kryptoregisterführung mbH.
3.5 On the basis of legitimate interests (Article 6(1)(f) GDPR)
Where necessary, Gesellschaft für Kryptoregisterführung mbH processes your data beyond the actual performance of the contract to safeguard its own legitimate interests or those of third parties.
Examples:
- Consulting and exchanging data with credit agencies (for example SCHUFA) to determine credit risks;
- Exchanging data with the issuer to maintain a crypto securities register on its behalf;
- Direct advertising or market and opinion research, where permitted and provided you have not objected to this use of your data;
- Asserting legal claims and defending legal disputes;
- Ensuring the IT security and IT operations of Gesellschaft für Kryptoregisterführung mbH;
- Preventing and investigating criminal offences;
- Video surveillance to collect evidence of criminal offences, protect customers and employees and exercise rights as the owner or occupier of premises;
- Measures to ensure building and facility security (for example access controls);
- Measures to safeguard rights as the owner or occupier of premises;
- Measures for business management and the further development of services and products.
4. Who receives my data?
Within Gesellschaft für Kryptoregisterführung mbH, the departments that need your data to fulfil our contractual and legal obligations receive access to it. Processors engaged by us under Article 28 GDPR may also receive data for these purposes. These are companies to which Gesellschaft für Kryptoregisterführung mbH outsources services; categories may include financial services, IT services, logistics, printing services and debt collection.
5. How long is my data stored?
Where necessary, Gesellschaft für Kryptoregisterführung mbH processes and stores your personal data for the duration of the business relationship, including, for example, initiating and performing a contract. For officers of legal entities, processing and storage continue for as long as you are authorised to represent the relevant legal entity in dealings with Gesellschaft für Kryptoregisterführung mbH.
We are also subject to various retention and documentation obligations, arising among other things from the German Commercial Code (HGB) and Fiscal Code (AO). The retention and documentation periods specified there range from two to ten years.
Storage periods also depend on statutory limitation periods. For example, under sections 195 et seq. of the German Civil Code (BGB), these are generally three years, but may extend to thirty years in certain cases.
6. Privacy policy for job applications
The primary legal basis for processing your personal data in the application process is section 26 BDSG in the version effective from 25 May 2018. This permits processing data necessary to decide whether to establish an employment relationship. If data is needed to pursue legal claims after the application process has ended, it may be processed under the conditions of Article 6 GDPR, in particular to safeguard legitimate interests under Article 6(1)(f) GDPR. Our interest in that case is to assert or defend claims.
By submitting your application, you consent to our storing and processing your data for application, recruitment and hiring purposes. You may withdraw this consent and your application at any time.
We process the personal data in your application exclusively for handling your application and filling vacancies. Recruitment takes place in cooperation between the responsible staff in our HR department and the managers of the specialist departments.
Your data will be deleted six months after the application process ends, unless you agree to longer storage so that you may be considered for future vacancies. If you are hired, your data will be transferred to our personnel records.
7. Is data transferred to a third country or an international organisation?
Personal data is transferred to third countries (countries outside the European Economic Area (EEA)) only where the European Commission has confirmed an adequate level of data protection in that country, other appropriate safeguards (for example binding corporate rules or EU standard contractual clauses) have been agreed, or you have given Gesellschaft für Kryptoregisterführung mbH your consent.
Where required by law, Gesellschaft für Kryptoregisterführung mbH will inform you separately of the details.
8. What data protection rights do I have?
Every data subject has the right of access under Article 15 GDPR, rectification under Article 16 GDPR, erasure under Article 17 GDPR, restriction of processing under Article 18 GDPR and data portability under Article 20 GDPR. The restrictions in sections 34 and 35 BDSG apply to the rights of access and erasure.
9. Am I obliged to provide data?
In the business relationship, you are only required to provide personal data necessary to establish, perform and terminate a business relationship with you or the legal entity you represent in dealings with Gesellschaft für Kryptoregisterführung mbH, or data that we are legally obliged to collect.
Without this data, Gesellschaft für Kryptoregisterführung mbH will generally have to refuse to conclude the contract or execute the order, or will be unable to continue performing an existing contract and may have to terminate it, or refuse to accept you as an authorised representative or agent.
10. To what extent is my data used for profiling (scoring)?
Gesellschaft für Kryptoregisterführung mbH does not process data for the purpose of evaluating personal aspects (profiling).
11. Usage data on this website
This website does not use web analytics services or tracking cookies. Fonts, images and scripts are served locally from our web server. Information on server log data generated when a page is accessed is provided in our website and GDPR notice.
12. Information on your right to object under Article 21 GDPR
Right to object based on your particular situation
You have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data based on Article 6(1)(f) GDPR (processing on the basis of a balancing of interests).
If you object, Gesellschaft für Kryptoregisterführung mbH will no longer process your personal data unless it can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
No particular form is required for an objection. Please preferably address it to:
Gesellschaft für Kryptoregisterführung mbH
Data Protection Officer
Email: datenschutz@kryptoregisterfuehrung.de
Bahnstraße 33
47877 Willich
13. Updates and changes to this privacy notice
Further development of our services or changes in legal or regulatory requirements may make it necessary to amend this privacy notice.
The current privacy notice can be accessed and printed at any time on this website under Privacy.
Last updated: 27 June 2023