MPE Data Privacy Notice

Data Privacy Notice

We comply with the European General Data Protection Regulation, responsible dealings with your personal data is a matter of course for us.

You have the right to object to processing of your personal data if this is done for the purpose of direct advertising, to preserve legitimate interests or in the public interest.

1. Who is responsible for data processing and who can I contact?
- Responsible for the processing of your personal data:
- Munich Private Equity AG
  Keltenring 5
  82041 Oberhaching
  Germany
  Telephone: +49 89 66 66 94-0
  E-Mail: info@mpe.ag
  
  Members of the Board: Norman Lemke
- In addition, "joint controllers" within the meaning of Art. 4 item 7 GDPR, Art. 26 GDPR are the following entities within the RWB group of companies:
- RWB PrivateCapital Emissionshaus AG
  Keltenring 5
  82041 Oberhaching
  Germany
  Telephone: +49 89 66 66 94-0
  E-Mail: info@rwb-ag.de
  
  Members of the Board: Norman Lemke, Armin Prokscha
- RWB Partners GmbH
  Keltenring 5
  82041 Oberhaching
  Germany
  Telephone: +49 89 66 66 94-0
  E-Mail: info@rwb-partners.de
  
  Managing Directors: Norman Lemke, Nico Auel
- RWB Agentur GmbH
  Keltenring 5
  82041 Oberhaching
  Germany
  Telephone: +49 89 66 66 94-650
  E-Mail: info@rwb-agentur.de
  
  Managing Director: Norman Lemke
- RWB PrivateCapital GmbH
  Grabenweg 4
  6020 Innsbruck
  Austria
  Telephone: +43 512 36 46 36-0
  E-Mail: info@rwb-austria.at
  
  Managing Directors: Birgit Schmolmüller, Zsolt Kovacs
- Walnut GmbH & Co. KG
  Keltenring 12
  82041 Oberhaching
  Germany
  Telephone: +49 89 66 66 94-600
  E-Mail: info@walnut-gmbh.de
  
  Managing Directors: Norman Lemke, Lars Gentz
- Munich Private Equity Partners GmbH
  Keltenring 5
  82041 Oberhaching
  Germany
  Telephone: +49 89 66 66 94-372
  E-Mail: info@mpep.com
  
  Managing Directors: Christopher Bär, Norman Lemke, Hans-Christian Moritz
- MPEP Luxembourg Management S.à r.l.
  26, rue Louvigny
  L-1946 Luxembourg
  Telephone: +352 27 86 17 20
  E-Mail: info@mpep.lu
  
  Managers: Christopher Bär, Liliane Armel, David Schäfer
- MPEP Luxembourg GP S.à r.l.
  MPEP GP S.à r.l.
  26, rue Louvigny
  L-1946 Luxembourg
  Telephone: +352 27 86 17 20
  E-Mail: info@mpep.lu
  
  Members of the Board: Liliane Armel, Armin Prokscha, Ulrike Scholz
- MPEP Luxembourg GP V S.à r.l.
  26, rue Louvigny
  L-1946 Luxembourg
  Telephone: +352 27 86 17 20
  E-Mail: info@mpep.lu
  
  Members of the Board: Andrew Lake, Armin Prokscha, Ulrike Scholz
- You can contact our data protection officer as follows:
- RWB PrivateCapital Emissionshaus AG
  Datenschutz
  Keltenring 5
  82041 Oberhaching
  Germany
  Telephone: +49 89 66 66 94-410
  E-Mail: datenschutz@rwb-ag.de
- If offers from other providers ("third-party offers") are accessible from our online offer (internet presence, applications), our data protection notice does not apply to these third-party offers. In such a case, we are not responsible for the processing of your personal data within the framework of such third-party offers within the meaning of Art. 4 item 7 GDPR.
2. Which sources and data do we use?
1. 2.1 Direct Transmission
  - If you contact us (e.g. application via mail or e-mail, interest in our products, etc.), you will transmit personal data to us. This data is processed by us in the context of the respective contact.
    In addition we may ask you to provide us with certain personal data required by the context (e.g. contract management) and you will transmit that data accordingly.
2. 2.2 Transmission by sales partners
  -  If you choose one of the MPE Group’s financial products and submit a contract offer through a sales partner, the sales partner will provide all the data relevant to your contract.
3. 2.3 Visit of our internet presence
  - As a matter of principle, you can visit our internet presence without telling us who you are. Then, we merely find out
  - your IP address (person-related data, because it is possible under certain preconditions to learn of the identity of the owner of the internet access which has been used through information from the internet provider in question)
  - the name of the internet site accessed or the file accessed and the time of access and closing,
  - the quantity of data transmitted and
  - whether the access or closing was successful.
  - The data are exclusively used for administration and optimisation of the internet offer.
  - Your IP address is only evaluated by us in the event of attacks on our internet infrastructure. Your IP address is deleted as soon as we can rule out that an attack on our internet infrastructure has been made by it. This is done regularly.
4. 2.4 Use of cookies
  - Cookies are also used within our online offer. Cookies are small data packages which are placed on your computer's hard disk via the browser. They serve to control the online offer during your visit or in the event of a later visit. We make your visit more comfortable as a result.
  - Some browsers permit cookies in their basic settings. If you do not want them, you can change your browser's settings. Please consult the information from the browser manufacturer to see how you can go about this. If you decide against cookies, it may be possible that parts of our online offer cannot be used.
5. 2.5 Tracking and web analysis services
  - 2.5.1 Use of Google Analytics and Google Tag Manager
6. 2.5.2 Google Analytics Remarketing
7. 2.6 Online contact and communication
  - At some points in our online offer, you can enter the personal data provided in the input fields.
8. 2.7 Google Maps
  - Our online offer uses Google Maps to show maps and to produce directions. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043. If you use the further-reaching functions of Google, for example by clicking on the displayed map, you use a Google service outside our sphere of influence. In this case, the requirements and references stated by Google in this context apply.
  - On the website accessible at www.google.de, you will find further information on
9. 2.8 Social Media Plugins
  - So-called social media plugins ("plugins") from social networks are used on our online offer.
  - Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). You can find an overview of the Facebook plugins and their appearance here: https://developers.facebook.com/docs/plugins/
  - Google+ is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). You can find an overview of the Google plugins and their appearance here: https://developers.google.com/+/web/
  - Twitter is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter"). You can find an overview of the Twitter buttons and their appearance here: https://twitter.com/about/resources/buttons
  - Youtube is a service provided by Google Inc., San Bruno / California, USA. 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). You can find an overview of the Google plugins and their appearance here: https://developers.google.com/+/web/
  - Vimeo is operated by Vimeo, Inc., 555 West 18th Street, New York, New York 10011. Information about the API and player can be found here: https://developer.vimeo.com/player
  - Xing is operated by XING AG, Gänsemarkt 43, 20354 Hamburg.
  - The aforementioned companies are also referred to below as "providers".
  - If you are logged in to one of the provider's services, the provider can directly assign the visit to our online offer to your profile / account of the respective provider. If you interact with the plugins, for example the "Like" button, the "+1" button or the "Twitter" button, the corresponding information is also transmitted directly to a server of the provider and stored there. The information may be published in the social network or on your social media account and displayed to your contacts there. The purpose and scope of the data collection and the further processing and use of the data by the provider as well as your rights and setting options for the protection of your privacy can be found in the data protection declarations of the providers.
  - Facebook
  - Google+
  - Twitter
  - Youtube
  - Xing
  - Vimeo
  - If you do not want the providers to assign the data collected via our online offer directly to your profile / account in the respective service, you must log out of the corresponding service before activating the plug-in.
10. 2.9 Register request
  - Insofar as this is required for legal reasons, in particular to fulfill our anti-money laundering obligations, relevant data is requested from relevant registers.
11. 3. What do we process your data for and on which legal foundation?
  - We process your personal data in harmony with the European General Data Protection Regulation (GDPR) and the law of 1 august 2018.
  - 3.1 For performance of contractual and pre-contractual duties (Art. 6, subsection 1 b, GDPR)
    - Your personal data are in particular processed in order to enable fulfilment of our contractual duties towards you (e.g. holding contracts, employment contracts) and also, if applicable, to take pre-contractual measures if inquired by you.
      The details about this can be seen from the contracts/agreements in question.
  - 3.2 Within the framework of a balancing of interests (Art. 6, subsection 1 f, GDPR)
    - To the extent necessary, we process your data to attend to our legitimate interests or those of a third party (e.g. advertising, to the extent that you have not objected to the use of your data, measures for business control and further development of services and products, establishment of legal claims and defence in legal disputes).
  - 3.3 On the basis of your consent (Art. 6, subsection 1 a, GDPR)
    - If you have given us consent for the processing of personal data for specific purposes, processing is done on the basis of your consent. Consent granted can be withdrawn at any time. This also applies to consent granted before 25 May 2018. Please remember that the withdrawal only has an effect for the future. Processing done before receipt of the withdrawal is not affected.
  - 3.4 To fulfil a legal obligation (Art. 6, subsection 1 c, GDPR) or in the public interest (Art. 6, subsection 1 e, GDPR)
    - We are subject to various (legal) duties or statutory requirements, for example concerned with examination of identity, prevention of money laundering and control of risks, as well as fiscal control and reporting duties. We therefore process your data for these purposes, amongst others.
12. 4. Who gets your data?
  - We only forward your data in extremely restricted cases, as described below.
  - 4.1 Service providers: Like many other enterprises, we also outsource activities for data processing to an extremely restricted extent to trustworthy external service providers who fulfil certain tasks and render services for us, e.g. payroll services.
  - 4.2 Business partners: Business partners: We forward your data to trustworthy business partners, so that they can render the services required by you for you, e.g. depositary bank.
  - 4.3 Public and state authorities: To the extent prescribed by law or necessary to protect our rights, we forward your data to agencies legally responsible for us under supervisory law or in any other way.
  - 4.4 Professional consultants and others: We forward your data to an extremely restricted extent to other parties, for example to professional consultants such as auditors.
13. 5. How long do we store you data?
  - We erase your data when the purpose of the processing has been fulfilled or settled and we are not entitled or obliged to keep them stored for any other reason (e.g. statutory obligations).
14. 6. Are my data forwarded to third countries?
  - We only forward your data to third countries if this is absolutely necessary or prescribed by law or you have granted us your consent.
15. 7. Which data protection rights do you have?
  - 7.1 Each data subject has the right to:
    - information according to Art. 15 GDPR,
    - correction according to Art. 16 GDPR,
    - erasure according to Art. 17 GDPR,
    - restriction of the processing according to Art. 18 GDPR,
    - data portability according to Art. 20 GDPR.
    - In addition, a right to complain to a data protection supervisory authority exists (Art. 77, GDPR)
  - 7.2 Claiming all the aforementioned rights is free of charge for you as a matter of principle.
    - In the event of obviously unsubstantiated or - in particular in the event of frequent recurrence - excessive applications, we can however, according to the provisions of Art. 12 subsection 5, GDPR, either
      a) demand a suitable payment, in which the administrative costs for the notification or the performance of the measure applied for are taken into due account, or
      b) reject becoming active on the basis of the application.
  - 7.3 To exercise your rights, please get in touch with our aforementioned data protection officer. There, you will also receive further information on data protection.
16. 8. Can this data protection declaration be changed?
  - From time to time, updating of this data protection declaration may become necessary, for example due to new statutory or official requirements and new offers in our online offer. In general, we recommend that you access this data protection declaration regularly in order to check whether there have been any changes. You can see whether changes have been made, amongst other things, if the date stated at the very bottom of this document has been updated.
17. 9. Can I print or store this data protection declaration?
  - You can print or store this data protection declaration directly, for example via the print or save functions in your browser.
18. Date: January 2024