Privacy statement

 

The protection of your personal data is important to us. We observe the legal provisions, in particular the German Federal Data Protection Act (BDSG), the Telemedia Act (TMG) and, since May 25, 2018, the General Data Protection Regulation (GDPR). In the following we would like to inform you about the handling of personal data when using this website.

Via this internet service platform, investments in accordance with § 1 Paragraph 2 No. 3, 4, 5 and 7 VermAnlG from the provider Jolt Energy GmbH are offered. This internet service platform is operated by eueco GmbH as a platform operator and financial investment intermediary (see also imprint and terms and conditions).

1. Responsible persons and data protection officer

Responsible within in the sense of of Art. 4 No. 7 of the General Data Protection Regulation (GDPR) and as service provider in the sense of the Telemedia Act (TMG) of the internet service platform:

eueco GmbH („Plattformbetreiber“)
Corneliusstraße 12
80469 München
E-Mail: info@eueco.de

If you have any questions about data protection relating to our website and our range of services or to exercise your rights as a data subject, please contact our data protection officer:

External data protection officer of the platform operator
Prof. Thomas Jäschke
Datatree AG
datenschutz@eueco.de

You can contact the data protection officer of Jolt Energy GmbH via email at datenschutz@jolt.energy for all questions about data protection that relate to the further processing of your personal data from the time the contract is concluded by the provider and loan administration office (Jolt Energy GmbH). The data protection declaration of Jolt Energy GmbH can be found at https://jolt.energy/privacy-policy/.

With this privacy statement we would like to create the necessary transparency for data processing when visiting invest.jolt.energy and also meet our information obligation. If we have not succeeded in doing this, please do not hesitate to contact us.

2. Collection, processing and use of personal data

Personal data is information that can be used to identify a person, i.e. information that can be traced back to a person. Personal data is only collected, used and passed on if this is permitted by law or if the user has consented to the data collection.

The scope and type of collection and use of your data differs according to the purpose of the use of this internet platform, namely according to whether you visit our website only to retrieve information or use the services we offer.

Purpose and legal basis of processing

We process your personal data in compliance with the applicable data protection regulations. The processing is particularly lawful if you have given us your consent (Art. 6 Para. 1 lit. a) GDPR), processing a contract is necessary (Art. 6 Para. 1 lit. b) GDPR), due to legal requirements (Art. 6 Para. 1 lit. c) GDPR) or to safeguard our legitimate interests within the scope of balancing interests (Art. 6 Para. 1 lit. f) GDPR)

2.1 Visit for informational purposes

For information purposes, you can visit this Internet service platform invest.jolt.energy ("Portal") without entering personal data. In this case, only data about the access (server log files) are collected. We only collect the personal data that your browser transmits to our server and that are technically necessary for us to display our website to you and to guarantee stability and security (legal basis is Art. 6 Para. 1 lit. f) DS- GMO). This data is called "log data". In detail, we collect the following data:

• IP address (only in the event of an incorrect login))
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status / HTTP status code
• Amount of data transferred in each case
• Website from which the request came
• Browser
• Operating system and its interface
• Language and version of the browser software

The log data are used for statistical evaluations for the purpose of operation, security and optimization of the offer. The legal basis for processing is Article 6 (1) (f) GDPR. Our legitimate interest lies in ensuring the stability and security of the connection and thus the functionality and improvement of the quality of our website. The portal operator reserves the right to retrospectively check the log data if there is a legitimate suspicion of illegal use based on concrete evidence.

We store the log files for as long as is necessary to achieve a purpose. If the provision is necessary to display the website, the purpose has been achieved when you have ended your session, usually when you leave the website. The log files are then deleted. Data stored for the purpose of quality assurance will be deleted after [100] days at the latest. If there is a suspicion of illegal use, the data will also be processed until the complete test and any dispute has been completed.

2.2 Registration or acquisition of an investment

If you register on our website and / or purchase an investment, the following data will usually be collected and processed from you for the purpose of carrying out pre-contractual measures and contract execution:

• When registering, the username or e-mail address and password you used.
• In a second step after registration, mandatory master data is collected, namely surname, first name, title, salutation, date of birth, address and telephone number.
• If a private person acquires an investment, the name of the bank, account holder, IBAN and BIC must also be given.

When you register as a company on our website and / or purchase an investment, we collect the following data:

• Company name
• Date of establishment
• Place of business
• Address
• Phone number
• Email address
• Registry court, registry number
• Company type
• Surname, first name and position of the legal representative
• Account details

The legal basis for the processing is Art. 6 Para. 1 lit. b) GDPR.

The acquisition of an investment also requires information on the desired investment as well as an "adequacy test". The latter is required for legal reasons. The legal basis for processing is therefore Article 6 (1) c) GDPR in conjunction with Section 16 (2) FinVermV.

Transfer of personal data / processing by the provider of the investment

Your data will be collected and processed by the platform operator as an investment intermediary and then transmitted to Jolt Energy GmbH as the loan administration office for further processing, contract issuance, implementation and administration. After completing the investment, your data will be stored and processed by Jolt Energy GmbH. We use the collected data exclusively to process the contract.

After completing the investment, your data will be stored and processed by Jolt Energy GmbH for the duration of the contracts and beyond until all commercial and tax law issues have been dealt with. In addition, the platform operator or contracted service provider continue to have access to the stored data for the purpose of providing this platform, including maintenance and servicing.

After the contract has been fully processed, your data will be blocked and deleted after the tax and commercial regulations have expired, unless you have expressly consented to further use of the data.

Further information on data processing, purposes of use, duration of processing and transfer of data by Jolt Energy GmbH can be found at jolt.energy/privacy-policy.

Your personal data will only be transmitted to third parties if this is legally permissible or if you have consented to the transmission. A transfer of your personal data to Jolt Energy GmbH takes place exclusively for the purpose of fulfilling the contract in the sense of arranging the system.

Your personal data will be passed on to service providers commissioned by us on the basis of a separate contractual agreement within the meaning of Art. 28 GDPR (processor). These processors are exclusively service providers that we commission to provide and maintain this platform and to fulfil our obligations under the contract.

In addition, we will not pass on your personal data to third parties unless we are legally obliged to do so or you have given us your prior consent.

2.3 Cookies

We use cookies to make visiting our website attractive and to enable the use of certain functions. Cookies are small text files that are stored on your computer. Cookies cannot run programs or transmit viruses to your computer. Most of the cookies we use are deleted from your hard drive when you log out or close your browser (so-called session cookies). These store a so-called session ID, with which various requests from your browser can be assigned to the common session.

Other cookies remain on your computer and enable us to recognize your computer on your next visit (so-called permanent cookies). Persistent cookies are automatically deleted after a specified period, which can differ depending on the cookie.

Cookies that are required to carry out the electronic communication process or to provide certain functions you require are stored on the basis of a legitimate interest. The legal basis for this is Article 6 (1) lit.f) GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services.

We only use cookies that are not absolutely necessary for the functioning of our website with your express prior consent. The legal basis for the processing is Art. 6 Para. 1 lit. a) GDPR.

Information on the period of validity of all cookies we use and who are authorized to access them can be found in the following table:

Provider	Name	Cookie Categorie	Function	Duration	Accessed by
Google Inc	Google Analytics Cookie	Analytical Cookie	Stores information about surfing behavior on the domain invest.jolt.energy	24 months	The user and the initiating domain
eueco / Jolt	Session Cookie	Required Cookie	Saves login details	For the duration of the login (max. 24 days)	The user and the initiating domain
eueco / Jolt	Cookie Compliance Cookie	Required Cookie	Detects whether cookies are accepted or not	100 days	The user and the initiating domain
eueco / Jolt	JavaScript Cookie	Required Cookie	Detects whether JavaScript is activated	Duration of the session	The user and the initiating domain
eueco / Jolt	JAMCom Cookie	Required Cookie	Allows affiliate assignment	20 days	The user and the initiating domain

 

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, apart from accepting cookies for certain cases or in general, and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, however, the functionality of this website may be restricted. Information on how to set your browser accordingly is available regularly via the help function in the menu bar of the browser you are using.

Data protection declaration for the use of Google Analytics

This website uses Google Analytics, a web analysis service from Google Inc. ("Google"). Google Analytics uses cookies that are stored on your computer. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.

The full IP address will only be sent to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent Google from collecting the data generated by the cookies and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link : http://tools.google.com/dlpage/gaoptout?hl=de.

Links to other websites

This internet platform may contain links to other websites, e.g. the website of Jolt Energy Limited, through which you can register for the affiliate program. However, the data protection declaration described here does not apply to these websites. We ask you to visit this website directly for information about data protection, security, the collection of data and the regulations for the transfer of data. We cannot be held liable for any measures taken from this website or for their content.

2.4 Registration for the online newsletter

If you register to receive our newsletter, it is necessary to provide your e-mail address. Before the newsletter is sent, you must explicitly confirm that you want us to activate the newsletter service for you using the so-called double opt-in procedure. Subsequently, you will receive a confirmation and authorization e-mail from us, with which we ask you to click on the link contained in this e-mail and thus confirm to us that you would like to receive our newsletter.

The data processing is based on your consent (Art. 6 para. 1 lit. a) DS-GVO and on our legitimate interest (Art. 6 para. 1 lit. f) DS-GVO) to be able to prove your given consent. You can unsubscribe from the newsletter at any time. To do so, use the unsubscribe option under My account/Personal data by unchecking Current offers. You can also use the unsubscribe link in the newsletter. Your e-mail address will only be used by us and the service providers we commission as part of the administration of newsletter subscribers and will not be passed on to third parties.

2.5 Contact Form

If you use the contact form provided on our website, your first and last name, your e-mail address, possibly your telephone number (if this has been given) and the information you provide in the message field will be sent to the provider or the respective issuer and processed there. As far as your request concerns an existing or planned contractual relationship, Art. 6 Paragraph 1 lit. b) GDPR is the basis for authorization to process your data. If it is a general question or comment, Article 6 (1) (f) GDPR is the basis for authorization. We then process your data in order to better categorize your request and answer it more quickly. Your data will only be used to process your request and will be deleted after processing or blocked if there are statutory retention periods.

3. Data Security

We take measures to protect your personal data from accidental loss and unauthorized access, use, modification or disclosure. Our website is state-of-the-art and is protected by technical measures against damage, destruction and unauthorized access.

Data is forwarded securely using SSL encryption and stored on secure data servers. In addition, we provide additional information security measures that include access control, mandatory physical security and qualified information collection, storage and processing.

4. Your rights as a data subject

You can assert your rights as a data subject explained below at any time and without incurring costs using the contact details given under 1. Our data protection officer will examine and answer every request individually. Please use the contact form to revoke your consent and to request the blocking or deletion of personal data.

For a better understanding and easier readability of personal rights, we have summarized these in parts at this point. If necessary, please refer to the original text or contact our data protection officer directly.

4.1 Right of access (Art. 15 DS-GVO)

According to Art. 15 ff. GDPR in accordance with Section 13 (8) of the German Telemedia Act (TMG), we must provide you with information on your request as to whether we are processing your personal data. If this is the case, you have the right to information about the purposes for which the processing takes place, which categories of personal data are processed, to whom the data may be transmitted, for how long the data will be stored and, if applicable, the origin of the personal data, the existence of your rights as a data subject and whether automatic decision-making takes place.

In addition, you will receive information about your data stored by us at any time without giving reasons. You also have the right to have this data corrected, deleted or blocked (see below).

4.2 Correction (Art. 16 GDPR), restriction of processing (Art. 18 GDPR), objection (Art. 21 GDPR)

If you discover that we are processing personal data that is incorrect or incomplete, you can of course request a correction.

If we process your data on the basis of an overriding legitimate interest, you can also object to the processing for special reasons. In this case, we will no longer process your data unless we can prove compelling legitimate reasons for the processing. These must outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If justified, you can also request that processing be restricted. If the processing has been restricted, we are allowed to save this data but not process it beyond that. This does not include processing that is permitted with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or a member state. You can revoke your consent given in this context at any time.

4.3 Deletion (Art. 17 GDPR) and data transfer (Art. 20 GDPR)

In the event that personal data are processed by us, among other things, unfounded or after the purpose no longer exists, you can request their deletion. You also have the right to receive from us all information that you have transmitted to us in a structured, common and machine-readable format.

4.4 Revocation of consent (Art. 7 Para. 3 GDPR)

If a processing activity is based on your consent, you can revoke your consent to the processing and use of your personal data at any time. The revocation does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation. The revocation is therefore only valid for the future. Please use the contact form to revoke your consent and to request blocking or deletion.

4.5. Right to appeal (Art. 77 GDPR)

You can also complain to a supervisory authority at any time, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of the data concerning you violates the GDPR. The data protection supervisory authority responsible for us is the “Bavarian State Office for Data Protection Supervision” (Promenade 27 (Schloss), 91522 Ansbach).

Further information and the current contact details can be found on the website of the Bavarian State Office for Data Protection Supervision (https://www.lda.bayern.de/) or use the complaint form: https://www.lda.bayern.de/de/beschwerde).

5. Automated decision making including profiling (Art. 22 DS-GVO)

As part of the processing of your data by eueco GmbH, your data are not the subject of decisions that are based exclusively on automated processing.

6. Changes to our privacy policy

We are continuously optimizing our website and making technical changes if necessary. We reserve the right to adapt this data protection declaration if this should be necessary e.g. B. also with legal changes. For this reason, we expressly point out that our data protection declaration is only valid in the version that is current at the time of your visit.