Privacy Policy

ATHEGIS Holding GmbH, Theatinerstrasse 14, 80333 Munich (hereinafter “ATHEGIS”), hereby provides information about the processing of personal data carried out by us.

You can contact our Data Protection Officer by email at info@athegis.com.

Below, we have compiled the most important information regarding typical data processing activities, separated by categories of data subjects. For certain processing activities that only affect specific groups, the information obligations will be fulfilled separately.

Whenever the term “data” is used in the text, it exclusively refers to personal data within the meaning of the GDPR.

  1. Website Visitors
  2. Visitors of ATHEGIS Social Media Profiles
  3. Communication Partners and Interested Parties
  4. Rights of Data Subjects and Additional Information
  5. Website Visitors

 

When using the website, certain information is automatically transmitted to the server of our website by the browser used on the end device for technical reasons. These data are stored and processed on our server.

  • We process the data listed below for the purpose of providing the requested website content, ensuring the security of our IT infrastructure, troubleshooting, enabling and simplifying searches on the website, and managing cookies. A change of purpose is not planned.
  • The processed data are HTTP data: HTTP data are protocol data that are technically generated when the website is accessed via the Hypertext Transfer Protocol (Secure) (HTTP(S)). This includes the IP address, type and version of your internet browser, operating system used, the page accessed, the previously visited page (referrer URL), date and time of access. HTTP(S) data may also be collected on the servers of service providers (e.g. when accessing third-party content).
  • The legal basis for the processing is our legitimate interest in the technical operation of an online presence (Art. 6 (1) lit. f GDPR).
  • The data are automatically provided by the browser of the data subject.
  • Recipients of the personal data are IT service providers which we use as processors within the framework of a data processing agreement.
  • IP addresses are anonymized at the end of the session. Pseudonymized usage data are deleted no later than 14 days thereafter.
  • Without the disclosure of personal data – such as the IP address – the use of the website is not possible. Communication via the website without providing data is technically impossible.

Visitors of ATHEGIS Social Media Profiles

ATHEGIS maintains profiles on social media platforms. These social media platforms are operated by service providers that process data necessary for the provision of such pages.

  • The purpose of data processing on our social media profiles is to provide engaging content and to interact with visitors on social media platforms. Depending on the respective social media service, usage data may also be analyzed in order to improve our social media presence.
  • The processed data include content and usage data on the social media profiles.
  • Information and data displayed or shared on ATHEGIS social media profiles may be accessible to the respective social media platform operator, its users, or commissioned service providers.
  • Further details on data processing are described below:

 

LinkedIn:

ATHEGIS and LinkedIn (for users in the EU/EEA: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland) are joint controllers for the processing of personal data relating to the ATHEGIS LinkedIn page. The joint controller agreement can be accessed at: https://www.linkedin.com/legal/l/page-joint-controller-addendum. According to the agreement, LinkedIn is responsible for informing data subjects about the processing activities. LinkedIn’s Privacy Policy is available at: https://www.linkedin.com/legal/privacy-policy. Data subjects may exercise their rights against either of the joint controllers, ATHEGIS and/or LinkedIn. Further information on the data that LinkedIn shares with ATHEGIS can be found at https://www.linkedin.com/help/linkedin/answer/a547077/viewing-company-page-analytics?lang=en. The legal basis for the processing of data by ATHEGIS is our legitimate interest in analyzing usage data in order to improve the LinkedIn page (Art. 6 (1) lit. f GDPR).

Communication Partners and Interested Parties

    • The purpose of processing is the initiation and performance of a contractual relationship or other communication. A change of purpose is not planned.
    • The processed data include name, contact details, communication content, as well as the time and technical metadata of the communication.
    • The legal bases for processing your data are, in the case of contracts with natural persons, the initiation or performance of a contract (Art. 6 (1) lit. b GDPR); in the case of contracts with legal entities, our legitimate interest in communicating with the relevant contractual contacts (Art. 6 (1) lit. f GDPR); as well as compliance with legal obligations, in particular tax and commercial law requirements (Art. 6 (1) lit. c GDPR). In the case of mere communication, the legal basis is our legitimate interest in documenting communication processes (Art. 6 (1) lit. f GDPR).
    • Contact details are actively provided by the data subject. Communication metadata and communication data are collected automatically.
    • Contact and contract data may be transferred to other service providers, business partners and public authorities, insofar as this is necessary for the performance of the contract or assignment. We also use service providers as processors within the framework of a data processing agreement, in particular for the provision, maintenance and servicing of IT systems.
    • The data of contracting parties and service providers will be deleted ten calendar years after termination of the contract or assignment. Inquiries and mere communications will be automatically deleted after ten calendar years.
    • The processing of contact data of service providers and business partners is necessary for the performance of the contract or assignment. If the data are not provided, communication may be significantly impaired. For interested parties, the provision of data is required. Without the provision of data, communication is not possible.

Rights of Data Subjects and Additional Information

    • We do not use any automated individual decision-making processes.
    • A change of the above-mentioned purposes is not planned.
    • You have the right to request information at any time about all personal data that we process concerning you.
    • If your personal data are incorrect or incomplete, you have the right to request rectification and completion.
    • You may request the erasure of your personal data at any time, unless we are legally obliged or entitled to continue processing the data.
    • If the legal requirements are met, you may request restriction of the processing of your personal data.
    • You have the right to object to the processing insofar as the data processing is carried out for the purposes of direct marketing or profiling.
    • If processing is based on a balancing of interests, you may object to the processing by stating reasons arising from your particular situation.
    • If the data processing is based on consent or carried out within the framework of a contract, you have the right to receive the data you have provided in a structured, commonly used and machine-readable format, provided that the rights and freedoms of other persons are not affected.
    • If we process data on the basis of your consent, you have the right to withdraw this consent at any time with effect for the future. The processing carried out prior to the withdrawal remains unaffected.
    • You also have the right to lodge a complaint at any time with a data protection supervisory authority if you believe that data processing has been carried out in violation of applicable law.

 

Last updated: May 2026