Source: https://acatus.com/data-privacy.html
Timestamp: 2019-04-20 06:34:36+00:00

Document:
Personal data means any information relating to an identified or identifiable natural person. They include particularly all information making it possible to conclude your identity, for instance your name, telephone number, address or email address. Statistical data, which we collect for example when someone visits our website, do not fall under the meaning of personal data.
For any questions concerning matters of data protection in connection with our products or the use of our website you can also contact our Data Protection Officer at any time. They can be reached under the above postal address and under the email address given above (mark your communication: “FAO Data Protection Officer”).
The processing of these access data is necessary in order to make the visit to the website possible and to ensure the permanent functionality and security of our systems. In order to further develop our website with regards to the usage patterns of our visitors (e.g. if the proportion of mobile devices on which the pages are called up rises) and in order to administer our website in a general way, the access data are saved for the foregoing purposes also in internal logfiles. The legal basis is Art. 6, Paragraph 1, Clause 1, Point (b) and (f) of the GDPR.
The information saved in the logfiles allows no direct conclusion to be drawn about you as a person – in particular, we save the IP addresses only in abbreviated, anonymised form. The logfiles are saved for 30 days and archived following subsequent anonymisation.
date and time of enquiry.
In this context, we process data solely for our communication with you. The legal basis is Art. 6, Paragraph 1, Point (b) of the GDPR. The data which we collect are automatically erased after full processing, unless we still need to keep your enquiry for the fulfilment of contractual or legal duties (Cf. Section: “Period of storage”).
contact information (first name and surname, position, email address, telephone number, fax).
information about your company’s investment interests (e.g. asset classes, tenor, yield requirements, country, region, risk class).
Your data are solely used for the administration of your account and, unless we still need to keep your information for the fulfilment of other contractual or legal duties (Cf. Section: “Period of storage”), erased after fulfilment of this purpose. The legal basis for this processing is Art. 6, Paragraph 1, Point (b) of the GDPR. Deregistration is possible at any time via the profile section of our website.
names of the members of the representative body or the names of the legal representatives, which in case that they are legal persons must also be identified under the provision of the respective categories of information set out above.
This identification process must be completed only once. Subsequent orders do not require a repeated processing of these information. Data hereby collected are used solely for the processing of orders and functionality of your account. We are required to keep these information for as long as your account is active. Following deregistration and, unless we still need to keep your information for the fulfilment of other contractual or legal duties (Cf. Section: “Period of storage”), we erase them accordingly.
identifiers we assign to you, such as your client or account number, including for accounting purposes.
The legal basis for this processing is Art. 6, Paragraph 1, Clause 1, Point (b) of the GDPR. Your data are solely used for the administration of your account and the processing of orders. We are required to keep these information for as long as your account is active. Following deregistration and, unless we still need to keep your information for the fulfilment of other contractual or legal duties (Cf. Section: “Period of storage”), we erase them accordingly.
You have the possibility of ordering our newsletter, in which we tell you regularly of the latest news about our products and campaigns.
For ordering the newsletter we use the so-called double opt-in procedure, i.e. we shall only send you the newsletter by email if you confirm, by clicking a link in our message email, that you are the holder of the email address provided. Should you confirm your email address, we shall store your email address, the time of registration and the IP address used for the registration until you cancel the newsletter. This storage serves principally the purpose of sending you the newsletter and being able to provide for your registration.
Deregistration from the newsletter is possible at any time, e.g. via the deregistration link at the end of every newsletter. Alternatively, you can direct your request for deregistration to the contact details set out above. Following deregistration, and unless we still need to keep your enquiry for the fulfilment of contractual or legal duties (Cf. Section: “Period of storage”), we keep your personal information solely in static and anonymous form.
In our newsletter, we use technologies usual in the market by which the interactions with the newsletter can be measured (e.g. opening of the email, links clicked).
We use these data for general statistical evaluations and to optimise and develop our contacts and customer communication further. This is done with the aid of graphics which are embedded in the newsletter (so-called pixels). We use the collected data to create a user profile that allows us to provide you with a personalised newsletter. By recording information such as which links you use in our newsletter, we can better understand your personal preferences. Information thereby collected are used together with data on your usage of our website. We do not use these personal data without your prior consent upon subscription. The legal basis for this processing is Article 6, Paragraph 1, Point (a) of the GDPR.
You can withdraw your consent to this form of tracking at any point. In this case, however, you will not be able to make use of all the functions provided in the newsletter. You can withdraw your consent via the link at the end of every newsletter. Alternatively, you can direct your request to the contact details set out above. Following your withdrawal, we keep your personal information solely in static and anonymous form.
If you take part in one of our surveys, we shall use your data for market and opinion research. We shall use them only in anonymised form and for internal purposes. In the exceptional case that data are not evaluated anonymously, your data will be collected only with your consent. You can withdraw your consent at any point. Unless we still need to keep your enquiry for the fulfilment of contractual or legal duties (Cf. Section: “Period of storage”), we erase your data following the completion of this purpose. The GDPR does not apply to anonymous surveys and in the exceptional case of evaluations with a personal reference. The legal basis is the said declaration of consent under Art. 6, Paragraph 1, Clause 1, Point (a) of the GDPR.
The legal basis for the processing of your application documents is Art. 6, Paragraph 1, Clause 1, Point (b) and Art. 88, Paragraph 1 of the GDPR in combination with Section 26, Paragraph 1, Clause 1 of the German Data Protection Act (BDSG).
For a part of our service it is necessary for us to insert cookies. A cookie is a small text file which is saved by your browser on your device. Cookies are not inserted to execute programs or to load viruses into your computer. Instead, the main purpose of cookies is to provide an optimal product or service to you and allow you to make use of our services as efficiently as possible.
In this way, we wish to enable you to use our website in a convenient and individualised form. These services are based on our foregoing legitimate interest, and the legal basis is Art. 6, Paragraph 1, Clause 1, Point (f) of the GDPR.
will only work in this browser and only for this domain). If you delete your cookies in this browser, you have to click on the link again.
technical information on the browser and the operating system.
In the following descriptions of the technology which we employ you will find instructions on how to object to our analysis procedures and advertising campaigns by means of a so- called opt-out cookie. Please note that after the deletion of all cookies in your browser or the later use of another browser and/or profile, another opt-out cookies must be placed.
You can express your objection through settings on two websites: Truste or your Online Choices, which provide objection facilities by many advertisers in bundled form. Both sites make it possible to disable all advertisements at once for the providers listed, using opt-out cookies, or alternatively to make the settings for each provider individually.
This is legally permissible and requisite, pursuant to Art. 6, Paragraph 1, Clause 1, Point (b) of the GDPR, for the handling of contracts with yourself or for the execution of precontractual actions which are being carried out at your request.
Acatus stores and processes data, including your personal data, in a cloud infrastructure provided by Amazon Web Services Inc., 410 Terry Avenue North, Seattle, Washington 98109, USA (“AWS”). Via these AWS servers your device will be connected with the contents in our website. The servers which we use are located inside the European Union. In addition, we have concluded a contract with AWS which meets the requirements stipulated by the standard clauses of the European Commission. The legal basis is Art. 6, Paragraph 1, Clause 1, Point (f) of the GDPR, grounded on our legitimate interest in storing the contents of our website securely and reliably through external service providers while reducing our own expenditure of resources for the provision of our website’s EDP infrastructure.
applicants’ data: id, first name, surname, date of birth, gender, marital status, application documents (e.g. references, CV), employment contract, certificate of good conduct, as the case may be.
In this respect, we and JFD Bank AG have defined in agreements who respectively fulfils which data protection obligations. We will be happy to provide you with the essential content of these agreements on request. You also have the rights described in point 4 against joint controller as far as here described data processing is concerned.
The legal basis for the processing of your data is Art. 6, Paragraph 1, Clause 1, Point (b) of the GDPR.
We store personal data only for as long as is necessary to fulfil contractual or statutory duties for which the data were collected. Unless we still need these data until expiry of the statutory period of limitation for purposes of evidence in civil claims or due to statutory duties of storage, we erase the data immediately.
You have the right at any time to require us to provide information about the processing of your personal data (right of access). When providing you with this information, we shall explain the data processing and supply an overview of the data relating to your person which are stored. Should data stored by us be inaccurate or no longer up-to-date, you enjoy the right to have these data corrected (right to rectification). You can also require the erasure of your data (right to erasure or right to be forgotten). Should the erasure exceptionally not be possible due to other legal regulations, the data processing will be restricted, so that in future they are only available for this statutory purpose. You can also have the processing of your data restricted, i.e. if you believe that the data which we have saved are not correct (right to restriction of processing). You also have the right of data portability, i.e. that we send you on request a digital copy of the personal data which you have provided (right to data portability).
To exercise your rights as set out here, you can get in contact using the foregoing contact details at any time. This also applies should you wish to receive copies of guarantees for certification of an adequate data-protection level.
You also have the right to object to the data processing based on Art. 6, Paragraph, lit. (e) or (f) of the GDPR. Finally, you have the right to complain to the regulatory authority to which we are subject. You can exercise this right at a regulatory authority in the member country of your place of residence, of your workplace, or of the place of alleged breach. In Berlin, the competent regulatory authority is: Data Protection and Freedom of Information Officer, Friedrichstrasse 219, 10969 Berlin.
Under Article 7, Paragraph 3 of the GDPR you have the right at any time to withdraw any consent which has once been given to us. This will have as a consequence that in future we no longer continue the data processing based on this consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Insofar as we process your data on the basis of legitimate interests under Art. 6, Paragraph 1, lit. f GDPR, you have the right under Art. 21 GDPR to object to the processing of your data and to mention grounds relating to your particular situation that in your opinion speak in favour of prevailing legitimate interests. Where personal data are processed for direct marketing purposes, you have a general right of objection which will also be implemented by us without your stating reasons.
We maintain up-to-date technical measures to ensure data security, particularly for the protection of your personal data against dangers during data transmissions and against cognisance by third parties. These are amended in each case to reflect the current state of technology. To secure the personal data which you have provided on our website, we use transport layer security (TLS), which encrypts the information which you have entered.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 88
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21