Privacy policy

Privacy notice pursuant to Art. 13, 14 and 21 of the General Data Protection Regulation (GDPR) for the website www.2ig.de, our pages on external platforms and other processing operations of Institutional Investment Group GmbH.

I. General

Controller

We take the protection of your personal data seriously. In this notice, we inform you which data we process when you use our website, contact us, apply to us or use our services outside the website. The controller within the meaning of the GDPR and the German Federal Data Protection Act (BDSG) is:

Institutional Investment Group GmbH
Brüsseler Straße 1-3, 60327 Frankfurt am Main
Email: datenschutz@2ig.de

Hereinafter ‘we’ or ‘controller’. The individual 2IG companies provide information on their own websites about how they process personal data.

Data protection officer

Sascha Kremer, c/o KREMER LEGAL, Bahnhofstraße 66, 41236 Mönchengladbach
Email: sascha.kremer@kremer.legal

Definitions

We use the terms defined in the GDPR (Art. 4 GDPR). Cookies are small text files that a website stores on your device or reads from it, for example to recognise settings or to evaluate usage statistically. Similar technologies such as your browser’s web storage (sessionStorage, localStorage) store information locally on your device.

Where we refer to categories of data, we mean in particular: master data (e.g. name, address), contact data (e.g. email address, phone number), content data (e.g. text entries, documents), contract data (e.g. subject matter of the contract, term), usage data (e.g. pages visited, access times), connection data (e.g. IP address, device information, referrer) and location data (e.g. derived from the IP address).

Principles and storage period

We process personal data only to the extent permitted by law and protect it by means of appropriate technical and organisational measures. Data is disclosed only in the cases described here or where we are legally obliged to do so.

We erase personal data as soon as the purpose of the processing no longer applies and there is no statutory retention obligation. We store application data for up to six months after the conclusion of the application process. Information on the storage period of cookies can be found in section VI. Automated individual decision-making, including profiling, does not take place.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). The right of access and the right to erasure are subject to the restrictions set out in Sections 34 and 35 BDSG. We notify all recipients to whom we have disclosed your data of any rectification, erasure or restriction, unless this proves impossible or involves disproportionate effort. On request, we will inform you about these recipients.

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information)
Gustav-Stresemann-Ring 1, 65189 Wiesbaden

Right to object under Art. 21 GDPR

You may object at any time, on grounds relating to your particular situation, to the processing of your personal data that we carry out on the basis of Art. 6(1)(f) GDPR. If we process your data for direct marketing purposes, you may object to this at any time without giving reasons.

You may withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). This does not affect the lawfulness of processing carried out before the withdrawal. Objections and withdrawals do not require any particular form; the simplest way is by email to datenschutz@2ig.de. You can also withdraw consent given on our careers site via the cookie consent tool there, on each device on which you gave consent.

Obligation to provide data

You are not obliged to provide us with personal data. Without the necessary information, however, we will be unable to process your enquiry, to conclude or perform a contract, or to offer certain functions.

II. Our website

Provision of the website

Purpose: Provision, functionality and optimisation of the website; security of our IT systems. We host fonts and images ourselves; no connections to third-party providers such as Google Fonts are established when the website is accessed.
Legal basis: Art. 6(1)(f) GDPR; our legitimate interest lies in the purposes stated.
Categories of data: Connection data
Recipients: IT service providers (hosting) as processors
Transfers to third countries: None
Cookies requiring consent: No. On www.2ig.de we do not use any cookies or similar technologies that require consent.

Contact form and contacting us

Purpose: Handling your enquiry submitted via the contact form, by email or by telephone. If your enquiry concerns the business of another 2IG company, we forward it to that company so that it can respond to you.
Legal basis: Art. 6(1)(f) GDPR; our legitimate interest lies in responding to your enquiry. If your enquiry concerns a contract or steps prior to entering into a contract, additionally Art. 6(1)(b) GDPR.
Categories of data: Master data, contact data, content data, contract data where applicable, and connection data. Mandatory fields in the contact form are name, email address and message.
Recipients: Where applicable, the relevant 2IG company, such as Institutional Investment Partners, Fund Finance Management, ServiceInvest or CONNOS Technologies; IT service providers as processors
Transfers to third countries: None
Cookies requiring consent: No

III. External pages

Purpose: We maintain a company page on the LinkedIn platform. When you visit this page, LinkedIn processes personal data. We receive aggregated statistics derived from this data about the use of our page.
Legal basis: Art. 6(1)(f) GDPR; our legitimate interest lies in presenting 2IG and engaging with interested parties.
Categories of data: Master data, contact data, content data, usage data, connection data, location data where applicable
Recipients: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, as joint controller under Art. 26 GDPR. The essence of the arrangement is available at legal.linkedin.com/pages-joint-controller-addendum.
Transfers to third countries: In individual cases, the USA and other third countries, on the basis of the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR)
Your rights: LinkedIn is primarily responsible for fulfilling your rights (linkedin.com/legal/privacy-policy). You may also assert your rights against us; we will then forward your request to LinkedIn.

IV. Careers site (karriere.2ig.de, also accessible via www.2ig.de/jobs)

Applications

Purpose: Processing your application and conducting the application process. With your express consent, we will also consider your application for other 2IG companies.
Legal basis: Art. 6(1)(b) GDPR; for consideration by other 2IG companies, Art. 6(1)(a) GDPR
Categories of data: Master data, contact data, content data, contract data and, depending on the information you provide, special categories of personal data under Art. 9(1) GDPR where applicable
Recipients: rexx systems GmbH, Süderstraße 75-79, 20097 Hamburg, as processor; with your consent, other 2IG companies
Transfers to third countries: In individual cases, Switzerland, on the basis of the European Commission’s adequacy decision (Art. 45 GDPR)
Storage period: Up to six months after the conclusion of the application process

Statistics with Matomo

Purpose: Statistical analysis and needs-based design of our careers site
Legal basis: Art. 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG) (consent)
Categories of data: Usage data, connection data
Recipients: rexx systems GmbH, Süderstraße 75-79, 20097 Hamburg, as processor
Transfers to third countries: In individual cases, Switzerland, on the basis of the European Commission’s adequacy decision (Art. 45 GDPR)
Cookies requiring consent: Yes, see section VI

Job alert

Purpose: Notification of new job vacancies; proof of your consent; security of our IT systems
Legal basis: Art. 6(1)(a) GDPR; for proof and security, Art. 6(1)(f) GDPR
Categories of data: Contact data and, where applicable, content data and connection data
Recipients: IT service providers as processors, where applicable
Transfers to third countries: None
Cookies requiring consent: No

Cookie consent tool

Purpose: Ensuring that only technically necessary cookies and cookies to which you have consented are set on the careers site; proof of your choice
Legal basis: Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR; Art. 6(1)(f) GDPR; Section 25(2) no. 2 TDDDG
Categories of data: Usage data, connection data
Recipients: rexx systems GmbH, Süderstraße 75-79, 20097 Hamburg, as processor
Transfers to third countries: None
Cookies requiring consent: No

V. Other processing

Guest Wi-Fi

Purpose: Provision of our guest Wi-Fi; security of our IT systems
Legal basis: Art. 6(1)(f) GDPR; our legitimate interest lies in the purposes stated.
Categories of data: Connection data
Recipients: None
Transfers to third countries: None

VI. Cookies on the careers site

Matomo sets the following cookies on karriere.2ig.de only if you have given your consent. As a rule, a cookie can only be accessed by the domain that set it.

Name	Domain	Duration	Purpose
_pk_id*	karriere.2ig.de	13 months	Unique visitor ID for statistics
_pk_ref*	karriere.2ig.de	6 months	Origin of the visit (referrer)
_pk_ses*	karriere.2ig.de	30 minutes	Session ID
MATOMO_SESSID	karriere.2ig.de	Until the browser is closed	Session ID

As of November 2026