Data Privacy

Processing of personal data related to your use of our website and applications Categories of personal data processed, purpose of the processing and legal basisWhen visiting Concept’ websites, applications or online tools (each a “Concept Online Offering”), Concept may process the following personal data about you:

- Personal data that you actively and voluntarily provide via the Concept Online Offering (e.g., when registering, contacting us with your inquiries or participating in surveys, etc.), including name, e-mail address, telephone number, information submitted as part of a support request, comments or forum posts, etc.; and
- Information that is automatically sent to us by your web browser or device, such as your IP-address, device type, browser type, referring site, sites accessed during your visit, the date and time of each visitor request.

We process your personal data for the following purposes:

- To provide the Concept Online Offering’s services and functions and to administer your use of the Concept Online Offering;
- To verify your identity (if you registered for a Concept Online Offering);
- To answer and fulfil your specific requests; and
- As reasonably necessary to enforce the applicable terms of use, to establish or preserve a legal claim or defense, to prevent fraud or other illegal activities, including attacks on Concept’ information technology systems.
- If you are an existing customer of Concept Financial Services Ltd., (or are applying to become a customer of Concept Financial Services Ltd.), please click here to understand how we process your information.

The legal basis for Concept processing data about you is that such processing is necessary for the purposes of:

- Concept exercising its rights and performing its obligations in connection with any contract we make with you (Article 6 (1) (b) General Data Protection Regulation);
- Compliance with Concept’ legal obligations (Article 6 (1) (c) General Data Protection Regulation); and/or
- Legitimate interests pursued by Concept (Article 6 (1) (f) General Data Protection Regulation). Generally, the legitimate interest pursued by Concept in relation to our use of your personal data is the the efficient performance or management of your use of the Concept Online Offerings.

In some cases, we may ask if you consent to the relevant use of your personal data. In such cases, the legal basis for Concept processing that data about you may (in addition or instead) be that you have consented (Article 6 (1) (a) General Data Protection Regulation).Cookies. We may use cookies within Concept Online Offerings. You can find information on Concept’ use of cookies in our Cookie Notice. The Cookie Notice also provides information on how to block and object to the use of cookies and the processing of data collected by cookies.Links to other websites. This Privacy Notice applies only to Concept Online Offerings and not to other websites or applications operated by third parties. We may provide links to other websites and applications which we believe may be of interest to you. Concept is not responsible for the privacy practices of such other websites or applications.

Processing of personal data related to your business relationship with Concept GmbH Categories of personal data processed, purpose of the processing and legal basisIn the context of the business relationship with Concept, Concept may process the following categories of personal data of current and future contact persons at our customers, suppliers, vendors and partners (each a “Business Partner”):

- Contact information, such as full name, work address, work telephone number, work mobile phone number, work fax number and work email address;
- Payment data, such as data necessary for processing payments and fraud prevention, including credit/debit card numbers, security code numbers and other related billing information;
- Further information necessarily processed in a project or contractual relationship with Concept or voluntarily provided by the Business Partner, such as personal data relating to orders placed, payments made, requests, and project milestones;
- Personal data collected from publicly available resources, integrity data bases and credit agencies; and
- If legally required for Business Partner compliance screenings: date of birth, ID numbers, identity cards and information about relevant and significant litigation or other legal proceedings against Business Partners.

Concept may process the personal data for the following purposes:

- Communicating with Business Partners about products, services and projects of Concept or Business Partners, e.g. by responding to inquiries or requests or providing you with technical information about purchased products;
- Planning, performing and managing the (contractual) relationship with Business Partners; e.g. by performing transactions and orders of products or services, processing payments, performing accounting, auditing, billing and collection activities and providing support services;
- Administrating and performing customer surveys, marketing campaigns, market analysis or other promotional activities or events;
- Maintaining and protecting the security of our products, services and websites, preventing and detecting security threats, fraud or other criminal or malicious activities;
- Ensuring compliance with legal obligations (such as record keeping obligations), export control and customs, Business Partner compliance screening obligations (to prevent white-collar or money laundering crimes), and Concept policies or industry standards; and

The legal basis for Concept processing data about you is that such processing is necessary for the purposes of:

- Concept exercising its rights and performing its obligations in connection with any contract we make with you (Article 6 (1) (b) General Data Protection Regulation),
- Compliance with Concept’ legal obligations (Article 6 (1) (c) General Data Protection Regulation), and/or
- Legitimate interests pursued by Concept (Article 6 (1) (f) General Data Protection Regulation).

Generally, the legitimate interest pursued by Concept in relation to our use of your personal data is the efficient performance or management of our business relationship with you. In some cases, we may ask if you consent to the relevant use of your personal data.

In such cases, the legal basis for Concept processing that data about you may (in addition or instead) be that you have consented (Article 6 (1) (a) General Data Protection Regulation). Transfer and disclosure of personal data Concept may transfer your personal data to:

- other Concept companies in connection with your use of the Concept Online Offerings or our business relationship with you;
- third parties which provide IT services to Concept and which process such data only for the purpose of such services (e.g., hosting or IT maintenance and support services); and
- courts, arbitration bodies, law enforcement authorities, regulators or attorneys if necessary to comply with the law or for the establishment, exercise or defense of rights or legal claims.

Personal data published by you on Concept Online Offerings (such as chat rooms or forums) may be globally accessible to other registered user of the respective Concept Online Offering.

Retention periods

Unless indicated otherwise at the time of the collection of your personal data (e.g. within a form completed by you), we erase your personal data if the retention of that personal data is no longer necessary (i) for the purposes for which they were collected or otherwise processed, or (ii) to comply with legal obligations (such as retention obligations under tax or commercial laws).

Personal data published by you on Concept Online Offerings (such as chat rooms or forums) may be globally accessible to other registered user of the respective Concept Online Offering.

Retention periods

Your rights Under applicable data protection law

You may have the right to:

- Obtain from Concept confirmation as to whether or not personal data concerning you are being processed, and where that is the case, access to the personal data;
- Obtain from Concept the rectification of inaccurate personal data concerning you;
- Obtain from Concept the erasure of your personal data;
- Obtain from Concept restriction of processing regarding your personal data;
- Data portability concerning personal data, which you actively provided; and
- Object, on grounds relating to your particular situation, to processing of personal data concerning you.

Data privacy contact

The Concept Data Protection Organization provides support with any data privacy related questions, comments, concerns or complaints or in case you wish to exercise any of your data privacy related rights. The Concept Data Privacy Organization may be contacted at:

admin[at]Conceptgmbh.com.

The Concept Data Privacy Organization will always use best efforts to address and settle any requests or complaints you bring to its attention. Besides contacting the Concept Data Privacy Organization, you always have the right to approach the competent data protection authority with your request or complaint. A list and contact details of local data protection authorities is available here.