§Legal

Privacy policy

Last updated: September 2026 · Version 1.1

1.Controller

The controller responsible for data processing on this website is:

Pralle Beteiligungen UG (haftungsbeschränkt)
Warschauer Straße 58a, 10243 Berlin, Germany
Represented by: Ulf Pralle, Managing Director
E-mail: kontakt@2998capital.com

2.Data collection when visiting this website

When you access this website, the hosting provider automatically stores information in so-called server log files that your browser transmits. These are in particular:

IP address (possibly shortened/anonymised)
Date and time of the request
Page accessed and amount of data transferred
Browser type and version, operating system
Referrer URL

Processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure and stable operation of the website). This data is not merged with other data sources.

3.Cookies, tracking and analytics

This website uses no tracking cookies, no analytics tools and no counting pixels. No usage profiles are created. Fonts are hosted on our own server and loaded from there; no connection to third-party servers is established when you visit the site.

4.Contact by e-mail and contact form

When you contact us by e-mail, we process the data you provide (name, e-mail address, content of your message and any documents transmitted) in order to answer your enquiry and to initiate or carry out a possible mandate. The legal basis is Art. 6 para. 1 lit. b GDPR (pre-contractual measures or performance of a contract) and Art. 6 para. 1 lit. f GDPR. We treat confidential documents in accordance with the confidentiality agreement concluded with you; at the end of the mandate we delete or hand over your documents.

If you use the contact form, your details (name, e-mail address, company, role and message) are sent to us by e-mail and are not stored on the web server. Mandatory fields are marked. The legal bases are the same as for contact by e-mail. We delete your enquiry once it has been dealt with, unless statutory retention obligations apply.

5.Recipients and third-country transfer

Personal data is only disclosed to third parties where necessary for the performance of a contract, where you have consented, or where a legal obligation exists. This website is hosted by Namecheap, Inc. (Phoenix, USA); the servers are located in a data centre in the European Union. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider. Data rooms are likewise located in the European Union. We process our e-mails via Google Workspace (Google Cloud EMEA Limited, Ireland). A transfer to Google LLC in the USA cannot be ruled out; it takes place on the basis of the EU-US Data Privacy Framework, under which Google is certified. Where services from providers outside the EU/EEA are used, this is based on the EU Commission's standard contractual clauses.

6.Retention period

We store personal data only for as long as necessary for the stated purposes or as required by statutory retention obligations. Server log data is generally deleted or anonymised after a short period; communication in connection with mandates is deleted or handed over after the end of the mandate in accordance with contractual agreements.

7.Your rights

You have the following rights vis-à-vis us with regard to your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)

To exercise your rights, an informal e-mail to kontakt@2998capital.com is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.

8.Data security

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" in the address line of your browser.