Privacy policy

1. Controller

The controller for data processing on this website is:

Inwesta GmbH, Uhlandstraße 9, 41836 Hückelhoven, Germany

Email: info@inwesta.de

2. Data protection officer

We are not legally obliged to appoint a data protection officer. For data protection enquiries you can reach us at info@inwesta.de.

3. Your rights

You have the following rights at any time:

• Access to your stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)

4. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).

5. Hosting

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you visit the site, Vercel processes technical data on our behalf (including IP address and time of access). The legal basis is our legitimate interest in secure and efficient operation (Art. 6 (1) (f) GDPR). A data processing agreement is in place; EU Standard Contractual Clauses are used for transfers to the USA.

6. Server log files

When the website is accessed, information is automatically recorded in server log files (browser type and version, operating system, referrer URL, host name, time of the request, IP address). This data serves security and stability and is not merged with other data sources. Legal basis: Art. 6 (1) (f) GDPR.

7. Contact and forms

You can contact us via our forms (project enquiry, investor access, funding check) and by email. We process the data you provide (e.g. name, company, email, phone, project details and any documents you attach) to handle your enquiry.

The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures or contract) or Art. 6 (1) (f) GDPR (answering general enquiries). Form data is delivered to our inbox via the service Resend (Resend, Inc., USA), for which EU Standard Contractual Clauses are used. Our email inbox is operated by GoDaddy.com, LLC. We store the data for as long as necessary to process it or as required by statutory retention periods.

8. Newsletter

If you sign up for our newsletter, we use your email address to send you selected project updates. Sign-up uses the double opt-in procedure. The legal basis is your consent (Art. 6 (1) (a) GDPR). You can unsubscribe at any time via the unsubscribe link or by emailing info@inwesta.de.

9. Cookies and consent

Our website uses technically necessary cookies required for operation (e.g. to store your language choice). For non-essential services, in particular analytics and advertising, we obtain your consent via a consent banner (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR). You can withdraw your consent at any time with effect for the future.

10. Google Maps

On our contact page we embed Google Maps (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The map is only loaded after you have actively consented (click-to-load). Only then is data, including your IP address, transmitted to Google, possibly to the USA. Legal basis: your consent (Art. 6 (1) (a) GDPR).

11. Web analytics and advertising

If you consent, we use analytics and marketing services to understand the use of our website and to measure the success of our advertising campaigns (conversion tracking). Cookies may be set and data transmitted to the respective providers, including to third countries such as the USA. The legal basis in each case is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG), which you can withdraw at any time.

• Google Analytics and Google Ads – Google Ireland Limited, Dublin, Ireland
• Meta Pixel (Facebook, Instagram) – Meta Platforms Ireland Limited, Dublin, Ireland
• TikTok Pixel – TikTok Technology Limited, Dublin, Ireland

12. Transfers to third countries

Some of the services mentioned process data outside the EU/EEA, in particular in the USA. Where no adequacy decision of the EU Commission (e.g. the EU-US Data Privacy Framework) applies, transfers are based on the EU Standard Contractual Clauses.

13. Retention period

We store personal data only for as long as necessary for the stated purposes or as required by statutory retention periods (e.g. under commercial and tax law). The data is then deleted.

14. Data security

We take technical and organisational measures to protect your data against loss, manipulation and unauthorised access. Data transmission is encrypted (TLS/HTTPS).

15. Updates and changes

This privacy policy is currently valid. As our website develops or due to changed legal requirements, it may become necessary to adapt it.