Privacy Policy

Introduction

PrimeFusion ORA AG ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website primefusionora.pro and use our services.

This policy applies to all information collected through our website, email, phone, and other electronic communications. Please read this Privacy Policy carefully to understand our policies and practices regarding your information.

Data Controller Information

The data controller responsible for your personal data is:

Data We Collect

We may collect and process the following categories of personal data about you:

• Contact Information: Name, email address, phone number, postal address, and company details when you contact us or request our services.
• Communication Data: Records of communications between you and us, including emails, phone calls, and meeting notes.
• Website Usage Data: Information about how you use our website, including IP address, browser type, pages visited, and time spent on our site.
• Professional Information: Business information, company details, and professional background relevant to our M&A advisory services.
• Technical Data: Device information, operating system, and other technical information collected through cookies and similar technologies.

The data collection occurs through various means including contact forms, email communications, phone calls, meetings, and automated technologies such as cookies when you visit our website.

How We Use Your Information

We use the information we collect about you for the following purposes and under the following legal bases:

• Service Provision: To provide M&A advisory services, respond to your inquiries, and fulfil our contractual obligations (Legal basis: Contract performance and legitimate interests).
• Communication: To communicate with you about our services, respond to your questions, and provide customer support (Legal basis: Legitimate interests and consent).
• Business Operations: To manage our business operations, maintain records, and ensure compliance with legal obligations (Legal basis: Legitimate interests and legal compliance).
• Website Improvement: To analyse website usage, improve our services, and enhance user experience (Legal basis: Legitimate interests and consent).
• Marketing: With your consent, to send you information about our services and industry insights (Legal basis: Consent).

How we use your data depends on the specific circumstances of collection and the legal basis for processing. We will always process your personal data fairly and lawfully.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please see our Cookie Policy.

Data Sharing and Disclosure

We may share your personal information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our business, subject to appropriate data protection agreements.
• Legal Requirements: When required by law, regulation, or legal process, or to protect our rights, property, or safety.
• Business Transfers: In connection with any merger, acquisition, or sale of assets, subject to appropriate confidentiality protections.
• Professional Advisors: With lawyers, accountants, and other professional advisors in connection with our business operations.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes without your explicit consent.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Client Data: Client information is retained for the duration of our business relationship and for 7 years after completion of services for legal and regulatory compliance.
• Marketing Data: Marketing communications data is retained until you withdraw consent or for 3 years from last engagement.
• Website Data: Website usage data and cookies are retained according to our Cookie Policy.
• Communication Records: Email and communication records are retained for 5 years for business continuity and legal purposes.

When determining retention periods, we consider the nature of the data, legal requirements, and business needs. Data retention periods may vary based on specific circumstances and applicable laws.

Your Rights

Under the General Data Protection Regulation (GDPR) and applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: You can request information about the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete personal data.
• Right to Erasure: You can request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: You can request limitation of how we process your personal data.
• Right to Data Portability: You can request transfer of your data to another service provider.
• Right to Object: You can object to processing of your personal data for direct marketing or legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw consent at any time.

Your rights may be subject to certain limitations and exceptions. We will respond to requests within one month and may require verification of your identity before processing requests.

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Access controls and authentication procedures
• Regular security assessments and updates
• Employee training on data protection
• Secure data storage and backup procedures

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

International Data Transfers

Your personal data may be transferred to and processed in countries other than your country of residence. When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the European Commission
• Standard contractual clauses approved by the European Commission
• Binding corporate rules
• Certification schemes and codes of conduct

We will only transfer your personal data to countries or organisations that provide an adequate level of protection for your data.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us using the following information:

You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe we have not handled your personal data in accordance with applicable law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Governing Law

This Privacy Policy is governed by German law and the General Data Protection Regulation (GDPR). Any disputes relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the German courts.