Skip to main content

Privacy Policy (GDPR).

  • Basics:

    Here we inform you about the processing of personal data when using our online presence. This online data protection declaration applies to our website www.bestcapital.gmbh and to our profiles in social networks.

    Personal data is all data that can be related to you personally, including name, address, email, IP address or user behavior.

    Regarding the terms used, such as: B. “processing”, “responsible person” or “data subject”, reference is made to the definitions in Article 4 GDPR. In particular you will find the following:

    “Personal data” means any information relating to an identified or identifiable natural person (the “data subject” or “data subject”); A natural person is considered identifiable if he or she can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person (Art. 4 No. 1 GDPR).

    “Processing” is any process or series of processes carried out with or without the help of automated processes in connection with personal data, such as collecting, recording, organizing, organizing, storing, adapting or changing, reading out, querying, using, disclosing by transmission, dissemination or any other form of provision, comparing or linking, restricting, deleting or destroying (Art. 4 No. 2 GDPR).

    “Responsible party” (or “responsible body”) is the natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of processing personal data (Article 4 No. 7 GDPR).

    “Processor” is a natural or legal person, authority, institution or other body that processes personal data on behalf of the controller (Article 4 No. 8 GDPR).

    In particular, the terms “processing” and “personal data” are very broad, so that they can be understood to mean almost any handling of data.

  • Responsible:

    I am responsible for processing your data:
    BestCapital
    Business owner: Marcin Adamek
    Am Hohen Feld 129, 13125 Berlin
    Tel: +49 30 23 35 46 89
    Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

  • Who is affected by the data processing?:

    If you e.g. If, for example, you visit our website as an interested party, customer, supplier, service provider or other visitor, your personal data will be processed within the framework of the legal regulations or this declaration. All visitors to our website are referred to as “users”.

  • What data do we collect from you, and for what purposes—or on what legal basis—do we process it?:

    If you visit our website without registering or providing us with information in any other way, only the personal data that the browser you use transmits to our server will be processed. To our knowledge, the following data will then be processed, among others, which are technically necessary to display our website and to ensure its stability and security:

    • IP address of the requesting computer
    • Date and time of the request
    • Name and URL of the retrieved file
    • Access status / HTTP status code
    • amount of data transferred
    • Website from which the request comes (referrer URL)
    • used browser
    • Operating system

    The processing of this data in so-called log files is necessary to display our website and to ensure stability and security.

    If you also transmit personal data to us, e.g.B. as part of an inquiry by email or via our contact form, then we process it depending on your information also the following data:

    • Inventory data (e.g. name, address)
    • Contact information (e.g. email address, telephone number)
    • Content data (e.g. text input, photos, videos)
    • Usage data (e.g. sites visited, access times)
    • Communication / metadata (e.g. device information, IP addresses)

    We may also process the following personal data for the purposes of providing contractual services, service and customer care as well as marketing/advertising:

    • Contract data (e.g. subject matter of the contract, term, customer number)
    • Payment details (e.g. bank details, payment history)

    We process your personal data when you visit our website for the following purposes:

    • Providing the functions and content of our online offering
    • Ensuring a smooth connection to our website
    • Ensuring comfortable use of our website
    • Evaluating and ensuring system security and stability as well as general security measures
    • Answering any contact requests or communicating with you
    • other administrative purposes
    • Provision of contractual services
    • Customer service

    Unless we specify a specific legal basis in this data protection declaration, the following applies to the processing of your personal data: The legal basis for obtaining consent results from Article 6 Paragraph 1 Letter a, Article 7 GDPR. The legal basis for data processing to fulfill our services and carry out (pre-)contractual measures as well as to answer any inquiries is Article 6 (1) (b) GDPR. Art. 6 Para. 1 lit. c GDPR is the legal basis for data processing to fulfill legal obligations. If vital interests of the data subject or another natural person make data processing necessary, the legal basis arises from Article 6 Paragraph 1 Letter d GDPR. Data processing to protect our legitimate interests is based on Art. 6 Para. 1 lit. f GDPR. Our legitimate interest follows from the above-mentioned purposes of data collection.

    If, as part of the processing of your personal data, we disclose it to third parties, transmit it to them or otherwise grant them access to the data, this is done exclusively on the basis of legal permission, provided that you have consented to this, we are legally obliged to do so or based on our legitimate interests. Legal permission exists in particular if the transfer of data is necessary to fulfill contractual obligations (e.g. with payment or shipping service providers). A legitimate interest may exist if we use data for direct advertising or to prevent fraud or even if you are a customer of ours. A legitimate interest can also be e.g.B. when using web or email hosters, cloud providers or other service providers. Such service providers often act as so-called processors on the basis of a corresponding contract. You are also obliged to comply with data protection regulations and to guarantee this contractually. The legal basis for such order processing relationships is Art. 28 GDPR.

  • To whom do we transmit your data?:

    We work regularly with the following recipients:

    • Shipping service provider
    • Credit institution
    • Email Hoster
    • Web hoster

    We carefully select external service providers. In the case of order processing relationships (Art. 28 GDPR), these companies are contractually bound to our instructions and are regularly checked by us. In the case of joint responsibility (Article 26 GDPR), there are corresponding contractual bases. Further information can be found in the following descriptions of the individual services.

    Personal data will not be transferred outside the European Union.

  • How long do we process your data?:

    The duration for which your personal data is stored is generally determined by existing statutory retention periods (e.g., under commercial or tax law). Unless otherwise specified below, your personal data will be routinely deleted once any applicable retention period has expired, provided that the data is no longer required for the performance or initiation of a contract, we no longer have a legitimate interest in its continued storage, and/or you have not consented to its storage beyond that point.

    In Germany, specific retention periods apply in areas including, but not limited to, the following:

    • Commercial law (6, 8, or 10 years, pursuant to Section 257, Paragraph 4 of the German Commercial Code [HGB], depending on the type of document—e.g., opening balance sheets, annual financial statements, accounting vouchers, etc.
    • Tax law (10 years for all documents relevant for tax purposes)
    • Labor law (6 months for documents pertaining to unsuccessful job applicants)
  • What are your rights?:

    With regard to the processing of your personal data, you have the right to:

    • to request information regarding the personal data of yours that we process. In particular, you may request information about the purposes of the processing, the categories of personal data concerned, the categories of recipients to whom your data have been or will be disclosed, the envisaged storage period, the existence of a right to request rectification, erasure, restriction of processing, or to object to processing, the right to lodge a complaint, the source of your data (if not collected from you), and the existence of automated decision-making, including profiling, as well as meaningful information about the details thereof (Art. 15 GDPR);
    • to request the immediate rectification of inaccurate personal data or the completion of incomplete personal data that we hold about you (Art. 16 GDPR);
    • to request the erasure of your personal data that we hold, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims (Art. 17 GDPR);
    • to request the restriction of the processing of your personal data if you contest the accuracy of the data, if the processing is unlawful but you oppose the erasure of the data, if we no longer need the data but you require them for the establishment, exercise, or defense of legal claims, or if you have objected to the processing pursuant to Art. 21 GDPR (Art. 18 GDPR);
    • to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request the transmission of such data to another controller (data portability, Art. 20 GDPR);
    • not to be subject to a decision based solely on automated processing—including profiling—which produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR);
    • to lodge a complaint with a supervisory authority (Art. 77 GDPR);
    • to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions (Art. 21 GDPR);
    • to withdraw your consent at any time. As a result, we will no longer be permitted to continue the data processing that was based on this consent for the future (Art. 7(3) GDPR).
  • When and how can you object to data processing?:

    If your personal data is processed on the basis of legitimate interests in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR or for direct advertising or profiling, you have the right to object to data processing at any time. This then means that we are no longer allowed to continue processing your personal data in the future unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the data processing serves to assert, exercise or defend legal claims.

    However, the right to object only applies if there are reasons for doing so that arise from your particular situation or if your objection is directed against direct advertising. In the latter case, you have a general right to object, which we will implement without specifying a special situation.

    If you would like to exercise your right to object, simply send us a message (contact details see above).

  • When and how can you withdraw your consent?:

    You may revoke any consent you have given at any time. Should you do so, we will no longer be permitted to continue processing the personal data that was based on that consent.

    If you wish to exercise your right of revocation, simply send us a message (see contact details above).

  • Who can you complain to?:

    Regarding our processing of your personal data, you have the right to lodge a complaint with a data protection supervisory authority. A list of the state-level data protection supervisory authorities can be found, for example, at the following address: www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

  • When and why is the provision of your data required?:

    When making inquiries via email, you provide us with your personal data (e.g., name, address, or email address).

    In some cases, the provision of your personal data is required by law (for example, under tax law regulations). It may also be necessary for the execution of contractual or pre-contractual measures. Failure to provide your personal data would mean that a contract cannot be concluded with you or that your inquiry cannot be answered.

    The provision of the following data is strictly required for the execution of contracts or pre-contractual measures, or for communicating with us:

    • First and last name
    • Address
    • Email address
    • Customer data (e.g., customer number)
    • Text input
    • Telephone number (e.g., for follow-up questions or responding to customer inquiries)

    Unless otherwise stated in this privacy policy, all other information is provided on a voluntary basis.

  • How can you contact us?:

    You can contact us either by post, telephone or email (see above).

    If you e.g. If you contact us by email, for example, we automatically save the personal data you voluntarily send to us for the purpose of processing your request or contacting you. This data will not be passed on to third parties.

  • How do we secure our website?:

    Taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of the processing as well as the different probability of occurrence and severity of the risk to the rights and freedoms of natural persons, we take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk (Art. 32 GDPR). These measures include, in particular, ensuring the confidentiality, integrity and availability of data. We have also set up business processes that ensure, in particular, the protection of the rights of those affected, the deletion of data and the response to data breaches. In addition, we observe the principles of data protection law, including data protection through technical design and through data protection-friendly default settings (privacy by design and privacy by default, Art. 25 GDPR).

    For security reasons and to protect the transmission of your personal data and other confidential content, we use encrypted transmission on our website using an SSL/TLS certificate. You can recognize this by the fact that “https” (instead of “http”) appears in the address bar of your browser, as well as a lock symbol and a different color representation.