Privacy Policy
This is a convenience translation. The German version is legally binding.
Protecting your personal data matters to us. Below we explain, in accordance with Art. 13 GDPR, which data is processed when you visit this website.
1. Controller
TOIK Capital GmbH, Immermannstraße 19, 40210 Düsseldorf, Germany
Phone: +49 (0) 211 59849881 · Email: info@toik-capital.de
2. Hosting
This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. When you visit the website, Netlify automatically processes information transmitted by your browser (server log files): IP address, date and time of the request, page requested, referrer URL, browser type and operating system. This is necessary for secure and stable operation. The legal basis is our legitimate interest under Art. 6 (1) (f) GDPR. We have concluded a data processing agreement with Netlify. Netlify is certified under the EU-US Data Privacy Framework; the EU Standard Contractual Clauses apply in addition.
3. Cookies, local storage and consent
On your first visit we ask whether you consent to the use of Google Analytics. We store your decision in your browser's local storage so we do not have to ask again on every page. We also use session storage to remember whether the intro animation has already been shown. This storage is strictly necessary (§ 25 (2) no. 2 TDDDG). The legal basis is Art. 6 (1) (c) and (f) GDPR.
Any other storage of or access to information on your device only takes place with your consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR). You can withdraw or change your consent at any time with effect for the future by clicking “Cookie settings” in the footer. We ask for your decision again after twelve months at the latest.
4. Google Analytics 4
With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics helps us understand how visitors use our website so that we can improve it. It records, among other things, pages viewed, time spent, approximate location (country, city), device type, browser and operating system. Google Analytics 4 does not store IP addresses.
Google Analytics sets the cookies “_ga” and “_ga_<ID>” with a lifetime of up to two years. The analytics script is only loaded after you have given your consent. The legal basis is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. We have concluded a data processing agreement with Google. Data may be transferred to Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework. If you withdraw your consent, the analytics cookies are deleted and no further data is collected.
More information: Google Privacy Policy.
5. Contact form and email
If you contact us via the contact form or by email, we process your details (name, email address, optionally phone number, topic and message) to handle your enquiry and any follow-up questions. The contact form is provided technically via Netlify (see section 2), where your details are stored and forwarded to us. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (a) GDPR (consent). We delete the data once your enquiry has been fully handled, unless statutory retention obligations apply.
6. Fonts and videos
Fonts, scripts and videos are served from our own hosting. No data is transferred to third parties such as Google Fonts or YouTube.
7. External links
Our website contains links to our partners' websites. Data is only transmitted to the respective provider once you click such a link. The respective provider is responsible for its data processing.
8. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21). You can withdraw your consent at any time with effect for the future. Please use the contact details above.
You also have the right to lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
9. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser's address bar.
Last updated: October 2026