We, DGR Consult Invest GmbH, together with our subsidiaries (hereinafter jointly referred to as “the Company”, “we” or “us”), take the protection of your personal data seriously and would like to take this opportunity to inform you about data protection in our company.

As part of our responsibility under data protection law, obligations have been imposed on us by the entry into force of the EU General Data Protection Regulation (Regulation (EU) 2016/679; hereinafter: “GDPR”) to ensure the protection of personal data of the person affected by processing (we also refer to you as the data subject hereinafter as “you”, “you” or “data subject”).

Insofar as we decide on the purposes and means of data processing either alone or together with others, this includes above all the obligation to inform you transparently about the type, scope, purpose, duration and legal basis of the processing (cf. Art. 13 and 14 GDPR). With this declaration (hereinafter: “data protection notice”), we inform you about the way in which your personal data is processed by us.

Definitions

Following the example of Art. 4 GDPR, this data protection notice is based on the following definitions:

• “Personal data” ( Art. 4 No. 1 GDPR) means any information relating to an identified or identifiable natural person (“data subject”). A person is identifiable if they can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, an online identifier, location data or information relating to their physical, physiological, genetic, mental, economic, cultural or social identity. The identifiability can also be provided by linking such information or other additional knowledge. The origin, form or embodiment of the information is irrelevant (photos, video or audio recordings can also contain personal data).
• “Processing” (Art. 4 No. 2 GDPR) means any operation which involves handling personal data, whether or not by automated means (i.e. using technical procedures). This includes, in particular, the collection (i.e. acquisition), recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data, or alteration of the purposes for which they were originally processed.
• “Controller” (Art. 4 No. 7 GDPR) means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
• – “Third party” (Art. 4 No. 10 GDPR) means any natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data; this also includes other legal entities belonging to the group.
• – “Processor” (Art. 4 No. 8 GDPR) is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller, in particular in accordance with the controller’s instructions (e.g. IT service provider). In terms of data protection law, a processor is in particular not a third party.
• – “Consent” (Art. 4 No. 11 GDPR) of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Name and Address of the Data Controller

DGR Consult Invest GmbH

Knonauerstrasse 29

CH-6330 Cham

E-mail address: info@dgrgroup.net

For further information about us, please refer to the imprint information on our website.

Contact Details of the Data Protection Officer

Our data protection officer is available at all times to answer any questions you may have and to act as your contact for data protection issues. The contact details are:

DGR Consult Invest GmbH

Knonauerstrasse 29

CH-6330 Cham

www.dgrgroup.net

datenschutz@dgrgroup.net

Collection and Processing of Personal Data

We collect and process personal data only insofar as this is necessary for the operation of our website and the provision of our services. The following data is automatically collected and stored in server log files each time our website is accessed:

• IP address
• Date and time of access
• Name and URL of the retrieved file
• Amount of data transferred
• Browser type and version
• Operating system
• Referrer URL (the previously visited website)