We guarantee that your privacy and your personal data are protected by implementing and complying with the relevant data protection provisions. Here you can find information about your vested rights.

If there is no statutory basis for the processing of personal data, we generally obtain the consent of the data subject. Your data is processed in accordance with the requirements of the General Data Protection Regulation (GDPR) and exclusively for the fulfillment of contractual purposes, based on consents given or on a statutory basis.

I. Controller

The controller is:

SNP Schneider-Neureither & Partner SE, Speyerer Str. 4, 69115 Heidelberg,

E-mail: dpo@snpgroup.com

The data protection officer of the controller is: Michael Bätzler, who you can reach via our postal address by specifying "The data protection officer" or at info@xdsb.de

II. Subject of the Data Protection

Personal data is the subject of the data protection.

The GDPR defines "personal data" as any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

A data subject is any identified or identifiable natural person whose personal data is processed by the controller responsible.

Processing is any operation or set of operations that is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

1. Collection and Storage of Personal Data as well as the Nature and Purpose of its Use

a) Visiting the Website

When you access our website, the browser used on your terminal device automatically sends information to the server of our website. This information is temporarily stored in a file known as a log file. The following information is recorded without any action on your part and stored until its automated erasure:

• IP address of the requesting computer
• Date and time of the access
• Name and URL of the file accessed
• Website from which access is gained (referrer URL)
• The browser used and, if applicable, the operating system of your computer as well as the name of your access provider

The aforementioned data will be processed by us for the following purposes:

• To ensure a smooth connection to our website
• To ensure comfortable use of our website
• To analyze system security and stability
• For other administrative purposes

The legal basis for the data processing is Art. 6(1) sentence 1 lit. f) GDPR. Our legitimate interest follows from the purposes listed above for data collection. This data cannot be assigned to specific persons. This data is not combined with other data sources; the data is erased after a statistical analysis.

In addition, we use cookies and analysis services when you visit our website.

b) Login

If you register via our website, you must enter certain personal data so that we can process your registration (mandatory information). We will process your personal data collected in this way exclusively for the purpose of processing your registration. The legal basis for this data processing is Art. 6(1) sentence 1 lit. a) GDPR.

c) Cookies

Cookies are very small text files that are used by Internet pages and stored by your browser on your computer. They can send certain information to us or, if applicable, to a third party.

Transient cookies are automatically deleted when you close the browser. Transient cookies include in particular session cookies. Session cookies store a session ID, which is used to assign various requests from your browser to the shared session. Accordingly, your computer is recognized when you return to our website. The session cookies are deleted when you log out or close the browser.

Persistent cookies are automatically deleted after a specified duration, which may vary depending on the cookie. Unlike transient cookies, persistent cookies are not automatically deleted when you close the browser. However, you can delete the cookies at any time via the security settings of your browser.

Cookies that are absolutely essential in order to provide a service that the user has expressly requested are called “necessary cookies”. We process these cookies within the scope of our legitimate interests in providing and operating the website on the basis of Art. 6 (1) sentence 1 lit. f) GDPR.

The following necessary cookies are set when you visit our website:

• Name: tcloud.co-branding; Purpose: Informs the browser if this CrystalBridge session will display the co-branding logo of the SNP Partner; Storage duration: 1 year; Access rights: SameSite=Strict
• Name: snp_crystalbridge_session_data; Purpose: Randomly generated identifiers that correlate browser requests; Storage duration: Session; Access rights: SameSite=Strict
• Name: tcloud.init_load; Purpose: Indicates if this is a new session; Storage duration: 1 year; Access rights: SameSite=Strict, Secure=true, HTTPOnly=true
• Name: AUTH_SESSION_ID; Purpose: Random access token for downstream system access; Storage duration: Session; Access rights: Secure=true, HTTPOnly=true
• Name: AUTH_SESSION_ID_LEGACY; Purpose: Random access token for downstream system access; Storage duration: Session; Access rights: Secure=true, HTTPOnly=true
• Name: JSESSIONID; Purpose: Random unique application server identifier; Storage duration: Session; Access rights: SameSite=Strict, HttpOnly=true
• Name: snp_crystalbridge_authentication; Purpose: Encrypted one-time use access token; Storage duration: Session; Access rights: SameSite=strict, Secure=true, HTTPOnly=true
• Name: snp_crystalbridge_current_user; Purpose: Encrypted one-time use access token; Storage duration: Session; Access rights: SameSite=strict, Secure=true
• Name: tcloud.lastpage; Purpose: The last page that was viewed on this browser. This allows CB to start the user at this point on the next login; Storage duration: Max Age (2038)

In addition, further information is stored on or accessed from your terminal device; this information is not absolutely essential in order to provide a service that the user has expressly requested. The information is only stored or accessed if you give your consent. Details on the type of information, the purpose of processing, the retention period of the information and the possible recipients of the data are provided elsewhere in this Privacy Policy.

You can configure in your browser settings that your browser generally does not accept cookies or that only certain cookies are stored or not stored. You can revoke any consent you may have given to the processing of data by means of cookies at any time by deleting the relevant cookies directly via the settings of your browser. You can find more information on this in the help system of your browser. If your browser rejects all cookies, it is possible that not all functions of this website can be used.

2. Storage Duration and Data Erasure

The personal data of the data subject will be erased or blocked as soon as the purpose of the storage ceases to apply. The data may be stored beyond this time if this is provided for by the European or national legislator in EU regulations, laws or other provisions to which we are subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

3. Social Media Plug-Ins

Our website does not use any social media plug-ins.

4. Data Subject Rights

You have the right:

• in accordance with Art. 15 GDPR to request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on the details thereof;
• in accordance with Art. 16 GDPR to request the rectification of incorrect or incomplete personal data stored by us without undue delay;
• in accordance with Art. 17 GDPR to request the erasure of your personal data stored by us, except where the processing is required for exercising the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest, or for the assertion, exercise or defense of legal claims;
• in accordance with Art. 18 GDPR to request the restriction of the processing of your personal data;
• in accordance with Art. 20 GDPR to request your personal data provided to us in a structured, commonly used and machine-readable format or to request the transmission to another controller;
• in accordance with Art. 7(3) GDPR to withdraw your consent once given to us at any time. As a result, we are no longer allowed to continue data processing based on this consent in the future; and
• in accordance with Art. 77 GDPR to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.

5. Right to Object

If the processing of your personal data is based on legitimate interests in accordance with Art. 6(1) sentence 1 lit. f) GDPR, you have the right to file an objection against the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation.

If you wish to exercise your right to withdraw consent or your right to object, simply send an e-mail to

info@xdsb.de

6. Updating the Privacy Policy

Due to ongoing technical development and changes to legislation in the area of IT technology and the Internet, we reserve the right to make amendments or changes to this Privacy Policy.