Source: https://www.aab-as.de/en/data-privacy-statement/
Timestamp: 2019-04-21 04:08:30+00:00

Document:
We would like to inform you, as a visitor to our website, about the handling of your personal data by AAB Asset Services GmbH.
In addition, we would like to inform you here about the rights you are entitled to according to data protection legislation.
AAB Asset Services GmbH is a complete subsidiary of Augsburger Aktienbank AG (AAB).
AAB Asset Services GmbH offers services to professional investors. These are consulting services related to fund structuring and strategies, as well as for fund marketing, while, at the same time, the placement agent role for selected asset managers.
AAB Asset Services GmbH has not appointed a data protection officer in accordance with the provisions of Art. 37 DSGVO in conjunction with Sec. 38 (1) BDSG because it employs fewer than ten employees. If questions need to be clarified in connection with data protection, the data protection officer for Augsburger Aktienbank Aktiengesellschaft (AAB) will provide support.
When you use our website, we collect and use the personal data of our users only so far as this is necessary to maintain both the functioning of the website and of our content and services. The collection and use of personal data of our users takes place regularly only with the consent of the user. An exception applies to cases in which prior consent can not be obtained for practical reasons and for which the processing of the data is permitted by law.
Is your data used for other purposes?
for the prevention and investigation of criminal offences; In particular, we use data analytics to detect evidence that may indicate misuse.
If we wish to process your personal data for a reason not mentioned above, we will inform you in advance while staying within the provisions of the law.
Each time our website is accessed, our system automatically collects data and information from the computer system of the computer seeking contact.
The data is stored in the log files of our system. Storage of other personal data of the user together with this data does not take place.
The lawful basis for the temporary storage of data and log files is Art. 6 (1) GDPR.
The temporary storage of the IP address by the system in log files is necessary to enable the delivery of the website to the computer of the user and to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems.
To do this, the user’s IP address must be kept for the duration of the session. An evaluation of the data for marketing purposes does not take place in this context. The merging of this data with other data sources will not take place.
It is for these reasons that we also have our legitimate interest in the processing of data according to Art. 6 (1) GDPR.
The data will be deleted as soon as the purpose for its collection is no longer necessary. In the case of collecting the data for supporting the website, the deletion of the data happens when the respective session is completed. The log files will be deleted after 24 hours at the latest.
The collection of data and the storage of the data in log files is essential for the operation of the website. There is consequently no possibility to make an objection on the part of the user.
We use “Google reCAPTCHA” (hereafter “reCAPTCHA”) on the website of AAB Asset Services GmbH http://www.aab-as.de/, as our website shall be hereafter referred to. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”).
Using reCAPTCHA, we check if the data entry on our website (for example in a contact form) is done by a human or by an automated program. To do this, reCAPTCHA analyses your behaviour as a website visitor using various characteristics. This analysis begins automatically as soon as you visit the website as a website visitor. During the analysis, reCAPTCHA evaluates various information (for example, the IP address, the website visitor’s visit time on the website, or the user’s mouse movements). The data collected during the analysis will be forwarded to Google.
The reCAPTCHA analyses are completely in the background. You as a website visitor are not informed that an analysis is taking place.
The processing of the data is carried out on the basis of Article 6 (1) GDPR. AAB Asset Services GmbH has a legitimate interest in protecting its website from abusive automated spying and spam.
Our website uses so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our service more user-friendly, effective and secure. Cookies are small text files that are entered into your computer and stored by your browser.
The cookie used by us is the so-called “session cookie”. This will be deleted automatically after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit.
You can set your browser so that you are informed about the application of cookies and allow cookies only in individual cases, allow the acceptance of cookies for certain cases or generally exclude and enable the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
Cookies that are required to carry out the electronic communication process or to provide certain functions that you wish to use (e.g. shopping cart function) are processed on the basis of Art. 6 (1) GDPR are saved to your computer.
When you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored in order to process the request and in the event of follow-up questions. We will not share this information without your consent.
The processing of the data entered into the contact form is therefore exclusively based on your consent (Art. 6 (1) GDPR). You can revoke this consent at any time. An informal message by e-mail to us is sufficient. The legality of the data processing operations carried out until the time of the revocation remains unaffected by the revocation.
The information you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or delete the purpose for data storage (for example, after your request has been processed). Mandatory statutory provisions – especially retention periods – remain unaffected.
You can assert your rights at the address of the responsible office or at the data protection officer stated above via the contact details given above.
You can request information from AAB ASSET SERVICES GMBH on your personal data processed by us. This information includes, but is not limited to, the reasons as to why the personal data are processed, the categories of personal data being processed or the recipients or categories of recipients to whom the personal data relating to you have been or will be disclosed. We also inform you about your rights in this leaflet.
You have the right to rectification from AAB ASSET SERVICES GMBH if the processed personal data concerning you are incorrect or incomplete. The responsible person must make the correction as soon as possible.
if you have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether the legitimate reasons of AAB ASSET SERVICES GMBH outweigh your reasons.
You revoke your consent to the processing in accordance with Art. 6 (1) or Art. 9 (2) GDPR and there is no other legal basis for the processing.
In accordance with Art. 21 (1) GDPR you object to the processing and there are no prior justifiable reasons for the processing, or you object to the processing in accordance with Art. 21 (2) GDPR.
The deletion of personal data concerning you is required to fulfil a legal obligation under European Union law or the law of the Member States to which the person responsible for data processing is subject.
The personal data concerning you were collected in relation to information society services offered in accordance with Art. 8 (1) GDPR.
If you have asserted the right to rectify, delete or restrict the processing to AAB ASSET SERVICES GMBH, the latter is obliged to notify all recipients to whom the personal data you have disclosed this rectification or deletion of data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have a right to to be informed about these recipients from AAB ASSET SERVICES GMBH.
In exercising this right you also have the right to demand that the personal data relating to you is transferred directly from AAB ASSET SERVICES GMBH to another responsible person, where this is technically feasible. Liberties and rights of other persons may not be affected by this.
You have the right, for reasons that result from your particular situation, to object at any time to the processing of personal data relating to you carried out on the basis of Article 6 (1) GDPR. This also applies to profiling based on these provisions.
AAB ASSET SERVICES GMBH no longer processes the personal data relating to you, unless it can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
If the personal data relating to you is processed for the purpose of direct advertising, you have the right to object at any time to the processing of the personal data relating to you for the purpose of such advertising. this also applies to profiling insofar as it is associated with such direct mail.
Regardless of Directive 2002/58 / EC, you have the option, in the context of the use by information society services, of exercising your right to object through automated procedures that use technical specifications.
You have the right to revoke your data protection declaration of consent at any time. You have the right to revoke data protection declarations of consent at any time. The revocation of the consent does not affect the legality of the processing carried out, on the basis of the prior consent, right up to the moment of revocation.
Irrespective of another administrative/legal or court legal remedy, you are entitled to complain to a regulatory authority, especially in the EU member state of your place of residence, in your workplace or at the site of the suspected violation, if you believe that the processing of personal data relating to you violates the GDPR. The regulatory authority, where the complaint was lodged, shall inform the complainant about the status and the results of the complaint including the possibility of a judicial appeal according to Article 78 GDPR.

References: Art. 37
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8