Privacy notice of Finyoz Deutschland GmbH

By using our website and services, personal data may be collected, processed, and used. The legal basis for the processing of your personal data depends on the specific context in which we collect it:

You have consented to the processing

Where you have given us your explicit consent, we process your data on the basis of Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

Processing is necessary for the performance of a contract

When the processing of personal data is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract, this is based on Article 6(1)(b) GDPR.

Processing is necessary for the purposes of legitimate interests

Where processing is necessary for the purposes of the legitimate interests pursued by Finyoz or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms, we process data on the basis of Article 6(1)(f) GDPR.

Processing is necessary for compliance with a legal obligation

Where the processing of personal data is necessary for compliance with a legal obligation to which Finyoz is subject, we process data on the basis of Article 6(1)(c) GDPR. This includes obligations under commercial law, tax law, and anti-money laundering regulations.

We collect and process your personal data for the following purposes:

Product requirements and account management

To verify your identity, assess your creditworthiness, create and manage your account, and provide you with our invoice financing and investment services.

Order processing

To process your transactions, manage payments, and handle the financing of invoices on our platform.

Support and communication

To respond to your enquiries, provide customer support, and send you important information regarding your account and our services.

Legal obligation

To comply with applicable legal requirements, including anti-money laundering (AML) regulations, know-your-customer (KYC) checks, tax reporting obligations, and financial regulatory requirements.

We offer various communication channels through which you can contact us. When using these channels, the following data processing takes place:

Contact form

When you use the contact form on our website, we collect your name, email address, and the content of your message. This data is used exclusively to process your enquiry.

Telephone

When you contact us by telephone, we may record the date, time, and duration of the call as well as your telephone number for quality assurance and documentation purposes.

Chat

When you use our chat function, the content of the conversation and any personal data you provide are processed to handle your enquiry.

Email

When you send us an email, we process the content of the email, your email address, and any attachments to respond to your enquiry.

Video conference

For video conferences, we use third-party tools. The following providers may be used:

• Zendesk — for customer support and ticketing
• Zoom — for video conferences and meetings
• Microsoft Teams — for video conferences and collaboration

When you apply for a position at Finyoz, we collect and process your personal data (such as your name, contact details, CV, cover letter, and any other documents you submit) for the purpose of evaluating your application and managing the recruitment process.

Improving our services

We use anonymised and aggregated data derived from applications to improve our recruitment processes and services.

Statistics

Application data may be used in anonymised form for internal statistical purposes.

Retention periods

If your application is unsuccessful, we will retain your application data for a maximum of 6 months after the end of the recruitment process, unless you have given us your consent to store your data for a longer period for future job opportunities. If your application is successful, your data will be transferred to your personnel file.

We may disclose your personal data to third parties in the following circumstances:

• To service providers who process data on our behalf (e.g. payment processors, identity verification providers, cloud hosting services)
• To regulatory authorities where required by law (e.g. BaFin, tax authorities)
• To our partners as necessary for the provision of our services (e.g. DonauCapital Wertpapier GmbH, trade credit insurers)

Cookies and tracking technologies

Our website uses cookies and similar technologies to improve your browsing experience and to analyse website traffic.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies to analyse your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

IP anonymisation

We have activated IP anonymisation on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA.

You can prevent the collection of data generated by cookies and relating to your use of the website by downloading and installing the Google Analytics browser plugin.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, regular security assessments, and employee training on data protection.

Our website may contain links to third-party websites. We have no control over the content and data protection practices of these websites and accept no responsibility for them. We recommend reviewing the privacy policies of any third-party websites you visit.

In certain cases, your personal data may be transferred to countries outside the European Economic Area (EEA). Where such transfers take place, we ensure that appropriate safeguards are in place to protect your personal data, such as EU Standard Contractual Clauses or an adequacy decision by the European Commission.

We reserve the right to amend this privacy policy at any time in order to reflect changes to our data processing practices or to comply with new legal requirements. Any changes will be published on this page. We recommend reviewing this privacy policy regularly to stay informed about how we protect your data.

Under the applicable data protection laws, you have the following rights with respect to your personal data:

• Right of access — You have the right to obtain confirmation as to whether personal data concerning you is being processed and to request access to that data.
• Right to rectification — You have the right to request the correction of inaccurate personal data concerning you.
• Right to erasure — You have the right to request the deletion of your personal data where there is no compelling reason for its continued processing.
• Right to restriction of processing — You have the right to request the restriction of processing of your personal data under certain circumstances.
• Right to data portability — You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object — You have the right to object to the processing of your personal data at any time for reasons relating to your particular situation.
• Right to withdraw consent — Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at privacy@finyoz.com.

If you believe that our processing of your personal data violates data protection law, you have the right to lodge a complaint with a supervisory authority. You may do so in particular in the EU member state of your habitual residence, place of work, or the place of the alleged infringement.

The competent supervisory authority for Finyoz is:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach, Germany
Website: www.lda.bayern.de

Finyoz Deutschland GmbH
Weihenstephaner Str. 12
81673 Munich
Germany

Email: privacy@finyoz.com