With the following information, we would like to inform you about the processing of your personal data in connection with the use of the website of BIT Capital GmbH (hereinafter: “we”, “us”, “BIT Capital”) and the rights to which you are entitled under the General Data Protection Regulation (“DSGVO”) and the Federal Data Protection Act (“BDSG”). According to Art. 4 No. 1 DSGVO, personal data is any information relating to an identified or identifiable individual (hereinafter: “data”).
Part I: General data processing
- Who is responsible for your data?
The responsible party for data processing on this website is:
BIT Capital GmbH
Phone: +49 (0) 30 629 37 819
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses or similar).
- What data do we process from you?
In accordance with the GDPR, we process the following data from you, which you either provide to us yourself or which we collect automatically when you visit our website:
Server log files
When you visit our website, we collect and store the following server log files that your browser automatically transmits to us:
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request comes
- Browser, operating system and its interface
- Language and version of the browser software
This data is not merged with other data sources.
If you use the contact form provided by us on the website, we collect the following data provided by you:
- Email address
- Investor type
- Other data you provide in text fields
If you wish to apply for a vacancy using our online form, we will collect the following data provided by you:
- Email address
- Curriculum vitae
- Telephone number, if applicable
- Current employer, if applicable
- If applicable, your public profiles on LinkedIn, Xing, Twitter, GitHub, if you provide them voluntarily
- Information about your professional expertise with regard to the position in question
- Other information you provide to us as part of the application process
- For what purposes and on what legal basis do we process your data?
We process your data for the following purposes:
- To ensure that our website is presented to you in the most effective way possible and to ensure the stability and security of the website. This processing is based on the legal basis of Art. 6 (1) lit. f DSGVO.
- To provide you with our newsletter and information about other goods and services. This processing is based on the legal basis of Art. 6 (1) lit. f DSGVO and, where required by law, on your consent pursuant to Art. 6 (1) lit. a DSGVO.
- To contact you in the context of customer service and discuss any queries about our products or other requests. This processing is based on the legal basis of Art. 6 para. 1 lit. b or lit. f DSGVO.
- To continuously improve our website and products by analyzing user and customer behavior insofar as you give your consent to do so in accordance with Art. 6 para. 1 lit. a DSGVO.
- To be able to provide you with advertisements tailored to you insofar as you give your consent to this in accordance with Art. 6 Para. 1 lit. a DSGVO.
- In order to process your submitted application and to be able to contact you in this regard. This processing is based on the legal basis of § 26 BDSG or Art. 6 para. 1 lit. f DSGVO.
- In order to comply with our legal retention obligations or obligations under data protection law. This processing is based on the legal basis of Art. 6 para. 1 lit. c DSGVO.
- To exercise our legal rights or defend ourselves against claims, if applicable. This processing is based on the legal basis of Art. 6 para. 1 lit. f DSGVO.
- To whom do we transfer your data?
We also use external service providers to process your data on our behalf when providing the specific services. Specifically, these include companies in the following categories:
- Technical service providers in the areas of IT and telecommunications (e.g., provision and maintenance of IT systems).
In addition, we also share your data with other third parties who process your data on their own responsibility. Specifically, the following recipients or categories of recipients may receive your personal data:
- If applicable, to authorities, such as the German Federal Financial Supervisory Authority (Bundesanstalt für Finanzdienstleistungsaufsicht).
- Is your data transferred to recipients in a third country?
To the extent necessary for the aforementioned purposes, we also transfer your data to recipients outside the European Economic Area (EEA). In particular, third-party cookie providers such as Google, Facebook and LinkedIn will transfer data from you to the USA if you have consented to this transfer. The level of data protection in the USA differs from that in the European Union and has been assessed as insufficient by the European Court of Justice. For the USA, there is neither a so-called adequacy decision of the European Commission pursuant to Art. 45 of the GDPR nor other guarantees within the meaning of Art. 46 of the GDPR that ensure the protection of your data and the enforcement of your data subject rights. Therefore, in particular, the risk that your data may be disclosed to unauthorized third parties in the USA, possibly also without any legal remedy, cannot be completely excluded.
- How long do we keep your data?
We will only retain your data for as long as is necessary to fulfill the purposes set out above. In addition, we are subject to various storage and documentation obligations, which result, among other things, from the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention and documentation periods specified there are up to ten years. Finally, the storage period is also assessed according to the statutory limitation periods, which can be up to thirty years, for example, according to §§ 195 ff. of the German Civil Code (BGB), whereby the regular limitation period is three years.
The specific storage period of the respective cookies can be found in Part II of this Privacy Notice.
- What are your rights with regard to your data?
As a data subject, you can assert the following rights against us at any time. To do so, please contact us using the contact details listed in section 1.
Revocation of your consent to data processing
Insofar as we process your data on the basis of your consent, you can revoke this at any time for the future. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to data portability
You can have your data, which we process automatically on the basis of your consent or in fulfillment of a contract with you, handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done insofar as it is technically feasible.
Right to information
Within the framework of the applicable legal provisions, you have the right at any time to free information about your data stored by us and, if necessary, a copy of this data.
Right to rectification
You have the right to demand the immediate correction of your data stored by us if this data is incorrect or incomplete.
Right to deletion
Within the framework of the applicable legal provisions, you have the right to demand that we delete the data we have stored about you.
Right to restriction of processing
Subject to the legal requirements, you have the right to demand that we restrict the processing of your data.
Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6(1)(f) of the DSGVO (processing of data on the basis of a balance of interests); this also applies to profiling based on this provision within the meaning of Article 4(4) of the DSGVO. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.
Furthermore, you have the right to lodge a complaint with the data protection supervisory authority (Art. 77 DSGVO) if you are of the opinion that the processing of your personal data is not lawful. The right of appeal is without prejudice to any other administrative or judicial remedy. The address of the data protection supervisory authority responsible for our company is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstr. 219, 10969 Berlin.
- Is there an obligation for you to provide the data?
In order to use the website and the contact or application form, you must provide the data that is necessary for the proper functioning of the website and to respond to your contact request or process your application, or which we are required to collect by law. Without this data, we will not be able to provide you with the services.
- To what extent is there automated decision-making including profiling in individual cases?
When you visit our website, there is no automated decision-making pursuant to Art. 22 DSGVO and your data is not subject to profiling within the meaning of Art. 4 No. 4 DSGVO. Should we use these procedures in individual cases, we will inform you about this separately, provided this is required by law.
Part II: Cookies and integration of third-party services
Specifically, we use the following cookies:
These cookies are mandatory for the display and operation of our website, including related features and services. Since the website cannot be provided without these cookies, these cookies are set automatically when the website is accessed. Your investor type information is stored in a session cookie so that we can provide you with the information and documentation required by law or to fulfill our obligations to the relevant investor groups imposed by law.
These cookies are used to improve the functionality and user-friendliness of our website. They collect information about your usage behavior, such as which pages you visit most often and whether you receive error messages from pages.
|Google Analytics||Google Analytics is a web analytics service that collects IP address (anonymized), browser information (browser type, referring/exit pages, files viewed on our website, operating system, date/time stamp and / or clickstream data), device information and usage data (views, clicks). For more information, please visit: https://policies.google.com/privacy||2 years|
|Hotjar||We use Hotjar to better understand the needs of our users and to optimize the offer and experience on this website. Using Hotjar’s technology, we get a better understanding of our users’ experiences (e.g., how much time users spend on which pages, which links they click on, what they like and don’t like, etc.) and this helps us tailor our offerings based on our users’ feedback. Hotjar works with cookies and other technologies to collect data about our users’ behavior and about their devices, in particular IP address of the device (collected and stored only in anonymized form during your website use), screen size, device type (Unique Device Identifiers), information about the browser used, location (country only), language preferred to view our website. Hotjar stores this information on our behalf in a pseudonymized user profile. For more information, please visit: https://www.hotjar.com/legal/policies/privacy||1 year|
|Quantcast||This website uses the Quantcast services for user measurement and for advertising purposes. As part of these services, the Quantcast site allows anonymous log data to be collected and analyzed. This information is combined with other non-personally identifiable information to provide target audience segments. The IP address is anonymized immediately after processing and before it is saved. For more information, see: https://www.quantcast.com/privacy/||13 months|
|Microsoft Clarity||We use Microsoft Clarity to better understand the needs of our users and to optimize the offer and experience on this website. Using Microsoft Clarity’s technology, we get a better understanding of our users’ experiences (e.g., how much time users spend on which pages, which links they click on, what they like and don’t like, etc.) and this helps us tailor our offerings based on our users’ feedback. Microsoft Clarity works with cookies and other technologies to collect data about our users’ behavior and about their devices, in particular IP address of the device (collected and stored only in anonymized form during your website use), screen size, device type (Unique Device Identifiers), information about the browser used, location, language preferred to view our website. Microsoft Clarity stores this information on our behalf in a pseudonymized user profile. For more information, please visit: https://privacy.microsoft.com/en-us/privacystatement||3 months|
|HubSpot||HubSpot specializes in inbound marketing and helps us optimize and automate marketing leads and sales processes. For this purpose, geographic location, browser type, navigation information, referral URL, performance data, device model, clickstream data, access times, duration of visit, device identifier, operating system, IP address, Internet service provider and pages viewed are collected. For more information, please visit: https://legal.hubspot.com/ privacy-policy||13 months|
|Albacross||The cookie set by Albacross is intended to enable Albacross to improve a service provided to us and our website (e.g., the “Lead Generation” service) by adding data about businesses to the Albacross database. In addition to the Lead Generation service, the Albacross database is also used for targeted advertising to businesses, and data is transferred to third-party data service providers for this purpose. For clarification, targeted advertising refers to companies, not individuals. The data Albacross collects and uses for this purpose is information about the IP address from which you visited our website, as well as technical information that allows Albacross to distinguish different visitors from the same IP address. Albacross stores the domain from form submissions to correlate the IP address with your employer. For more information, please visit: https://albacross.com/privacy-policy/||1 year|
These cookies are used to track preferences as well as display offers according to those preferences, if applicable.
|Google Ads||Google Ads helps us to draw attention to our offers on external websites. If you access our website via a Google ad, Google Ads stores a cookie on your terminal device that stores your unique cookie ID and the number of ad impressions per placement. Google also collects information from users about their operating system, the web pages accessed within the websites, referring websites, access times, event information (e.g. irregular system crashes) and general location information (e.g. city).
For more information, please visit: https://policies.google.com/privacy
|Facebook helps us draw attention to our offerings within the Facebook.com website and on external websites. Insofar as you arrive at our website via a Facebook ad, Facebook Ads stores a cookie on your terminal device that stores your Unique Cookie ID as well as the number of ad impressions per placement. Facebook also collects information from users about their operating system, web pages viewed within the websites, referring websites, access times, event information (e.g., irregular system crashes), and general location information (e.g., city).
For more information, please visit: https://www.facebook.com/about/privacy
|LinkedIn helps us draw attention to our offerings within the linkedin.com website. If you access our website via a LinkedIn ad, LinkedIn stores a cookie on your end device that saves your unique cookie ID and the number of ad impressions per placement. LinkedIn also collects information from users about the operating system, the web pages accessed within the websites, access times, event information (e.g. irregular system crashes) and general location information (e.g. city).
For more information, please visit: https://www.linkedin.com/legal/privacy-policy
|Outbrain||Outbrain helps us recommend better content to our users. To do this, Outbrain sets a cookie to generate a unique user identifier (“UUID”) when the user first visits the website. This UUID is tied to the user’s device and varies depending on the browser and/or device used. With this UUID, Outbrain tracks the content consumed by this UUID across the Outbrain network, which consists of different publishers, in order to recommend content comparable to this UUID. Recommendations are based on: 1. the UUID’s browsing history (based on comparable content and categories between content consumed by that UUID and potential recommendations); 2. similar consumption patterns between that UUID and other UUIDs (i.e., UUID 123 likes to read xyz and people who like to read xyz also like to read abc); 3. recommendations that are popular among Outbrain’s addressees at the given time; and 4. some degree of randomness. In addition, Outbrain collects user agent data and IP address, however, following best practices, Outbrain anonymizes all IP addresses, geo-locates them, and removes the last octet. For more information, please visit: https://www.outbrain.com/legal/privacy#privacy-policy||1 year|
|Taboola||Taboola assists in the placement of individualized advertisements. For this purpose, Taboola collects information from users about the operating system, the web pages accessed within the websites, referring websites, access times, event information (e.g. irregular system crashes) and general location information (e.g. city). For more information, please visit: https://www.taboola.com/policies/cookie-policy||1 year|
In case you want to change your cookie settings, please click here. You will reset your settings, and after a refresh of the website will have the option to update your preferences.
Google Web Fonts
This site uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly. If your browser does not support web fonts, a standard font is used by your computer.
For this purpose, the browser you are using must connect to Google’s servers. This enables Google to know that our website has been accessed via your IP address.