Privacy Policy

Name and Contact of the Controller according to Article 4 (7) GDPR

Subvenio GmbH
Kölner Straße 25
51580 Reichshof
Tel.: +49 (0)2296 999 19-0
Email: info@subvenio.de

Contact details of our Data Protection Officer:

Andrea Tscharntke
Subvenio GmbH
Kölner Straße 25
51580 Reichshof - Brüchermühle
Tel.: +49 (0)2296 999 19-0
Email: andrea.tscharntke@subvenio.de

Security and Protection of Your Personal Data

We consider it our primary responsibility to maintain the confidentiality of the personal data you provide and to protect it from unauthorized access. Therefore, we apply the utmost care and state‑of‑the‑art security standards to ensure maximum protection of your personal data.

As a private company, we are subject to the provisions of the European General Data Protection Regulation (GDPR) and the regulations of the German Federal Data Protection Act (BDSG). We have implemented technical and organizational measures to ensure that the data protection regulations are observed both by us and by our external service providers.

Definitions

The legislator requires that personal data be processed lawfully, fairly, and in a transparent manner. To ensure this, we inform you about the individual legal definitions used in this Privacy Policy, such as:

1. Personal Data
   “Personal data” means any information relating to an identified or identifiable natural person (“data subject”).
2. Processing
   “Processing” means any operation performed on personal data, such as collection, storage, use, disclosure, or deletion.
3. Restriction of Processing
   Marking stored personal data with the aim of limiting future processing.
4. Profiling
   Automated processing of personal data to evaluate personal aspects (e.g., performance, health, preferences).
5. Pseudonymization
   Processing personal data in such a way that it cannot be attributed to a specific person without additional information.
6. File System
   Any structured collection of personal data accessible according to specific criteria.
7. Controller
   The person or entity deciding on the purposes and means of processing personal data.
8. Processor
   A person or entity processing personal data on behalf of the controller.
9. Recipient
   A person or entity to whom personal data is disclosed.
10. Third Party
    Any person or entity other than the data subject, controller, or processor.
11. Consent
    Any freely given, informed, and unambiguous indication of the data subject’s wishes to agree to processing.

Lawfulness of Processing

Processing of personal data is lawful only if a legal basis exists, such as consent, contract performance, legal obligation, vital interests, public interest, or legitimate interests (Art. 6 GDPR).

Information on the Collection of Personal Data

(1) We inform you about the collection of personal data when using our website. Personal data includes name, address, email addresses, and user behavior.

(2) When contacting us via email or contact form, the data you provide (email address, name, phone number) will be stored to answer your questions. Data will be deleted when no longer required or restricted if legal obligations exist.

Collection of Personal Data When Visiting Our Website

When using our website for informational purposes only, we collect data transmitted by your browser (IP address, date/time, content requested, status code, data volume, referrer, browser, OS, language/version). This is necessary for stability and security (Art. 6 (1) f GDPR).

Use of Cookies

(1) In addition to the above data, cookies are stored on your computer. Cookies are small text files that make our website more user‑friendly and effective.

(2) Types of cookies used include transient cookies (session cookies) and persistent cookies. You can configure your browser to reject cookies, but this may limit functionality.

Other Functions and Offers of Our Website

Beyond informational use, we offer services requiring further personal data. External service providers may be used, bound by our instructions. Data may be shared with partners for promotions or services. If partners are outside the EEA, we inform you of the consequences.

Newsletter

(1) With your consent, you can subscribe to our newsletter. (2) We use a double opt‑in procedure. (3) Required data: email address (name/pseudonym optional). (4) You can revoke consent anytime via our newsletter page or by email.

Children

Our services are intended for adults. Persons under 18 should not transmit personal data without parental consent.

Rights of the Data Subject

You have the following rights under GDPR: withdrawal of consent, confirmation, access, rectification, erasure (“right to be forgotten”), restriction of processing, data portability, objection, no automated decision‑making including profiling, and complaint to a supervisory authority.