Source: https://www.dfag.de/en/privacy-statement/
Timestamp: 2019-04-24 08:40:02+00:00

Document:
DF Deutsche Forfait AG (DF AG) and its subsidiaries attach great priority to the protection and security of personal data. In accordance with Art. 13, 14 of the EU General Data Protection Regulation (EU GDPR), this page informs you about how your personal data are processed when you visit our website, communicate with us or send us your application.
This privacy information applies to DF AG and DF Group.
For more information on our corporate structure, please visit https://www.dfag.de/en/company/about-us/.
Cooperation within the Group is our legitimate interest (Art. 6 para.1 lit. f GDPR).
In accordance with the EU General Data Protection Regulation (EU GDPR) and the Federal Data Protection Act (BDSG), this page informs you about the processing of your personal data for communication purposes.
The DF company with which you are in contact has the main responsibility for communication with you. Due to our corporate structure, an exchange within DF Group additionally takes place in the context of our legitimate interests, as described in the introduction.
through research from publicly accessible sources, if applicable.
Due to Counter-terrorism Regulations EC No. 2580/2001 and EC No. 881/2002, DF Deutsche Forfait AG and its subsidiaries are not allowed to enter into economic relationships with suspicious organizations and persons suspected of terrorism. To comply with the Regulation, we are obliged to screen all potential corporate clients against sanctions lists of persons suspected of terrorism (Art. 6 para. 1 lit. c GDPR).
Because of the organizational structure of DF Deutsche Forfait AG, your personal data may be processed by subsidiaries as described in the introduction.
DF Deutsche Forfait will transmit personal data to banks where this is necessary for the fulfilment of a contract. Some of the receiving banks are situated in countries outside the EU (third countries).
In this case, we ensure an adequate level of data protection in the target country in compliance with Art 44 et seq. GDPR (mostly by signing standard contractual clauses with our contractual partners in third countries).
We will store your personal data as long as we maintain a contractual relationship with you, have a legitimate interest in doing so or are obliged to do so (retention duty). After expiry of the respective periods we will delete your personal data unless we have legitimate interests in archiving and this interest is not overridden by your interest in erasure.
to lodge a complaint with us or with a competent authority about the processing of your data (Art. 77 GDPR).
You may also object to the further processing of your data if we process your date because of legitimate interests (Art. 6 para. 1 s. 1 f) GDPR). Unless we process your data for marketing purposes, this requires grounds relating to your particular situation. In case of an objection, we will no longer process your personal data to which the objection refers from the time we receive your objection during the subsequent examination and delete it after completion of the examination provided that the objection is justified (Sec. 36 BDSG, Art. 21 GDPR).
If you have given us consent to the processing of your data (Art 6 para. 1 s. 1 a) GDPR, such consent may be withdrawn at any time; we will then no longer process your personal data unless we are legally entitled to do so. A lawful objection and a withdrawal of consent have no impact on past data processing processes.
We are pleased about your interest in our company as a potential employer.
In accordance with the EU General Data Protection Regulation (EU GDPR) and the Federal Data Protection Act (BDSG), this page informs you about the processing of your personal data.
If you apply in response to a job advertisement, the DF company that would be the employing company is responsible for the processing of your personal data. If you send us an unsolicited application, DF Deutsche Forfait GmbH, Kattenbug 18–24, 50667 Cologne, has the main responsibility for data processing.
Because of our corporate structure, we closely cooperate and share labor and resources within DF Group as described above. It therefore is our legitimate interest (Art. 6 para. 1 lit. f GDPR) to make the application documents also available to DF AG and the other subsidiaries that may consider employing you.
your application documents, which comprise your application letter, CV as well as the usual references and certificates.
We collect these personal data from you as the data subject.
Should we invite you to a job interview, we will additionally check whether you are listed on sanctions lists pursuant to Counter-terrorism Regulations EC No. 2580/2001 and EC No. 881/2002.
To allow you to participate in application procedures for a specific job, we need standard and meaningful application documents that inform us about your personal profile and your qualifications. We will process your personal data to carry out the application procedure (Art. 6 para. 1 s. 1 b) GDPR, Sec. 26 BDSG).
As a general rule, we will use your application documents only to decide on the candidate for the position for which you have applied. For this purpose, your application documents will be passed on to the employees tasked with carrying out the application procedure.
If you send us an unsolicited application without referring to a specific position, we may use your application documents to decide on the filling of all potentially suitable positions. For this purpose, we will pass your application documents on to colleagues from the department(s) in which you may potentially be employed.
Because of the organizational structure of DF Group, your application may be passed on to different DF companies and be processed there, as described above.
Due to Counter-terrorism Regulations EC No. 2580/2001 and EC No. 881/2002, DF Deutsche Forfait AG and its subsidiaries are not allowed to enter into economic relationships with organizations and persons suspected of terrorism. To comply with the Regulation, we are obliged to screen every applicant we invite against sanctions lists of persons suspected of terrorism (Art. 6 (1) lit. c GDPR).
We will not transmit your application data to persons outside DF Group. Nor will your application data be transmitted to a third country outside the EU or an international organization.
Should the application procedure for which you have sent your application not result in your employment, we will erase and destroy your application data after six months from your or our company’s final rejection.
If you send us an unsolicited application, the following applies: We will erase and destroy your application data after one year from the receipt of your application but not before a period of six months has elapsed following your or our company’s final rejection for all application procedures in which your application documents have been used.
Should an application procedure result in your employment, your application documents will be included in your employee file to provide information on your personal profile and your qualifications for the employment relationship. In this case, your application documents will be deleted and destroyed after your employment relationship has been terminated and another three years have passed since the end of the year of termination.
Other – longer – retention periods shall apply only if you have separately consented to such extended retention or if we exceptionally have legitimate interests in archiving and this interest is not overridden by your interest in erasure.
If you have given us consent to the processing of your data (Art 6 para. 1 s. 1 a) GDPR, such consent may be withdrawn at any time; we will then no longer process your personal data unless we are legally entitled to do so.
A lawful objection and a withdrawal of consent have no impact on past data processing processes.
For this and any other questions, please contact our Data Protection Officer.
This privacy information exclusively applies to the website offerings of DF AG at www.dfag.de.
For more information on the structure of our Group, please visit www.dfag.de: Hereinafter: “DF Group”.
Cooperation within the Group is our legitimate interest (Art. 6 (1) lit. f GDPR).
The website operator will use and pass on your personal data only if this is legally permissible or you consent to the collection of your data.
Personal data is deemed to mean all information that serves to identify your person and that can be traced back, e.g. your name, your e-mail address and your phone number.
DF Group uses your personal data for the purpose of web page administration and statistical evaluations of the use of our web pages. We use this technical access information to constantly improve the attractiveness and user-friendliness as well as the contents of our web pages and to identify technical problems in our Internet offerings. Data processing therefore is our legitimate interest (Art. 6 (1) lit. f GDPR). To make our website available, we cooperate with an external service provider that hosts our website. This service provider has been carefully selected and is contractually obliged to comply with data protection legislation in its capacity as a processor pursuant to Art. 28 GDPR.
No cookies are used in this website.
Processing your personal data to answer your inquiry is our legitimate interest (Art. 6 (1) lit. f GDPR).
In case of an objection, we will no longer process your data from the time we receive your objection during the subsequent examination and delete it after completion of the examination provided that the objection is justified. An objection does not affect the permissibility of the processing of your data in the past.
If you want to sign up to the investor distribution list on our website, we need at least your e-mail address. Other personal data (first name, last name) are not mandatory. You will first receive a confirmation e-mail with which we want to make sure that you are the owner of the e-mail address. Art. 6 (1) lit. a GDPR forms the legal basis for this processing of data.
You have the possibility, at any time, to withdraw your consent to the storage of the data and the e-mail address as well as to the latter’s use for sending the investor newsletter in the future.
A link for withdrawing your consent is made available in every investor newsletter. You also have the possibility to inform us of your wish to withdraw your consent using the contact possibility provided at the end of the privacy statement. Your e-mail address and your data will then immediately be deleted from the distribution list unless the processing of the data is permitted by a legal regulation. The withdrawal of consent does not affect the lawfulness of processing in the past.
To send the investor newsletter, we receive support from a carefully selected service provider, IR.on AG, which is responsible for sending corporate news of the DF Group. We have concluded a processing contract pursuant to Art 28 GDPR with our service provider. This gives us the guarantee that our service provider complies with legal provisions when sending the investor newsletter. Your data will not be passed on to any other third party.
We strive to take adequate technical as well as organizational security measures to secure the personal data made available by you in such a manner that it is inaccessible to unauthorized third parties. Although our site features various security precautions, complete protection of your data cannot be guaranteed as security gaps on the Internet cannot be ruled out. Should you have any requests regarding the collection of your data, please use the contact details provided at the end of the privacy statement.
Upon written request, DF Group will inform you about your stored personal data, its origin and recipients and the purpose of the data processing and its legal basis, the recipient category and the duration of storage.
You have the right to obtain from us, without undue delay, the rectification of inaccurate and/or the completion of incomplete personal data that is stored by us.
You have the right to obtain from us, without undue delay, the erasure of your data, especially when processing of such data is not permissible, knowledge of such data is no longer necessary for completion of the task or such data must be erased to comply with a legal obligation.
You have the right to obtain from us restriction of processing under certain conditions.
You have the right, under certain conditions, to have your data transmitted by us to another party.
You have the right to withdraw your consent regarding the collection of data at any time. This right applies with effect for the future; the data collected prior to the withdrawal of consent remains unaffected.
Moreover, you may object to the further processing of your data if we use your data due to a legitimate interest (Art. 6 (1) lit. f EU-GDPR), unless for advertising purposes, only if there is a special reason for such objection. In case of an objection, we will no longer process your data from the time we receive your objection during the subsequent examination and delete it after completion of the examination provided that the objection is justified. An objection does not affect the permissibility of the processing of your data in the past.
You have the right to lodge a complaint with a supervisory authority if you have a reason for complaint.

References: Art. 13
 Art 44
 Art. 21
 Art. 28
 Art. 6
 Art 28