The basis of effective data protection is comprehensive information about the collection, processing and use of your data ("data processing"). I would therefore like to inform you, - when and for which actions I process data - which data I process and for what reasons - who receives data - what rights you have due to data processing by me.

This privacy policy only regulates the use of personal data on the website www.paradais.org. If you leave the website via a link or visit my presence on a social media platform, you also leave the scope of this privacy policy. The transmission of information to or from this website is secured with TLS encryption. You can access, print or download this privacy policy permanently and at any time at www.paradais.org.

I. Contact information

The organization responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Paradais Investment GmbH, Jessnerstraße 9, 10247 Berlin
E-mail address: magdalena.wagner@paradais.org

If you have any questions about the processing of your personal data or your rights in relation to data protection, please contact magdalena.wagner@paradais.org.

II. General information on data processing

1. Scope of the processing of personal data
I only process the personal data of the users insofar as this is necessary to provide a functional website and the content and services. In addition, the scope of data processing depends on your use of the functionalities of the website, for example if you communicate with me via the contact form or consent to the processing of data. The processing of personal data of my users only takes place regularly with the consent of the user. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law. You are not obliged to provide me with personal data. However, if the provision of this data is technically mandatory in order to access this website, refusal will result in you being unable to access and use the website. As a visitor to the website, you are not subject to automated decision-making within the meaning of Art. 22 GDPR.

2. Legal basis for the processing of personal data
The legal bases for the processing of personal data are described below.
- Fulfillment of the contract or implementation of pre-contractual measures (Art. 6 para. 1 b): Processing is only carried out to the extent necessary for the exercise and fulfillment of the rights and obligations arising from the contract. Unless expressly stated otherwise, I only process data to this extent.
- Legitimate interest (Art. 6 para. 1 f): Processing takes place insofar as I have a legitimate interest and no conflicting overriding interests of the data subject are apparent. The specific interest is explained in this privacy policy as part of the processing description.
- Consent (Art. 6 para. 1 a): Processing takes place if you have expressly consented to the type and scope of data processing. You can withdraw your consent at any time with effect for the future. However, this will not affect the processing that has taken place up to this point in time.
- Legal obligation (Art. 6 para. 1 c): Processing takes place insofar as this is necessary to fulfill German or European legal obligations.

3. Data erasure and storage duration
The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

III. Data processing for the provision of the website

In order for me to display the website to you, it is necessary to process certain information. Each time our website is accessed, the system automatically collects data and information from the computer system of the accessing computer. The following data is collected:
- IP address (anonymized)
- Date and time at the time of access
- Referrer URL (the previously visited website)
- Requested website or file
- Browser used / version
- Operating system used
- Type of device used

The storage of this data, including your IP address, serves the legitimate interest in providing the website. The data is deleted as soon as you leave this site. I process the aforementioned data for the following purposes:
- Ensuring a smooth connection to the website,
- Ensuring a comfortable use of my website,
- Evaluation of system security and stability and
- For other administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. I have a legitimate interest in presenting you with a website that is optimized for your browser and enabling communication between our server and your end device. In particular, the processing of your IP address is necessary for the latter. Under no circumstances do I use the data collected for the purpose of drawing conclusions about your person. I also use cookies when you visit our website. You can find more detailed explanations on this in section IV of this privacy policy.

1. Contact form and e-mail contact
There is a contact form on the website that can be used to contact me electronically. If the user makes use of this option, the data entered in the input mask will be transmitted to me and stored. These data are
- Name, first name
- E-mail address
- Message

The following data is also stored at the time the message is sent:
- Date and time of sending

As part of the sending process, your consent is obtained for the processing of the data and reference is made to this privacy policy. Alternatively, you can contact me via the e-mail address provided. In this case, the personal data of the user transmitted with the e-mail will be stored. The data will not be passed on to third parties in this context. The data is used exclusively for processing the conversation.

The processing of the personal data from the input mask serves me solely to process the contact. In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of my information technology systems. The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given consent.

The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.

For personal data sent by email, this is the case when the respective conversation with you has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

2. Social media plugin
I operate company profiles within social networks and platforms in order to communicate with the users and interested parties active there and to be able to inform them about my services. When accessing the respective networks and platforms via the links shown on the website, the terms and conditions and data processing guidelines of their respective operators apply. Unless otherwise stated in my privacy policy, I process users' data if they communicate with me within social networks and platforms, e.g. write posts on my online presences or send me messages. I maintain my company profiles on the following social media networks:

LinkedIn
LinkedIn is a social media network of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA, ("LinkedIn") represented in Europe by LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland. The link can be recognized by the "in" logo. You can find LinkedIn's privacy policy here: https://www.linkedin.com/legal/privacy-policy IV.

Cookies
I use cookies on my website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit my website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware. Information is stored in the cookie that results in each case in connection with the specific end device used. I use cookies to ensure that the website functions properly. Some elements of the website require that the accessing browser can be identified even after a page change. For these, it is necessary for the browser to be recognized even after a page change. The user data collected by technically necessary cookies is not used to create user profiles. The legal basis for the processing of personal data using technically necessary cookies within the meaning of § 25 para. 2 TTDSG is Art. 6 para. 1 lit. f GDPR. Cookies are stored on the user's computer and transmitted from there to my website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the storage of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for my website, it may no longer be possible to use all functions of the website to their full extent.

V. Right of objection and removal
If the data processing is based on your consent or my legitimate interest, you have the right to object to the processing or to withdraw your consent at any time. Your objection or revocation only has effect for the future. If the analysis cookies used offer their own technical options for deactivation, this is shown there in each case. You can contact magdalena.wagner@paradais.org at any time to exercise your right of objection or revocation. If you object to processing based on my legitimate interest, i may nevertheless continue the processing if i can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.

VI. Rights of data subjects
If your personal data is processed, you are a data subject within the meaning of Art. 4 para. 1 GDPR. As a data subject, you have the following rights in relation to your personal data. To exercise these rights, you can contact us using the contact details provided above.
Right to information in accordance with Art. 15 GDPR
You have a right to information about your personal data processed by me. This includes the mandatory information set out in Art. 15 GDPR. ​
Right to rectification in accordance with Art. 16 GDPR
You have the right to obtain without undue delay the rectification of inaccurate personal data and the completion of incomplete personal data.
Right to erasure in accordance with Art. 17 GDPR
You have the right to request the erasure of your personal data if one of the grounds specified in Art. 17 GDPR applies, in particular if there is no longer a legal basis for the processing.
Right to restriction of processing in accordance with Art. 18 GDPR You have the right to request the restriction of the processing of your personal data if one of the reasons stated in Art. 18 GDPR applies, in particular at your request instead of deletion of the data.
Right to data portability in accordance with Art. 20 GDPR
You have the right to request all personal data i have stored about you in a structured, commonly used and machine-readable format and to transmit this data to another controller without hindrance from the controller to which the personal data has been provided.
Right to lodge a complaint with the competent supervisory authority, Art. 77 GDPR In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority responsible for you.

The competent supervisory authority is:
Berlin Commissioner for Data Protection and Freedom of Information Maja Smoltczyk
Friedrichstr. 219, 10969 Berlin
Phone.: +49 (0)30 13889-0
Fax: +49 (0)30 2155050
Email: mailbox@datenschutz-berlin.de

VII. Recipients of data
If i transfer data to other persons and companies (processors or third parties) as part of my processing or otherwise grant them access to the data, this is only done on the basis of a legal permission, you have consented, a legal obligation provides for this, for the processing of contractual relationships with you or I have a legitimate interest in the data transfer (e.g. when using agents, web hosts, etc.). If I commission third parties with the processing of data on the basis of a so-called "order processing contract", this is done on the basis of Art. 28 GDPR.

VIII. Data transfer to third countries
The personal data that I collect from you on the website will not be transferred to third countries outside the European Economic Area. When using the share functions of social networks, personal data may be transferred in the cases described above. A third country is considered unsafe if the EU Commission has not issued an adequacy decision for this country in accordance with Art. 45 para. 1 GDPR, which confirms that there is adequate protection for personal data in the country. With the ECJ ruling of July 16, 2020 (C-311/18), the (partial) adequacy decision for the USA, the so-called Privacy Shield, was declared null and void. According to the ECJ, the USA does not offer a level of data protection comparable to that in the EU. If personal data is transferred to the USA, there is a risk that US authorities could gain access to the personal data on the basis of the PRISM and UPSTREAM surveillance programs based on Section 702 of the FISA (Foreign Intelligence Surveillance Act), as well as on the basis of Executive Order 12333 or Presidential Police Directive 28. EU citizens have no effective legal protection against this access in the USA or the EU. When you activate and use the social media plugins, your IP address and other data, such as the information that you have visited this site, is sent to the operator.

LinkedIn transmits data to LinkedIn Corporation 1000 W Maude Ave Sunnyvale, CA, US, on the basis of standard contractual clauses approved by the European Commission. I have no influence on this processing. We myself do not pass on any personal data to LinkedIn that I receive via my presence on LinkedIn.

IX. Date and amendment of the privacy policy
This privacy policy is currently valid and was last updated in January 2025. It may become necessary to amend this privacy policy as a result of the further development of my website and services or due to changes in legal or official requirements. You can access and print out the current privacy policy at any time on my website at www.paradais.org.