Privacy Policy | ATH Real Assets

1. Data Protection at a Glance

General Information

The following information provides a brief overview of what happens to your personal data when you visit this website. Personal data is any information that can be used to identify you personally. Detailed information on data protection can be found in the Privacy Policy set out below.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. The operator's contact details can be found in the section entitled "Information on the Data Controller" in this Privacy Policy.

How do we collect your data?

Some of your data is collected when you provide it to us. This may include, for example, information you enter into a contact form.

Other data is collected automatically, or with your consent, by our IT systems when you visit the website. This primarily comprises technical data, such as your internet browser, operating system or the time at which a page is accessed. This data is collected automatically as soon as you visit this website.

What do we use your data for?

Some data is collected to ensure that the website functions correctly. Other data may be used to analyse how visitors use the website.

Where contracts can be concluded or initiated through the website, the data provided will also be processed for contractual offers, orders or other service enquiries.

What rights do you have regarding your data?

You have the right to obtain information, free of charge and at any time, about the origin, recipients and purposes of the personal data stored about you. You also have the right to request the rectification or erasure of such data.

If you have given your consent to data processing, you may withdraw that consent at any time with effect for the future.

Under certain circumstances, you also have the right to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You may contact us at any time regarding these or any other questions concerning data protection.

Analytics Tools and Third-Party Tools

When you visit this website, your browsing behaviour may be analysed statistically, primarily using analytics software.

Detailed information about such analytics tools is provided in the following Privacy Policy.

2. Hosting

We host the content of our website with the following provider:

WIX

The provider is Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (hereinafter referred to as "WIX").

WIX is a platform for creating and hosting websites. When you visit our website, WIX is used to analyse user behaviour, traffic sources, visitors' geographical regions and visitor numbers.

WIX stores cookies in your browser that are necessary for displaying the website and ensuring its security (essential cookies).

Data collected through WIX may be stored on servers located in various countries worldwide, including the United States.

Further details can be found in WIX's Privacy Policy:

https://de.wix.com/about/privacy

According to WIX, transfers of data to the United States and other third countries are based on the European Commission's Standard Contractual Clauses or equivalent safeguards pursuant to Article 46 GDPR.

Further information is available at:

https://de.wix.com/about/privacy-dpa-users

The use of WIX is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring that our website is displayed as reliably as possible.

Where appropriate consent has been requested, data processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG), insofar as the consent covers the storage of cookies or access to information on the user's device, such as device fingerprinting, within the meaning of the TDDDG.

Consent may be withdrawn at any time.

WIX holds certification under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards when personal data is processed in the United States.

Every company certified under the DPF undertakes to comply with these data protection standards.

Further information about the provider is available at:

https://www.dataprivacyframework.gov/participant/5626

Data Processing Agreement

We have entered into a Data Processing Agreement (DPA) with WIX.

This agreement is required under data protection law and ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

3. General Information and Mandatory Disclosures

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection legislation and this Privacy Policy.

Various types of personal data are collected when you use this website. Personal data is information that can be used to identify you personally.

This Privacy Policy explains what data we collect, how we use it and for what purposes it is processed.

Please note that the transmission of data over the internet, for example when communicating by email, may be subject to security vulnerabilities. Complete protection of data against access by third parties cannot be guaranteed.

Information on the Data Controller

The controller responsible for processing personal data on this website is:

Dr. Alexander Hanisch

Friedenstraße 9a

82166 Gräfelfing

Germany

Telephone: +49 175 7833823

Email: alexander.hanisch@ath-real-assets.com

The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names and email addresses.

Data Retention Period

Unless a more specific retention period is stated in this Privacy Policy, your personal data will remain with us until the purpose for which it was collected no longer applies.

If you submit a valid request for erasure or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for retaining it, such as statutory retention obligations under tax or commercial law.

In such cases, the data will be deleted once those grounds no longer apply.

General Information on the Legal Bases for Data Processing

Where you have consented to the processing of your personal data, we process that data on the basis of Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, where special categories of personal data within the meaning of Article 9(1) GDPR are concerned.

Where you have expressly consented to the transfer of personal data to third countries, processing is also based on Article 49(1)(a) GDPR.

Where you have consented to the storage of cookies or access to information on your device, for example through device fingerprinting, processing is additionally based on Section 25(1) TDDDG.

Consent may be withdrawn at any time.

Where your data is required for the performance of a contract or for taking steps prior to entering into a contract, we process it on the basis of Article 6(1)(b) GDPR.

We also process personal data where this is necessary to comply with a legal obligation pursuant to Article 6(1)(c) GDPR.

Furthermore, processing may be based on our legitimate interests under Article 6(1)(f) GDPR.

The legal bases applicable to individual processing activities are explained in the relevant sections of this Privacy Policy.

Recipients of Personal Data

In the course of our business activities, we work with various external parties. In some cases, this requires personal data to be transferred to those parties.

We disclose personal data to external parties only where this is necessary for the performance of a contract, where we are legally obliged to do so, for example when providing information to tax authorities, where we have a legitimate interest pursuant to Article 6(1)(f) GDPR, or where another legal basis permits the disclosure.

Where we engage processors, we disclose our clients' personal data only on the basis of a valid Data Processing Agreement.

Where processing is carried out under joint controllership, a joint controllership agreement is concluded.

Withdrawal of Consent to Data Processing

Many data processing activities are only permitted with your express consent.

You may withdraw consent that you have previously given at any time.

The lawfulness of processing carried out before the withdrawal of consent remains unaffected.

Right to Object to Data Collection in Specific Cases and to Direct Marketing (Article 21 GDPR)

WHERE PERSONAL DATA IS PROCESSED ON THE BASIS OF ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA. THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS.

THE RELEVANT LEGAL BASIS FOR EACH PROCESSING ACTIVITY IS SET OUT IN THIS PRIVACY POLICY.

IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR UNLESS THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ARTICLE 21(1) GDPR).

WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO DIRECT MARKETING.

IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ARTICLE 21(2) GDPR).

Right to Lodge a Complaint with a Supervisory Authority

In the event of an infringement of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or the place of the alleged infringement.

This right is without prejudice to any other administrative or judicial remedy.

Right to Data Portability

You have the right to receive personal data that we process by automated means on the basis of your consent or in the performance of a contract, or to have it transferred to a third party, in a commonly used, machine-readable format.

If you request the direct transfer of your data to another controller, this will be carried out only where technically feasible.

Right of Access, Rectification and Erasure

Within the scope of applicable legal provisions, you have the right at any time to obtain information, free of charge, about the personal data stored concerning you, its origin and recipients, and the purposes for which it is processed.

Where applicable, you also have the right to request the rectification or erasure of this data.

You may contact us at any time regarding these or other questions concerning personal data.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. You may contact us at any time to exercise this right.

The right to restriction of processing applies in the following circumstances:

If you contest the accuracy of the personal data stored about you, we will generally require time to verify its accuracy. During this verification period, you have the right to request the restriction of processing.
If your personal data has been or is being processed unlawfully, you may request the restriction of processing instead of erasure.
If we no longer require your personal data but you need it for the establishment, exercise or defence of legal claims, you have the right to request the restriction of processing instead of erasure.
If you have objected to processing pursuant to Article 21(1) GDPR, a balancing assessment of your interests and ours must be carried out. Pending the outcome of this assessment, you have the right to request the restriction of processing.

Where processing has been restricted, your personal data may, apart from storage, be processed only with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential information, such as orders or enquiries submitted to us as the website operator, this website uses SSL or TLS encryption.

You can recognise an encrypted connection when the browser's address bar changes from "http://" to "https://" and a padlock symbol appears in your browser.

When SSL or TLS encryption is activated, data transmitted to us cannot be read by third parties.

4. Data Collection on This Website

Our website uses cookies. Cookies are small data files that do not cause damage to your device.

They are stored either temporarily for the duration of a browsing session (session cookies) or permanently (persistent cookies).

Session cookies are automatically deleted when you leave the website. Persistent cookies remain on your device until you delete them or your browser deletes them automatically.

Cookies may be set by us (first-party cookies) or by third-party companies (third-party cookies).

Third-party cookies enable certain services provided by external companies to be integrated into websites, such as cookies used to process payment services.

Cookies serve various purposes. Many cookies are technically necessary because certain website functions would not work without them, such as shopping baskets or video playback.

Other cookies may be used to analyse user behaviour or for advertising purposes.

Cookies required for electronic communication, for providing specific functions requested by you, such as shopping basket functionality, or for optimising the website, such as cookies used to measure website traffic, are stored on the basis of Article 6(1)(f) GDPR, unless another legal basis is specified.

The website operator has a legitimate interest in storing essential cookies to ensure the technically reliable and optimised provision of its services.

Where consent to the storage of cookies or the use of comparable recognition technologies has been requested, processing is carried out exclusively on the basis of that consent (Article 6(1)(a) GDPR and Section 25(1) TDDDG).

Consent may be withdrawn at any time.

You can configure your browser to notify you when cookies are set, allow cookies only in individual cases, refuse cookies in certain circumstances or generally, and automatically delete cookies when closing your browser.

Disabling cookies may limit the functionality of this website.

Information about the cookies and services used on this website can be found in this Privacy Policy.

Server Log Files

The website hosting provider automatically collects and stores information in server log files, which your browser transmits to us automatically.

This information includes:

Browser type and version
Operating system used
Referrer URL
Hostname of the device accessing the website
Time of the server request
IP address

This data is not combined with other data sources.

The collection of this data is based on Article 6(1)(f) GDPR.

The website operator has a legitimate interest in ensuring the technically reliable display and optimisation of the website. The collection of server log files is necessary for these purposes.

Contact by Email or Contact Form

If you contact us by email or through a contact form, the information provided in your enquiry, including your contact details, will be stored for the purpose of processing your enquiry and responding to any follow-up questions.

We will not disclose this data without your consent.

The processing of this data is based on Article 6(1)(b) GDPR, where your enquiry relates to the performance of a contract or is necessary for taking steps prior to entering into a contract.

In all other cases, processing is based on our legitimate interest in handling enquiries addressed to us efficiently (Article 6(1)(f) GDPR), or on your consent (Article 6(1)(a) GDPR), where such consent has been requested.

Data submitted through contact enquiries will remain with us until you request its erasure, withdraw your consent to its storage or the purpose for which it was collected no longer applies.

Mandatory statutory provisions, particularly retention periods, remain unaffected.

Consent Management with Usercentrics

This website uses the consent management platform provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, to obtain visitors' consent to the storage of certain cookies or the use of specific technologies and to document that consent in compliance with data protection requirements.

Usercentrics acts as a data processor pursuant to Article 28 GDPR.

Usercentrics stores information about consent granted or withdrawn by users.

In particular, the following data is processed:

IP address (in shortened or anonymised form)
Date and time of consent
Browser and device information
Selected consent preferences

This data is processed to comply with a legal obligation pursuant to Article 6(1)(c) GDPR and on the basis of our legitimate interest in maintaining legally compliant records of consent pursuant to Article 6(1)(f) GDPR.

The legal basis for the use of cookies or comparable technologies is also Section 25(1) TDDDG, where consent is required.

Further information about data processing by Usercentrics is available at:

https://usercentrics.com/de/datenschutzerklaerung/

Analytics Tools

This website does not use external third-party analytics or tracking tools, such as Google Analytics, Facebook Pixel or Google Ads.

We use only Wix's own privacy-focused analytics functionality, which does not disclose personal data to third parties and, according to Wix, complies with the GDPR.

Google Fonts (Locally Hosted)

This website uses Google Fonts to ensure the consistent presentation of typefaces.

The Google Fonts are hosted locally on the server. No connection is established with Google's servers.

Consequently, no personal data, particularly IP addresses, is transmitted to Google.

Google Fonts are used in our legitimate interest in providing a consistent and visually appealing presentation of our online services, pursuant to Article 6(1)(f) GDPR.

Link to LinkedIn

This website contains a link to our profile on the LinkedIn professional networking platform.

The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

When you click the LinkedIn link, you will be redirected to an external website.

A connection to LinkedIn's servers is established only when you click the link.

LinkedIn will then be informed that you have visited this website using your IP address.

If you are logged into your LinkedIn account at the same time, LinkedIn may associate your visit to this website with your user account.

As the website operator, we have no knowledge of the content of the data transmitted to LinkedIn or how LinkedIn uses that data.

The LinkedIn link is provided on the basis of Article 6(1)(f) GDPR.

The website operator has a legitimate interest in maintaining a professional online presence.