Privacy Notice

In this privacy policy, we, Viridis Capitis UG (haftungsbeschränkt), inform you about the processing of personal data when using our website.

1. Contact Information

The contact and data controller within the meaning of the EU General Data Protection Regulation (GDPR) is:

For all questions regarding data protection in connection with our platform or the use of our website, you may also contact our data protection officer at any time. The data protection officer can be reached at the above postal address as well as at mailto:vc@viridicapitis.de (subject: “Attn. Data Protection Officer”).

2. Data Processing in the Context of Our Crowdinvestments

This section describes the processing of data when you participate in crowdinvesting. We process the following personal data to the extent necessary for the preparation, conclusion, and management of the required contracts:

Master Data

We collect master data via our platform when you submit your investment offer. Master data includes in particular:

  • Last name
  • Address
  • Electronic signature

Investment Information

If an investment is made, we process additional information regarding its performance and term to provide you with an overview of your investment:

  • Term
  • Project
  • Investment amount

Contract Conclusion

If you decide to invest, we may forward your data (name, address, possibly identification data) to the respective project developer for the purpose of contract conclusion and performance. You can view the concluded loan agreements at any time via our platform.

3. Data Processing in the Context of Crowdlending

(Not applicable; to be supplemented if required.)

4. Processing of Investments and Payouts via Secupay

(Not applicable; to be supplemented if required.)

5. Data Processing on Our Website

This section describes the processing of data collected each time you visit our website. The processing activities are listed according to their respective legal bases.

5.1 Technically Necessary and Functional Processing

5.1.1 Accessing Our Website / Access Data

Every time you use our website, we collect technically necessary access data automatically transmitted by your browser to enable your visit. This includes in particular:

  • IP address of the requesting device
  • Date and time of the request
  • Address of the accessed website
  • Address of the referring site
  • Information about the browser and operating system used
  • Online identifiers (e.g., device IDs, session IDs)

The processing of this access data is necessary to ensure your visit to the website, maintain system functionality, and implement security measures. The data is temporarily stored in log files to perform statistical analyses (e.g., proportion of mobile devices) and for administrative maintenance of the website. We also store IP addresses if there is suspicion of criminal offenses in connection with the use of our website. Your last visit (e.g., registration, login, clicks) is stored as part of your account. Log files are stored for 14 days and then deleted. The stored information does not allow direct conclusions about your person.

5.1.2 Contacting Us

You can contact us via contact form, live chat, or telephone. The following data is required in each case:

  • Contact form: your email address
  • Live chat: email address and name
  • Hotline: telephone number and, if applicable, name

The legal basis for processing is Art. 6(1)(b) GDPR (contractual or pre-contractual measures). We use the data you provide exclusively to respond to your inquiry. After processing is complete, this data is automatically deleted.

5.1.3 Registration

You can register for our login area to use the full range of features. Mandatory fields are marked accordingly. Registration is not possible without this data. Legal basis: Art. 6(1)(b) GDPR. After successful registration, you are considered a customer. If you have provided your email address, we may send you newsletters and product or investment information based on a balancing of interests (Art. 6(1)(f) GDPR), unless you have objected (objection possible in every email or by email to mailto:vc@viridicapitis.de).

5.1.4 Technically Necessary Cookies

We use cookies for certain services. A cookie is a small text file stored by your browser. Cookies are not used to run programs or load viruses. The main purposes of our own cookies:

  • Login authentication
  • Load balancing
  • Storage of your language settings
  • Displaying certain notices only once

Most browsers accept cookies by default. You can change your browser settings to refuse cookies or to store them only with your consent. If a cookie is refused, some services may not function properly.

5.1.4.1 Segment (Segment.io, Inc., USA)

We use Segment to provide customized services. Segment processes a truncated IP address to create pseudonymized user profiles. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Segment is certified under the EU-US Privacy Shield.

5.1.4.2 Google Tag Manager

Google Tag Manager allows us to centrally manage various website tags. The Tag Manager itself is cookieless and does not store personal data. It only triggers other tags. If you have deactivated tracking at the domain or cookie level, this setting remains in effect for all tracking tags implemented via the Tag Manager. More here.

5.1.4.3 HubSpot (USA / Ireland)

For customer support, we use HubSpot, e.g., for email newsletters, CRM, reporting, landing pages, and contact forms. For live chat (“Messages”), chat content, the page, and, if applicable, your email address are transmitted to HubSpot. HubSpot is certified under the EU-US Privacy Shield and is subject to TRUSTe and the U.S.-Swiss Safe Harbor Framework. Privacy policy HubSpot.

5.1.4.4 Adobe Typekit

We use web fonts from Adobe Typekit. When the page loads, the fonts are loaded into the browser cache, and Adobe Typekit receives your IP address. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). More Info to Typekit and Privacy Policy to Adobe Typekit.

5.1.4.5 Postmark

We use Postmark (Wildbit LLC, USA) to send necessary messages (e.g., confirmations, invoices). Your email address is transmitted to Postmark. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Privacy Policy Postmark (EU) and Wildbit Privacy PolicyData is deleted as soon as it is no longer required.

5.1.4.6 Sentry

We use Sentry (Functional Software Inc., USA) to monitor stability and analyze errors. Sentry collects device-related data and error timestamps, but not personal data. Privacy Policy SentryLegal basis: legitimate interest (Art. 6(1)(f) GDPR). Sentry is certified under the Privacy Shield.

5.1.4.7 CloudFront (Amazon Web Services, USA)

Our website uses the CDN CloudFront from AWS to deliver content worldwide more quickly. Data (e.g., IP address) is transmitted to AWS servers abroad and temporarily stored. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). AWS is certified under the Privacy Shield and processes data exclusively on instructions.

5.2 Data processing based on legitimate interests

5.2.1 Google Maps

We integrate Google Maps (Google LLC, USA). When you visit the contact page, your browser connects to Google servers, possibly also in the USA. Google receives your IP address and information that the contact page has been accessed. Legal basis: legitimate interest (Art. 6 (1) (f) GDPR). Google has concluded standard contractual clauses. If you are logged into your Google account, Google can assign the visit to your profile. If you wish to prevent this, log out of Google before visiting the contact page. More information: Privacy Policy Google.

5.2.2 Embedding videos via Wistia

Videos are integrated via Wistia (Wistia, Inc., USA). Legal basis: legitimate interest (Art. 6 (1) (f) GDPR). Wistia collects and analyzes interaction data to optimize video marketing campaigns. The legal basis for this is also Art. 6 (1) (f) GDPR.

5.2.3 Integration of YouTube videos

YouTube videos are embedded in “extended data protection mode.” Personal data is only transferred to YouTube when the video is played. YouTube receives your IP address and the link to the subpage you visited. If you are logged into your Google account, YouTube can assign the visit to your account. If you want to prevent this, log out before playing the video. YouTube stores usage profiles for advertising and market research purposes. Legal basis: legitimate interest (Art. 6 (1) (f) GDPR). More: Privacy Policy Google. Datenschutzerklärung YouTube/Google.

5.2.4 Plugin “kritische-anleger.de”

We incorporate the seal of the rating platform kritische-anleger.de (Stefan Erlich, Frankfurt). Data is only forwarded to kritische-anleger.de when the seal is clicked. Legal basis: legitimate interest (Art. 6 (1) (f) GDPR). Kritische-Anleger is responsible for data protection itself.

5.2.5 Rating platform ausgezeichnet.org

We use ausgezeichnet.org (AUBII GmbH, Hamburg). When the page is loaded, JavaScript from ausgezeichnet.org is executed and personal data (IP address and, if applicable, rating data) is transferred. When you submit a rating, your name and email address are stored. Legal basis: legitimate interest (Art. 6 (1) (f) GDPR) or contract (Art. 6 (1) (b) GDPR) when submitting a rating. More: Privacy Policy ausgezeichnet.org.

5.2.6 Kühne & Loos GmbH (affiliate tracking)

Wir nutzen Conversion Tracking für Affiliate-Programme, um Registrierungen und Investments abzurechnen, sofern Sie über entsprechende Partnerseiten zu uns gelangt sind. Rechtsgrundlage: berechtigtes Interesse (Art. 6 Abs. 1 lit. f DSGVO). Verarbeitete Daten: Investmentdatum, Investmentsumme, Projekt-ID, Convertible-ID. Speicherdauer: bis zu 10 Jahre (steuerrechtliche Aufbewahrung). Mehr: Privacy Policy Kühne & Loos.

5.2.7 Fidor Bank AG (Affiliate-Tracking)

Similar to Kühne & Loos, we also use conversion tracking from Fidor Bank AG (Munich) as part of our affiliate network. Data processed: investment date, investment amount, project ID, convertible ID. Storage period: up to 10 years. Legal basis: Art. 6 (1) (f) GDPR. More: Privacy Policy Fidor Bank.

5.2.8 FinanceAds

We use FinanceAds (Germany) to measure advertising success. FinanceAds uses anonymous tracking cookies (anonymized IDs) but does not store any personal data. Legal basis: legitimate interest (Art. 6 (1) (f) GDPR). More information: Privacy policy on the FinanceAds website.

5.2.9 Dr. Peters Group (Affiliate-Programm)

We participate in the affiliate program of Dr. Peters Invest GmbH (Germany). We use conversion tracking to measure clicks and investments. Legal basis: legitimate interest (Art. 6 (1) (f) GDPR). If a click results in an investment, we will share your name, investor ID, investment amount, and project number with Dr. Peters Invest GmbH. More: Privacy Policy Dr. Peters.

5.3 Data processing based on your consent

If you wish to withdraw your consent, please contact us using the contact details above.

5.3.1 Newsletter

(Not applicable; to be supplemented if required.)

5.3.2 Surveys

(Not applicable; to be supplemented if required.)

5.3.3 SMS-Service

(Not applicable; to be supplemented if required.)

5.3.4 Google Analytics and advertising functions

5.3.4.1 Google Analytics (basic data)

We use Google Analytics (Google Ireland Ltd., Ireland). Google Analytics uses cookies to analyze the use of our website. The information generated is usually transferred to a Google server in the US and stored there. If IP anonymization is activated within the EU/EEA, only a shortened IP address is transferred to Google. Google evaluates this data anonymously on behalf of the website operator to create reports and provide services related to website usage. We use Google Analytics without the data sharing function; Google Analytics is a processor for us (Art. 28 GDPR). You can prevent the storage of cookies by adjusting your browser settings and/or the Browser-Plug-in for Google Analytics Deaktivierung install. Alternatively, on mobile devices, please use this Opt-Out-LinkGoogle Analytics also uses the extension “_anonymizeIp()” so that IP addresses are truncated and immediately anonymized. Legal basis: your consent (Art. 6 (1) (a) GDPR). Storage period for cookies: up to 12 months or until revoked.

5.3.4.2 Google Analytics advertising features

With your consent, we use additional Google Analytics advertising features (e.g., demographic characteristics, interests). First-party and third-party cookies (e.g., DoubleClick cookies) are used for this purpose. We anonymously evaluate the demographic characteristics and interests of typical visitors in order to improve our website. You can disable this tracking via your browser settings or via the opt-out functions.

en_USEnglish