In this privacy policy we inform you about the processing of your personal data.

If you want to change your privacy settings (grant consent or revoke your previously granted consent), please get in touch with us via email.

Responsible

ox8 Corporate Finance GmbH
Westhafenplatz 1
60327 Frankfurt am Main
Deutschland
info@ox8-cf.com
+49 (0)6950 60 899 0

Hosting

Dienst: hosting.de
Anbieter: hosting.de GmbH, Franzstr. 51, 52064 Aachen
Datenschutzerklärung: Datenschutz | hosting.de

Server Log Files

Connection data are processed to monitor the technical function and to increase the reliability of our webhost. The duration of processing is limited to 30 days.

The legal basis of processing is the legitimate interest (absolute technical necessity of a server log file as fundamental data basis for failure analysis and for security measures in connection with the “website” service which you have explicitly requested by visiting the website) according to Art. 6 (1) (f) GDPR combined with § 25 TTDSG.

Contact Form

You can contact us by using a contact form provided on our website. After submission of the contact form, the controller will process the personal data you have provided for the purpose of handling your request on the basis of your consent which you have given by submitting the form according to Art. 6 (1) (a) GDPR, until revocation.

You have no legal or contractual obligation to provide personal data. If you do not provide such data, you are simply not able to submit and we are not able to process your request.

Application Form / Talent Pool

For our recruiting process, we use the service Teamtailor, provided by Teamtailor AB, Östgötagatan 16, 116 25 Stockholm, Sweden.
Privacy Policy: https://career.teamtailor.com/privacy-policy

If you apply via our career site or register in our talent pool, the personal data you provide (such as name, contact details, CV, cover letter, work experience, education, and any other information you voluntarily submit) will be processed for the purpose of handling your application and managing the recruitment process.

The legal basis for processing your data in the application process is Art. 6 (1) (b) GDPR (pre-contractual measures). If you consent to us keeping your application data for future vacancies, the legal basis is Art. 6 (1) (a) GDPR in conjunction with § 25 TTDSG.

Your data will be stored for the duration of the application process and, in case of rejection, for no longer than 6 months thereafter, unless you have given consent to a longer storage period (maximum 18 months).

You are under no legal or contractual obligation to provide personal data; however, if you do not provide such data, we cannot process your application.

Teamtailor processes your data on our behalf as a processor according to Art. 28 GDPR. For further information, please refer to Teamtailor’s Privacy Policy.

Security Services

On this website we use the offer of security service providers such as Captcha services to avoid non-human and automated input.

Web Fonts

Adobe Fonts

We process connection data and browser data in cooperation with our processor Adobe Fonts, Adobe Systems Software Ireland Limited, Citywest Business Campus, Dublin 24, Ireland, in order to provide the fonts which the web browser needs to display the website. This data is processed only for the time needed to select and transfer the fonts.

The legal basis of processing is the legitimate interest (absolute technical necessity to provide and to deliver the “website” service which you have explicitly requested by visiting the website according to Article 6 (1) (f) GDPR combined with § 25 TTDSG.

Any further independent processing of data by Adobe Fonts is carried out by Adobe Fonts as sole controller. Detailed information is provided in the Data privacy policy of Adobe Fonts.

Analysis Services

Google Analytics

If you give your consent, we will process your personal data in cooperation with the service Google Analytics, Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA, as joint controllers for the purpose of failure analysis and statistical analysis of our website. A failure to give consent will have no immediate impact on the function of the website, although a lack of statistic data will make it more difficult for us to sophisticate the website. You can revoke your consent by changing the settings at Privacy settings.

We will enable the service to collect connection data, data of your web browser and data of accessed content and to execute analysis software and to store data on your terminal device. The service anonymizes collected data immediately after such data were collected and provides us with statistics for analysis containing anonymous data. We use these statistics for failure analysis and for the sophistication of our website. Data on your terminal device are kept for up to two years.

The legal basis of processing is your consent according to Article 6 (1) (a) GDPR. The Google group transfers your personal data to the USA. The legal basis for data transfer to the USA is your consent in accordance with Art. 49 Para. 1 a in conjunction with Art. 6 Para. 1 a GDPR. Before you gave your consent, you were informed that the USA does not have a data protection level that complies with EU standards. In particular, US intelligence agencies can access your data without being informed about it and without you being able to take legal action against it. For this reason, the European Court of Justice ruled in a judgment that the previous adequacy decision (Privacy Shield) was invalid.

Newsletter Services

Pipedrive

If you have given your consent, we will process your personal data in cooperation with Pipedrive OÜ, Mustamäe tee 3a, 10615 Tallinn, Estonia, as our processor for the purpose of managing customer relationships, processing enquiries, and, if applicable, sending you newsletters or other marketing communications.

Pipedrive processes the data you provide (e.g., name, email address, phone number, company, and any other information you voluntarily submit) exclusively on our behalf and according to our instructions. The service may also collect usage data about interactions with emails or forms we send through the system (e.g., open rates, link clicks) to improve our communication.

The legal basis for processing is your consent according to Article 6 (1) (a) GDPR or, where applicable, our legitimate interest in efficient customer relationship management according to Article 6 (1) (f) GDPR. You can revoke your consent at any time via Privacy settings or by using the unsubscribe link in our emails.

We store your data for as long as it is necessary for the purpose of communication or until you revoke your consent.

Further information can be found in Pipedrive’s privacy policy:
https://www.pipedrive.com/en/privacy

Right to object

You have the right to object to processing if your personal data is processed based on legitimate interests.

We will then cease the processing carried out on this basis, unless there are compelling and legitimate reasons for us to do so.

You have the right to object to the processing of your personal data for the purpose of direct marketing. In this case, we will cease the processing of your personal data for the purpose of direct mail.

The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Withdrawal

You have the right to withdraw your consent at any time by changing the settings at Privacy settings.

If you have given your consent to receipt of advertising by email, you may withdraw your consent by clicking the unsubscribe link. In this case, we will cease the processing operations, unless there is any other legal basis.

The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to data subject

You have the right to access to, rectification, erasure and restriction of processing of personal data.

You have also the right to data portability if the processing of your personal data is based on your consent or on a contract concluded with you.

You have also the right to lodge a complaint with the supervisory authority. If you need more information on the supervisory authorities in the European Union, go to here.