kfw arrows Data Protection

KfW Capital GmbH & Co. KG Privacy Notice

General information and obligatory information

The following information gives an overview of the processing of your personal data by us and your privacy rights:

If you have any questions about data protection or the processing of your personal data, please feel free to contact us at any time via e-mail to datenschutz-kfw-capital@kfw.de.

Privacy Notice of this Website

You can rely on the protection and security of your personal data: we consider it our responsibility to protect your privacy when processing your personal data. The following data privacy information provides an overview of how your data is processed and what your rights are under data privacy regulations when using this website of KfW Capital GmbH & Co. KG.

1. Responsible data controller and contact details

The following party is responsible for the data processing:

KfW Capital GmbH & Co. KG ,
as represented by KfW Capital Verwaltungs GmbH (hereinafter: “we”“us” or “KfW Capital”)
Bockenheimer Landstrasse 98 – 100
60323 Frankfurt
Germany
Phone: +49 69 7431 8880
Fax: +49 69 7431 88 81
E-Mail: info-kfw-capital@kfw.de

The contact details of KfW Capital’s data protection officer are:

KfW Capital GmbH & Co. KG
Datenschutzbeauftragter
Bockenheimer Landstrasse 98 – 100
60323 Frankfurt
Germany

E-mail: Datenschutz-kfw-capital@kfw.de

2. Source and categories of personal data

We process personal data which we receive from you when visiting this website. To the extent technically necessary for hosting of this website, logs (so-called log files) are automatically generated for certain services. Additional log files are not generated. All log files are rotated daily. The log files from the previous day are archived and are available for the following retention periods:

  • Web server log file

The following data is processed for this purpose: Domain, IP address, requests, user agent, timestamp, status code

Retention period: 3 days

  • FTP log file

The following data is processed for this purpose: FTP user, IP address, downloaded/uploaded files

Retention period: 24 hours

  • SSH log file

The following data is processed for this purpose: SSH user, IP address

Retention period: 3 days

3. Purpose of data processing and legal basis

We process personal data in accordance with the provisions of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (Bundesdatenschutzgesetz; BDSG), the German Federal Telecommunications Telemedia Data Protection Act (Telekommunikation-Telemedien-Datenschutz-Gesetz; TTDSG) and other applicable legal regulations.

For technical reasons we need to collect and temporarily store personal data when our website is used. The legal basis for processing this data is our legitimate interest under Art. 6(1)(f) of the GDPR as well as the technical provision of this website on the basis of Section 25(2) no. 2 TTDSG.

3.1 For the fulfilment of legitimate interests (Art. 6(1)(f) GDPR)

To the extent necessary, KfW Capital processes personal data to fulfil legitimate interests.

The legal basis for processing your personal data in this context is Art. 6(1)(f) GDPR. Our legitimate interests are maintaining the security of our IT systems, IT security and IT operations of this website and, in case of non-compliance or misuse, responding adequately to such circumstances, for instance by establishing legal claims.

3.2 For Cookies

KfW Capital uses one technically necessary cookie to store the interaction with the cookie notice and to ensure the proper functioning of this website. Cookies are small text files that are linked with the browser you are using and are stored on your hard drive, sending certain information to those who set the cookie.  Without the technical cookie used by KfW Capital, you will not be able to visit our website. The legal basis for the setting this technically necessary cookie is Section 25(2) no. 2 TTDSG. We do not set cookies for other purposes.

4. Social media

You can access our social media channels (LinkedIn, Xing and Twitter) from our website.

Attention: If you click on one of the following links or one of the icons placed on this website, you will leave this website of KfW Capital and be directed to the website of the social media platform. Any information available there that was not posted by KfW Capital was created without any help from us and we are therefore not responsible for this content. We do not accept any liability for the information being up-to-date, accurate or complete. Reference to social media does not imply any approval on our part. In addition, your data on these websites is processed under the responsibility of the respective provider of the social media, our website does not share any personal data with these social media providers by you clicking on the icons or the following links.

Particularly due to data protection reasons, the relevant social media platform cannot be directly accessed. We therefore show a relevant pop-up notice when clicking on the icons. You may also have to click on a button to expressly confirm that you want to leave our website and access the social media platform. Only after that, the browser will connect you by establishing a direct connection with the social media platform’s servers.

By activating the button, you will provide the social media platform with the information that you have opened one of the web pages of the platform on the Internet. If you are already registered with the social media platform, it will be able to link your visit with your account on the social media platform.

5. Recipients of the personal data

Within KfW Capital, those roles that require the data to fulfil their tasks receive access to your data. In addition, this website is hosted by an external service provider who receives the above data as our data processor.

6. Transfer of personal data to a third country outside the European Union

Data is not transferred to recipients outside of the European Union (so-called third countries), except as set out in this privacy notice. If data is transferred to a third country, appropriate safeguards are applied to ensure an adequate data protection level (Art. 46et seq. GDPR). Should you require further information on individual recipients, please feel free to contact us.

7. Retention periods for personal data

How long personal data are stored is based on the respective processing purposes and is indicated in this privacy notice above for each case. The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the provision of this website, this is the case when the relevant session has ended.

8. Obligation to provide data

The data categories as set out in this privacy notice are necessary for the technical provision of this website and must be provided for this purpose.

9. Data subject rights

Subject to the respective requirements, you have the following data protection rights against KfW Capital:

  • Right to access to your personal data processed by us;
  • Right to rectification of inaccurate data, to completion of incomplete data and/or to erasure of data;
  • Right to restrict the data processing;
  • Right to request that we transfer your data to you or to a third party (right to data portability); and
  • Right to object to the processing (see the information under section 2).

Where the processing of personal data is based on consent, you have the right to withdraw this consent at any time with effect for the future, without this affecting the lawfulness of the processing up to the time of withdrawal. You also have the right to lodge a complaint (Art. 77 GDPR) with a data protection authority.  The data protection authority competent for us is the Data Protection Authority of Hesse (Hessischer Beauftragter für Datenschutz und Informationsfreiheit), Gustav-Stresemann-Ring 1, 65189 Wiesbaden.

To the extent you provided consent to the processing of your personal data for specific purposes (e.g. for storing your data for a longer period of time to contact you with future interesting job offers), this consent forms the legal basis for the data processing. You may withdraw your consent at any time. Please note that the withdrawal only takes effect for the future. The withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

 

Information on the right to object
Article 21 of the GDPR

You have the right to object at any time to the processing of your personal data, which is based on the performance of tasks in the public interest or to the processing of your personal data based on legitimate interests (Article 6(1)(e) and (f) of the GDPR), insofar as reasons arise from your particular circumstances which preclude such data processing. This also applies to profiling based on these provisions.

If you raise an objection we will no longer process your personal data for these purposes unless we are able to provide evidence of compelling reasons for the processing which are worthy of protection and which override your interests, rights and freedoms, or unless the processing serves the purpose of establishing, exercising or defending legal claims.

If you object to data processing for the purpose of direct publicity, we will no longer process your personal data for such purposes.

The objection can be made without any formal requirements and should preferably be directed to:

KfW Capital GmbH & Co. KG
Bockenheimer Landstraße 98 – 100
60323 Frankfurt

or via e-mail to:
info-kfw-capital@kfw.de

(status: April 2022)