Privacy Policy

Last Modified 14-09-2026

Privacy Policy

We are pleased about your interest in our website. The protection of your personal data is important to us. Below we inform you which data we process when you visit our website, for what purpose this is done and which rights you have in this regard.

Processing is always carried out in accordance with the General Data Protection Regulation (GDPR) and the applicable German data protection provisions (in particular the Federal Data Protection Act, BDSG, and the Telecommunications Digital Services Data Protection Act, TDDDG). Our website can generally be used without providing personal data; for individual matters, such as contacting us or submitting an application, the processing of data is necessary.

1. General Information

Controller

The controller within the meaning of the GDPR is:

PRO-CAPITAL Corporate Finance GmbH
Maiglöckchenweg 13
27232 Sulingen, Germany

Data Protection Officer

For questions and suggestions regarding data protection, you can reach our data protection officer as follows:

Stephan Krischke, datenschutz@protectyourit.net

Definitions

This privacy policy uses the terms of the GDPR, including “personal data”, “processing”, “controller”, “processor” and “consent”, as legally defined in Art. 4 GDPR. A detailed explanation of these terms can be found in the text of the GDPR.

Your rights as a data subject

Within the framework of the statutory requirements, you have the following rights: information about the data stored about you (Art. 15 GDPR), correction of inaccurate data (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection to processing based on a balancing of interests, in particular to processing for the purposes of direct marketing (Art. 21 GDPR). You can revoke any consent you have given at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority.

Legal bases for processing

We process personal data on the following legal bases: with your consent (Art. 6 para. 1 lit. a GDPR in conjunction with § 25 TDDDG), for the performance or initiation of a contract or employment relationship (Art. 6 para. 1 lit. b GDPR, § 26 BDSG), for compliance with legal obligations (Art. 6 para. 1 lit. c GDPR), and to safeguard legitimate interests (Art. 6 para. 1 lit. f GDPR), provided that your interests do not prevail in the individual case.

Our offer is directed at adults. Persons under the age of 16 may not transmit personal data to us without the consent of their legal guardians.

Disclosure of data to third parties

Your data is only disclosed to third parties insofar as this is permitted by law, you have consented, it is necessary for the performance of a contract, or we have a legitimate interest in doing so. The processing of your data in connection with the operation of this website takes place exclusively within the European Union or the European Economic Area; no transfer to third countries takes place.

Storage period and deletion

We store personal data only for as long as this is necessary for the respective purpose of processing or as long as statutory retention obligations exist. If the purpose of storage no longer applies or a statutory retention period expires, the data concerned is routinely deleted or blocked. For documents arising from the business relationship, the commercial and tax retention periods under § 257 of the German Commercial Code (HGB) and § 147 of the German Fiscal Code (AO) of up to ten years apply.

2. Technology

Hosting

We host our website with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located in Germany. When you visit our website, your data (including your IP address in server log files) is processed on Hetzner’s servers.

The legal basis is our legitimate interest in a reliable, secure and high-performance provision of our website (Art. 6 para. 1 lit. f GDPR).

Further information: https://www.hetzner.com/legal/privacy-policy/

Server log files

Each time our website is accessed, our system automatically records data transmitted by your browser: browser type and version, operating system used, referrer URL, sub-pages accessed, date and time of access, and the IP address. This data serves the technically error-free delivery and security of the website and, where applicable, the prosecution of criminal offences in the event of a cyber-attack. No conclusions are drawn about your identity; the log file data is stored separately from other data.

The legal basis is our legitimate interest in system security and stability (Art. 6 para. 1 lit. f GDPR).

Cookies and notice window

Cookies are small files that your browser stores on your device; comparable techniques are local and session storage. Our website uses exclusively technically necessary elements: a session cookie to maintain your session (PHPSESSID), which is deleted when you close your browser, and an entry in session storage (procapital.disclaimer.v1) that records that you have acknowledged the legal notice displayed when the page is opened.

We do not use cookies for analysis, marketing or tracking purposes; likewise, no content is loaded from third-party servers.

The legal basis is our legitimate interest in a functional website and in documenting the notice (Art. 6 para. 1 lit. f GDPR), or the technical necessity pursuant to § 25 para. 2 no. 2 TDDDG; consent is not required for this.

You can also delete cookies or restrict their storage at any time via your browser settings (e.g. via the help pages of Chrome, Safari, Firefox or Microsoft Edge).

3. Further Content

Contacting us

If you contact us by email, telephone or post, we process the data you provide (e.g. name, company, contact details, request) exclusively to handle your enquiry.

The legal basis is our legitimate interest in responding to your request (Art. 6 para. 1 lit. f GDPR) or, insofar as your enquiry is aimed at concluding a contract, Art. 6 para. 1 lit. b GDPR. Your data is deleted as soon as your enquiry has been conclusively dealt with and no statutory retention obligations prevent this.

Handling of applicant data

We collect and process the personal data of applicants. Such data processing may also take place electronically, for example when applicants submit their application documents to us by email. On our website, we offer you the option of sending speculative applications to us by email.

Storage of your data beyond the current application procedure in an applicant database only takes place if you have given us your separate consent to this.

The legal basis for the processing of your personal data in this application procedure is primarily Art. 6 para. 1 lit. b GDPR in conjunction with § 26 para. 1 BDSG. Accordingly, the processing of data that is necessary in connection with the decision on establishing an employment relationship is permitted. Insofar as special categories of personal data within the meaning of Art. 9 GDPR are processed (e.g. health data or information on a severe disability), the legal basis is § 26 para. 3 BDSG or Art. 9 para. 2 lit. b GDPR. In the event that your data is stored beyond the current application procedure, the processing takes place on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with § 26 para. 2 BDSG. There is no statutory or contractual obligation to provide your data; however, processing your application is not possible without providing the information.

The data of applicants is deleted six months after a rejection. In the event that you have consented to further storage of your personal data, we will transfer your data to our applicant pool, where the data is deleted after 24 months.