top of page

Privacy Policy

Status: September 2026

1. Controller

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

EWIA Green Investments GmbH
Leopoldstraße 244
80807 Munich
Germany

Managing Directors: Ralph Schneider and Timo Schäfer

Phone: +49 (0) 89 208039-160
Email: info@ewiainvestments.com
Website: www.ewiainvestments.com

2. Hosting and Provision of the Website

Our website is operated and hosted using technical services provided by Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel.

Wix processes personal data in connection with the provision of its services and, where applicable, on our behalf based on a data processing agreement pursuant to Article 28 GDPR.

In connection with the operation and use of our website, the following data may be processed:

IP address
Browser type and version
Operating system
Device information
Date and time of access
Accessed pages and content
Referrer URL
Technical usage and log data
Other data required for the technical provision of the website

Processing is carried out in particular for the technical provision, stability, security, and optimization of our website, as well as for detecting and preventing misuse and technical malfunctions.

Legal basis: Article 6(1)(f) GDPR.

Our legitimate interest lies in the secure, stable, and efficient provision of our website.

Depending on the services and functions used, Wix may also process personal data outside the European Union (EU) or the European Economic Area (EEA). Further information can be found in Wix’s privacy information.

3. Purposes and Legal Bases of Processing

We process personal data only where permitted by law or where consent has been obtained.

Processing is carried out in particular:

To provide our website (Article 6(1)(f) GDPR)
To process contact inquiries and carry out pre-contractual measures (Article 6(1)(b) GDPR)
To comply with legal obligations (Article 6(1)(c) GDPR)
Based on consent granted (Article 6(1)(a) GDPR)

 

Our legitimate interest pursuant to Article 6(1)(f) GDPR lies in the secure and efficient operation of our website and communication with prospective customers, clients, and business partners.

 

4. Cookies and Similar Technologies

Our website uses cookies and comparable technologies.

These are categorized as follows:

Essential: Technically necessary cookies for operating the website
Functional: Cookies to improve convenience and usability
Analytics: Cookies for statistical evaluation of website usage
Marketing: Cookies for marketing purposes and external services

Non-essential cookies are only set after your explicit consent.

You may adjust or withdraw your cookie settings at any time via the cookie banner.

5. Server Log Files

When visiting our website, information is automatically collected by the web server and stored in so-called server log files.

This includes in particular:

IP address
Date and time of access
Browser type and version
Operating system
Referrer URL
Accessed pages
Internet service provider

Processing is carried out to ensure the technical functionality, security, and stability of the website.

Legal basis: Article 6(1)(f) GDPR.

Unless security-related reasons require longer retention, log data will be deleted or anonymized after a maximum of seven days.

6. Contact Form and Email Contact

If you contact us via a contact form or email, we process the data you provide, in particular:

Name
Email address
Telephone number (if provided)
Content of your message

Processing is carried out solely for handling your inquiry and communicating with you.

Legal basis: Article 6(1)(b) GDPR for pre-contractual measures and Article 6(1)(f) GDPR for general inquiries.

 

7. Newsletter

If you subscribe to our newsletter, we process the following data:

Email address
IP address
Date and time of subscription

Subscription takes place using the double opt-in procedure.

Legal basis: Your consent pursuant to Article 6(1)(a) GDPR.

 

You may withdraw your consent at any time with future effect by using the unsubscribe link contained in each newsletter or by contacting us.

For the distribution of our newsletter, we use Mailchimp, a service provided by Intuit Inc., 2700 Coast Avenue, Mountain View, CA 94043, USA.

The data you provide for newsletter subscriptions is stored on Mailchimp servers and processed on our behalf.

Mailchimp may perform statistical analyses, including measuring opening rates and clicks on links within newsletters. These analyses are used exclusively to optimize our newsletter service.

Data transfers to the United States are carried out based on appropriate safeguards pursuant to Articles 44 et seq. GDPR, in particular through the use of Standard Contractual Clauses (SCCs) adopted by the European Commission.

8. Recipients of Personal Data

Within our company, access to personal data is granted only to those individuals who require such data for the performance of their respective duties.

In addition, personal data may be transferred to the following categories of recipients:

Hosting and IT service providers
Wix.com Ltd. as the website hosting provider
Mailchimp (Intuit Inc.) as the provider of our newsletter services
Tax advisors, auditors, and legal advisors
Public authorities and governmental bodies where required by law

Any disclosure of personal data is made exclusively on the basis of applicable legal provisions or appropriate contractual arrangements.

9. Transfers to Third Countries

In connection with the use of Wix, Mailchimp, or other services utilized by us, personal data may be transferred to countries outside the European Union (EU) or the European Economic Area (EEA), particularly to the United States.

Such transfers are carried out only on the basis of appropriate safeguards pursuant to Articles 44 et seq. GDPR, in particular through the execution of Standard Contractual Clauses (SCCs) adopted by the European Commission.

Despite these safeguards, it cannot be ruled out that authorities in third countries may gain access to personal data without a level of data protection comparable to that provided within the European Union.

 

10. Retention Period

We retain personal data only for as long as necessary to fulfill the respective processing purposes or as required by statutory retention obligations.

In particular:

Contact inquiries: until the inquiry has been fully processed and thereafter only to the extent required by law
Newsletter data: until consent is withdrawn
Server log data: generally for a maximum of seven days
Business and tax-related data: in accordance with applicable statutory retention periods

Once the respective processing purpose no longer applies, the data will be deleted or anonymized.

 

11. Data Security

We implement appropriate technical and organizational security measures to protect personal data against loss, misuse, alteration, or unauthorized access.

Our website uses SSL/TLS encryption to ensure the secure transmission of confidential information.

 

12. Your Rights under the GDPR

Under the applicable legal provisions, you have the following rights:

Right of access to your stored personal data (Article 15 GDPR)
Right to rectification of inaccurate personal data (Article 16 GDPR)
Right to erasure ("right to be forgotten") (Article 17 GDPR)
Right to restriction of processing (Article 18 GDPR)
Right to data portability (Article 20 GDPR)
Right to object to processing (Article 21 GDPR)
Right to withdraw consent at any time (Article 7(3) GDPR)
Right to lodge a complaint with a supervisory authority (Article 77 GDPR)

 

To exercise your rights, simply contact us at:

info@ewiainvestments.com

bottom of page