Legal
Privacy & Data Protection
Thomas Schumann Capital GmbH is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, and safeguard your information in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection law.
1. Data Controller
Thomas Schumann Capital GmbH (hereinafter "the Firm", "we", "us") is the data controller responsible for the personal data collected through this website and in the course of our business activities. Thomas Schumann Capital GmbH OpernTurm, Bockenheimer Landstraße 2–4 60306 Frankfurt am Main, Germany Email: [email protected]
2. Data We Collect
We may collect and process the following categories of personal data: — Contact information: name, email address, telephone number, organisation name — Enquiry and correspondence data: the content of messages submitted via our contact form or sent directly to us — Technical data: IP address, browser type, operating system, referring URLs, and pages visited (collected via server logs and analytics tools) — Professional information: job title, employer, and areas of professional interest where voluntarily provided
3. Legal Basis for Processing
We process personal data on the following legal bases under the General Data Protection Regulation (GDPR): — Article 6(1)(b): Processing necessary for the performance of a contract or to take steps prior to entering into a contract — Article 6(1)(c): Processing necessary for compliance with a legal obligation — Article 6(1)(f): Processing necessary for the purposes of our legitimate interests, including responding to enquiries and improving our services — Article 6(1)(a): Where you have given explicit consent
4. How We Use Your Data
We use personal data for the following purposes: — To respond to enquiries submitted via our contact form or by email — To assess and progress potential client mandates — To comply with applicable legal and regulatory obligations, including those imposed by BaFin and applicable anti-money laundering legislation — To maintain records as required by law — To improve the functionality and content of this website
5. Data Sharing
We do not sell, rent, or trade personal data. We may share data with: — Professional advisers (lawyers, accountants, auditors) under strict confidentiality obligations — Regulatory authorities (including BaFin) where required by law — IT service providers who process data on our behalf under data processing agreements We do not transfer personal data outside the European Economic Area (EEA) without appropriate safeguards in place.
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Enquiry data is retained for a maximum of three years unless a client relationship is established, in which case data is retained for the duration of the relationship and for a further ten years thereafter in accordance with applicable regulatory requirements.
7. Your Rights
Under the GDPR, you have the following rights: — Right of access: to obtain a copy of the personal data we hold about you — Right to rectification: to have inaccurate data corrected — Right to erasure: to request deletion of your data in certain circumstances — Right to restriction: to restrict processing in certain circumstances — Right to data portability: to receive your data in a structured, machine-readable format — Right to object: to object to processing based on legitimate interests — Right to withdraw consent: where processing is based on consent To exercise any of these rights, please contact us at [email protected]. You also have the right to lodge a complaint with the Hessian Data Protection Commissioner (HBDI).
8. Cookies
This website uses cookies. Please refer to our Cookie Policy for full details of the cookies we use and how to manage your preferences.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The date of the most recent revision is shown below. We encourage you to review this policy periodically. Last updated: May 2026