Data protection - Privacy Policy of Bayerische Börse AG

 

Your data is in good hands with Bayerische Börse AG (hereinafter also referred to as “Börse”). The protection of your privacy is an important concern for us when processing personal data and we take this into account in all business processes.

We only process your data: a) if you have given us your express consent pursuant to Art. 6 I lit. a General Data Protection Regulation (GDPR), or b) if the relevant laws permit data processing or c) if we are legally obliged to do so. The following data protection information covers the currently valid legal framework according to the German Federal Data Protection Act (FDPA) as well as the European-wide valid requirements of the EU Data Protection Basic Regulation (GDPR). At this point we would like to inform you about which data we collect, for what purposes we collect the data and what we do with the collected data. Since this is important, you should take the time to read the privacy statement carefully. Under no circumstances will we pass on your data to third parties outside the group of companies, unless you have given us your express consent pursuant to Art. 6 I lit. a GDPR or the relevant laws, including the fulfilment of a contract pursuant to Art. 6 I lit. b GDPR, permit or oblige us to pass on data.

a) Controller

Bayerische Börse AG, the institution of the Börse München, Karolinenplatz 6, D-80333 Munich is responsible for the collection, processing and use of your personal data within the meaning of the GDPR and the Federal Data Protection Act (FDPA). We would be pleased to inform you in detail about the handling of your data at the Börse. If you wish to object to the collection, processing or use of your data by the Börse in accordance with data protection regulations, you can send your objection by e-mail, fax or letter to the following contact data:

Bayerische Börse AG
The institution of the Börse München
Hopfenstrasse 4
80335 Munich
fax.: +49 89 549045-55
email: Datenschutzbeauftragter@boerse-muenchen.de 

In addition, you can also receive information about the data stored by us, free of charge and at any time. If you have any comments or questions about data protection, you can contact the data protection officer of Bayerische Börse AG. The Data Protection Officer is under:

Data Protection Officer of Bayerische Boerse AG 
Hopfenstrasse 4, 80335 Muenchen 
respectively by email datenschutzbeauftragter@boerse-muenchen.de

b) Information duties according to Art. 13 GDPR

aa) Use of our website
By visiting our website, our web servers store by default the first 2 bytes of your IP address, which are automatically assigned to you in advance by your Internet provider. The following data will be stored: The website from which you visited us and the pages you visit on our website as well as the date and duration of your visit. This data is temporarily stored by us for reasons of technical security, in particular to prevent attempts to attack our web server. It is not possible for us to draw conclusions about individual persons on these data. After at least seven days, the data will be anonymized by shortening the IP address at domain level, so that it is no longer possible to establish a reference to the individual user. This processing is carried out on the basis of our legitimate interests in accordance to Art. 6 I lit. f GDPR.

We point out that our website may contain links to websites of other providers to which this data protection declaration does not extend. We check linked pages at irregular intervals. Should these pages contain content that is not authorised under data protection law, we hereby distance ourselves from this and accept no liability whatsoever. bb) E-mail

If you contact us via e-mail, personal data will be processed and stored. By sending us an e-mail, you consent to the processing of your transmitted data (including e-mail address and name) for the purpose of responding to your inquiry and for contact by the Börse according to Art. 6 I lit. b GDPR. This data will not be passed on to third parties and will be deleted immediately after contact has been made, unless this results in further purposes of use. 

cc) Contact form
If you contact us via our contact form on our website, personal data included in the contact form will be processed and stored. By sending your request to contact us, you consent to the processing of your transmitted data (including e-mail address and name) for the purpose of responding to your request and to be contacted by the Börse according to Art. 6 I lit. b GDPR. This data will not be passed on to third parties and will be deleted immediately after contact has been made, unless this results in further purposes of use.

dd) Newsletter registration (website)
We will only process your e-mail address for our own advertising purposes and only if you have given us your consent in accordance to Art. 6 I lit. a GDPR. If you provide us with your e-mail address, we will regularly send you information about comments, interviews and background information on the capital markets. If you provide us your e-mail address, we will first send you a confirmation link. Please click on this link to be added to the newsletter distribution list. (First name and surname are optional. This serves exclusively for personal salutation. You can revoke your consent at any time free of charge. Here you can either click on "unsubscribe newsletter here" at the end of each e-mail or send us a short message.

ee) Newsletter registration (events) 
If you register to receive the newsletter at events, the following applies: We will only process your e-mail address for our own advertising purposes and only if you have given us your consent in accordance to Art. 6 I lit. a GDPR. If you provide us your e-mail address, we will regularly send you information about comments, interviews and background information on the capital markets. If you provide us with your e-mail address, we will first send you a confirmation link. Please click on this link to be added to the newsletter distribution list. (First name and surname are optional. This serves exclusively for personal salutation. You can revoke your consent at any time free of charge. Here you can either click on "unsubscribe newsletter here" at the end of each e-mail or send us a short message. You can find detailed notes on this, if need be, in our conditions of entry for the respective sweepstakes or flyers.

ff) Job Application process
By sending us your application documents, you provide the Börse with your personal data about a specific application for the purpose of job application in accordance with Art. 6 I lit. b GDPR. Your data will be processed on our systems. During the application process, we process the following personal data, including surname, first name, home address, e-mail address, telephone numbers, cover letter, letter of motivation, CV, certificates, references and information in the application interview. This data will only be stored, evaluated, processed or forwarded internally to relevant areas of the organization as part of your application. They are only accessible to employees of the human resources department and the decision-makers of the respective specialist departments. Under no circumstances will your data be passed on to companies or persons outside the Börse or used for other purposes. The data can be processed for statistical purposes (e.g. reporting). It is not possible to draw any conclusions about individual persons. We store your data in our application management system until the end of the application process, but no longer than 6 months. Further storage of your data will only take place if you have given us your explicit consent in accordance with Art. 6 I lit. a GDPR. The processing of personal data (surname, first name, home address, e-mail address, telephone numbers, cover letter, letter of motivation, CV, certificates, references, details in the application interview etc.) is carried for a storage period of 2 years. This is necessary in order to enable future contact for career purposes and to be considered when a job is vacant by the Börse. If you give us your consent, you can revoke this at any time free of charge. After expiration of the abovementioned period, your data will be completely deleted. If you start a job at the Börse, your personal data will be added to your personnel file.

gg) Participating in Events
For invitations and participation in events of the Börse, we process your personal data to inform you about upcoming events and, if you participate, to register you for them. Your personal data will only be processed if you have given us your consent in accordance with Art. 6 I lit. a GDPR. You can revoke your consent at any time free of charge. If events take place virtually, we would like to point out that requested log-in data for so-called webcasts may (i.e. depending on the technical functionality of the streaming service used) be visible to the organizer or speaker of the webcast during streaming.

Insofar as photographs, film and sound recordings are made by the organiser within events of the Börse and these are reproduced, distributed, exhibited and/or publicly or non-publicly reproduced without any time and space restrictions by the organiser himself or by third parties (including but not limited to in print media, on television via all distribution channels, on the Internet, in image databases, in content management systems (CMS), in public blogs and/or forums, in social networks, in digital newsletters on the intranet as well as on CD, DVD, Blue-Ray-Disk and other storage media), this shall be done within the scope of the legitimate interest of the Börse pursuant to Art. 6 par. 1 sentence 1 lit. f EU-DSGVO or on the basis of the consent of the person concerned pursuant to Art. 6 par. 1 sentence 1 lit. a EU-DSGVO (or Articles 22, 23 of German Art Copyright Act, KUG).

The following applies to visitors to our events:
The use of audio and video recording devices as well as photo and film cameras is generally not permitted. Accordingly, it is also not permitted to record, transmit or otherwise distribute audio or video recordings of the events as a whole or individually via the Internet or other media or to make them available to other persons or to distribute them commercially.

hh) Children
It is not in our interest to collect personal data from children under the age of 16. We do not knowingly or intentionally collect data about children. The processing of personal data of children is only permitted with the consent of their legal guardians. If you believe that we have collected information about your child, as a parent or legal guardian, you can notify us at datenschutzbeauftragter@boerse-münchen.de. The data will be completely deleted.

ii) Technical and organizational measures
The Börse uses technical and organisational security measures to protect your data managed by us against manipulation, loss, destruction and against access by unauthorised persons. Our security measures are continuously improved in line with technological developments.

jj) Secure data transmission
Your personal data is transmitted securely by encryption. This applies to our contact form (and also for the login area „Meine Börse“). We use the SSL (Secure Socket Layer) coding system.

c) Cookies and plugins

aa) General
The website uses cookies in order to ensure their smooth functioning, to track visitors' preferences and to optimize the design of its websites accordingly.  Cookies are small files that are stored on your hard drive. This facilitates navigation and a high degree of user-friendliness of a website. Cookies also help us to identify particularly popular areas of our website. This enables us to tailor the content of our Internet pages more specifically to your needs and thus improve our services for you. Cookies can be used to determine whether your computer has already communicated with our pages. Only the cookie on your computer is identified. Personal data such as the above data can then be stored in cookies, e.g. to facilitate protected online access, so that you do not have to re-enter your user ID and password.

Of course, you can also view our website without cookies. Most browsers automatically accept cookies. You can prevent cookies from being stored on your hard disk by selecting *do not accept cookies* in your browser settings. Please refer to your browser manufacturer's instructions to find out how this works in detail. You can delete cookies already set on your computer at any time. If you do not accept cookies, however, this can lead to functional restrictions of our offers.

Consent to the use of (technically unnecessary) cookies can be revoked at any time or a selection once made can be changed at any time. 

Please use the following link to do so: 

and make the desired changes there.

Alternatively, please send us your revocation of consent or your change request either by e-mail to info(at)gettex(dot)de or by post to: Bayerische Börse AG, Karolinenplatz 6, 80333 Munich.

bb) Details on the use of cookies

We use different types of cookies on our websites. These are technically required cookies, without which the functionality of our website would be limited, as well as certain optional cookies that make our website more user-friendly. Users of our websites can decide for which functions you accept the cookie setting. This decision can be changed at any time or the use of cookies can be objected to at any time, even retrospectively. 

In detail, the following cookies are used:

Required Cookies
This category of cookies is technically necessary to ensure the smooth functioning of our websites (e.g. session cookies, cookie to store the cookie preferences set here, etc.). Required cookies can therefore not be deactivated. This includes cookies:

Name: PHPSESSID
Function: Standard session cookie of TYPO3
Storage period: End of session

Name: cookie_optin
Function: Contains the selected tracking optin settings.
Storage period: 1 year

Name: INGRESSCOOKIE
Function: Storage of information in forms (e.g. in contact forms) and load balancing functionality
Storage period: End of session

Name: X-Mapping
Function: Load balancing functionality
Storage period: End of session

Optional Cookies
Optional cookies are used to make our website more user-friendly.
Optional cookies can be deactivated at any time. However, please note that in this case you may not be able to use or view all functions and contents of our website in an optimal way.

The optional cookies include:
Functional cookies
Functional cookies are used to ensure the smooth functioning of special applications on our websites. Only with the use of functional cookies is the entire functionality of our websites available to the user. This category includes the following:

Name: bankLogin
Function: This cookie is used to store the selection of the desired bank from the bank settings section.
Storage period: 30 years

Name: bm_simple_watchlist
Function: This cookie is used to store the watchlist titles in the browser.
Storage period: 30 Jahre

Tracking cookies
Tracking and analysis cookies are used to improve the quality of our websites and their content. This is intended to achieve higher customer satisfaction among the users of the websites. This category includes cookies from Google Analytics (also see right away):

Name: _ga
Function: The cookie is used to calculate visitor, session and campaign data and to track the use of the website for the analysis report of the website. The cookies store information anonymously and assign a randomly generated number to identify unique visitors. 
Storage period: 2 years

Name: _gid
Function: The cookie contains a randomly generated user ID. This ID allows Google Analytics to recognize returning users on this website and merge data from previous visits.
Storage period: 1 day

Name: _gat_UA-76102930-1
Function: This is a protocol cookie for anonymous analysis of user behavior on our website.
Storage period: 1 minute

d) Use of Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc. "("Google"). The use is based on Art. 6 I lit. f. GDPR. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website such as

  • Browser type/version,the operating system used,

  • Referrer URL (the previously visited page),

  • Host name of the accessing computer (IP address),

  • Time of the server request,

are usually transferred to a Google server in the USA and stored there. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. We have also added the code "anonymizeIP" to Google Analytics on this website. This guarantees that your IP address is masked so that all data is collected anonymously. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide the website operator with further services associated with website and Internet use. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en. As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking this link. An opt-out cookie is set to prevent future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

We continue to use Google Analytics to evaluate data from double-click cookies and AdWords for statistical purposes. If you do not want this to happen, you can disable it using the Ads Preferences Manager

Further information about Google LLC, Google Analytics and “anonymizeIP” can be found at:
https://policies.google.com/terms?gl=en

You can find Google's privacy policy at
https://policies.google.com/privacy?gl=en
https://support.google.com/analytics/answer/2763052?hl=en

e) Social Media Buttons
For data protection reasons, we do not integrate social plug-ins directly into our website. When you visit our pages, no data is therefore transmitted to social media services such as Facebook, Twitter or YouTube. Profiling by third parties is thus excluded. The given links are small image files with the forwarding to the web pages of the respective social networks. You will leave our website and be redirected to our company page at the respective social network.

f) Securities search via the "Certificate Finder" search function 
The "Certificate Finder" search function of SOLVIANS IT-Solutions GmbH, Speicherstraße 55, 60327 Frankfurt am Main (hereinafter "SOLVIANS IT-Solutions") is used for the securities search on the gettex website in order to provide users of the website with certificates for individual search queries. The search query is forwarded to SOLVIANS IT-Solutions. SOLVIANS IT-Solutions does not access personal data at any time, nor are cookies set when the search function is used.

g) Rights of the data subject: Information, access correction, deletion and blocking, right of objection
As a data subject, you are entitled to the following rights if the respective legal requirements are met:

According to Art. 15 GDPR you have the right to receive information about, and obtain copies of, the personal data stored by us. You have a right pursuant to Art. 16 GDPR to correct incorrect or complete data already stored with us. You have a right to have your data stored by us deleted, in accordance with Art. 17 GDPR or, if there are no legal obligations to retain data, a right to restrict the processing of your data, in accordance with Art. 18 GDPR. You also have a right to data portability, pursuant to Art. 20 GDPR, i.e. to the publication of the data stored about you in a structured format and a right of appeal to a supervisory authority. Furthermore, you can make use of your right of objection at any time, without stating reasons, under the conditions of Art. 21 I GDPR and amend or completely revoke the declaration of consent issued in writing with effect for the future.

In the event of a withdrawal of your consent, any data processing based on your consent prior to the withdrawal remains unaffected. The data will be stored until you withdraw your consent.

If you have any questions regarding the processing of your personal data, you can also contact the data protection officer of Bayerische Börse AG:

Data Protection Officer of Bayerische Börse AG 
Karolinenplatz 6
80333 Munich 
datenschutzbeauftragter@boerse-muenchen.de