Privacy policy

We thank you for visiting our website. The secure handling of your data is particularly important to us. We would therefore like to inform you in detail about the use of your data when visiting our website.

 

Controller for the processing of personal data

 

Boerse Stuttgart GmbH

Börsenstraße 4

70174 Stuttgart

Tel.: +49 711 222985 – 0,

Website: www.boerse-stuttgart.de

E-Mail: [email protected]

 

Represented by:

• Dragan Radanovic

• Dr. Markus Röhrig

• Stephan Simmang

• Dr. Oliver Vins

 

Name and address of the Data Protection Officer

 

Yvonne Piater

Data Protection Officer

Boerse Stuttgart GmbH, Börsenstraße 4, 70174 Stuttgart

 

E-Mail: [email protected]

 

Legal basis for processing

 

Article 6(1)(a) GDPR serves as the legal basis for our company for processing operations where we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, with processing operations necessary for the delivery of goods or the provision of any other service or consideration, the processing is based on Article 6(1)(b) GDPR. The same applies to processing operations necessary for the implementation of pre-contractual measures, for example in cases of inquiries about our products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as for the fulfillment of tax obligations, the processing is based on Article 6(1)(c) GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person, Article 6(1)(d) GDPR. Finally, processing operations could also be based on Article 6(1)(f) GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to protect a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not override.

Disclosure of personal data to third parties

 

Data processing or transfer of your personal data to third parties for purposes other than those listed below does not take place. We only process your data and disclose it to third parties if:

  • You have given your explicit consent according to Art. 6 Para. 1 S. 1 lit. a GDPR,

  • The disclosure is necessary according to Art. 6 Para. 1 S. 1 lit. f GDPR for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,

  • We are legally obliged to disclose according to Art. 6 Para. 1 S. 1 lit. c GDPR, as well as

  • This is legally permissible and required according to Art. 6 Para. 1 S. 1 lit. b GDPR for the processing of contractual relationships with you.

  • If the processing is necessary to protect the vital interests of the data subject or another natural person;

  • If the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

 

In addition, we use external service providers for the processing of our services, which we have carefully selected and commissioned in writing. They are bound by our instructions and are regularly monitored by us. Where necessary, we have concluded data processing agreements with these service providers in accordance with Art. 28 GDPR. These are service providers for web hosting, sending emails, as well as maintenance and servicing of our IT systems, etc. The service providers will not disclose this data to third parties.

 

Rights of data subjects

 

You have the right:

 

  • to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about their details;

  • to immediately request the correction of incorrect or completion of your personal data stored by us in accordance with Art. 16 GDPR;

  • to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;

  • to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is contested by you, the processing is unlawful but you oppose their deletion and we no longer need the data, but you require them for the establishment, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 GDPR;

  • to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format or to request the transfer to another controller in accordance with Art. 20 GDPR;

  • not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you in accordance with Art. 22 GDPR;

  • to withdraw your consent given to us at any time in accordance with Art. 7(3) GDPR. This has the consequence that we may no longer continue the data processing based on this consent for the future and

  • to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR, without prejudice to any other administrative or judicial remedy. Generally, you can contact the supervisory authority of your usual place of residence or workplace or the place of the alleged infringement if the data subject believes that the processing of personal data relating to them violates the EU General Data Protection Regulation (GDPR).

 

General Data Collection

 

When you access our website or retrieve a file, data about this process is stored in a log file on our web server. Specifically, the following data may be stored:

 

  • IP address (stored only in truncated form without cause)

  • Domain name of the website you came from

  • Names of the retrieved files

  • Date and time of retrieval

  • Name of your Internet Service Provider

  • As well as the operating system and browser version of your device, if applicable

  • We store IP addresses only for data security reasons to ensure the stability and security of our system (legal basis: Art. 6 para. 1 lit. f GDPR). Statistical evaluation of anonymized data sets is reserved.

 

Contact via Email

 

If you send us inquiries via email, your information from the inquiry form or your email, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. The provision of an email address is required for contact information; providing your name and telephone number is voluntary. We do not pass on this data to third parties without your consent. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6 para. 1 lit. f GDPR and, if applicable, Art. 6 para. 1 lit. b GDPR if your request is aimed at concluding a contract. Your data will be deleted after your request has been fully processed, unless there are legal retention obligations to the contrary. In the case of Art. 6 para. 1 lit. f GDPR, you can object to the processing of your personal data at any time.

 

Google Analytics and Google Optimize

 

Google Analytics

 

Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses so-called cookies.

 

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

 

We only use Google Analytics with activated IP anonymization. This means that the IP address of users is truncated.

 

Google Optimize

 

Additionally, the web analysis and optimization service "Google Optimize" is used on our website. We use Google Optimize to increase the attractiveness, content, and functionality of our website by displaying new features and content to a percentage of our users and statistically evaluating the usage changes. Google Optimize uses cookies to enable optimization and analysis of your use of our website. Google will use this information to evaluate your use of our website, to compile reports on optimization tests and related website activities, and to provide us with other services associated with website and internet usage.

 

Legal basis

 

The processing of Google Analytics and Optimize is carried out in accordance with Art. 6 Para. 1 lit. a GDPR on the basis of your consent. We have concluded a data processing agreement with the service provider, in which we obligate them to protect our customers' data and not to pass it on to third parties. Since personal data is transferred to the USA, additional protection mechanisms are required to ensure the data protection level of the GDPR. To ensure this, we have agreed on standard data protection clauses with the provider in accordance with Art. 46 Para. 2 lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even through this contractual extension, we strive for further regulations and commitments from the recipient in the USA.

 

The terms of use of Google Analytics and privacy information can be accessed via the following links: https://marketingplatform.google.com/about/analytics/terms/en/ and https://www.google.com/intl/en/policies/.

 

The data will be deleted as soon as it is no longer necessary for achieving the purpose of its collection. Deletion of data at the user and event level that is associated with cookies, user identifiers (e.g., User ID), and advertising IDs occurs at the latest 14 months after its collection.

 

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the URL https://tools.google.com/dlpage/gaoptout?hl=en.

 

For information on how Google Analytics handles user data, please refer to Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en

 

Google Tag Manager

 

This website uses Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This service allows website tags to be managed through an interface. Google Tag Manager only implements tags. This means: No cookies are used and only the IP address of the user is transmitted to Google for connection establishment. Google Tag Manager triggers other tags, which in turn may collect data. However, Google Tag Manager does not access this data. If deactivation has been done at the domain or cookie level, it remains in place for all tracking tags implemented with Google Tag Manager.

 

We use Google Tag Manager based on your consent according to Art. 6 para. 1 lit. a GDPR.

 

As the IP address is transferred to Google in the USA, additional protection mechanisms are necessary to ensure the data protection level of the GDPR. To ensure this, we have agreed on standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even through this contractual extension, we strive for further regulations and commitments from the recipient in the USA.

 

Cookies

 

Our website uses so-called "cookies". They serve the purpose of storing information on your device, either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or an automatic deletion by your web browser occurs.

 

Cookies have various functions. Numerous cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or language settings). Other cookies serve to evaluate user behavior or display advertising.

 

The processing of data through the use of essential cookies is based on a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in the technically error-free provision of our services.

 

The storage of cookies and access to the information therein is based on § 25 para. 2 No. TTDSG.

 

For details on the processing purposes and legitimate interests, please refer to the explanations on the specific data processing operations.

 

The processing of personal data through the use of other cookies is based on consent pursuant to Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time for the future. If such cookies are used for analysis and optimization purposes, we will inform you separately about this within the framework of this privacy policy and obtain consent pursuant to Art. 6 para. 1 lit. a GDPR.

 

You can set your browser to inform you about the setting of cookies,

allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or generally, activate the automatic deletion of cookies when closing the browser.

 

The cookie settings can be managed under the following links for common browsers:

 

  • Google Chrome

  • Mozilla Firefox

  • Edge (Microsoft)

  • Safari

  • Opera

 

If you use other browsers, we recommend you go to your browser's settings options to read the procedure for setting.

 

You can also manage cookies from many companies and functions used for advertising individually. Use the appropriate user tools, available at https://www.aboutads.info/choices/ or https://www.youronlinechoices.com/uk/your-ad-choices

 

Most browsers also offer a so-called "Do-Not-Track function". When this function is activated, the respective browser informs advertising networks, websites and applications that you do not wish to be "tracked" for the purpose of behavioral advertising and the like.

 

Information and instructions on how you can edit this function can be obtained from the provider of your browser under the following links:

 

  • Google Chrome (external link)

  • Mozilla Firefox (external link)

  • Edge (Microsoft) (external link)

  • Safari (external link)

  • Opera (external link)

 

Additionally, you can prevent the loading of so-called scripts by default. "NoScript" allows the execution of JavaScripts, Java and other plug-ins only on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from your browser provider (e.g. for Mozilla Firefox at: https://addons.mozilla.org/en/firefox/addon/noscript/).

 

Please note that deactivating cookies may limit the functionality of our website.

 

Changing Cookie Settings

 

You can revoke or change your cookie settings at any time. To do this, call up the cookie settings again via our integrated thumbprint. You can find this at any time at the bottom left of the website.

 

YouTube Videos

 

The legal basis for the processing is your given consent according to Art. 6 para. 1 lit. a GDPR.

We have embedded YouTube videos on our website, which are stored on the servers of the provider YouTube and can be played from our website via an embedding. The embedding of the videos is done with activated option for extended privacy settings. When you play these videos, YouTube cookies and DoubleClick cookies are stored on your computer and data may be transferred to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), as the operator of YouTube.

 

When playing videos stored on YouTube, according to the current status, at least the following data is transmitted to Google as the YouTube operator and operator of the DoubleClick network: IP address and cookie, the specific address of the page accessed on our site, system date and time of access, identifier of your browser.

 

This data is transmitted regardless of whether you have a Google user account that you are logged into, or whether you do not have a user account. If you are logged in this way, this data may be directly associated with your account by Google. If you do not want the association with your profile, you must log out before activating the play button for the video.

 

YouTube or Google stores this data as usage profiles and may use it for purposes of advertising, market research and/or demand-oriented design of their websites. Such evaluation takes place in particular (also for users who are not logged in) to provide demand-oriented advertising and to inform other users about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google as the operator of YouTube to exercise this right.

 

Further information on the purpose and scope of data collection and its processing by Google can be found on this information page.

 

Google Remarketing via DoubleClick

 

We use the remarketing function of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This function serves to present interest-based advertisements to visitors to the website within the Google DoubleClick advertising network. The website visitor's browser stores cookies for this purpose, which enable the visitor to be recognized when they visit websites that belong to Google's advertising network. On these pages, the visitor can then be presented with advertisements that relate to content that the visitor has previously accessed on websites that use the Google remarketing function. If you do not wish to use the remarketing function, you can deactivate it by making the appropriate settings. You can also deactivate the cookies via the Network Advertising Initiative by following the instructions.

 

Please note that American intelligence agencies may be able to access personal data that is inevitably exchanged with Google when integrating this tool due to the Internet Protocol, based on the Cloud Act.

 

References to third-party websites

 

This website offers references to third-party websites in the form of so-called links. Only when you click on such a link will data be transmitted to the link destination. This is technically necessary. The transmitted data includes, in particular: your IP address, the time at which you clicked the link, the page on which you clicked the link, information about your internet browser. If you do not want this data to be transmitted to the link destination, do not click on the link.

 

SSL Encryption

 

This website uses SSL encryption (Secure Socket Layer) for the transmission of data from your browser to our server and to servers that provide files we incorporate on our website.

 

With SSL, data is transmitted in encrypted form. The data cannot be altered, and the sender can be identified.

 

You can recognize the presence of SSL encryption by the prefixed text "https" before the address of the website you are accessing in your browser.

 

Links to Other Websites

 

Our website/app may from time to time contain links to third-party websites or to other websites of our own. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these privacy policies before you submit any personal data to these websites.

 

Security Notice

 

We secure our website and other IT systems through appropriate technical and organizational measures against loss, destruction, unauthorized access, unauthorized modification, or unauthorized dissemination of your data. However, complete protection against all dangers is practically not possible in every case despite all due diligence. Because we cannot guarantee complete data security in communication via email, we recommend using postal mail for transmitting confidential information.

 

Automated Decision-Making

 

Automated decision-making or profiling according to Art. 22 GDPR does not take place.

 

Changes to this Privacy Policy

 

We reserve the right to change this privacy policy if the legal situation or this online offer or the type of data collection changes. However, this only applies to statements on data processing. If user consent is necessary or elements of the privacy policy contain a regulation of the contractual relationship with users, the privacy policy will only be changed with the user's consent.