1. An Overview of Data Protection

General Information

The following information provides an easy-to-navigate overview of what happens to your personal data when you visit this website. The term “personal data” includes all data that can be used to personally identify you.

For more detailed information on data protection, please refer to our Data Protection Declaration below.

Data Recording on This Website

Who is responsible for data collection on this website?

The data on this website is processed by the website operator. Contact details can be found under the section “Information about the responsible party (controller)” in this Privacy Policy.

How do we collect your data?

We collect data that you provide to us directly. This may include information entered into a contact form.

Other data is collected automatically by our IT systems or after your consent during your visit. This includes mainly technical data such as web browser, operating system, and time of access. This data is recorded automatically when you access the website.

What do we use your data for?

Some data is collected to ensure the website functions properly. Other data may be used to analyze user behavior.

What rights do you have?

You have the right to receive information about your stored personal data, including its source, recipients, and purpose, free of charge.

You may also request correction or deletion of your data. If you have given consent, you can revoke it at any time.

You can request restriction of processing under certain conditions and lodge a complaint with a supervisory authority.

You can contact us at any time regarding these rights.

Analysis Tools and Third-Party Tools

Your browsing behavior may be statistically analyzed when visiting this website. This is mainly done using analysis programs.

Further details can be found in the Data Protection Declaration below.

2. Hosting

Hosting Provider

We host our website with:

Strato AG
Otto-Ostrowski-Straße 7
10249 Berlin, Germany

When you visit our website, Strato collects log files, including your IP address.

Further information:
https://www.strato.de/datenschutz/

Legal Basis

Data processing is based on Art. 6(1)(f) GDPR (legitimate interest in reliable website operation).

If consent has been obtained, processing is based on Art. 6(1)(a) GDPR and § 25 (1) TTDSG. Consent can be revoked at any time.

Data Processing Agreement (DPA)

We have concluded a Data Processing Agreement (DPA) with Strato to ensure compliant data handling.

3. General Information and Mandatory Information

Data Protection

We treat your personal data as confidential and in accordance with statutory data protection regulations.

This Privacy Policy explains what data we collect, how we use it, and for what purpose.

Please note that data transmission over the Internet (e.g., email) may have security vulnerabilities.

Controller Information

PONTES Finance & Advisory GmbH
Graf-Adolf-Platz 1-2
40213 Düsseldorf, Germany

E-mail: info@pontes-finance.com

The controller determines the purposes and means of processing personal data.

Storage Duration

Personal data is stored only as long as necessary for its purpose.

It will be deleted if you request deletion or revoke consent, unless legal retention obligations apply.

Legal Basis for Processing

Processing is based on:

Art. 6(1)(a) GDPR (consent)
Art. 6(1)(b) GDPR (contract)
Art. 6(1)(c) GDPR (legal obligation)
Art. 6(1)(f) GDPR (legitimate interest)

Consent can be revoked at any time.

Data Transfer to Non-EU Countries

We use tools from companies outside the EU (e.g., USA). These countries may not offer the same level of data protection.

Authorities in these countries may access your data without effective legal remedies. We have no control over such processing.

Revocation of Consent

You can revoke your consent at any time. Processing carried out before revocation remains lawful.

Right to Object (Art. 21 GDPR)

You can object to the processing of your personal data at any time.

If your data is used for direct marketing, you can object at any time. After objection, your data will no longer be used for this purpose.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority.

Right to Data Portability

You can request your data in a machine-readable format or transfer it to another controller.

Right to Information, Rectification, and Deletion

You can request information about your stored data and request correction or deletion.

Right to Restriction of Processing

You can request restriction of processing if:

• You dispute the accuracy of your data
• Processing is unlawful
• Data is no longer needed but required for legal claims
• You object under Art. 21 GDPR

SSL/TLS Encryption

This website uses SSL/TLS encryption. You can recognize this by “https://” in your browser address bar.

4. Data Collection on This Website

Cookies

This website uses cookies. Cookies are small data files stored on your device.

Cookies may be session cookies (deleted after your visit) or permanent cookies (stored until deleted).

They can also be first-party or third-party cookies.

Purpose of Cookies

Cookies are used for technical functionality, website optimization, and analysis of user behavior.

Processing is based on Art. 6(1)(f) GDPR or consent (Art. 6(1)(a) GDPR).

You can control cookies via your browser settings.

Cookie Notice & Compliance

We use Cookie Notice & Compliance to manage cookie consent.

Provider:
Hu-manity Rights Inc., Princeton, USA

This tool stores your consent in a cookie.

Legal basis: Art. 6(1)(c) GDPR.

Real Cookie Banner

We use Real Cookie Banner (devowl.io GmbH, Germany).

The tool is hosted locally and stores consent in your browser.

Legal basis: Art. 6(1)(c) GDPR.

5. Social Media

LinkedIn

This website uses LinkedIn features.

Provider:
LinkedIn Ireland Unlimited Company, Dublin, Ireland

When visiting a page with LinkedIn elements, a connection to LinkedIn servers is established.

If you are logged in, LinkedIn can associate your visit with your account.

Legal basis:

Art. 6(1)(a) GDPR (consent)
Art. 6(1)(f) GDPR (legitimate interest)

Data transfer to the USA is based on Standard Contractual Clauses.

Further information:
https://www.linkedin.com/legal/privacy-policy

6. Plug-ins and Tools

Google Fonts (Local Embedding)

This website uses Google Fonts locally. No connection to Google servers is established.

More information:

https://developers.google.com/fonts/faq
https://policies.google.com/privacy