At GO2-Markets, we take privacy issues seriously and work to ensure that your personal data is treated in accordance with applicable law and regulation. In this policy, we explain how your personal data is processed and protected. It applies to all of our customers, suppliers and users of our services, including visitors of this website.

The collection and use of personal data fully comply with the General Data Protection Regulation (“GDPR”) and all the definitions related to personal data contained in this Privacy notice shall expressly refer to and be interpreted in accordance with the GDPR.

1. Responsible for the collection and protection of your personal data

GO2-Markets GmbH
Ohlauer Str. 43
10999 Berlin, Germany
Email: dataprotection@go2-markets.com

GO2-Markets GmbH is the controller responsible for the processing of your personal data.

2. Categories of data processed and purpose

A. Business relationships and contracts

Purpose of processing:

• Manage relationships with customers, suppliers and partners

• Negotiate, conclude and perform contracts

• Administer and document transactions

Categories of data:

• Contact details (e.g. name, email address, phone number)

• Professional information (e.g. role, company)

Legal basis:

Art. 6(1)(b) GDPR (contract and pre-contractual measures) and art. 6(1)(f) GDPR (legitimate interests in managing business relationships).

B. Communication

Purpose of processing:

• Response to inquiries

• Communication with business contacts

• Management of email correspondence and calls

Categories of data:

• Contact details (name, email address, phone number)

• Information you may provide in your communications with us (e.g. email content, messages, call notes)

Legal basis:

Art. 6(1)(f) GDPR (legitimate interests in efficient communication)

C. Marketing and Events

Purpose of processing:

• Send newsletters and updates about our company

• Inform you about our services or events

• For event organization

Categories of data:

• Contact details

• Information your engagement with our communications (interaction data)

Legal basis:

Art. 6(1)(a) GDPR (consent) and/or Art. 6(1)(f) GDPR (legitimate interests in promoting our services), where permitted.

You may object to marketing communications at any time.

D. Website use and analytics

Purpose of processing:

• Ensure the functionality and security of our website

• Analyse website usage

• Measure and optimise marketing campaigns

Categories of data:

• Usage data, i.e. information about how you use our website such as pages visited, time spent, navigation paths, etc.

• IP address, device and browser information

Legal basis:

Art. 6(1)(a) GDPR (consent for cookies and tracking technologies) and Art. 6(1)(f) GDPR (legitimate interests in operating and improving our website).

Further details are available in our Cookie Policy.

E. Recruitment and talent pool

Purpose of processing:

• Manage job applications

• Maintain a talent pool for future opportunities

Categories of data:

• Contact details, CV information

• Application-related data

Legal basis:

Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(a) GDPR (consent, where applicable)

F. Compliance and KYC

Purpose of processing:

• Verify identities

• Conduct compliance checks

• Prevent fraud and ensure regulatory compliance

Categories of data:

• Identification data (e.g. name, date of birth, ID/passport details of legal representative)

• Contact details and professional information

Legal basis:

Art. 6(1)(c) GDPR (legal obligations) and Art. 6(1)(f) GDPR (legitimate interests in compliance and fraud prevention)

3. Source of data

We may collect personal data received directly from you (e.g. when you contact us or enter into a contract), from your employer or organization in a business context, from business partners, brokers or counterparties involved in transactions and/or from publicly available sources (e.g. company website or professional networks), where relevant.

4. Access and sharing of personal data

We may share personal data with:

• Internal teams within GO2 Markets

• Service providers supporting our operations (e.g. providers of CRM systems, communication tools, project management tools, recruitment platforms and marketing or analytics tools)

• Business partners and counterparties involved in transactions

• Public authorities where required by law

We may also share personal data within our corporate group, including with our affiliated company in the United States, where necessary for the purposes described in this notice.

We only share to the extent necessary and in accordance with applicable data protection laws.

5. International data transfers

Some recipients of personal data are located outside the European Economic Area (EEA), in particular in the United States. This includes service providers and our affiliated company.

Where personal data is transferred outside the EEA, we ensure an adequate level of protection through appropriate safeguards. These include, in particular, Standard Contractual Clauses approved by the European Commission, which we have entered into with the relevant recipient, and, where applicable, participation of certain providers in the EU-US Data Privacy Framework.

6. Retention period

We retain personal data only for as long as necessary for the purposes described in this notice and to comply with legal obligations.

Contract-related data are retained for up to 10 years after the end of the contractual relationship.

Recruitment and talent pool data are retained for up to 3 years or until consent is withdrawn by the data subject.

Marketing data are retained until the data subject withdraws their consent or objects to processing.

Finally, business contact data are retained for the duration of the business relationship and for a reasonable period thereafter.

7. Your rights

You, as data subject, are entitled to:

• Request a copy of the personal data collected and stored;

• Exercise your right to rectification to correct any information believed to be inaccurate or incomplete;

• Request information such as how GO2 Markets collects and uses your personal information and why, the categories of personal information involved, how long GO2 Markets uses or stores your personal information;

• Receive the personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit that data to another controller, where the processing is based on your consent or on a contract and is carried out by automated means (data portability);

• Request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent and there is no other legal basis for processing, where you have objected to processing and there are no overriding legitimate grounds or where the data has been unlawfully processed (this right being subject to certain exceptions, including where retention is required to comply with a legal obligation);

• Request that we restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data, where processing is unlawful but you prefer restriction over erasure or where you have objected to processing pending verification of whether our legitimate grounds override yours.

• Withdraw your consent to the use of your personal information. This will not affect the lawfulness of processing prior to the withdrawal;

• Lodge a complaint with a supervisory authority, e.g. the Berliner Beautragte für Datenschutz und Informationsfreiheit.

To this end, you can contact the data controller at the following address: dataprotection@go2-markets.com.

GO2 Markets won’t deny goods or services, charge a different price or provide a different level or quality of good or services just because you exercised your rights under the GDPR. However, if personal data are necessary to provide you with goods or services, we might not be able to complete that transaction.

8. Use of tools and service providers

We use service providers to support our business operations. These providers process personal data on our behalf where necessary and are contractually bound by data protection obligations.

This includes tools used for:

• Managing customer relationships and communications

• Organizing internal work and projects

• Managing recruitment processes

• Operating, analysing and improving our website and marketing activities

Here is a list of the main providers we use. We may update this list from time to time.