Data protection

The provisions of the EU General Data Protection Regulation (hereinafter referred to as GDPR) apply throughout Europe. We would like to inform you about the processing of personal data carried out by our company in accordance with this regulation (see Articles 13 and 14 GDPR). If you have any questions or comments about this privacy policy, you can send them to the email address provided at1.2 or1.3 at any time.

1. Overview

In this section of the privacy policy, you will find information on the scope of application, the data controller and its data protection officer.

1.1. Scope of application
On this page, we inform you about the type, scope and purpose of the personal data collected by our company as part of the e-prevention portal, which is processed both when you visit this website and during other processing under our responsibility that is not related to this website.

1.2. Responsible r
The data controller - i.e. the person who decides on the purposes and means of processing personal data - in connection with the processing operations is

Alternative Green Insurance GmbH
Elsenheimerstr. 45
80687 Munich
Phone: +49 (0) 89 954533741-40
E-Mail: info@agi-solutions.de

1.3. Data Protection Officer
You can contact our data protection officer as follows:
DS EXTERN GmbH
Dipl.-Kfm. Marc Althaus
Frapanweg 22
D-22589 Hamburg

Contact form: https://www.dsextern.de/anfragen

2. The data processing in detail

In this section of the privacy policy, we inform you in detail about the processing of personal data. For the sake of clarity, we have organized this information according to specific functionalities.

2.1. General information on data processing
Unless otherwise stated, the following applies to all processing described below:

2.1.1. No obligation to provide
There is neither a contractual nor a legal obligation to provide personal data. You are not obliged to provide data.

2.1.2. Consequences of non-provision
In the case of required data (data that is marked as mandatory when it is entered), failure to provide it will mean that the service in question cannot be provided. Otherwise, failure to provide the data may mean that our services cannot be provided in the same form and quality.

2.1.3. Transmission to state authorities
We only transfer personal data to state authorities (including law enforcement authorities) if this is necessary to fulfill a legal obligation to which we are subject (legal basis: Art. 6 para. 1 c) GDPR) or if it is necessary for the assertion, exercise or defense of legal claims (legal basis Art. 6 para. 1 f) GDPR).

2.1.4. Storage duration
We do not store your data for longer than we need it for the respective processing purposes. If the data is no longer required, it is regularly deleted, unless its temporary storage is still necessary. Reasons for this may include the following:

• The fulfillment of retention obligations under commercial and tax law
• Obtaining evidence for legal disputes within the scope of the statutory statute of limitations

2.1.5. Categories of recipients
In addition to the categories of recipients explicitly listed below, personal data is also transmitted to the following categories of recipients: Shipping service providers, telephone and fax providers.

2.1.6. Data categories

• Account data: Login/user ID and password
• Personal master data: Title, form of address/gender, first name, last name, date of birth
• Extended personal master data: Place of birth, nationality, marital status
• Address data: Street, house number, address supplements if applicable, zip code, city, country
• Contact details: Telephone number(s), fax number(s), e-mail address(es)
• Application data: Curriculum vitae, certificates, references, work samples, certificates, pictures
• Access data: Date and time of the visit to our service; the page from which the accessing system reached our site; pages accessed during use; session identification data (session ID); also the following information of the accessing computer system: internet protocol address (IP address) used, browser type and version, device type, operating system and similar technical information.

2.2. Call up the website
This section describes how we process your personal data when you visit the website https://www.agi-solutions.de/.

2.2.1. Information on processing

• Data category
  a. Account data
  b. Access data
• Intended use
  c. Connection establishment, presentation of the contents of the service, detection of attacks on our site based on unusual activities, error diagnosis

• Legal basis
  d. Protection of legitimate interests (Art. 6 para. 1f GDPR)

• Where applicable, legitimate interest: proper functioning of the services, security of data and business processes, prevention of misuse, prevention of damage caused by interference with information systems
• Storage duration:
  e. 7 days

• Recipient: Hosting service provider, Consent service provider

2.3. Application
This section describes what happens to your personal data in connection with the application of an interested party, which is transmitted by e-mail, post or via the Leading Brokers United platform (https://www.karriere-sprungbrett.com/karriere/leading-brokers-united/).

2.3.1. Information on processing

• Data category
  f. Personal master data, extended personal master data
  g. Address data
  h. Contact details
  i. Application data
• Intended use
  j. Identification, making contact, age verification
  k. Identification, establishing contact, communication to initiate a contract
  l. Applicant selection

• Legal basis: Section 26 BDSG-new in conjunction with Art. 88
• Legitimate interest, if applicable: -
• Storage duration:
  m. 6 months

• Recipient: Responsible person
• Transfer to third countries: There is no transfer to third countries.

2.4. Contact by e-mail
No contact form is displayed on the https://www.agi-solutions.de/ website. However, contact details are displayed that visitors can use to contact us.

2.4.1. Information on processing

• Data category
  n. Personal master data
  o. Contact details
  p. Contents of the e-mail
• Intended use
  q. Assignment and processing of and response to the request

• Legal basis
  r. Overriding legitimate interests (Art. 6 para. 1f GDPR)

• Legitimate interest, if applicable: Responding to requests initiated by the data subjects themselves.
• Storage duration:
  s. 3 months after answering the request

• Recipient: Responsible person
• Transfer to third countries: There is no transfer to third countries.

2.5. Use of Microsoft Teams

We use Microsoft Teams to conduct conference calls, online meetings and/or video conferences. Microsoft Teams is a service provided by Microsoft Ireland Operations, Ltd. for which we have concluded a contractual agreement with the provider. Various types of data are processed when using Microsoft Teams. The scope of the data also depends on the information you provide before or when participating in an online meeting.

Online meetings are not recorded. If they are, we will inform you of this before the start and - if necessary - ask for your verbal consent. If you do not wish to be recorded, you can leave the online meeting.

If it is necessary for the purposes of logging the results of an online meeting, we will log the chat content.

You can find more information on how Microsoft processes data here: https://docs.microsoft.com/de-de/microsoftteams/teams-privacy

2.5.1. Information on processing

• Data category
  t. Personal master data, contact details
  u. Sound and possibly image data, texts in chats
  v. Metadata
• Intended use
  w. Sending team invitations
  x. Conducting team meetings
  y. Are created by the Microsoft Teams application

• Legal basis
  z. Contract (for customers), Art. 6 para. 1b GDPR, consent (for interested parties), Art. 6 para. 1a GDPR
  aa. Consent (Art. 6 para. 1a GDPR)
  bb. Overriding legitimate interests (Art. 6 para. 1f GDPR)

• Legitimate interest, if applicable
  a. Effective implementation of online meetings using a professional, reliable, high-performance and widespread provider

• Storage duration:
  a. None if no recording is made.
  b. Otherwise until consent is withdrawn or the purpose of storage is achieved.
  c. According to Microsoft.
• Recipient: Microsoft Corporation, One Microsoft Way, 98052-6399 Redmond, WA, USA. Please note: due to encryption measures, Microsoft does not have access to image and sound data.
• Transfer to third countries: Yes. The current standard contractual clauses of the EU Commission are applied as a guarantee in accordance with Art. 46 (2c) GDPR. In addition, Microsoft Corporation is certified via the EU-US Privacy Framework.

3. Rights of data subjects

3.1. Right of objection
You have the right to object, on grounds relating to your particular situation, at any time with future effect to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR

You can exercise your right to object free of charge.

3.2. Right to information
You have the right to obtain confirmation as to whether or not personal data concerning you is being processed by us, which personal data this may be, and further information in accordance with Art. 15 GDPR.

3.3. Right of rectification
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you (Art. 16 GDPR). Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

3.4. Right to erasure ("right to be forgotten")
You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the grounds specified in Art. 17 (1) GDPR applies and the processing is not necessary for one of the purposes specified in Art. 17 (3) GDPR.

3.5. Right to restriction of processing
You are entitled to request a restriction on the processing of your personal data if one of the conditions set out in Art. 18 (1) (a) to (d) GDPR is met.

3.6. Right to data portability
In accordance with Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit those data to another controller. This does not apply to data held only in paper form

3.7. Right to withdraw consent
If the processing is based on your consent, you have the right to withdraw your consent at any time in accordance with Art. 7 (3) GDPR. This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

3.8. Assertion of your rights:
To exercise all of your aforementioned rights, please contact us using the contact details provided in section 1.2.

3.9. Right of appeal
If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.
The competent supervisory authority with regard to data protection issues is the state data protection officer of the federal state in which our company is based. The following link provides a list of data protection officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

4. Contractual relationship

The processing of the personal master data, contract data and payment data provided to us is regularly required to establish or execute the contractual relationship with our customers. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. b GDPR. Further data processing may take place, for example, if this serves to fulfill a legal obligation (Art. 6 para. 1 sentence 1 lit. c GDPR)

Status: March 2025