Under this privacy notice (hereinafter the “Notice”), Deutsche Börse AG (hereinafter “We” or “Us”) informs you how We process your personal data. Your personal data means any information relating to you (hereinafter the “Personal Data”), such as name or contact details.

We pay special attention on the processing of Personal Data in accordance with the General Data Protection Regulation EU 2016/679 (“GDPR”) and applicable national data protection laws.

1 Controller

1.1 Our identity and contact details

We are:

Deutsche Börse AG
60485 Frankfurt am Main
Deutschland

Tel. +49-(0) 69-2 11-0
Fax +49-(0) 69-2 11-1 20 05
E-Mail info@deutsche-boerse.com

1.2 Contact details of Our data protection officer

Our data protection officer is:

Datenschutzbeauftragte(r) der Gruppe Deutsche Börse
Deutsche Börse AG
60485 Frankfurt am Main

dataprotection@deutsche-boerse.com

2 Purpose, Categories of Personal Data, Legal Basis and Retention

2.1 Categories of your Personal Data and purposes of Our processing
We process the following categories of your Personal Data for the following purposes:

2.1.1 name, address, telephone number or e-mail address if you wish to make direct contact with us or register a closed user group. Which data is collected in the various entry masks depends on the individual entry fields. Mandatory information fields will be marked accordingly. All other information shall be voluntary, and

2.1.2 our web servers will only store the shortened address of your internet service provider (i.e. the shortened IP address), the name of the website from where you visit us, our websites that you retrieve, the used web browser type and the date and duration of your visit. Any relation to an individual person is not established due to the shortened IP address.

2.1.3 With your consent, you can subscribe to our newsletters Capital Market Insight and Venture Weekly which inform you about the relevant subject areas.

We use the double opt-in procedure to subscribe to our newsletters. This means that after registration we will send you an e-mail to the specified e-mail address asking you to confirm that you wish to receive the newsletter. In addition, we store your IP addresses as well as registration and confirmation times. The purpose of the procedure is to provide evidence of your registration and, if necessary, information about a possible misuse of your personal data. The legal basis is Article 6 para. 1 lit. (a) and (c), Article 7 para. 1 GDPR.

The prerequisite for sending the newsletter is your e-mail address. The provision of additional, separately marked data is voluntary and is used to address you personally. After your confirmation, we will save your e-mail address to send you the newsletter. The legal basis is Art. 6 para. 1 lit. (a) GDPR. Your personal data will be deleted as soon as they are no longer required for the purpose of collection. The e-mail address of the user is therefore stored as long as the subscription to the newsletter is active.

You can revoke your consent to receive the newsletter at any time and cancel the newsletter with effect for the future, i.e. the revocation of the consent does not affect the legality of the processing due to the consent before the revocation. You can declare your revocation by clicking on the link contained in every newsletter e-mail or by sending a message to the contact data given in the imprint. If the consent is revoked, we may only process the personal data if there is another legal reason for the processing.

2.2 Legal basis for Our processing of your Personal Data
Our processing of your Personal Data is allowed by law. The legal basis is:

2.2.1 As to the processing of your Personal Data under Section 2.1.1: The legal basis for processing of Personal Data for personalized services is Art. 6 para. 1 lit. (b) of the GDPR permitting the processing of your Personal Data for the purposes of providing our personalized services to you.

2.3 Do you have to provide your Personal Data to Us?
The provision of your Personal Data is necessary to access the protected areas of this website which is limited to members of Our customer groups, to make direct contact with us, or to receive a newsletter. This means that you are obliged to provide your Personal Data to Us as part of a user registration process when making use of these options. Such Personal Data remain under your control at all times via the “My Profile” facility. Your user account can be viewed or modified at any time by you, the account owner.

The consequences if you do not provide your Personal Data to Us are that the respective service offered may no longer be available.

2.4 Do We make automated decisions on you?
We do not make any automated decisions solely on automatic processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

2.5 Retention periods
The period for which your Personal Data will be stored by Us is shown in the table below:

3 Transfer of Personal Data to Third Parties

We will not transfer your Personal Data to third parties except such transfer is permitted by law or you have explicitly consented to the transfer.

We may transfer your Personal Data to public authorities where this is required by the applicable law (e.g. the German Stock Exchange Act (Börsengesetz) or the German Securities Trading Act (Wertpapierhandelsgesetz)). A transfer of your Personal Data is also permitted if there is a suspicion of a criminal offence or the abuse of the services offered on Our website. In this event, we shall be entitled to transfer your Personal Data to the criminal prosecution authority.

Otherwise, your personal data will be stored exclusively in our database and on our servers, or on those of our commissioned data processing providers. We will only share your Personal Data with other controllers for their own purposes such as cooperation or advertising partners under the condition that you explicitly and voluntarily agreed to such transfer of your Personal Data; in this case, we will obtain your consent separately from this Notice.

4 Cookies

When you visit the website and Our online platform, information is stored on your terminal device in the form of a "cookie." Cookies are small files that are stored on your terminal device and save certain settings and data to exchange with our websites via your browser.

For example, cookies enable us to tailor a website to better match your interests or to store your password so that you do not have to re-enter it every time. As a general rule, we never collect personal data via cookies, unless you have given us your express permission to do so.

If you do not want us to recognize your terminal device, please configure your Internet browser to erase all cookies from your device, to block all cookies or to receive a warning before a cookie is stored. You will find brief instructions on how to do this below.
 

Please note that certain functions of our website may no longer work, or not correctly, without cookies.
 

a. Types of cookies
Cookies can be assigned to four categories, depending on their function and intended purpose: absolutely necessary cookies, performance cookies, functional cookies, and cookies for marketing purposes.
 

i. Absolutely necessary cookies
Are needed for you to navigate within websites and operate basic website functions, such as the issuance of anonymous Session IDs for bundling several related queries to a server.
 

ii. Performance cookies
collect information on the usage of our websites, including for example the Internet browsers and operating systems used, the domain name of the website which you previously visited, the number of visits, average duration of visit, and pages called up. These cookies do not store any information that would make it possible to personally identify the user. The information collected with the aid of these cookies is aggregated and is therefore anonymous. Performance cookies serve the purpose of improving the user friendliness of a website and therefore enhancing the user’s experience. You can block the use of such cookies by creating an exclusion cookie (see “managing cookies” below).
 

iii. Functional cookies
enable a website to store information the user has already entered (such as user ID, language selection, or the user’s location), in order to offer improved, personalized functions to the user. Functional cookies are also used to enable requested functions such as playing videos and to make a user’s decision to block or disable a certain function (e.g. web analysis) - “opt-out cookies”.
 

iv. Cookies for marketing purposes
are used to offer more relevant content to users, based on their specific interests. They are also used to limit the display frequency of an ad and to measure and control the effectiveness of advertising campaigns. They register whether users have visited a website or not, and which contents were used. This information may possibly also be shared with third parties, such as advertisers, for example. These cookies are often linked to the functions of third-party websites. You can block the use of such cookies by creating an opt-out cookie (see “Managing cookies” below).

b. Cookies on Our website and Our online platform

Please note: Not all of the cookies mentioned above will necessarily be used when you browse our website using a mobile terminal device.c. Managing cookies
You can change your cookie preferences at any time by clicking on the ‘Cookies Preference Manager’ link. You can then adjust the available sliders to ‘On’ or ‘Off’, then clicking ‘Save and close’. You may need to refresh your page for your settings to take effect.

d. How can I deactivate cookies?
In the following you will find a summary of links that provide detailed information on the deactivation of cookies in commonly used browsers.

Mozilla Firefox (https://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored)

Internet Explorer (https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies)

Google Chrome (https://support.google.com/accounts/answer/61416?hl=en)

Safari (https://support.apple.com/en-en/guide/safari/sfri11471/mac)

5 Use of Webtrekk web analysis service

In order to improve the quality and to ensure a user-friendly design of our offered services, we make use of “Webtrekk” from the company Webtrekk GmbH. “Webtrekk” is a statistics programme, through which the company Webtrekk GmbH records the use of our App by users on an anonymized basis. Webtrekk GmbH acts as our commissioned data processing provider. The web analysis service of Webtrekk GmbH has been verified in terms of data safety and is certified by the Technical Control Board (TÜV). The use of “Webtrekk” enables us to receive user behaviour analysis. As a result, we are able to enhance our services and adapt individually adapt them to user requestsWe also make use of so-called cookies, i.e. small files stored on your device. The cookies are not assignable to any certain or identifiable person. Profiles capable of being related to an individual person in respect to your user behaviour will not be created. You are entitled to raise an objection to the collection of pseudonymous data by Webtrekk or cookies.

Most of the cookies used are so-called “Session Cookies”, which are stored on a temporary basis, exclusively for the duration of your utilization of the App. On the other hand, we also make use of “Permanent Cookies” to record information about visitors who repeatedly access one of our servers via the App. The content of a permanent cookie is limited to an identification number. Your full IP address or other personal data will not be stored. We and our statistical service provider, Webtrekk GmbH, only store your IP address in a shortened (anonymized) form and use it for identification of the session, so that the collected data will be anonymous and allocation to the identity of an individual user is not possible. The shortened IP address will then be deleted without delay as soon as it is no longer required. You are entitled to raise an objection against the pseudonymous collection and processing of your data through cookies.

Pursuant to § 15 Section 3 of the German Telemedia Act, website visitors are entitled to object to the storage of their visitor data, so that this data will no longer be recorded on this website in the future. If you object to the data storage, a cookie called “webtrekkOptOut” will be placed by the domain webtrekk.net for purposes of exemption from the web controlling process. Technically, the withdrawal notice will remain effective until the aforementioned cookie is deleted.

Object to data storage now

6 Usage of Matomo

Subject to your consent, we use Matomo (formerly known as PIWIK) to analyse your visit on our website. Matomo is an open-source tool for web analytics. During its use, none of your data will be sent to servers outside our control. 
Matomo also uses cookies which are stored on the hard drive of your PC and give us no clue whatsoever on your identity.
Provided your consent to the analysis via Matomo, the following data will be processed: 
(1) 2 bytes of the IP address of the user's calling system.
(2) The accessed web page
(3) The web page from which the user has reached the accessed web page (referrer)
(4) The subpages that are called up from the called-up website
(5) The time spent on the website
(6) The frequency with which the web page is accessed
(7) The Klicks and Actions during the visit
The software solely runs on our servers, which is the sole place of storage for your personal data. That data will not be transferred.
 

7 Your Rights

Under applicable data protection laws, you have rights
• of access to, rectification of, and/or erasure of your Personal Data;
• to restrict or object to its processing;
• to tell Us that you do not wish to receive marketing information; and
• (in some circumstances) to require certain of your Personal Data to be transferred to you or a third party, which you can exercise by contacting Us at the details set out at the beginning of this Notice.

To the extent Our processing of your Personal Data is based on your consent, you also have the right to withdraw your consent, without affecting the lawfulness of Our processing based on your consent before its withdrawal.

To exercise your rights, you can contact Us as set out in Section 1.1 above. You can also lodge a complaint about Our processing of your Personal Data with a data protection authority.