Privacy Policy for our Website

We appreciate your interest in using our website. The protection of personal data is our highest priority. Below you will find information about the processing of your personal data and your rights when using our website.

1. Controller

The controller for data processing is:
Scheja & Partners GmbH & Co. KG
Adenauerallee 136
53113 Bonn
Germany

Tel.: (+49) 0228-227 226 0
E-Mail: info@scheja-partners.de
Encrypted contact form

2. Data Protection Officer

You can reach our Data Protection Officer as follows:
Scheja & Partners GmbH & Co. KG
Data Protection Officer
Adenauerallee 136
53113 Bonn
Germany

Tel.: (+49) 0228-227 226 0
E-Mail: info@scheja-partners.de
Encrypted contact form

3. Your Rights as a Data Subject

As a data subject, you have the following rights under the General Data Protection Regulation (GDPR), provided the respective legal requirements are met:

Right of Access (Art. 15 GDPR): You have the right to obtain information about the data processed concerning you.
Right to Rectification (Art. 16 GDPR): You can request the rectification of inaccurate data concerning you. Furthermore, you can request the completion of incomplete data.
Right to Erasure (Art. 17 GDPR): In certain cases, you can request the erasure of your personal data.
Right to Restriction of Processing (Art. 18 GDPR): In certain cases, you can request that the processing of your data be restricted.
Right to Data Portability (Art. 20 GDPR): If you have provided data based on a contract or consent and the processing is carried out by automated means, you can request to receive the data you have provided in a structured, commonly used, and machine-readable format or to have it transmitted to another controller.

Right to object on a case-by-case basis:

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 sentence 1 lit. f) GDPR (balancing of interests).

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims.

Right to Withdraw Consent (Art. 7 para. 3 GDPR): If you have given consent to the processing of your data, you can withdraw it at any time with effect for the future. The lawfulness of the processing of your data until the withdrawal remains unaffected.

Exercising your rights: To exercise all your aforementioned rights, please contact our encrypted contact form, our email address: info@scheja-partners.de, or by mail to the address given above under section 1. Please ensure that we can clearly identify you.

If you believe that the processing of your personal data violates data protection law, you may also lodge a complaint with a supervisory authority, in particular in the EU Member State or federal state of your habitual residence, place of work, or the place of the alleged infringement you are complaining about.

This also applies to the supervisory authority responsible for us:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavallierstr. 2-4
40213 Düsseldorf

4. Automated Individual Decision-Making, Including Profiling

Automated decisions in individual cases, including profiling within the meaning of Art. 22 GDPR, do not take place in connection with the use of our service.

5. Details on Integrated Services and Functionalities

5.1 Our Own Services

5.1.1 Provision of the Website

Automated decisions in individual cases, including profiling within the meaning of Article 22 of the GDPR, do not take place in connection with the use of our service.

Personal data processed:	Date and time of access, duration of visit, type of device, operating system used, functions used, amount of data sent, type of event, IP address, domain name
Purpose(s):	Provision of the Website
Legal basis(es):	Art. 6 Para. 1 Subpara.. 1 lit..f) GDPR (Balancing of Interests). In doing so, we are pursuing a legitimate interest of providing our website.
Recipients of personal data:	Hosting provider, internal departments, external service provider for technical support
Third country transfer:	No
Storage period of personal data:	Deletion immediately after delivery by the web server

5.1.2. Log files

Personal data processed:	Accessed URL, IP address, time and date of access, amount of data transferred, HTTP status, information about browser type and version used
Purpose(s):	Statistical evaluations, improvement of the website, system security (e.g., prevention of misuse), error diagnosis
Legal basis(es):	Art. 6 para. 1 sentence 1 lit. f) GDPR (balancing of interests). In doing so, we pursue the legitimate interest in improving the website, system security (e.g., prevention of misuse), and error diagnosis. Art. 6 para. 1 sentence 1 lit. c) GDPR (fulfillment of legal obligation). This includes disclosures to government agencies upon request.
Recipients of personal data:	Hosting provider, internal departments, external service provider for technical support, government agencies upon request
Third country transfer:	No
Storage period of personal data:	Deletion 9 weeks after creation

5.1.3. Contact Form

Personal data processed:	First and last name of the contact person, organization, postal address, telephone number, email address, content of the message, requested contact person, attachments
Purpose(s):	Receiving and processing inquiries, complaints, or other feedback
Legal basis(es):	Art. 6 para. 1 sentence 1 lit. f) GDPR (balancing of interests). In doing so, we pursue the legitimate interest in receiving and processing inquiries, complaints, or other feedback. Art. 6 para. 1 sentence 1 lit. c) GDPR (fulfillment of legal obligation). This includes disclosures to government agencies upon request.
Recipients of personal data:	Hosting provider, internal departments, government agencies upon request
Third country transfer:	No
Storage period of personal data:	Deletion after final processing of the request
Obligation to provide personal data and consequences of non-provision:	All information in the contact form marked with (required field) must be provided to ensure that the request can be processed.

5.1.4. Newsletter

Personal data processed:	Email address, date and time of registration and unregistration
Purpose(s):	Sending the newsletter, proof of consent
Legal basis(es):	Art. 6 para. 1 lit. a) GDPR (consent), Art. 6 para. 1 lit. c) in conjunction with Art. 5 para. 1 lit. a), para. 2, Art. 7 para. 1 GDPR (fulfillment of legal obligation)
Recipients of personal data:	Hosting provider, internal departments, government agencies upon request
Third country transfer:	No
Storage period of personal data:	Email address, date and time of registration and unregistration: Deletion 3 years after unsubscription from the newsletter or discontinuation of our newsletter service
Obligation to provide personal data and consequences of non-provision:	No obligation to provide, but without providing the email address, registration for the newsletter is not possible.

Status: August 2025