This English version is provided for information only. The German version is legally binding.
Thank you for your interest in our website. In this privacy policy, we inform you in detail about how we handle your data.
1. Personal data is any data that can be related to you personally, e.g. name, address, email addresses and your user behaviour.
2. The controller pursuant to Art. 4(7) of the EU General Data Protection Regulation (GDPR) is Painit Asset Management GmbH, represented by its managing directors Marcel Nölle and Leonard Nolte, Oberheidter Straße 70a, 42349 Wuppertal, Germany, email: (see also our legal notice). We have not appointed a data protection officer; the controller is the contact for all data protection matters.
3. If you have questions about the collection, processing or use of your personal data, or regarding access, rectification, restriction of processing or erasure of data, or the withdrawal of consents given, please contact the controller pursuant to Art. 4(7) GDPR. Contact details can be found in § 1 No. 2 of this privacy policy.
1. You have the following rights with respect to us regarding your personal data:
2. You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that our processing of your personal data infringes the GDPR. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
3. Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).
When you use our website for information purposes only, we do not collect any personal data except the data your browser transmits to enable you to visit our website: IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred in each case, the website from which the request comes, browser, operating system and its interface, as well as the language and version of the browser software.
Storage in log files takes place to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our IT systems. The legal basis is Art. 6(1)(f) GDPR. The data is deleted as soon as it is no longer required for the purpose for which it was collected — in the case of log files, after 7 days at the latest.
When you contact us by email, the email address you provide and — if you provide them voluntarily — your name, the subject, your message and any further information are stored by us in order to answer your questions and messages. The legal basis is Art. 6(1)(f) GDPR; if the contact aims at concluding a contract, additionally Art. 6(1)(b) GDPR. Your data is deleted as soon as it is no longer required for the purpose for which it was collected and no statutory retention obligations apply.
In some cases, we use external service providers to process your data. They have been carefully selected and commissioned by us, are bound by our instructions and are checked regularly. As part of processing on our behalf, a third-party provider provides us with services for hosting and displaying the website. This service provider is located within the European Union or the European Economic Area. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient operation of the website); a data processing agreement pursuant to Art. 28 GDPR has been concluded with the service provider. Your data is not transferred via the website to countries outside the European Union or the European Economic Area.
All fonts and images on this website are delivered exclusively from our own server in Germany. There is no connection to Google Fonts, content delivery networks or other third-party providers. Your IP address is not transmitted to any third party in this process.
This website does not set any cookies for analysis, marketing or tracking purposes. Neither Google Analytics nor comparable tools are integrated. Consent under Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) is therefore not required, which is why we deliberately do without a cookie banner. If cookies from earlier visits to our website are still stored in your browser, you can delete them at any time via your browser settings.
Our contact form does not store any data on our server. When you submit it, your email program opens with a prepared message that you send yourself. Processing therefore takes place exclusively via your own email provider and our mailbox. To protect against automated requests, the form contains a simple arithmetic question and a field that is invisible to you; no personal data is transmitted to third parties in this process.
Our hosting provider is IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. The data is processed on servers within the European Union. This is based on a data processing agreement pursuant to Art. 28 GDPR.
We maintain up-to-date technical measures to ensure data security, in particular to protect your personal data against risks during data transmission and against disclosure to third parties. These are adapted to the current state of the art.
Status of this privacy policy: 15 October 2026