Data protection

The non-binding translation below is for your convenience only. The original legal version (in German) can be found here: http://www.kensington-crowd.com/ueber-uns/datenschutz.
Privacy statement
The protection of your privacy is very important to us. As Kensington Crowd GmbH and operator of the crowdfunding platform www.kensington-crowd.com (hereinafter also referred to as „platform“ or „website“), we attach great importance to the protection and confidentiality of your data. The collection and use of your personal data takes place exclusively within the framework of the legal provisions, in particular the applicable data protection law (EU General Data Protection Regulation (GDPR) and BDSG). Be- low we inform you in detail about the handling of your data.
 
Responsible person in the sense of data protection
Kensington Crowd GmbH 
Baseler Straße 10, 
60329 Frankfurt am Main
Managing director: Jamal El Mallouki, Elina Magida
Tel.: +49 (0) 69 / 2547 413 76
E-Mail: info@kensington-crowd.com
Website: www.kensington-crowd.com
 
Personal data
Personal data are individual details about personal or factual circumstances of a specific or identifiable natural person. This includes, for example, your name, address, date of birth, user name, password, e-mail address and payment data, but also your IP address. In the following, we describe how we pro- cess your personal data.

Provision of the website and creation of log files
You can visit our website at any time without having to register or provide any personal details. Each time you visit our website, however, our system automatically collects data and information from the computer system of the calling computer.

Description and scope of data processing:

The following data is automatically collected when a page is called up:
  • Browser type and version,
  • the operating system used and its user interface,
  • Language and version of the browser software,
  • Website from which you visit us (referrer URL),
  • Website you are visiting,
  • Access status/HTTP status code,
  • Date and time of your access,
  • Time zone difference to Greenwich Mean Time(GMT),
  • Your Internet Protocol (IP) address.
The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website.

Legal basis for data processing:
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f EU General Data Protection Regulation (GDPR).

Purpose of data processing:
The temporary storage of the IP address by the system is necessary to enable the website to be de- livered to the user‘s computer. For this purpose, the IP address of the user must remain stored for the duration of the session. The purpose of storage in log files is to ensure the functionality and stability of the website. The data is also used to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes also include our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f General Data Protection Regulation (GDPR).

Duration of storage:
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the purpose of providing the website, this is the case when the session in question has ended. 
 
Registration
You can register on our website to receive detailed project information and invest in projects. We pro- cess your data as follows:

Description and scope of data processing:
The data you enter in the input mask will be transmitted to us and stored. The data will not be passed on to third parties.
The following data will also be stored at the time of registration:

 
(1) The IP address of the user
(2) Date and time of registration
 
As part of the registration process, the user‘s con- sent to the processing of this data is obtained. 
 
We use your e-mail address and telephone number as a contact method for information and queries about the processing status. We would like to point out that communication by e-mail can potentially be insecure.

The provision of personal data by you is not legally required and in the case of pure information also not contractually required. You are not obliged to provide us with personal data. If you do not provide us with personal data, we will not be able to provide you with detailed project information and it will not be possible to invest in projects, provided this information is mandatory.

Legal basis for data processing:
The legal basis for processing the data is Art. 6 para. 1 lit. a General Data Protection Regulation (GDPR) if the user has given his consent. If the registration serves the fulfilment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 lit. b General Data Protection Regulation (GDPR).

Purpose of data processing:
If you only request detailed project information, the registration serves to send you this information. If you invest in projects, the registration serves the purpose of the execution and winding up of the loan relationship. 

Duration of storage:
The data will be deleted as soon as they are no lon- ger required to achieve the purpose for which they were collected. Once the contract has been com- pleted in full, the data will only be stored for the periods prescribed by law. Your personal data will then be deleted unless you have agreed to further use or processing.
 
Newsletter
Description and scope of data processing:
The following data will also be stored at the time the registration is sent:
 
  • The IP address of the user
  • Date and time of registration. 
If you open one of our newsletters or click on a link in it, this may be logged via the web server (date, time, e-mail address). This serves internal statistical purposes so that we can tailor our information offer even better to the interests of our newsletter users. This is also our legitimate interest in data process- ing. This data is not combined into personal user profiles.The provision of personal data by you is neither legally nor contractually prescribed nor necessary for the conclusion of a contract. You are not obliged to provide us with personal data. If you do not provide us with personal data, we will not be able to send you a newsletter, as long as this information is mandatory. 


Legal basis for data processing:
The legal basis for the processing of data after registration for the newsletter is the consent given by you (Art. 6 para. 1 lit. a General Data Protection Regulation (GDPR)). The legal basis for any statistical evaluations carried out is Art. 6 para. 1 lit. f General Data Protection Regulation (GDPR).

Purpose of data processing:
The purpose of collecting your e-mail address is to send you the newsletter. If other personal data is voluntarily provided by you during the registration process, this serves to individualise the newsletter and to prevent misuse of the services or the e-mail address used.

Duration of storage:
The personal data provided by you will be stored until you revoke your consent to receive the newsletter. Upon receipt of your revocation, your e-mail address will be marked with a blocking notice to document that you no longer wish to be contacted by us by e-mail in the future. Any other personal data collected with your newsletter registration will be deleted immediately. The blocking notice and your e-mail address will be deleted three years after the end of the calendar year in which the blocking notice was set.
 
Contact form and e-mail contact
Description and scope of data processing:
By sending a contact request via our contact form, the data entered in the input mask is transmitted to us and stored. The following data will also be stored at the time the message is sent:
 
  • The IP address of the user
  • Date and time of the message dispatch.
The provision of personal data by you is neither legally nor contractually prescribed nor necessary for the conclusion of a contract. You are not obliged to provide us with personal data. If you do not provide us with personal data, this means that it is not possible to contact us via the contact form, insofar as this is mandatory information.
Alternatively, it is possible to contact us via the e-mail address provided. In this case your personal data transmitted with the e-mail will be stored. 


Legal basis for data processing:
Art. 6 para. 1 lit. f General Data Protection Regulation (GDPR) is the legal basis for the processing of data transmitted via the contact form or in the course of sending an e-mail. Our legiti- mate interest lies in answering the sender‘s contact request. If the purpose of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b General Data Protection Regulation (GDPR).

Purpose of data processing:
The processing of personal data from the input mask serves us solely to process the contact request. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

Duration of storage:
The data are deleted as soon as they are no longer required for the purpose of their collection. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with you has ended, unless contractual or legal obligations prevent de- letion. The conversation is terminated when it can be inferred from the circumstances that the relevant facts have been conclusively clarified. 

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

 
Transmission of personal data
Kensington Crowd GmbH will not pass on your data to third parties unless you have given your express permission to do so beforehand or the transfer is required or permitted by law. Excluded from this are our service partners, who are required to process the contractual relationship and who have been commissioned by us to process personal data in accordance with our instructions within the framework of an order processing contract, as well as those project owners to whom you grant a loan and who require the necessary personal data (name, address, date of birth, e-mail address, telephone number, account data, tax identification number) for the implementation and processing of the loan relationship. We will neither sell your data to third parties nor otherwise pass them on to third parties for advertising purposes. Our employees are bound to secrecy and compliance with data protection regulations.
 
Cookies
Description and scope of data processing:
In order to make visiting our website attractive and to enable the use of certain functions, we use so- called cookies on various pages. These are small text files that are stored on your end device. 

You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or whether to exclude the acceptance of cookies in certain cases or in general. If cookies are not accepted, the functionality of our website may be restricted. The following links show you how the settings can be adjusted in the following common browsers:

Chrome: https://support.google.com/chrome/answer/95647?hl=de 
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen 
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies 
Safari: https://support.apple.com/kb/PH21411?viewlocale=de_DE&locale=de_DE 

Legal basis for data processing:
If personal data is processed using cookies, the legal basis is Art. 6 para. 1 lit. f General Data Protection Regulation (GDPR). 

Purpose of data processing:
The purpose of the processing is to make the visit to our website attractive and to enable the use of certain functions. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized also after a page change.

We need cookies for the following applications:

(1)        _skynet_session: Session cookie for recurring users
(2)        cookieconsent_status: Request cookie approval
(3)        cmsref: Determining the Origin of Affiliate Partners
(4)        ref: Determining the Origin of Affiliate Partners
(5)        _ga, _gat, _gid: website analytics with Google Analytics (see below)

The user data collected through cookies are not used to create user profiles.

Duration of storage:
Sog. Transient cookies are automatically deleted when you close your browser. These include in particular session cookies. They store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This enables your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close your browser. Permanent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.
 
Website analysis
Use of Google Analytics
Our website www.kensington-crowd.com uses Google Analytics, a web analysis service of Google Inc, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) in Universal Analytics mode. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus to analyze a user‘s activities across devices. Google Analytics uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. Since this website uses Google Analytics with the extension „_anonymizeIp()“, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and Internet usage to the website operator. Our legitimate interest in data processing also lies in these purposes. The legal basis for the use of Google Analytics is Art. 6 para. 1 lit. f General Data Protection Regulation (GDPR) and, with your consent, Art. 6 para. 1 lit. a General Data Protection Regulation (GDPR). The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month. Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/ de.html, or at https://policies.google.com/?hl=en. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.goo- gle.com/dlpage/gaoptout?hl=en. Opt-out cookies prevent the future collection of your data when you visit this website. To prevent Universal Analytics from collecting your information across multiple devices, you must opt-out on all systems you use.
 
Automated decision making including profiling
There is no automated decision making including profiling.

Rights of the data subject
If personal data is processed by you, you are the data subject within the meaning of the General Data Protection Regulation (GDPR) and you are entitled to the following rights vis-à-vis the person responsible:

Right to information:
Pursuant to Art. 15 General Data Protection Regulation (GDPR), you have the right to request information about your personal data processed by us; in particular, you may request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned duration of storage, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected from us, as well as the existence of an automated decision making process including profiling and, if applicable, meaningful information on its details.

Right to rectification:
Pursuant to Art. 16 General Data Protection Regulation (GDPR), you have the right to demand immediate correction of incorrect or incomplete personal data stored by us.

Right to deletion:
Pursuant to Art. 17 General Data Protection Regulation (GDPR), you have the right to demand the deletion of your personal data stored by us, unless processing is necessary for the exercise of the right to freedom of expression and informa- tion, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.

Right to limitation:
Pursuant to Art. 18 General Data Protection Regulation (GDPR), you have the right to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection against the processing pursuant to Art. 21 General Data Protection Regulation (GDPR).

Right to data transfer:
Pursuant to Art. 20General Data Protection Regulation (GDPR), you have the right to receive the personal data you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another responsible party.

Right of appeal:
According to Art. 77 General Data Protection Regulation (GDPR) you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our place of business. The responsible supervisory authority for our registered office is: The Hessian Data Protection Officer, Prof. Dr. Michael Ronellenfitsch, Postfach 3163, 65021 Wiesbaden, Gustav-Stresemann-Ring 1, 65189 Wiesbaden E-Mail: Poststelle@datenschutz.hessen.de, phone: +49 611 1408 - 0, fax: +49 611 1408 - 900. 
 
Right of objection:
You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you on the basis of Art. 6 para. 1 lit. f
General Data Protection Regulation (GDPR)

If the personal data concerning you are processed for the purpose of direct advertising, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising.;

Right of revocation:
You have the right to revoke your consent to the processing of your personal data at any time. The revocation of your consent does not affect the lawfulness of the processing that took place on the basis of your consent until you revoke your consent. Revocation is possible at any time by e-mail to info@kensington-crowd.com or by post at the above address.
 
Data security
We use the most common SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can recognize the en- cryption by the closed representation of the key or lock symbol in the lower status bar or the address bar of your browser (https). We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
 
Changes to our privacy policy
We reserve the right to amend this data protection declaration from time to time so that it always com- plies with current legal requirements or in order to implement changes to our services in the data protection declaration, e.g. when introducing new services. Your renewed visit to our website is subject to the current data protection declaration.

Stand: Mai 2018
 

Do you have any questions?

069 2547 413 76

Newsletter subscription