Liability for links
OakTree Management Consultants GmbH Data Protection Policy
OakTree Management Consultants GmbH ("OakTree") collects personal data about you. OakTree uses your personal data in compliance with the provisions under the German Bundesdatenschutzgesetz (“BDSG”) and the European General Data Protection Regulation ("GDPR"), as amended from time to time (collectively "Regulation"). This Data Protection Policy ("Policy") explains how we use your personal data.
1. What Personal Data do we collect?
"Personal Data" is any information relating to you or that we can otherwise link to you. The Personal Data we collect include your name, postal address, e-mail address, phone and fax number, company name, company structure, job title, job function and business affiliations. In case of contractual agreements, the list of data points can be expanded on a case by case basis.
2. How do we collect your Personal Data?
We collect personal data that you voluntarily provide to us, for example when
(i) you enter into a contractual agreement with us
(ii) you communicate with us via e-mail or through post
(iii) you contact us via our website
(iv) you exchange business cards with us
(v) we are given your information by contacts in our corporate network
(vi) you communicate with us in other ways
In some cases, your Personal Data has been supplemented by information retrieved from other sources, including searches via the internet (websites, social media, newsletters, etc).
3. How do we use your Personal Data?
We use the Personal Data we collect to fulfill contractual or regulatory obligations, for communication purposes and to maintain and expand our network, including:
(i) to send you updates and other information about OakTree;
(ii) to send you invitations to events, call, and meetings;
(iii) to maintain our list of contacts
We do not make your Personal Data available to any third party, except to service providers in a contractual relationship with OakTree, or in cases where we are obliged to by the regulatory bodies.
4. Why do we process your Personal Data and on what legal basis?
As set out above, we process your Personal Data to fulfil our contractual and regulatory duties and for communication and networking purposes. We rely on our legitimate interests in maintaining business relationships and communicating with you as a business contact, e.g., about OakTree's activities and events. We consider that our legitimate interests are in compliance with the Regulation and your legal rights and freedoms.
5. Where is your Personal Data stored?
OakTree is a German company and most of your Personal Data is processed in Germany. However, part of your data may be stored on servers in other EU countries, Switzerland, and the US. We ensure that the data is only sent or stored in non-EU countries if the respective countries have an appropriate level of data protection (in accordance with the decision of the EU Commission).
6. How long do we keep your Personal Data?
Your Personal Data will be saved for the specified purposes mentioned above for as long as you are a business contact to us or if we are obliged to by the regulator (whichever period is longer). You can opt-out at any time, if you no longer wish to receive communication from OakTree or if you want OakTree to delete your data. Should you have a request of the above nature, please contact us at firstname.lastname@example.org
7. Data Security
OakTree has implemented appropriate technical and organizational security measures to help protect your Personal Data against loss and to safeguard against access by unauthorized persons.
8. Your Rights
You have the right to know what Personal Data we process about you and may request a copy. You are also entitled to have incorrect Personal Data about you corrected and you may in some cases ask us to delete your Personal Data. You can also object to certain Personal Data about you being processed and request that processing of your Personal Data be limited. Please note that the limitation or deletion of your Personal Data may not be possible, if that would cause OakTree to violate contractual or regulatory obligations. Please also note that the limitation or deletion of your Personal Data may mean we will be unable to provide the communications described above. You also have the right to receive your Personal Data in a machine-readable format and have the data transferred to another party responsible for data processing. If you disagree with how we process your Personal Data, you are also entitled to report this to the Bavarian Data Protection Authority (BayLDA) and/or to the competent supervisory authorities in the EU.
9. Information on the data controler and how to contact us
If you have any questions about how we process your Personal Data, please feel free to contact us at email@example.com by writing to the address below.
Data controler under Article 4(7) GDPR: OakTree Management Consultants GmbH, Traubinger Str. 43, 82327 Tutzing, Germany