1. General

This Privacy Notice gives a simple overview of what happens to your personal data when you visit our website Personal data is any data with which you could be personally identified, whether directly or indirectly.

We are committed to respecting and protecting the privacy of the individuals whose personal data we process. All your personal data will be processed in accordance with applicable data protection laws, including the European Regulation 2016/679 on the protection of natural persons with regard to the processing of personal date and on the free movement of such data (the "General Data protection Regulation" or "GDPR"), as amended from time to time.

2. The controller of this website

The party responsible for processing your personal data on this website (in this policy referred to as "we" and/or "us") is:

360X RE AG
Gervinusstrasse 17
60322 Frankfurt am Main
Tel: +49 69 5050 27426

3. Data collection on our website

3.1. Automatic log data collection

When you visit our website, the device you are using and the internet browser you use to access our website automatically transmit log data to our server. This log data particularly includes the names of the files accessed (web pages), the volume of data transferred, the type and version of the web browser used, the operating system used (type and version), the date and time the website is accessed, the referrer URL (the website from which you were sent to our website via a link) and the IP address of the requesting computer.

The automatically transmitted data described above is collected and evaluated exclusively for the purpose of the proper and optimal presentation of the information offered and for the purpose of detecting and prosecuting cyber-attacks. The legal basis of the processing of such log data is our legitimate interest pursuant to Art. 6(1)(f) GDPR to ensure that our website is properly presented and to detect and prosecute cyber-attacks. Please note that it is not possible for us to assign the data automatically transmitted to the server to specific natural persons, i.e. it is fundamentally impossible to directly identify you based on the automatically transmitted data. We would like to inform you, however, of the fact that with the cooperation of your internet access provider, it could theoretically be possible to determine the holder of the internet connection through which you access our site over a specific period of time on the basis of the transmitted IP address. We delete the log data no later than 14 days after collection, unless a legal justification or statutory retention obligation exists for the continued retention. Information on the duration of the storage of used and assigned IP addresses by the internet access provider is provided by your internet access provider.

3.2. Newsletter

If you wish to receive relevant information and updates with respect to our products, you can subscribe to our newsletter by filling out the relevant contact form on our website. If you subscribe to our newsletter, we will process the data as follows:

a) What data do we process?
When you sign up to our newsletter, we will process the data provided by you.

b) Why do we collect such data?
We will collect the data provided by you via the contact form to send you our newsletter with information on our products. We will process such data only with your consent per Art. 6 (1)(a) GDPR. You may revoke your consent at any time. An informal email making this request is sufficient. Please refer to section 6 for more information. Please note that if you withdraw your consent, that does not make the data processing carried out by us prior to receiving your request unlawful.

c) How long do we retain such data?
We will retain the data you provide when signing up for our newsletter until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. if you unsubscribe from the newsletter or if we discontinue it). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.

4. Who has access to your data?

We may share your personal data:

  • with other group entities for the purpose of our internal business processes or in the event this is necessary for the purpose of the data processing;
  • with our suppliers and service providers, including the entity hosting the website for us, and other organisations providing IT and related services to us;
  • with law enforcement and other governmental or regulatory authorities where we are required or permitted by law to do so;
  • when you have consented to us doing so.

Please note that where it is necessary to transfer your data to a recipient outside of the European Union (EU) and the European Economic Area (EEA), we will comply with all transfer requirements applicable under data protection laws. You may request a copy of the arrangements we have implemented with recipients located outside the EU and the EEA by contacting us via the channels indicated in section 6.

5. Your rights under data protection laws

Subject to specific legal requirements and potential restrictions, you may have the following rights under applicable data protection laws:

a) You have the right to obtain information on your data stored by us, as well as on certain aspects of our data processing activities, including the purposes of processing and the recipients of your data.

b) At your request, we will correct the inaccurate or incomplete data stored by us in relation to you.

c) You have the right to request the deletion of your data, if doing so is not in conflict with other statutory provisions (e.g. statutory retention periods) or an overriding interest on our part (e.g. for the defence of our rights and claims).

d) You have the right to request that we restrict the processing of your data. In such cases, we may only use the data for certain limited purposes set out by the law.

e) In certain cases, you also have the right to receive your data in a structured, commonly used and machine-readable format or have it sent to a third party.

f) In addition, you have the right to revoke any consent given to us for the processing of personal data with future effect at any time. Please note that if you withdraw your consent, that does not make the data processing carried out by us prior to receiving your request unlawful.

g) You also have a right to complain to a data protection supervisory authority. However, we recommend that you always direct any complaints to us first. You may lodge a complaint with any supervisory authority, especially the supervisory authority located in the country of your habitual residence or place of work.

h) You can also lodge an objection to the processing of your data. Please refer to the framed wording below for more information on this right.

Information about your right of objection Art. 21 GDPR

You have the right at any time to object to any processing of your data that is based on Art. 6(1)(f) GDPR (data processing based on legitimate interests) or Art. 6(1)(e) GDPR (data processing in the public interest) on grounds relating to your particular situation. This also applies to profiling. If you object, we will no longer process your personal data unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

In case we process your personal data for direct marketing purposes, and you do not wish to receive advertising, you have the right to object to this at any time. This also applies to profiling insofar as it is associated with such direct marketing. If we receive such objection from you, we will stop processing your data for direct marketing purposes.

If you wish to exercise your above rights, or if you have any questions or concerns in relation to our data processing activities, you may submit your request or question to us to the contact details indicated in section 2.

Whenever possible, please submit your request or question in writing.

6. Changes to this Privacy Notice

Please note that sometimes, occasional adjustments must be made to our Privacy Notice in response to developments of the Internet or a change in applicable laws. Therefore, we reserve the right to make appropriate amendments to this Notice at any time. Please revisit this Privacy Notice from time to time to ensure that you have up-to-date information concerning our data processing practices. The date of the latest version of this Privacy Notice is indicated below.

Last updated: October 2021