Subscribe now

Privacy Policy

Version 2, as of: September 2026

Information on the Processing of Your Data

In accordance with Article 12 of the General Data Protection Regulation (hereinafter: “GDPR”), we are obliged to inform you about the processing of your data when you use our website. We take the protection of your personal data very seriously, and this Privacy Policy provides you with details about the processing of your data and your statutory rights in this regard.

We reserve the right to amend this Privacy Policy with effect for the future, in particular in the event of further development of the website, the use of new technologies, or changes in the legal framework or corresponding case law. We recommend that you read this Privacy Policy from time to time and keep a printout or copy for your records.

Definitions

  • “Website” or “online presence” refers hereinafter to all pages of the controller at https://www.collectible-invest.com/.
  • “Personal data” means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to that person.
  • “Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
  • “Consent” means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Scope of Application

This Privacy Policy applies to https://collectible-invest.com/. It does not extend to any websites or online presences of other providers that may be linked herein.

Controller

The controller responsible for the processing of personal data within the scope of this privacy policy is:

New Horizon GmbH, Neue Schönhauser Str. 2, 10178 Berlin, Germany

Email: contact@collectible-invest.com

Data Protection Inquiries

If you have any questions regarding data protection in relation to our company or our website, you may contact our data protection officer:

SPIRIT LEGAL Rechtsanwaltsgesellschaft mbH

Attorney-at-Law and Data Protection Officer

Peter Hense

Postal address:

Data Protection Officer

c/o New Horizon GmbH

Neue Schönhauser Str. 2

10178 Berlin

Encrypted online contact form:

Contact the Data Protection Officer

Security

We have implemented comprehensive technical and organisational measures to protect your personal data against unauthorised access, misuse, loss, and other external interference. We regularly review our security measures and adapt them to the state of the art.

Your Rights

You have the following rights with respect to the personal data concerning you, which you may assert against us:

  • Right of access: You may request information pursuant to Article 15 GDPR about your personal data that we process.
  • Right to rectification: If the information concerning you is no longer (or never was) accurate, you may request rectification pursuant to Article 16 GDPR. If your data is incomplete, you may request completion.
  • Right to erasure: You may request the erasure of your personal data pursuant to Article 17 GDPR.
  • Right to restriction of processing: You have the right pursuant to Article 18 GDPR to request a restriction of the processing of your personal data.
  • Right to object to processing: You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is carried out pursuant to Article 6(1)(e) or (f) GDPR, pursuant to Article 21(1) GDPR. In such a case, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. Further processing shall also take place if the processing serves the establishment, exercise or defence of legal claims (Article 21(1) GDPR). Furthermore, pursuant to Article 21(2) GDPR, you have the right to object at any time to the processing of your personal data for the purposes of direct marketing, including any profiling related to such direct marketing. We draw your attention to this right to object in this Privacy Policy in connection with the respective processing.
  • Right to withdraw your consent: Where you have given your consent to processing, you have the right to withdraw that consent at any time pursuant to Article 7(3) GDPR.
  • Right to data portability: You have the right to receive the personal data concerning you which you have provided to us in a structured, commonly used and machine-readable format, and the right to transmit those data to another controller (Article 20 GDPR).

You may exercise your rights by notifying us using the contact details set out in the “Controller” section, or by contacting the Data Protection Officer designated by us.

If you are of the opinion that the processing of your personal data violates data protection law, you have the right pursuant to Article 77 GDPR to lodge a complaint with a supervisory authority, in particular the authority competent for us:

Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Telephone: +49 30 13889-0, Email: mailbox@datenschutz-berlin.de, https://www.datenschutz-berlin.de.

Legal Bases for Processing

We process your personal data on the basis of Article 6(1) GDPR. The relevant legal bases are in particular:

  • Article 6(1)(a) GDPR – Consent of the data subject
  • Article 6(1)(b) GDPR – Performance of a contract or pre-contractual measures
  • Article 6(1)(c) GDPR – Compliance with a legal obligation
  • Article 6(1)(f) GDPR – Pursuit of the controller’s legitimate interests

Your personal data will not be disclosed to third parties beyond the above, unless you have given valid consent to such disclosure or a statutory authorisation exists.

Use of the Website, Access Data

When you access our website, your browser transmits information to the server in order to establish a connection and to display the content on your device securely, quickly, stably and in the correct format.

The following data may be processed in this context:

  • Browser type / browser version
  • Operating system used
  • Language and version of the browser software
  • Hostname of the accessing device
  • IP address
  • Website from which the request originates (referrer URL)
  • Content of the request (specific page)
  • Date and time of the server request
  • Access status / HTTP status code
  • Volume of data transferred
  • Time zone difference to Greenwich Mean Time (GMT)

The temporary processing of this data is necessary to technically enable the course of a website visit and the delivery of the website to your device. The access data are not used to identify individual users and are not combined with other data sources. Further storage in log files takes place to ensure the functionality of the website and the security of the information technology systems.

The legal basis for processing is Article 6(1)(f) GDPR. Our legitimate interests lie in ensuring the functionality of the website as well as the integrity and security of the website. Upon request, we will provide information on the balancing of interests carried out. The storage of access data in log files, in particular IP addresses, for an extended period enables us to detect and combat misuse. This includes, for example, fending off requests that overload the service or potential bot usage. Access data are deleted as soon as they are no longer required for the purpose for which they were processed. In the case of data collected for the provision of the website, this is the case when you end your visit to the website. Log data are generally stored directly and exclusively accessible to administrators and are deleted after a maximum of seven days. Thereafter, they are only indirectly available via the reconstruction of backup tapes and are permanently deleted after a maximum of four weeks.

You may object to this processing. Your right to object exists on grounds relating to your particular situation. You may submit your objection to us using the contact details set out in the “Controller” section.

Device Information

In addition to the access data mentioned above, technologies are used on the website that store information on your terminal device (e.g. desktop PC, laptop, tablet and smartphone) or access information already stored on your terminal device. These technologies may include, for example, so-called cookies, pixels, LocalStorage, SessionStorage, IndexedDB or browser fingerprinting technologies. These technologies may be used to recognise you across devices and websites.

Pursuant to § 25(1) of the Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, hereinafter: “TDDDG”), we generally require your consent to use these technologies. Such consent is not required pursuant to § 25(2) TDDDG only if the technologies either enable the transmission of a message over a public telecommunications network, or if they are strictly necessary to provide a telemedia service expressly requested by you.

Technically Necessary Device Information

Some elements of our website serve the sole purpose of transmitting a message (§ 25(2) no. 1 TDDDG) or are strictly necessary to provide our website or individual functionalities of our website (§ 25(2) no. 2 TDDDG):

  • Language settings,
  • Font settings,
  • Log-in information.

These elements are deleted once storage is no longer required.

You can prevent processing by making the appropriate settings in your browser software. For elements whose storage period is not limited to the session, you can delete the elements at the end of your session in your browser software settings.

Technically Non-Essential Device Information

In addition, we use elements on the website that are not technically necessary. We use these technologies in accordance with the statutory requirements only with your consent. Information on the individual technologies and functions can be found within our consent banner and, organised by individual function, in the information below.

In order to obtain consent on our website for the processing of your device information and personal data by means of cookies or other tracking technologies, we operate a proprietary consent management solution. This enables you to consent to or refuse the processing of your device information and personal data by means of cookies or other tracking technologies for the purposes listed in the consent banner. Such processing purposes may include statistical analysis and reach measurement.

You may grant or refuse consent for individual processing purposes. The settings you have made can also be changed by you at a later time. The purpose of the consent banner is to leave the decision regarding the placement of cookies and similar technologies to you as the user, and to offer you the possibility to change settings already made in the course of your further use of our website. In the course of using the consent banner, information from the terminal devices used is processed by us. The information about the settings you have made is stored on your terminal device.

The legal basis for processing is Article 6(1)(c) GDPR in conjunction with Article 7(1) GDPR, insofar as the processing serves the fulfilment of the statutory documentation obligations for the granting of consent. Otherwise, Article 6(1)(f) GDPR is the applicable legal basis. Our legitimate interests in the processing lie in storing user settings and preferences regarding the use of cookies, and in evaluating consent rates. Upon request, we will provide information on the balancing of interests carried out. The user settings made will be stored until they are no longer required for the purposes for which they were collected, unless you delete the information about your user settings yourself in the relevant storage capacity of your terminal device beforehand.

You may object to this processing insofar as it is based on Article 6(1)(f) GDPR. Your right to object exists on grounds relating to your particular situation. You may submit your objection to us using the contact details set out in the “Controller” section.

Contacting Our Company

When you contact our company, for example by email, the personal data you provide will be processed by us in order to respond to your enquiry. For the aforementioned purpose, we process, in addition to the data strictly required, any further data you have provided with your enquiry. At the time your message is sent to us, your IP address and the date and time of registration are also processed. The legal basis for processing is Article 6(1)(f) GDPR or, where the contact is aimed at the conclusion of a contract, Article 6(1)(b) GDPR. Where the enquiry is aimed at concluding a contract, the provision of your data is required and mandatory. If the data are not provided, it will not be possible to conclude or perform the contract, or to process the enquiry. Where the processing is based on Article 6(1)(f) GDPR, we will provide you with information about the balancing of interests carried out upon request. We delete the data arising in this context once processing is no longer necessary – as a rule two years after the end of the communication – or restrict processing to compliance with existing mandatory statutory retention obligations.

You may object to the processing where it is based on Article 6(1)(f) GDPR. Your right to object exists on grounds relating to your particular situation. You may submit your objection to us using the contact details set out in the “Controller” section.

For the coordination and answering of user enquiries and the improvement of our customer service, we use the service of Intercom, Inc. (55 2nd Street, 4th Floor, San Francisco, CA 94105, USA, hereinafter: “Intercom”). The provider processes your personal data on the basis of a Data Processing Agreement pursuant to Article 28 GDPR as our data processor. The provider also processes your data in the United States of America. An adequacy decision by the European Commission exists for data transfers to the USA. The provider is certified thereunder.

Further information on the Privacy Policy of Intercom can be found at: https://www.intercom.com/legal/privacy.

Registration on the Waiting List

On our landing page, you can register on a waiting list for Collectible Invst in order to receive our newsletter, or to subscribe to our newsletter. The purpose of the newsletter is to inform you regularly about the following content:

  • News and updates on Collectible Invst
  • Information about the launch of Collectible Invst and access opportunities
  • Relevant information relating to our offering
  • Invitations to events hosted by our company
  • Invitations to product-related surveys for the development and further development of Collectible Invst

Registration on the waiting list and receipt of the newsletter requires the provision of the following data:

  • Full name (comprising first name and surname)
  • Email address

Furthermore, your IP address and the date and time of registration are processed at the time of registration. We process this data for the purpose of sending the newsletter and for as long as you have subscribed to the newsletter.

The legal basis for processing is Article 6(1)(a) GDPR. We process your data until you withdraw your consent.

You may withdraw your consent to the processing of your email address for the receipt of the newsletter at any time, either by clicking directly on the unsubscribe link in the newsletter or by sending us a message using the contact details set out under “Controller”. This does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal.vided no statutory retention obligations preclude this.

Newsletter Tracking

We also statistically evaluate open rates of newsletters, the number of clicks on included links and reading duration, measure the reach of our newsletters, and tailor the offers and information sent to your personal interests. For this purpose, usage behaviour on our web presences and within the newsletters sent by us is evaluated using device-specific information (e.g. email client used and software settings). For this analysis, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files also embedded on our website.

For the purpose of reach measurement, we measure the number of visitors who have accessed our website by clicking links and who perform certain actions there, such as redeeming vouchers and purchasing products via the online shop. Depending on reading behaviour, we also form target groups to whom we send newsletter content tailored to the identified user interest. In order to better tailor our newsletter to your interests, we associate your email address or user profile within our database with other usage profiles.

The legal basis for processing is Article 6(1)(a) GDPR. We delete your data when you end your newsletter subscription.

You may withdraw your consent at any time, either by sending a message to us (see the contact details in the “Controller” section) or by clicking directly on the unsubscribe link in the newsletter. This does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal.

Suppression List

In the event of unsubscription from our information emails by exercising the right to withdraw the declaration of consent, we process your data, in particular your email address, to ensure that you do not receive any further newsletters from us. For this purpose, we add your email address to a so-called “suppression list” which enables us to ensure that you receive no further newsletters from us. The legal basis for data processing is Article 6(1)(c) GDPR, in order to comply with our documentation obligations, and otherwise Article 6(1)(f) GDPR. Our legitimate interests in this case consist in complying with our legal obligations to reliably ensure that newsletters are no longer sent to you. Upon request, we will provide information on the balancing of interests carried out.

You may object to this processing. Your right to object exists on grounds relating to your particular situation. You may submit your objection to us using the contact details set out in the “Controller” section.

Email Marketing Service – Braze

We use the services of Braze, Inc. (63 Madison Building – 28 E. 28th St., Floor 12 Mailroom, New York, NY 10016, USA, hereinafter: “Braze”) for the sending of our newsletter and newsletter tracking. Braze processes user data such as email address, interaction data and IP address in order to manage the sending of messages and to analyse user interactions.

Braze processes your personal data on the basis of a Data Processing Agreement pursuant to Article 28 GDPR as our data processor. Braze processes your data in the United States of America. An adequacy decision by the European Commission exists for data transfers to the USA. Braze is certified thereunder.

Further information on the Privacy Policy of Braze can be found at: https://www.braze.com/company/legal/privacy.

Surveys / Typeform

For the conduct of product-related user surveys, we use the service Typeform, which enables us to create and evaluate online surveys. When you participate in one of our surveys, the information you provide and technical access data (including IP address and time of participation) are transmitted to Typeform and processed there.

As our survey tool, we use the following service provider:

  • Typeform S.L. (Carrer de Pallars 108, 08018 Barcelona, Spain); for data storage, Typeform uses Amazon Web Services, Inc. (dba AWS) with server locations in the EU. For any data transfers to the USA, Standard Contractual Clauses have been concluded between Typeform and AWS in order to ensure an adequate level of data protection. Further information on data protection and the sub-processor list of Typeform can be found at: https://admin.typeform.com/to/dwk6gt.

The service provider processes your personal data on the basis of a Data Processing Agreement pursuant to Article 28 GDPR as our data processor. The legal basis for processing is your consent pursuant to Article 6(1)(a) GDPR, which you grant by voluntarily participating in the survey. You may withdraw your consent at any time with effect for the future; this does not affect the lawfulness of processing carried out prior to the withdrawal.

Hosting

We use external hosting services provided by Amazon Web Services (Amazon Web Services Inc., 410 Terry Avenue North, Seattle WA 98109, United States of America, hereinafter: “AWS”), which serve to provide the following services: computing capacity, storage resources and database services, security and technical maintenance services. For these purposes, all data required for the operation and use of our website are processed (in particular access data as set out in the section “Use of the Website – Access Data”). AWS processes your personal data on the basis of a Data Processing Agreement pursuant to Article 28 GDPR as our data processor.

AWS also processes your data in the United States of America. An adequacy decision by the European Commission exists for data transfers to the USA. AWS is certified thereunder. In addition, we have agreed Standard Contractual Clauses with Amazon in order to bind Amazon to an adequate level of data protection. A copy is available upon request.

Further information on the Privacy Policy of AWS can be found at: https://aws.amazon.com/de/privacy/

Content Delivery Network – Cloudfront

In order to ensure that you can access our online content quickly, we use a Content Delivery Network (hereinafter: “CDN”). When you visit our website, a library is loaded from our CDN and cached on your terminal device to enable faster delivery of content and to avoid reloading. In addition, some of the data mentioned in the section “Use of Our Website” are transmitted to the CDN.

As our CDN, we use the following service provider:

  • Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA); this service provider processes your data in part in the United States of America. An adequacy decision by the European Commission exists for data transfers to the USA. Cloudflare, Inc. is certified thereunder. In addition, Standard Contractual Clauses have been concluded with Cloudflare, Inc. in order to bind Cloudflare, Inc. to an adequate level of data protection. A copy of the Standard Contractual Clauses can be viewed at https://www.cloudflare.com/de-de/cloudflare-customer-dpa/. Further information on data protection and storage duration can be found at: https://www.cloudflare.com/de-de/privacypolicy/.

The service provider processes your personal data on the basis of a Data Processing Agreement pursuant to Article 28 GDPR as our data processor.

Further information on data protection and storage duration at Cloudflare can be found at: https://www.cloudflare.com/de-de/privacypolicy/.

Statistics, Analytics and Marketing Services

Website Analytics with Google Analytics 4

In order to optimally tailor our website to user interests, we use “Google Analytics 4”, a web analytics service of “Google” (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland and Google, LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA; hereinafter: “Google” and “Google Analytics 4”). Google Analytics 4 uses so-called cookies stored on your terminal device for recognition purposes, as well as similar tracking methods for the recognition of terminal devices such as counting pixels, device fingerprinting and programming interfaces (e.g. APIs and SDKs), in order to process information from your terminal device. For this purpose, a randomly generated identification number (cookie ID / device ID) is assigned to your terminal device. Using these technologies, Google processes information generated about the use of our website by your device and access data for the purpose of statistical analysis – e.g. access to a specific web page, number of unique visitors, entry and exit pages, time spent on site, click, swipe and scroll behaviour, activation of buttons, newsletter registration, bounce rate and similar user interactions. For this purpose, it may also be determined whether different terminal devices belong to you or to your household. Access data include in particular the IP address, browser and device information, cookie ID / device ID, the previously visited website, and the date and time of the server request. In Google Analytics 4 systems, individual IP addresses are not logged or stored. At the moment the IP address is recorded by Google in special local data centres in the EU, your IP address is used to determine location information. The IP address is then deleted before the access data are stored in a data centre or on a server for Google Analytics. Google Analytics 4 does not provide precise geographic location data, but only general location information such as the region and city of the terminal device’s location, derived from the IP address. Google will process this information to evaluate your use of the website, to compile reports on website activity for us, and – insofar as we specifically indicate this – to provide us with further services related to website usage. If you are registered with a Google service, Google may associate the website visit with a user account and create and evaluate cross-application user profiles.

Furthermore, cross-platform analysis of usage behaviour takes place on websites and apps that use Google Analytics 4 technologies. This enables usage behaviour in different environments to be recorded, measured and compared in the same manner. For example, scroll events of the user are automatically recorded to enable a better understanding of the use of websites and apps. Different cookie IDs / device IDs are used for different terminal devices. Subsequently, anonymised statistics on the use of the different platforms, created according to selected criteria, are provided to us. Google Analytics 4 also automatically creates target groups for specific cookie IDs / device IDs or mobile advertising IDs, which can later be used for personalised advertising.

With regard to the storage of and access to information on your terminal device, the legal basis is § 25(1) TDDDG; for further processing, the legal basis is Article 6(1)(a) GDPR. Google also processes data in part in the United States of America. An adequacy decision by the European Commission exists for data transfers to the USA. Google LLC is certified thereunder. In addition, Standard Contractual Clauses have been concluded with Google in order to bind Google to an adequate level of data protection. A copy of the Standard Contractual Clauses is available at https://cloud.google.com/terms/sccs. Your data in connection with Google Analytics 4 will be deleted after a maximum of 24 months. Further information on data protection at Google can be found at: http://www.google.de/intl/de/policies/privacy.

You may withdraw your consent to the processing at any time by refusing the use of cookies and similar tracking technologies in our consent banner. The lawfulness of processing until the exercise of withdrawal is not affected.