We take the protection of your personal data very seriously and comply with data protection provisions, particularly the EU General Data Protection Regulation (“GDPR”), and the Ger-man Data Protection Act (“BDSG”). In particu-lar, this means that we will process your per-sonal data only if we are permitted to do so by statutory law or contract or if you have declared your consent.

To ensure that you are fully informed about the processing of your personal data as part of your visit of our website, please take note of the information below.

 

1. Controller

(1) The responsible person pursuant to Art. 4 (7) GDPR is

bmp Ventures AG
Schlüterstr. 38
10629 Berlin
Phone: +49 (0)30 20 30 50
Email: info@bmp.com

(hereafter „bmp“). You will find further information in our Imprint.

Wherever this data protection information refers to “we” or “us”, this refers in each case to the aforementioned company.

(2) You can reach our data protection officer at datenschutz@bmp.com or our postal address with the addition of “the data protection officer”.

 

2. Processing of personal data when visiting our website

When using the website for information purposes, i.e. simply viewing it without registering and without you providing us with any other information, we process the personal data that your browser transmits to our server. The data de-scribed below is technically necessary for us to display our website to you and to ensure stability and security and must therefore be processed by us. The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR:

• IP address
• Date and time of the request
• Duration of the website visit
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (page visited)
• Access status/HTTP status code
• Amount of data transferred in each case
• Previously visited page
• Browser type
• Server Log Files
• Operating system
• Language and version of the browser software

 

3. Data processing when contacting us

When you contact us by e-mail, telephone or via a contact form, the data you provide (e.g. e-mail address, name, telephone number or also the content of the enquiry) is processed by us in order to answer your questions and/or process your request. The legal basis is Art. 6 pa-ra. 1 lit. a) and b) GDPR, namely your consent or a pre-contractual measure.

 

4. Objection to or revocation of the processing of your data

(1) If you have given your consent to the processing of your data, you may revoke this consent at any time. Such a revocation affects the permissibility of the processing of your personal data after you have expressed it to us. The permissibility of processing your data up to the time of your revocation remains unaffected.

(2) Insofar as we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case if the processing is not necessary, in particular, for the fulfilment of a contract with you, which is shown by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data in the way we have done. In the event of your objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. The best way to exercise your advertising objection is to contact us using the contact details provided above.

 

5. Processing of data from your terminal devices (“Cookies”)

In addition to the above-mentioned data, we use technical aids for various functions when you use our website, in particular cookies, which may be stored on your terminal device. When you call up our website and at any time later, you have the choice of whether you gen-erally allow cookies to be set or which individual additional functions you would like to select. The details of our cookies can be found in our Cookie Declaration.

 

6. Tracking with Google Analytics

(1) This website uses Google Analytics, a web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The purpose of our use of the tool is to enable us to analyse your user interactions on websites and in apps and to use the statistics and reports obtained to improve our offering and make it more interesting for you as a user.

(2) We primarily record the interactions between you as a user of the website and our website using cookies, device/browser data, IP addresses and website or app activities. In Google Analytics, your IP addresses are also recorded to ensure the security of the service and to provide us as the website operator with information about the country, region or location from which the respective user originates (so-called “IP location determination”). For your protection, we use the anonymisation function (“IP masking”), i.e. Google truncates the IP addresses by the last octet within the EU/EEA.

(3) Google acts as a processor and we have concluded a corresponding contract with Google. The information generated by the cookie and the (usually shortened) IP addresses about your use of this website are usually transferred to a Google server in the USA and processed there. For these cases, Google has, according to its own information, imposed a standard that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws when transferring data internationally. We have also agreed so-called standard contractual clauses with Google, the purpose of which is to maintain an appropriate level of data protection in the third country.

(4) The legal basis for the collection and further processing of the information (which takes place for a maximum of 14 months) is your consent (Art. 6 para. 1 sentence 1 lit. a GDPR). You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. The easiest way to withdraw your consent is via our Consent Manager or by installing the Google browser add-on, which can be accessed via the following link: tools.google.com/dlpage/gaoptout?hl=de/.

(5) You can find more information on the scope of services provided by Google Analytics at marketingplatform.google.com/about/analytics/terms/de/. Google provides information on data processing when using Google Analytics at the following link: support.google.com/analytics/answer/6004245?hl=de/. General information on data processing, which according to Google should also apply to Google Analytics, can be found in Google’s privacy policy at www.google.de/intl/de/policies/privacy/.

 

7. Newsletter

(1) We send e-mails and other electronic notifications with promotional information (hereinafter “newsletter”) only with your consent or legal permission. The newsletters contain information about our products, offers, promotions and our company. By subscribing to our newsletter, you agree to receive it.

(2) The use of an email shipping provider (Newsletter2go GmbH), the performance of statistical surveys and analyses as well as the logging of the registration process are carried out on the basis of our legitimate interests pursuant to Art. 6 Para. 1 lit. f GDPR. We are interested in providing a user-friendly and secure newsletter system that serves our business interests and meets your expectations.

(3) The only mandatory information for sending the newsletter is your e-mail address. [The provision of further, separately marked data is voluntary and will be used to address you personally]. After your confirmation, we will store your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a GDPR.

(4) You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter email.

 

8. Transfer of data to third parties and third-party providers

(1) We only pass on your data to third parties if this is necessary, e.g. on the basis of Art. 6 para. 1 lit. b) GDPR for contractual purposes or when it can be justified on the basis of legitimate interests according to Art. 6 para. 1 lit. f. GDPR.

(2) Where we use subcontractors to provide our services, we take appropriate legal as well as technical and organisational measures to ensure the protection of personal data in accordance with the relevant legal requirements.

(3) If third party providers are mentioned in this privacy policy and their registered office is located in a third country, it can be assumed that data is transferred to the countries where the third party providers are located. We only process your data in a third country if it is necessary to fulfil our (pre-)contractual obligations (Art. 6 para. 1 lit. b GDPR), on the basis of your consent (Art. 6 para. 1 lit. a GDPR), due to a legal obligation (Art. 6 para. 1 lit. c GDPR) or on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR). The same applies to processing by third parties on our behalf, the disclosure of your personal data to third parties as well as its transfer to third parties.

 

9. Data Erasure / Storage Period

The Data we store shall be deleted as soon as they are no longer needed for the purpose for which they are being stored and the law does not prescribe a statutory duty for the Data to be retained. In the event that user Data are not deleted on grounds that they are still required for other or legally admissible reasons, their processing shall be restricted. This means that the Data shall be blocked and shall not be pro-cessed for other purposes. This applies, for instance, for user Data that have to be kept for reasons pertaining to trade or tax law.

 

10. Your rights

(1) Every data subject has the right to information under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, the right to notification under Article 19 of the GDPR and the right to data portability under Article 20 of the GDPR.

(2) In addition, you have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR if you are of the opinion that the processing of your personal data is not lawful. The right of appeal is without prejudice to any other administrative or judicial remedy.

(3) If the processing of data is based on your consent, you are entitled to revoke your consent to the use of your personal data at any time in accordance with Art. 7 GDPR. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected. Please also note that we may need to retain certain data for a certain period of time in order to comply with legal requirements.

Right to object
Insofar as the processing of your personal data is carried out for the protection of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right pursuant to Art. 21 GDPR to object to the processing of this data at any time for reasons arising from your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These must outweigh your interests, rights and freedoms, or the processing must serve the assertion, exercise or defence of legal claims.

(4) If you have any questions regarding the processing of your data, please feel free to con-tact our data protection officer using the contact details stated above.

 

11. Final provisions

(1) We use technical and organisational security measures to protect your data, in particular against accidental or intentional manipulation, loss, destruction or against attack by unauthorised persons. Our security measures are continuously improved in line with technological developments.

(2) We will update the data protection declaration from time to time due to the technical progress of our offers. Insofar as the change to the data protection declaration does not affect the use of existing data, the new data protection declaration will apply from the date of its update on our website. A change to the data protection declaration that relates to the use of data already collected will only be made if it is reasonable for you. In such a case, we will notify you in good time by e-mail, on our website or in another form. You have the right to object to the validity of the new data protection declaration within four weeks of receipt of the notification. In the event of an objection, we reserve the right to terminate the contractual relationship. If no objection is made within the aforementioned period, you will be deemed to have accepted the amended data protection declaration. We will inform you of your right of objection and the significance of the objection period in the notification.

Privacy policy (as of May 2024)