Privacy policy

1. Personal Data

You can subscribe to our monthly Hedgefox Newsletter free of charge via our website. To do so, we need your email address and your consent.

Your consent enables us to collect, process, store, and use your personal data for the newsletter. We send the newsletter once a month via the provider MailerLite. You will find the corresponding data protection regulations on this page of the provider.

You can cancel your free subscription to the newsletter at any time. You can do this by using a link at the end of each newsletter. Alternatively, you can send your cancellation request at any time by email to info@hedgefox.eu.

The data processing is based on the legal provision of article 6, paragraph 1, sentence 1 lit a GDPR (consent). After your voluntary consent, we are entitled to collect, process or store, archive, and use your email address to provide you with our newsletter. We are allowed to access this data in order to avoid technical faults and to fulfil our legal and contractual obligations. Without your consent, we are only permitted to pass on your data if we are legally or judicially obliged to do so in accordance with article 6, paragraph 1, sentence 1 lit c (legal obligation) GDPR. We will inform you - if permitted - immediately about the transfer of data.

Personal data that have been collected for the purpose of sending the newsletter will be stored until the end of the use, provided that a corresponding retention is indicated by law or by the authorities.

 

2. Tracking information

When you visit the Hedgefox website, files are requested from you. In doing so, our servers temporarily collect and store general data about the use of the website, such as the name of your internet service provider, the website from which you are visiting us, the type of browser you are using, the name of the requested file, the date and time of the request, the amount of data transferred, the message about the success of the request, and your IP address. This data can be used to improve our magazine and for statistical purposes. We have a legitimate interest in this. The legal basis for data processing is article 6, paragraph 1, sentence 1 lit. f GDPR (legitimate interests of the person responsible). Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person. Individual users will always remain anonymous.

 

2.1 Cookies

To carry out an analysis of the use of our website, we use so-called “cookies”. These are text files that are stored locally on your computer and thus enable recognition when you visit our website again. This technology allows Hedgefox to recognize you as a visitor. In order to better understand the usage behavior of our users, IP addresses may be stored in encrypted form. This information is collected without your explicit consent. You can, however, set your browser to inform you when cookies are set and to decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or even generally. If cookies are not accepted, the functionality of our website may be limited.

Data processing is carried out on the basis of the legal provisions of article 6, paragraph 1, sentence 1 lit. f (legitimate interests of the person responsible) of the GDPR.

 

2.2 Analysis services

Our website uses the open source software WordPress.org. WordPress.org also uses cookies. The information generated by a cookie about website usage is transferred to our servers and summarized in pseudonymous usage profiles. The information is used to evaluate the use of the website and to enable us to design our website in line with these requirements. The information is not passed on to third parties. Under no circumstances is the IP address associated with other data concerning the user(s). The IP addresses are made anonymous, so that an assignment is not possible (IP masking).

We use the open source software WordPress.org for analysis and statistical evaluation of the use of the website. We have a legitimate interest in this. The legal basis for data processing is article 6, paragraph 1, sentence 1 lit. f GDPR (legitimate interests of the person responsible).

 

2.3 Plugins and tools

On the basis of article 6, paragraph 1, sentence 1 lit. f GDPR, among other things, services and contents of third parties are integrated in order to make our service more attractive and to increase our reach. This always presupposes that the providers of this content can detect the IP address of the user. Without this IP address, the third parties cannot send the content to the browser of the respective internet user.

The following third party content is included on our website:

 

2.3.1 YouTube plugins

For the integration of videos we use the provider YouTube among others. YouTube is operated by YouTube, LLC with headquarters at 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube is represented by Google Inc. with headquarters at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. On some of our websites we use plugins from the provider YouTube to display YouTube videos. When you visit this site, a connection to the YouTube servers is established for video viewing. This tells the YouTube server which of our webpages you have visited. If you are logged in as a member of YouTube, YouTube associates this information with your personal user account. When you use the plugin, such as when you click on the start button of a video, this information is also transmitted to your user account. You can prevent this association by logging out of your YouTube account and other accounts of YouTube LLC and Google Inc. before using our website and deleting the corresponding cookies of these companies.

Further information on data processing and notes on data protection by YouTube/Google can be found at www.google.de/intl/de/policies/privacy/.

 

2.3.2 Twitter plugins

Our website also uses Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. An overview of tweet buttons can be found here (https://about.twitter.com/resources/buttons). By using Twitter and the “Re-Tweet”-function, the websites you visit are linked to your Twitter account and announced to other users. In the process, data is transferred to Twitter. We would like to point out that we, as the provider of the website, have no knowledge of the content of the transmitted data or its use by Twitter. Further information on this can be found in the Twitter privacy policy at http://twitter.com/privacy.

If you do not want Twitter to be able to assign visits to our pages, please log out of your Twitter user account.

 

2.3.3 Facebook plugins

We also provide you with plugins from Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Where applicable, personal data may also be processed by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. You can use these plugins to link, share, or otherwise be active directly on the respective network.

By activating the social plugin, you agree to the collection of your personal data by Facebook. Facebook is responsible for the data collection and processing by Facebook that takes place at that time, including the use of cookies and similar technologies by Facebook. Specifically, information on which of our webpages you have visited and your IP address is then transmitted to Facebook, even if you do not have a profile on the network or are not logged in there at the time. If you are logged on to Facebook as a member, the network will assign the information to your personal user account.

We therefore recommend that you read Facebook’s privacy policy before using the plugin: https://de-de.facebook.com/policy.php

 

3. Your rights

Once your personal data is being processed, you are a data subject in the sense of the GDPR and you are entitled to the following rights:

 

3.1 Right to information

You can request confirmation from us as to whether personal data concerning you is being processed by us. If such processing is carried out, you can request information from us about the following:

a) the purposes for which the personal data are processed

b) the categories of personal data processed

c) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;

d) the planned duration of storage of the personal data concerning you or, if it is not possible to give specific details, criteria for determining the duration of storage;

e) the existence of a right of rectification or erasure of personal data concerning you, a right to have the processing limited by us or a right to object to such processing;

f) a right of appeal to a supervisory authority;

g) any available information as to the origin of the data, if the personal data are not collected from the data subject;

h) the existence of automated decision-making, including profiling in accordance with article 22, paragraphs 1 and 4 GDPR and, at least in these cases, meaningful information on the logic involved and the scope and intended effects of such processing on the data subject.

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to article 46 GDPR in connection with the transfer.

 

3.2 Right of rectification

You have the right to ask us to correct and/or complete your personal data if the processed personal data concerning you is incorrect or incomplete. We must make the correction without delay.

 

3.3 Right to limit processing

Under the following conditions, you may request that the processing of personal data concerning you be restricted:

a) if you dispute the accuracy of the personal data concerning you for a period of time which allows us to verify the accuracy of the personal data

b) if the processing is unlawful and you object to the deletion of the personal data and request instead the restriction of the use of the personal data;

c) if we no longer need the personal data for the purposes of the processing, but you need it in order to assert, exercise, or defend legal claims; or

d) if you have lodged an objection to the processing pursuant to article 21, paragraph 1 GDPR and it is not yet clear whether our reasons outweigh your reasons.

If the processing of personal data relating to you has been restricted, such data - apart from being stored - may be processed only with your consent or for the purpose of asserting, exercising, or defending legal claims, or protecting the rights of another natural or legal person, or for reasons of major public interest of the European Union or a Member State. If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.

 

3.4 Right of deletion

You may request us to delete personal data concerning you immediately and we are obliged to delete such data immediately if one of the following reasons applies:

a) the personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed;

b) you revoke your consent on which the processing was based pursuant to article 6, paragraph 1, lit. a or article 9, paragraph 2, lit. a GDPR and there is no other legal basis for the processing;

c) you object to the processing pursuant to article 21, paragraph 1, GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing pursuant to article 21, paragraph 2, GDPR;

d) the personal data concerning you have been processed unlawfully;

e) erasure of the personal data concerning you is necessary to comply with a legal obligation under European Union or national law to which we are subject;

f) the personal data concerning you have been collected in relation to information society services provided, in accordance with article 8, paragraph 1 of the GDPR.

If we have made the personal data relating to you public and are obliged to delete them in accordance with article 17, paragraph 1 of the GDPR, we shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data controllers who process the personal data that you, as a data subject, have requested them to delete all links to these personal data or to make copies or replications of these personal data.

The right of cancellation does not apply where the processing is necessary

a) to exercise the right to freedom of expression and information;

b) to comply with a legal obligation requiring processing under European Union or national law to which we are subject or to carry out a task in the public interest or in the exercise of official authority vested in us;

c) for reasons of public interest relating to public health pursuant to article 9, paragraph 2, lit. h and i and article 9, paragraph 3 of the GDPR;

d) for archiving, scientific, or historical research purposes in the public interest or for statistical purposes in accordance with article 89, paragraph 1 GDPR, insofar as the law referred to in section a is likely to render impossible or seriously prejudice the attainment of the objectives of such processing; or

e) to assert, exercise, or defend legal claims.

 

3.5 Right to information

If you have asserted the right of rectification, erasure, or limitation of processing against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, erasure, or limitation of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed of these recipients.

 

3.6 Right to data transferability

You have the right to receive the personal data concerning you that you have provided to us in a structured, common, and machine-readable format. In addition, you have the right to have this data communicated to another responsible person without hindrance by us, provided that

a) the processing is based on a consent pursuant to article 6, paragraph 1, lit. a GDPR or article 9, paragraph 2, lit. a GDPR or on a contract pursuant to article 6, paragraph 1, lit. b GDPR and

b) the processing is carried out by means of automated procedures.

In exercising this right, you also have the right to obtain that the personal data concerning you be communicated directly by a controller to another controller, in so far as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

The right to data transferability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

 

3.7 Right of objection

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you, which is carried out on the basis of article 6, paragraph 1, lit. e or f GDPR. This also applies to profiling based on these provisions.

We no longer process the personal data concerning you unless we can provide compelling reasons for processing that are worthy of protection and outweigh your interests, rights, and freedoms, or unless the processing serves to assert, exercise, or defend legal claims. You have the opportunity to exercise your right of objection in relation to the use of Information Society services, irrespective of Directive 2002/58/EG, by means of automated procedures using technical specifications.

 

3.8 Right to revoke the data protection declaration of consent

You have the right to revoke your data protection declaration of consent at any time. Revocation of your consent does not affect the legality of the processing that has taken place on the basis of your consent until revocation.

 

3.9 Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which you are resident, your place of work, or the place where the alleged infringement occurred, if you consider that the processing of personal data concerning you is in breach of the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under article 78 of the GDPR.

 

3.10 Persons responsible and contact

If you have any questions about data protection, we will be happy to help you. You can reach us at

Hedgefox gemeinnützige UG (haftungsbeschränkt)
Ostender Straße 34
13353 Berlin
Germany

Email: info@hedgefox.eu