Privacy Policy

We are pleased about your visit to our website and would like to inform you at this point about when, how, and to what extent your personal data will be collected and used by us, and what rights you have in this context.

The protection of your privacy is an important concern for us; therefore, the processing of your data only takes place within the framework of the legal requirements. The legal framework for data protection in Germany is primarily based on the European General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and the Telemedia Act (TMG). For better understanding and easier readability of our privacy policy, we will refrain from mentioning the relevant legal norms below. Please feel free to contact us if you have any questions. You can find our contact details in Section 9.

Please note that our internet offering may contain links to websites of other providers that are not covered by this privacy policy. For these websites, only the privacy policies of the respective provider apply. We would also like to point out that the other websites operated by BÖAG Börsen AG may be designed differently and may lead to different data protection consequences. Therefore, please take note of the respective privacy policy when visiting other websites of BÖAG Börsen AG.

1. Personal Data

Personal data are all information that allows conclusions to be drawn about your identity. This includes, in addition to first and last name, date of birth, address, and phone number, various other data such as your profession, private interests, as well as identification or membership numbers. We process personal data from you only to the extent that applicable data protection law allows or you have given us your consent. You can find more detailed information about the legal bases for processing in Section 3.

2. Processing Your Personal Data

The term processing covers all operations related to personal data. This includes, for example, collecting, recording, organizing, storing, adjusting and altering, retrieving, querying, using, disclosing, transmitting, reconciling, linking, as well as deleting or destroying such data. Below we would like to explain in which areas we process personal data in connection with the visit to our website:

a) General Use of Our Website

For the general use of our website, we generally do not need any personal data from you. However, with each access to our website, so-called server log files are stored by us or our web space provider for 14 days. This information is general in nature and is stored anonymously; it does not allow conclusions to be drawn about your person. The data recorded includes the (sub)websites you accessed under european-investor-exchange.com, the name of the website from which you are visiting us (e.g., search engine), the web browser you used and your operating system, the files downloaded by you, as well as the amount of data transmitted and the access status ("file transferred", "page not found", etc.) on our website.

Collecting these data is technically necessary to deliver the content of our website to the respective visitor and to make it readable for them. Additionally, we use this anonymous data to further optimize our internet presence and make it more attractive for you as a visitor. There is no transfer of the data to third parties.

b) Cookies

Our website uses so-called cookies. These are small text files that are stored on the hard drive of your used computer or other devices during your visit to our website. The cookies contain information about your browser, your IP address, your operating system, and your internet access, allowing us to recognize returning visitors to our website. This helps us determine the frequency of use and the number of visitors to our website. The cookies help us make our website more attractive and user-friendly for you and improve our internet offering. This is our legitimate interest, which serves as the legal basis for processing your personal data.

To provide you with the best possible service, we use "Permanent Cookies."

The information contained in the permanent cookies is stored permanently and is used to "recognize" our visitors, allowing us to present a varied website and new content upon repeated use. The content of the permanent cookies is limited to an identification number; the IP address, etc., is not stored. Individual profiling of your usage behavior does not take place. Permanent cookies are automatically deleted after twelve months.

You can remove the cookies stored on your computer at any time by deleting temporary files. However, please note that the presentation of our website and user guidance may be impaired in this case, and some functions may not be available or may be limited.

The data stored in cookies is not shared with third parties.

You can also visit our website without cookies. You can disable the storage of cookies in your browser settings, restrict it to certain websites, or configure your browser to notify you when a cookie is sent. You can find more information about this in the help function in the menu bar of your browser. However, we must point out that in this case, the aforementioned impairments when visiting our website may occur.

c) Integration of Third-party Services and Content

Our offering may include content, services, and performances from other providers. This can include, for example, price data, analyses or news feeds, YouTube videos, maps from Google Maps, as well as graphics and images from other websites. For the representation of this data in your browser, it is essential to transmit your IP address to these providers. We want to improve the information content of our website through the integration of third-party content and thus create added value for our visitors. This is our legitimate interest, which serves as the legal basis for processing your personal data.

Even though we strive to integrate only content from such providers into our website that use your IP address solely to deliver their content, we have no influence over whether these providers may also store or otherwise process your IP address. If we become aware that the IP address is being stored, we will inform our users accordingly.

d) Contact

If you contact us via email, you consent to the transmission of the personal data contained therein to us and the processing of the data in the context of handling your inquiry, including the associated contact with you. In addition to the data you provide, we store the date and time of your contact to ensure that incoming inquiries are processed in the order they are received.

Your consent fundamentally serves as the legal basis for processing your personal data. Depending on the nature of the inquiry, other legal bases under Article 6 of the GDPR may also apply, for example, the preparation of a contract.

Your personal data will not be transmitted to third parties unless your inquiry concerns topics that fall outside the responsibility of BÖAG Börsen AG or the exchanges operated by it, but, for example, within that of the market maker or a committee. In such cases, we will forward your inquiry to the responsible parties, who are obliged to confidentiality and compliance with data protection regulations.

Your personal data will be deleted as soon as they are no longer needed for processing your inquiry and any legal retention obligations do not (no longer) apply.

e) Social Plug-ins

Our website does not contain social plug-ins to protect the visitors of our website.

3. Legal Bases for Processing

We process your personal data exclusively based on the applicable data protection legal bases. According to this, we may process your personal data if you have given us your consent. Furthermore, the processing of your personal data is permissible if it is necessary for the fulfillment or execution of a contract or contractual relationship with you. The same applies to processing operations that are necessary for carrying out pre-contractual measures, such as in cases of inquiries about our products or services. Processing your personal data is also permissible in cases where we are legally obliged to do so, e.g., to fulfill our tax obligations, or in situations where processing is necessary to protect your vital interests or the vital interests of other persons. Such a case may exist, for example, in accident situations when a doctor or rescue workers rely on certain personal data to make treatment decisions. If processing your personal data is necessary to perform a task that is in the public interest or is carried out in the exercise of public authority assigned to us, we are also entitled to process your personal data. Finally, we may also process your personal data if it is necessary to safeguard our legitimate interests or the legitimate interests of a third party; however, this only applies to the extent that your interests, fundamental rights, and fundamental freedoms do not outweigh this.

4. Purpose Limitation

We use your personal data exclusively for the purpose underlying the collection. We will only use your personal data for marketing or market research purposes if you have explicitly agreed to this. Under no circumstances will we sell or otherwise market your personal data.

5. Data Minimization

We store personal data in accordance with the principles of data avoidance and data minimization only to the extent and only as long as necessary for the respective purpose or as required by law. If the purpose underlying the data collection no longer applies and the legal storage or retention period has expired, we will block or delete your personal data.

6. Data Transfer to Third Parties

All personal data, whether collected automatically or provided by you, will be treated confidentially by us and will not be shared with third parties, particularly not with third parties outside the EU, unless you have given your consent or we are legally obligated to do so based on legal requirements or court orders. To the extent that external service providers come into contact with your personal data, we have ensured through legal, technical, and organizational measures and through regular checks that they comply with the provisions of applicable data protection law.

7. Security

We take all necessary technical and organizational security measures to adequately protect your personal data against loss, misuse, and unauthorized access. Our security procedures are regularly reviewed and continuously adapted to technological and legal developments. Our employees and all third parties involved in data processing are obliged to comply with the applicable data protection regulations and to handle personal data confidentially.

If you want to contact us by email, please note that this is unencrypted and the confidentiality of the transmitted information is therefore not guaranteed. There is a risk that the content of the emails can be accessed by third parties. We therefore recommend that you send us personal and other confidential information exclusively by post.

8. Your Rights

Below we would like to outline the rights you have regarding your personal data with respect to us:

a) Right to Information

You have the right to request confirmation from us at any time regarding whether we are processing personal data concerning you. If we process personal data from you, you also have a right to information regarding your personal data affected by the processing, as well as regarding:

  • The purposes for which your personal data are processed;
  • The categories of personal data that we process;
  • The recipients or categories of recipients to whom we have disclosed your personal data or will still disclose them, particularly with respect to recipients in third countries or international organizations; if personal data are transferred by us to a third country or to an international organization, you have the right to be informed about the appropriate safeguards in connection with the transfer;
  • The planned duration for which we will store your personal data, or, if this is not possible, the criteria for determining this duration;
  • The existence of a right to rectification or deletion of your personal data concerning you, or to restriction of processing by us, or a right to object to this processing;
  • The existence of a right to lodge a complaint with a supervisory authority;
  • All available information about the origin of the data if your personal data were not collected from you;
  • The existence of automated decision-making, including profiling, and – at least in these cases – meaningful information about the logic involved, as well as the significance and the intended consequences of such processing for you.

You can assert your right to information through the contact channels mentioned in Section 9. We will provide you with the requested information free of charge in copy or, if the application is made electronically, in electronic form. We would like to point out that we are entitled to charge a reasonable fee based on administrative costs if you request additional copies of your personal data.

b) Right to Rectification

If your personal data processed by us are inaccurate or incomplete, you have the right to request the rectification or, taking into account the respective purpose of processing, the completion of your personal data – also by means of a supplementary statement.

You can use the contact channels mentioned in Section 9 for your request for rectification.

c) Right to Deletion ("Right to be Forgotten")

You have the right to request the immediate deletion of your personal data at any time if:

  • The data concerning you are no longer necessary for the purposes for which we collected or otherwise processed them;
  • You withdraw your consent for the processing of your data concerning you and there is no other legal basis for processing;
  • You object to the processing of your data concerning you and there are no overriding legitimate grounds for processing;
  • Your personal data have been unlawfully processed by us;
  • The deletion of your personal data is necessary to fulfill a legal obligation under European Union law or the law of the member states to which we are subject as the data controller;
  • Your personal data have been collected in relation to offered services of the information society according to Article 8 (1) GDPR.

We will delete your personal data in these cases immediately unless other legal provisions prevent this.

A right to deletion does not exist if the processing of your personal data is necessary:

  • To exercise the right to freedom of expression and information;
  • To fulfill a legal obligation requiring the processing of data under the law of the Union or the member states;
  • To perform a task that is in the public interest or in the exercise of official authority vested in us;
  • For reasons of public interest in the area of public health;
  • For archiving purposes in the public interest, scientific or historical research purposes, or for statistical purposes, insofar as your right to deletion is likely to make the achievement of the processing goals impossible or seriously impaired; or
  • For the establishment, exercise, or defense of legal claims.

You can send us your request for deletion most easily through the contact channels mentioned in Section 9.

If we have made your personal data public and are obliged to delete them, we will take reasonable measures, taking into account the available technology and the implementation costs, to inform other data controllers who process your published personal data that you have requested the deletion of all links to these personal data or copies or replications of the respective data.

d) Right to Restriction of Processing

You also have the right to request the restriction of processing of your personal data. This means that we may process your respective data – apart from their storage – only with your consent or for the assertion, exercise, or defense of legal claims or to protect the rights of another natural or legal person or for reasons of significant public interest of the European Union or a member state. You can assert your right to restrict processing of your personal data most easily through the contact channels mentioned in Section 9, provided that:

  • The accuracy of your personal data is disputed by you and the verification of your personal data requires some time;
  • The processing of your personal data is unlawful by us, but you refuse the deletion of the respective data and instead demand the restriction of their use;
  • We no longer need your personal data for the processing purpose, but you are dependent on them for the assertion, exercise, or defense of legal claims;
  • You have objected to the processing of your personal data, but it is still unclear whether our legitimate reasons for processing outweigh your right to object.

If the processing of your personal data is restricted, we will inform you before we lift the restriction.

e) Right to Data Portability

Your rights also include the right to data portability. This means that we will provide you, upon request, with your personal data in a structured, commonly used, and machine-readable format, so that you can transfer the respective data to another data processor. Alternatively, you may request that we directly transmit your personal data to the other data processor, provided this is technically feasible. If you wish to initiate a data transfer, please inform us through the contact channels mentioned in Section 9.

The right to data portability does not apply to the processing of personal data necessary to perform a task that is in the public interest or in the exercise of public authority vested in us.

Right to Object

a) You have the right to object at any time, for reasons arising from your particular situation, against the processing of your personal data which is:

  • Necessary for performing a task that is in the public interest or in the exercise of official authority vested in us, or
  • Necessary for the safeguarding of our legitimate interests or those of a third party, unless your interests or fundamental rights and freedoms requiring the protection of personal data outweigh those interests.

b) This also applies to profiling based on these provisions. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or the processing serves to establish, exercise, or defend legal claims.

c) If we process your personal data for direct marketing purposes, you can object to this at any time; this also applies to profiling, insofar as it is related to such direct marketing. After your objection, your respective data will no longer be processed for direct marketing purposes.

d) Additionally, you have the right to object, for reasons arising from your particular situation, to the processing of your personal data for scientific or historical research purposes or for statistical purposes, unless the processing is necessary for the fulfillment of a task that serves the public interest.

e) You can most easily submit your objection to us using the contact channels mentioned in Section 9. In connection with the use of services of the information society, you can also exercise your right to object through automated processes using technical specifications.

f) Automated Individual Decision-making Including Profiling

We do not make decisions based on automated processing of your personal data or profiling.

g) Right to Withdraw Your Data Protection Consent

You can withdraw your consent to the processing of your personal data given to us at any time. However, the withdrawal of your consent only affects the future, meaning that the processing carried out prior to your withdrawal is not affected. You can send us your withdrawal easily through the contact channels mentioned in Section 9.

h) Right to Complain to a Supervisory Authority

If you believe that the processing of your personal data by us violates applicable data protection regulations, you have the right to lodge a complaint with a supervisory authority, for example, with the supervisory authority in the EU member state of your habitual residence, your workplace, or the location of the alleged data protection violation. This option is available to you regardless of any other assertion of your rights in the context of administrative or judicial proceedings.

9. Responsible Party According to the General Data Protection Regulation

We are the responsible party according to the General Data Protection Regulation and other applicable data protection regulations and can be contacted as follows:

BÖAG Börsen AG

Kleine Johannisstraße 4

20457 Hamburg

Tel.: 040 / 36 13 02 - 0

Fax: 040 / 36 13 02 - 23

E-mail: datenschutz@boersenag.de

www.boersenag.de

10. Data Protection Officer

If you have questions regarding the processing of your personal data, you can also contact our data protection officer directly, who is also available to you for inquiries, suggestions, or complaints regarding this issue:

A & A Arbeitsschutz GmbH

Kölner Straße 76

41812 Erkelenz

E-mail: ds-beauftragter@aa-arbeitsschutz.de

11. Changes to this Privacy Policy

We reserve the right to change our data protection measures as well as this privacy policy at any time in accordance with applicable data protection regulations and to adapt it, in particular, to changed legal framework conditions and statutory requirements. Please note that the content of this privacy policy may have changed by the time of your next visit to our website.

Status of the Privacy Policy:

December 3, 2024