Privacy policy

Name and contact details of the person responsible:

The following body is responsible according to Art. 4 No. 7 of the General Data Protection Regulation (GDPR) (hereinafter: "Controller"):

Owner, Mr. Timo Züfle, Werkstraße 9, 72270 Baiersbronn, phone: +49 175 1252205, e-mail: Support@Brokerscaminvestigation.com

I. Data processing via the website, e-mail and other means of communication

Scope of processing

The person responsible can be reached for your inquiries by post, e-mail, messenger, contact form, telephone or via social networks. Simple requests that do not require identification of your person can be made anonymously. If your identification is required, e.g. to reply to you or call you back, the person responsible collects your contact details.

If you write a message via the contact form of the person responsible, he will collect the personal data you have entered (first name, last name, e-mail address, message content). In addition, it records your IP address and log files about the date and time of sending the message. 

Purpose of the processing

Your personal data will be processed in order to identify you, to assign, store, respond or, if necessary, forward your message to an existing contract, job advertisement, application process or other business relationship. 

Legal basis of the processing

If you have given your consent to the person responsible on the occasion of correspondence with you, e.g. in the context of the contact form, he may use your data within the scope of your consent in accordance with Art. 6 Para. 1 S. 1 lit a GDPR. 

The processing of your data may be necessary in individual cases for the performance of a contract to which you are a party or for the implementation of pre-contractual measures taken at your request, Art. 6 Para. 1 S. 1 lit. b GDPR.

The processing of personal data may also be carried out on the basis of the legitimate interests of the person responsible pursuant to Art. 6 Para. 1 S. 1 lit. f GDPR.

Legitimate interests

The Controller has a legitimate economic interest in being reachable via its contact forms and (electronic) means of communication for processing and responding to inquiries with an interest in its products and responding to your inquiries. In addition, he has a legitimate interest in processing your data, insofar as you are, for example, managing director, employee, job applicant, customer, potential customer or other representative of a contractual partner of the person responsible. The controller also collects information in order to review your job application. He also processes your data for the purpose of fulfilling the contract, asserting or defending claims. 

Recipients or categories of recipients

As a rule, your personal data will be processed by the controller. The latter will only pass on your personal data, which it has received via electronic means of communication, to external recipients if this is necessary in individual cases to process your request.

Third country transmission

The controller will not transfer your personal data abroad unless you agree to this.

Duration of storage

Your personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected and due to contractual, commercial or tax retention obligations. Application documents will be kept for at least two months after receipt of the rejection (§ 15 para. 4 AGG). Invoice documents are kept for 10 years, commercial letters for 6 years.

Possibility of objection and removal

As a user, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 para. 1 sentence 1 lit. e or f GDPR (Art. 21 para. 1 GDPR). 

Insofar as the person responsible bases the processing of your data on the consent you have given or on a contract, you do not have the right to object. 

Obligation to provide

Your personal data such as title, first name, last name, e-mail address are required to transmit the request to the person responsible via the contact form. In all other respects, the provision of your personal data is voluntary. If you do not provide your personal data, the controller may not be able to process or respond to your requests, requests or requests. However, if you do not provide your e-mail address to the person responsible in the contact form or provide it incorrectly, he will not be able to answer you.

II. Data processing by log files

Scope of processing

Each time the controller's website is accessed, thecontroller's system  automatically collects data and information from the computer system with which you, as a user, access the controller's website. This data is stored and processed on the server of the person responsible in a log file (so-called log files). The following personal data is collected: 

Log files store, among other things, the IP address, the browser used, the time and date and the system used by a site visitor. The IP address is a string of numbers that uniquely assigns your computer system at the time of accessing the above-mentioned website. Only anonymised IP addresses of visitors to the website are stored by the controller. At the web server level, this is done by storing an IP address 123.123.123.XXX in the log file instead of the actual IP address of the visitor, e.g. 123.123.123.123, where XXX is a random value between 1 and 254. It is no longer possible to establish a personal reference.

Purpose of the processing

The IP address is used to receive and send data packets and enables a user to access a website. The temporary storage of the IP address on the server of the person responsible is necessary in order to transmit the page content to the user's computer system after accessing this website so that the user can perceive the content.

The data is stored in log files in order to ensure the functionality of the website and to be able to detect any transmission errors that may occur. In addition, this data is used by the controller to optimize the website and to ensure the security of its information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

Legal basis of the processing

The processing is carried out on the basis of the legitimate interests of the person responsible in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. 

Legitimate interests

The controller has a legitimate interest in processing the above-mentioned personal data for the above-mentioned purposes in order to ensure that its product and service information is available online. 

Recipients or categories of recipients

Your personal data will be passed on to the IT department of the controller and to its contractors who are commissioned to host and provide the IT resources for the operation of the website, as well as  to Maisch.law Rechtsanwälte, Neuhauser Str. 15, 80331 Munich, Germany, or, if applicable, in individual cases to other law firms or investigators and, if applicable, to judicial authorities. 

Third country transmission

The controller will not transfer your personal data abroad unless you agree to this.

Duration of storage

Your personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. The user's IP address must be stored for the duration of the session in order to enable the use of the website.

If your data is stored in the log file, the data collected in it will be stored indefinitely.

Possibility of objection and removal

As a user, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 para. 1 sentence 1 lit. e or f GDPR (Art. 21 para. 1 GDPR). In this case, the controller will no longer process your personal data unless he can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms as a user, or the processing is for the purpose of asserting, exercising or defending and defending legal claims.

The processing of personal data for the provision of the website and for the creation of the log file is absolutely necessary for the operation of the website. The user can therefore not object to this type of processing.

Obligation to provide

The processing of log files is necessary in order to display the website correctly. In the event that you do not provide an IP address, page retrieval is excluded for technical reasons.

III. Data processing by cookies

Scope of processing

On its website, the controller uses so-called cookies. Cookies are text files that are stored on the user's IT system as soon as he or she accesses the controller's website. Cookies contain characteristic strings of characters that enable the browser to be uniquely identified when the website is called up again.

The controller uses cookies to make its website more user-friendly. Some page elements of the website make it necessary for the calling Internet browser to be identified within the website even after a page change. 

Strictly necessary cookies

The purpose of using strictly technically necessary cookies is to simplify the use of websites for users. Some functions of the controller's website cannot be offered without the use of cookies. For these, it is necessary that the Internet browser is recognized even after a page change. With these technically necessary cookies, data is collected, stored and transmitted to the person responsiblein order to enable the retrieval of their website. The user data collected by technically necessary cookies will not be used to create user profiles.

Functional cookies

Functional cookies are used to collect personalized data, such as: Store your language preference anonymously and automatically retrieve it next time. Functional cookies can also be used to enable requested functions such as playing videos. The data will not be passed on to third parties and will not track your movement on other websites.

Cookies for analysis and statistics

Statistics cookies collect information pseudonymously. This information helps the controller to understand how its visitors use the website, for example, which pages are clicked on most frequently. This allows them to tailor their content and features to your interests. If deactivated, problems with individual functionalities of the website may occur.

Marketing and other third-party cookies

Marketing cookies and third-party cookies (third-party cookies) are used by the controller to measure the success of marketing measures, e.g. whether you have visited a website. They can also be used to control them accordingly, e.g. to limit the frequency of a displayed display. It is possible that this information may be shared with third parties, such as advertisers. Often, these cookies are also linked to third-party site functionalities.

Purpose of the processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of the controller's website cannot be offered without the use of cookies. For these, it is necessary that the Internet browser is recognized even after a page change. With these technically necessary cookies, data is collected, stored and transmitted to the person responsible in order to enable the retrieval of his website. The user data collected by technically necessary cookies will not be used to create user profiles.

Cookies that are not technically necessary are used by the controller in order to get to know its target groups better, to evaluate their interests and to draw their attention to its products and its company by means of direct marketing.

Legal basis of the processing

If you have given your consent to the person responsible via the cookie banner for technically unnecessary cookies, he may use your data within the scope of your consent in accordance with Art. 6 Para. 1 S. 1 lit a GDPR. For cookies that are technically necessary to operate this website, the processing is carried out on the basis of the legitimate interests of the person responsible in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.

Legitimate interests

The person responsible has a legitimate economic interest in the external presentation of his company and in the promotion of his products. Technically necessary cookies help the person responsible to display the website in the best possible way. 

Recipients or categories of recipients

The data of the cookies are communicated to internal departments of the Data Controller and to its contractors in charge of hosting and providing IT resources.

Third country transmission

In principle, information stored in cookies will not be transferred to third countries, unless it is necessary to identify users for third-party service providers. 

Duration of storage

The personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of processing the data for the provision of the website, this is the case when the respective session has ended. Cookies are stored on the user's IT system and transmitted from there to the controller's server. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the storage of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically.

Possibility of objection and removal

As a user, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 para. 1 sentence 1 lit. e or f GDPR (Art. 21 para. 1 GDPR). In this case, the controller will no longer process the personal data unless he can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the user, or the processing is for the purpose of asserting, exercising or defending and defending legal claims. If cookies are deactivated for the website of the person responsible, it may no longer be possible to use all functions of the website, e.g. the shopping cart of the shop, to their full extent. The processing of personal data for the provision of the website by technically necessary cookies is absolutely necessary for the operation of the website. The user can therefore not object to this type of processing.

Obligation to provide

The provision of your data for the processing of cookies is voluntary. If you do not provide your data, the controller may not be able to address your IT system and you may not be able to use its website or may not be able to use it to its full extent.

IV. Data processing when contacting us via WhatsApp Business App

a) Scope of processing

The controller processes personal data via the messenger service "WhatsApp Business" https://business.whatsapp.com/ of WhatsApp  Ireland  Limited, Attn: Privacy Policy, Merrion Road, Dublin 4, D04 X2K5, Ireland. WhatsApp Ireland Limited's privacy policy   is available here: 

https://www.whatsapp.com/legal/privacy-policy-eea#privacy-policy-our-global-operations

According to the service provider, the message exchange is end-to-end encrypted. https://faq.whatsapp.com/1148840052398648

b) Purpose of the processing

The above-mentioned provider processes the personal data for easy and quick contact and for conducting conversations for the initial assessment of a case. 

c) Legal basis for processing

If you are a user of the services of the above-mentioned provider, you have given this provider your consent to the processing of your personal data for one or more specific purposes as part of your user contract. In this case, this consent constitutes the legal basis pursuant to Art. 6 Para. 1  S. 1 lit. a GDPR. The above-mentioned provider may also process your personal data to the extent necessary for entering into and fulfilling your user contract in accordance with Art. 6 para. 1 S. 1 lit. b GDPR. 

d) Recipients or categories of recipients

Whether and to what extent WhatsApp Ireland Ltd. passes on personal data can be found in the provider's data protection information. Your personal data, which the controller processes within the framework of hiss WhatsApp Business account, will only be disclosed to lawyers, investigators and judicial authorities.

Third country transmission

When using WhatsApp, it is possible thatcustomer-related  data  may be transmitted to WhatsApp data centers in the USA. There is no adequate level of data protection in the USA. This means that the rights of the data subjects, e.g. the right to information or deletion, cannot be asserted as effectively as in the EU. 

The data subject will be informed of the data protection risks when contacting the person responsible via WhatsApp. By continuing the exchange of messages via WhatsApp, he declares that he has taken note of these circumstances and expressly agrees that the Data Controller may transmit his personal data to this contractor. This transfer is based on Art. 49 (1) (a) GDPR. 

In addition, the controller has agreed standard contractual clauses (SCC) with the service provider. 

For reasons of data economy, the person responsible recommends that communication be conducted by encrypted e-mail or via the messengers Signal or Threema. 

Duration of storage

The personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected and no retention obligations have to be observed. The person responsible has no influence on the storage of your personal data by the named provider. 

Obligation to provide

The use of WhatsApp Business is voluntary. The user is free to contact the person responsible by other means of communication, e.g. by telephone.

V. Data processing in the context of order processing

Scope of processing

The controller collects names, address data, date of birth, place of birth, nationality, title/degree, title, telephone number and e-mail address, bank details if applicable, wallet addresses and IDs if applicable, information about payments and all information provided by the injured party by e-mail, WhatsApp or other means of communication. 

Purposes and legal basis of the processing

The personal data is processed in order to determine how or where a payment transferred to a wallet was transferred by means of an analysis of the traffic data from the blockchain. The result of this analysis is contained in a cryptocurrency report in order to provide law enforcement authorities with investigative approaches and to write a criminal complaint/statement to these authorities. If legal advice is requested, the personal data will be transmitted to the responsible law firm. This data processing is necessary in order to enter into and fulfil contracts (Art. 6 para. 1 p. 1 lit. b DSGVO). 

Recipients or categories of recipients

The personal data will be transmitted to the Data Controller's IT department, lawyers, law enforcement and judicial authorities, business investigators and, if applicable, IT forensic experts.

Third country transmission

The controller does not intend to transfer your personal data abroad, unless this is necessary for the performance of a contract, e.g. to file a criminal complaint abroad. 

Duration of storage

Personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. If your data is processed by lawyers, they are obliged to keep the reference file for a period of 6 years. 

IncI. Data subjects' rights

1. Right to withdraw consent: The injured party has the right, in accordance with Art. 7 para. 3 GDPR to revoke his consent once given to the person responsible at any time. As a result, the data processing based on this consent may no longer be continued in the future.

2. Right to information: In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by the controller. In particular, he may obtain information about the purposes of processing, the category of personal data, the categories of recipients to whom his data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of complaint, the origin of his data if it has not been collected from the controller, as well as the existence of an automated Request decision-making, including profiling and, if applicable, meaningful information about its details.

3. Right to rectification: The injured party has the right, in accordance with Art. 16 GDPR, you have the right to demand the immediate rectification of inaccurate or incomplete personal data stored by the controller.

4. Right to erasure and to be forgotten: The injured party has the right, in accordance with Art. 17 GDPR, to request the deletion of his personal data stored by the person responsible, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.

5. Right to restriction: In accordance with Art. 18 GDPR, you have the right to request the restriction of the processing of his personal data, insofar as the accuracy of the data is disputed by him, the processing is unlawful, but the injured party refuses to delete it and the person responsible no longer needs the data, but the injured party needs it to assert, exercise or defend legal claims or the injured party has been objected to in accordance with Art. 21 GDPR has lodged an objection to the processing.

6. Right to data portability: In accordance with Art. 20 GDPR, you have the right to receive your personal data, which he has provided to the person responsible, in a structured, common and machine-readable format or to request that it be transferred to another person responsible.

7. Right to lodge a complaint: The injured party has the right to lodge a complaint in accordance with Art. 77 GDPR to a supervisory authority. The following authority is responsible for the controller:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg Postfach 10 29 32, 70025 Stuttgart, Tel.: 0711/615541-0, FAX: 0711/615541-15. 

8. Right to object: If the personal data of the injured party is processed on the basis of legitimate interests pursuant to Art. 6 Para. 1 Para. 1 S. 1 lit. f GDPR, the injured party has the right, in accordance with Art. 21 GDPR to object to the processing of his personal data, provided that there are reasons for doing so that arise from the particular situation of the injured party.  To assert the right of objection, it is sufficient to send an e-mail to the person responsible: Support@Brokerscaminvestigation.com