Data Privacy Notice

We comply with the European General Data Protection Regulation, responsible dealings with your personal data is a matter of course for us.

You have the right to object to processing of your personal data if this is done for the purpose of direct advertising, to preserve legitimate interests or in the public interest.

  1. 1. Who is responsible for data processing and who can I contact?
    • Responsible for the processing of your personal data:
    • Munich Private Equity AG
      Keltenring 5
      82041 Oberhaching
      Germany
      Telephone: +49 89 66 66 94-0
      E-Mail: info@mpe.ag

      Members of the Board: Norman Lemke (CEO), Daniel Bertele, Marc Dellmann

    • In addition, "joint controllers" within the meaning of Art. 4 item 7 GDPR, Art. 26 GDPR are the following entities within the RWB group of companies:

    • RWB PrivateCapital Emissionshaus AG
      Keltenring 5
      82041 Oberhaching
      Germany
      Telephone: +49 89 66 66 94-0
      E-Mail: info@rwb-ag.de

      Members of the Board: Norman Lemke, Daniel Bertele, Armin Prokscha

    • RWB Partners GmbH
      Keltenring 5
      82041 Oberhaching
      Germany
      Telephone: +49 89 66 66 94-0
      E-Mail: info@rwb-partners.de

      Managing Directors: Norman Lemke, Nico Auel

    • RWB Agentur GmbH
      Keltenring 5
      82041 Oberhaching
      Germany
      Telephone: +49 89 66 66 94-650
      E-Mail: info@rwb-agentur.de

      Managing Director: Norman Lemke

    • RWB PrivateCapital GmbH
      Grabenweg 4
      6020 Innsbruck
      Austria
      Telephone: +43 512 36 46 36-0
      E-Mail: info@rwb-austria.at

      Managing Directors: Birgit Schmolmüller, Zsolt Kovacs

    • Walnut GmbH
      Keltenring 12
      82041 Oberhaching
      Germany
      Telephone: +49 89 66 66 94-600
      E-Mail: info@walnut-gmbh.de

      Managing Directors: Norman Lemke, Lars Gentz

    • Munich Private Equity Partners GmbH
      Keltenring 5
      82041 Oberhaching
      Germany
      Telephone: +49 89 66 66 94-372
      E-Mail: info@mpep.com

      Managing Directors: Christopher Bär, David Schäfer, Daniel Bertele

    • MPEP Luxembourg Management S.à r.l.
      26, rue Louvigny
      L-1946 Luxembourg
      Telephone: +352 27 86 17 20
      E-Mail: info@mpep.lu

      Managers: Horst Güdel, Christopher Bär, Liliane Armel, David Schäfer

    • MPEP Luxembourg GP S.à r.l.
      26, rue Louvigny
      L-1946 Luxembourg
      Telephone: +352 27 86 17 20
      E-Mail: info@mpep.lu

      Managers: : Liliane Armel, Armin Prokscha, Ulrike Scholz

    • You can contact our data protection officer as follows:

    • RWB PrivateCapital Emissionshaus AG
      Datenschutz
      Keltenring 5
      82041 Oberhaching
      Germany
      Telephone: +49 89 66 66 94-410
      E-Mail: datenschutz@rwb-ag.de

    • If offers from other providers ("third-party offers") are accessible from our online offer (internet presence, applications), our data protection notice does not apply to these third-party offers. In such a case, we are not responsible for the processing of your personal data within the framework of such third-party offers within the meaning of Art. 4 item 7 GDPR.

  2. 2. Which sources and data do we use?
    1. 2.1 Direct Transmission
      • If you contact us (e.g. application via mail or e-mail, interest in our products, etc.), you will transmit personal data to us. This data is processed by us in the context of the respective contact.
        In addition we may ask you to provide us with certain personal data required by the context (e.g. contract management) and you will transmit that data accordingly.

    2. 2.2 Transmission by sales partners
      •  If you choose one of the MPE Group’s financial products and submit a contract offer through a sales partner, the sales partner will provide all the data relevant to your contract.

    3. 2.3 Visit of our internet presence
      • As a matter of principle, you can visit our internet presence without telling us who you are. Then, we merely find out
      • your IP address (person-related data, because it is possible under certain preconditions to learn of the identity of the owner of the internet access which has been used through information from the internet provider in question)
      • the name of the internet site accessed or the file accessed and the time of access and closing,
      • the quantity of data transmitted and
      • whether the access or closing was successful.
      • The data are exclusively used for administration and optimisation of the internet offer.
      • Your IP address is only evaluated by us in the event of attacks on our internet infrastructure. Your IP address is deleted as soon as we can rule out that an attack on our internet infrastructure has been made by it. This is done regularly.

    4. 2.4 Use of cookies
      • Cookies are also used within our online offer. Cookies are small data packages which are placed on your computer's hard disk via the browser. They serve to control the online offer during your visit or in the event of a later visit. We make your visit more comfortable as a result.
      • Some browsers permit cookies in their basic settings. If you do not want them, you can change your browser's settings. Please consult the information from the browser manufacturer to see how you can go about this. If you decide against cookies, it may be possible that parts of our online offer cannot be used.

    5. 2.5 Tracking and web analysis services
      • 2.5.1 Use of Google Analytics and Google Tag Manager
      • This website uses Google Analytics, a web analysis service from Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services related to website activity and internet usage.
      • The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
      • You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by using the browser plug-in available under the following link. Download and install in: https://tools.google.com/dlpage/gaoptout?hl=en.
      • This website uses Google Analytics with the extension "_anonymizeIp ()". As a result, IP addresses are processed in abbreviated form, so that personal references can be excluded. If the data collected about you can be linked to a person, this will be excluded immediately and the personal data will be deleted immediately.
      • User conditions: https://www.google.com/analytics/terms/de.html, as well as the Data protection declaration https://www.google.de/intl/de/policies/privacy.
      • This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "Personal data".
      • https://myaccount.google.com
      • Use of Google Tag Manager: Google Tag Manager is a solution with which marketers can manage website tags via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager. https://www.google.de/tagmanager/use-policy.html

    6. 2.5.2 Google Analytics Remarketing
      • Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
      • This function makes it possible to link the advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalized advertising messages that have been adapted to you depending on your previous usage and surfing behavior on one device (e.g. mobile phone) can also be displayed on another of your devices (e.g. tablet or PC).
      • If you have given Google your consent, Google will link your web and app browser history to your Google account for this purpose. In this way, the same personalized advertising messages can be displayed on every device on which you log in with your Google account.
      • To support this function, Google Analytics collects Google-authenticated user IDs, which are temporarily linked to our Google Analytics data in order to define and create target groups for cross-device advertising.
      • You can permanently object to cross-device remarketing / targeting by deactivating personalized advertising in your Google account; follow this link: https://www.google.com/settings/ads/onweb/.
      • The aggregation of the recorded data in your Google account takes place exclusively on the basis of your consent, which you can give to Google or revoke (Art. 6 Para. 1 lit. a GDPR). In the case of data collection processes that are not merged in your Google account (e.g. because you do not have a Google account or have objected to the merging), the collection of data is based on Art. 6 Paragraph 1 lit. Interest in the anonymized analysis of website visitors for advertising purposes.
      • Further information can be found in Google’s data protection declaration: https://www.google.com/policies/technologies/ads/ .

    7. 2.6 Online contact and communication
      • At some points in our online offer, you can enter the personal data provided in the input fields.

    8. 2.7 Google Maps
      • Our online offer uses Google Maps to show maps and to produce directions. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043. If you use the further-reaching functions of Google, for example by clicking on the displayed map, you use a Google service outside our sphere of influence. In this case, the requirements and references stated by Google in this context apply.
      • On the website accessible at www.google.de, you will find further information on
      • the Google conditions of use ("general terms and conditions"),
      • additional use conditions for Google Map/Google Earth ("additional terms and conditions for Google Map/Google Earth"),
      • the Google data protection declaration, in which you will find information about the data which are recorded for which purpose and what Google does with these data.

    9. 2.8 Social Media Plugins
      • So-called social media plugins ("plugins") from social networks are used on our online offer.
      • Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). You can find an overview of the Facebook plugins and their appearance here: https://developers.facebook.com/docs/plugins/
      • Google+ is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). You can find an overview of the Google plugins and their appearance here: https://developers.google.com/+/web/
      • Twitter is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter"). You can find an overview of the Twitter buttons and their appearance here: https://twitter.com/about/resources/buttons
      • Youtube is a service provided by Google Inc., San Bruno / California, USA. 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). You can find an overview of the Google plugins and their appearance here: https://developers.google.com/+/web/
      • Vimeo is operated by Vimeo, Inc., 555 West 18th Street, New York, New York 10011. Information about the API and player can be found here: https://developer.vimeo.com/player
      • Xing is operated by XING AG, Gänsemarkt 43, 20354 Hamburg.
      • The aforementioned companies are also referred to below as "providers".
      • If you are logged in to one of the provider's services, the provider can directly assign the visit to our online offer to your profile / account of the respective provider. If you interact with the plugins, for example the "Like" button, the "+1" button or the "Twitter" button, the corresponding information is also transmitted directly to a server of the provider and stored there. The information may be published in the social network or on your social media account and displayed to your contacts there. The purpose and scope of the data collection and the further processing and use of the data by the provider as well as your rights and setting options for the protection of your privacy can be found in the data protection declarations of the providers.
      • Facebook
      • Google+
      • Twitter
      • Youtube
      • Xing
      • Vimeo
      • If you do not want the providers to assign the data collected via our online offer directly to your profile / account in the respective service, you must log out of the corresponding service before activating the plug-in.

    10. 2.9 Register request
      • Insofar as this is required for legal reasons, in particular to fulfill our anti-money laundering obligations, relevant data is requested from relevant registers.

    11. 3. What do we process your data for and on which legal foundation?
      • We process your personal data in harmony with the European General Data Protection Regulation (GDPR) and the law of 1 august 2018.

      • 3.1 For performance of contractual and pre-contractual duties (Art. 6, subsection 1 b, GDPR)

        • Your personal data are in particular processed in order to enable fulfilment of our contractual duties towards you (e.g. holding contracts, employment contracts) and also, if applicable, to take pre-contractual measures if inquired by you.
          The details about this can be seen from the contracts/agreements in question.

      • 3.2 Within the framework of a balancing of interests (Art. 6, subsection 1 f, GDPR)

        • To the extent necessary, we process your data to attend to our legitimate interests or those of a third party (e.g. advertising, to the extent that you have not objected to the use of your data, measures for business control and further development of services and products, establishment of legal claims and defence in legal disputes).

      • 3.3 On the basis of your consent (Art. 6, subsection 1 a, GDPR)

        • If you have given us consent for the processing of personal data for specific purposes, processing is done on the basis of your consent. Consent granted can be withdrawn at any time. This also applies to consent granted before 25 May 2018. Please remember that the withdrawal only has an effect for the future. Processing done before receipt of the withdrawal is not affected.

      • 3.4 To fulfil a legal obligation (Art. 6, subsection 1 c, GDPR) or in the public interest (Art. 6, subsection 1 e, GDPR)

        • We are subject to various (legal) duties or statutory requirements, for example concerned with examination of identity, prevention of money laundering and control of risks, as well as fiscal control and reporting duties. We therefore process your data for these purposes, amongst others.

    12. 4. Who gets your data?
      • We only forward your data in extremely restricted cases, as described below.

      • 4.1 Service providers: Like many other enterprises, we also outsource activities for data processing to an extremely restricted extent to trustworthy external service providers who fulfil certain tasks and render services for us, e.g. payroll services.

      • 4.2 Business partners: Business partners: We forward your data to trustworthy business partners, so that they can render the services required by you for you, e.g. depositary bank.

      • 4.3 Public and state authorities: To the extent prescribed by law or necessary to protect our rights, we forward your data to agencies legally responsible for us under supervisory law or in any other way.

      • 4.4 Professional consultants and others: We forward your data to an extremely restricted extent to other parties, for example to professional consultants such as auditors.

    13. 5. How long do we store you data?
      • We erase your data when the purpose of the processing has been fulfilled or settled and we are not entitled or obliged to keep them stored for any other reason (e.g. statutory obligations).

    14. 6. Are my data forwarded to third countries?
      • We only forward your data to third countries if this is absolutely necessary or prescribed by law or you have granted us your consent.

    15. 7. Which data protection rights do you have?
      • 7.1 Each data subject has the right to:
        • information according to Art. 15 GDPR,
        • correction according to Art. 16 GDPR,
        • erasure according to Art. 17 GDPR,
        • restriction of the processing according to Art. 18 GDPR,
        • data portability according to Art. 20 GDPR.
        • In addition, a right to complain to a data protection supervisory authority exists (Art. 77, GDPR)

      • 7.2 Claiming all the aforementioned rights is free of charge for you as a matter of principle.
        • In the event of obviously unsubstantiated or - in particular in the event of frequent recurrence - excessive applications, we can however, according to the provisions of Art. 12 subsection 5, GDPR, either
          a) demand a suitable payment, in which the administrative costs for the notification or the performance of the measure applied for are taken into due account, or
          b) reject becoming active on the basis of the application.

      • 7.3 To exercise your rights, please get in touch with our aforementioned data protection officer. There, you will also receive further information on data protection.

    16. 8. Can this data protection declaration be changed?
      • From time to time, updating of this data protection declaration may become necessary, for example due to new statutory or official requirements and new offers in our online offer. In general, we recommend that you access this data protection declaration regularly in order to check whether there have been any changes. You can see whether changes have been made, amongst other things, if the date stated at the very bottom of this document has been updated.

    17. 9. Can I print or store this data protection declaration?
      • You can print or store this data protection declaration directly, for example via the print or save functions in your browser.

    18. Date: February 2021