top of page

Privacy Policy

1. Scope
The following Privacy Policy applies only to the use of the website www.sustainableandivest.com. If you visit another website, the data protection regulations of the respective website operator apply. This also applies to websites to which we refer through a link. We recommend that you inform yourself about the handling of personal data on the website.

 

2. Person responsible for data processing
The controllers responsible for data processing on this website www.sustainableandivest.com are Sustainable and Invest GmbH, Eschersheimer Landstraße 14, 60322 Frankfurt am Main, Germany (S&I is referred to as "we" or "us/we"). The consent given on this website applies to the data processing by us and our employees and directors as set out in this privacy policy. For data protection concerns, you can also contact us by email: contact@sustainableandinvest.com. In accordance with Art. 7 (3) GDPR, you have the right to withdraw your consent at any time. This has the consequence that we will no longer continue the data processing based on this consent for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. Insofar as we process your data on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. (f) GDPR, you have the right pursuant to Art. 21 GDPR to object to the processing of your data and to provide us with reasons that arise from your particular situation and which, in your opinion, argue for an overriding of your interests worthy of protection. If it concerns an objection to data processing for direct marketing purposes, you have a general right of objection, which will also be implemented by us without giving reasons. If you wish to exercise your right of revocation or objection, it is sufficient to send an informal message to the contact data specified in section 2. of this Privacy Policy.

3. Collection and processing of personal data


3.1 Use of the Website
When you visit our website, data is automatically collected that is necessary to enable you to visit our website. This is not personal data ("user data"). User data are

  • referrer (previously visited website),

  • requested website or file,

  • browser type and version,

  • operating system used,

  • type of device used,

  • time of access and

  • IP address in anonymized form.

This user data is necessary for us to display our Internet presence to you and to ensure stability and security. Furthermore, this user data is evaluated for internal statistical purposes and for the technical administration and optimization of the website using a pseudonym (see below under section 3.2). The legal basis for the collection is - insofar as it should exceptionally come to the processing of personal data - Art. 6 para. 1 p. 1 lit. (f) GDPR. Our legitimate interest follows from the above-mentioned purposes of data collection.


3.2 Cookies
We use cookies for the provision of corresponding services. This also applies when you visit our website or access our services. A "cookie" is a small packet of data that is assigned to your device by the website when you visit it. Cookies are useful and can be used for various purposes. These include, for example, facilitating navigation between different pages, automatically activating certain functions, saving your settings and optimizing access to our services. The use of cookies also enables us to show you relevant advertising tailored to your interests and to collect statistical information about your use of our services.

This website uses the following types of cookies:

  • "Session cookies", which provide for normal system usage. Session cookies are only stored for a limited time during a session and are deleted from your device as soon as you close your browser.

  • "Permanent cookies", which are only read by the website and are not deleted when you close your browser window, but are stored on your computer for a specified period of time. This type of cookie allows us to identify you on your next visit and, for example, to save your settings.

  • "Third-party cookies", which are set by other online services that are represented with their own content on the page you visit. These can be, for example, external web analytics companies that record and analyze access to our website.

Cookies do not contain any personal data that identifies you, but the personal data we store may be linked by us to the data contained in the cookies. You can remove cookies via the device settings of your device. When doing so, follow the appropriate instructions. Note that disabling cookies may result in the limitation of certain functions when using our website. The tool we use is based on Snowplow Analytics technology. The data we collect on the use of our website includes, for example, how often users visit the website or which areas are accessed. The tool we use does not collect any personal data and is used by our web hosting provider and service provider solely to improve its own offering. If, exceptionally, the use of cookies does result in the processing of personal data, the following rules apply: If the cookies are used for the purpose of concluding or performing a contract, Art. 6 para. 1 p.1 lit. (b) GDPR is the legal basis. If the cookies are used to ensure our legitimate interests in the pleasant and comfortable functionality as well as analysis and improvement of our internet presence, Art. 6 para. 1 S. 1 lit. (f) GDPR is the legal basis. In all other cases, the setting of cookies is based on your explicit consent (Art. 6 para. 1 p. 1 lit. (a) GDPR), which you can give when calling up this website.

​

3.3 Use of script libraries (Google Web Fonts)

To ensure that our content is displayed correctly and graphically appealing in every browser, we use script and font libraries such as Google Web Fonts (https://www.google.com/webfonts) for this website. Google Web Fonts are transferred to your browser's cache, so they only need to be loaded once. If your browser does not support Google Web Fonts or denies access, the content is displayed in a standard font.

When script or font libraries are called up, a connection to the operator of the library is automatically established. Theoretically, it is possible for this operator to collect personal data. It is currently not known whether and for what purpose the operators of the corresponding libraries actually collect data.

Here you can find the Privacy Policy of the operator of the Google library: https://www.google.com/policies/privacy. Should personal data be processed in this context, the legal basis is Art. 6 para. 1 p. 1 lit. (f) GDPR. Our legitimate interest follows from the above-mentioned purposes of data collection.

​

3.4 Contact
When you contact us by e-mail, the following personal data is collected and stored by us:

  • e-mail address,

  • e-mail text and

  • other data provided voluntarily.

When contacting us by telephone, your telephone number will be stored. This is also personal data (data collected in the course of contact by e-mail or telephone, the "contact data"). We process the contact data exclusively for the purpose of processing your contact request, as long as you do not give us explicit consent to process it for other purposes. However, if insufficient contact data is provided, this may lead to disadvantages in the processing of your contact request. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. (b) GDPR or our legitimate interest in responding to your request pursuant to Art. 6 para.1 p. 1 lit. (f) GDPR. When requesting a callback, you agree in accordance with Art. 6 para. 1 lit. (a) GDPR that we may use your telephone number to contact you.

 

3.5 Applications

You can apply for open positions with us by email. In order to process your application, we collect the personal data you provide (usually first and last name, email address, application documents such as references and resume, date of earliest possible job start and salary requirements). The purpose of the data collection is the selection of applicants for the possible establishment of an employment relationship. The missing or incomplete provision of personal data by you may lead to delays in the application process and/or a rejection from our side. Please note that if applications are sent by email without encryption, we cannot guarantee confidentiality. As a rule, you can also apply for open positions by mail or directly on site. The legal basis for processing your application documents is Art. 6 para. 1 p. 1 lit. (b) and Art. 88 para. 1 GDPR in conjunction with Section 26 para. 1 sentence 1 German Federal Data Protection Act. We store your personal data upon receipt of your application. If we accept your application and an employment relationship is established, we store your applicant data for as long as and to the extent that it is necessary for the employment relationship and to the extent that legal regulations require us to retain it. If we reject your application, we will store your applicant data for a maximum of two months after rejecting your application, unless you give your consent to longer storage. If you have given your consent separately, we will store your data submitted as part of the application for a further twelve months after the end of the application process in order to identify any other interesting positions for you and, if necessary, to approach you again. The legal basis for this is Art. 6 para. 1 p. 1 lit. (a) GDPR. After expiry of the above-mentioned periods, the data will be deleted. You can revoke this consent at any time by sending an email to contact@sustainableandinvest.com.


3.6 Further data collection
We collect further personal data separately for the purpose of establishing a mandate and for the subsequent execution and processing of the contracts concluded with you and will provide you with further data protection information on this in the mandate relationship.

4. Duration of processing / storage of personal data

Personal data of visitors to our website will be deleted when their knowledge is no longer required for the purposes described in this Privacy Policy, unless legal provisions require longer storage. The legal basis for this longer storage is Art. 6 para. 1 lit. (c) GDPR. If you would like to know more about our specific retention periods for your personal data, you can contact us at contact@sustainableandinvest.com. Upon expiration of the applicable retention period, we will securely destroy your personal information in accordance with applicable laws and regulations.

5. Disclosure of personal data

We will only pass on your personal data collected here to third parties if

  • you have given your express consent to do so in accordance with Art. 6 (1) Sentence 1 lit (a) GDPR;

  • we are legally obliged to disclose data pursuant to Art. 6 (1) sentence 1 lit. (c) GDPR; or

  • this is legally permissible and required under Art. 6 (1) sentence 1 lit. (b) GDPR for the processing of contractual relationships with you or for the implementation of pre-contractual measures that take place at your request.

Part of the data processing may be carried out by service providers contracted by us. In addition to the service providers mentioned in this Privacy Policy, this may include, in particular, data centers that store the files for this website and associated databases, IT service providers that maintain our systems, and consulting companies. If we pass on data to service providers, they may only use the data to perform their tasks. The service providers have been carefully selected and commissioned by us. They are contractually bound by our instructions, have appropriate technical and organizational measures in place to protect the rights of the data subjects, and are regularly monitored. In addition, disclosure may take place in connection with official inquiries, court orders and legal proceedings if it is necessary for legal prosecution or enforcement.


6. Data subject rights

You have the right to request information about the processing of your personal data by us at any time (Art. 15 GDPR). In the context of providing information, we will explain the data processing to you and provide an overview of the data stored about you. There are exceptions to this right, so access may be denied if, for example, providing the information would reveal personal data about another person or if we are legally prevented from disclosing this information. The right to information of third parties exists vis-à-vis us insofar as client secrets are not affected (§ 29 I S. 2 German Federal Data Protection Act). If data stored by us is incorrect or no longer up to date, you have the right to have this data rectified (Art. 16 GDPR). You can also request the erasure of your data (Art. 17 GDPR). If erasure is exceptionally not possible due to other legal provisions, the data will be blocked so that it is only available for this legal purpose. You can also have the processing of your data restricted, e.g. if you believe that the data we have stored is incorrect (Art. 18 GDPR).

You also have the right to data portability, i.e. that we will provide you with a digital copy of the personal data provided by you upon request (Art. 20 GDPR). In accordance with Art. 7(3) GDPR, you have the right to revoke consent you have given to us at any time. This has the consequence that we will no longer continue the data processing based on this consent for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. Insofar as we process your data on the basis of legitimate interests pursuant to Art. 6(1) lit. (f) GDPR, you have the right to object to the processing of your data pursuant to Art. 21 GDPR and to provide us with reasons that arise from your particular situation and that you believe outweigh your interests worthy of protection. If it concerns an objection to data processing for direct marketing purposes, you have a general right to object without giving reasons, which will also be implemented by us. Finally, you have the right to complain to the competent data protection supervisory authority. You can assert this right at a supervisory authority in the EU member state of your place of residence, your place of work or the place of the alleged infringement. In Frankfurt am Main/, the competent supervisory authority is: The Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Federal Republic of Germany, Phone: +49 (0) 61114080, Fax: +49 (0) 6111408611, Web: https://datenschutz.hessen.de/. In order to assert your rights described here, you can contact us at any time using the contact data specified above in section 2. of this Privacy Policy.

​

By updating this page, this Privacy Policy may change from time to time. You should check this page from time to time to ensure that you are in agreement with any changes.

bottom of page