Privacy notice

Privacy notice

Under this privacy notice (hereinafter the “Notice”), Eurex Securities Transactions Services GmbH (hereinafter “We” or “Us”) informs you how We process your personal data. Your personal data means any information relating to you (hereinafter the “Personal Data”), such as name or contact details.

We pay special attention on the processing of Personal Data in accordance with the General Data Protection Regulation EU 2016/679 (“GDPR”) and applicable national data protection laws.

1 Controller

1.1 Our identity and contact details 
 

Eurex Securities Transactions Services GmbH
Mergenthalerallee 61
65760 Eschborn
buyingagent@deutsche-boerse.com

1.2 Contact details of Our data protection officer


Datenschutzbeauftragte(r) der Eurex Securities Transactions Services GmbH
Eurex Securities Transactions Services GmbH
60485 Frankfurt am Main
Email: dataprotection@eurexchange.com

2 Purpose, Categories of Personal Data, Legal Basis and Retention

2.1 Categories of your Personal Data and purposes of Our processing

We process the following categories of your Personal Data for the following purposes:
 

2.1.1 General contact via e-mail, chat, post or telephone:
 

Name, address, telephone number or e-mail address if you wish to make direct with us. We collect your personal data when you provide it to us through our contact forms or make direct contact with us. Then we process the information that you have provided to us in the course of establishing contact. These include in particular names and submitted contact details (address, telephone number or e-mail address) date and reason for contacting. The personal information you collect will only be used to answer and fulfill your specific requests.

The legal basis is Art. 6 para. 1 lit. (f) of the GDPR, permitting the processing of Personal Data for the purposes of Our legitimate interests in processing and answering your request.

Your personal data processed in this regard will be stored by Us as long as it is necessary to carry out Our relationship (communication) with you and required by applicable statutory retention laws.

2.1.2 Buy-In Agent Service:

If you or your company want to be authorized as a customer of our Buy-In Agent service, we collect your personal data (first name, last name, contact data, company) to register you to our service and for the usage of our service. Furthermore, we process your personal data in order to invoice you for its use. The legal basis is Art. 6 para. 1 lit. (b) of the GDPR, permitting the processing of Personal Data for the purposes of the performance of a contract.

Your personal data processed in this regard will be stored by Us as long as it is necessary to carry out Our relationship (registration and use of Our online platform) with you and required by applicable statutory retention laws.

2.1.3 Sales and Marketing:

We may use your personal data (name, first name, address, company, telephone number, e-mail address) to send you information about our services, partners, promotions and events that we think may be of interest to you. We may contact you by e-mail based on our legitimate interests under Article 6para. 1 lit. (f) of the GDPR if we have a direct business relationship with you or with the company for which you work, and if you have not objected. We may contact you by telephone if you have given your consent (Article 6 para. 1 lit. (a) GDPR) or on the basis of a presumed consent on the condition that you will welcome the call. We may contact you by post on the basis of our legitimate interests under Article 6 para.1 lit. (f) GDPR as long as you do not object. In such cases, it is our legitimate interest to inform business partners or potential customers about such services and products that may be of interest to them and thus to maintain our existing or future business relationship.

2.1.4 Newsletter:

With your consent, you can subscribe to our Product Newsletter, which will keep you informed about ongoing initiatives, upcoming project and future updates or news on products and events. On our website you can register for to categories you want to subscribe to.

To register for our newsletter, we use the so-called double opt-in procedure. This means that after you have registered, we will send you an e-mail to the e-mail address specified in which we ask you to confirm that you wish to receive the newsletter. In addition, we store your IP addresses and times of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to inform you about possible misuse of your personal data. The legal basis is Article 6 para. 1 lit. (a) and lit. (c), Article 7 para. 1 GDPR.

The only requirement for sending the newsletter is your e-mail address. The specification of additional, separately marked data is voluntary and will be used to address you personally. After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 lit. (a) GDPR. Your personal data will be deleted as soon as it is no longer necessary for the purpose of its collection. The e-mail address of the user is therefore stored as long as the subscription to the newsletter is active.

You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter with future effect, i.e. the withdrawal of the consent does not affect the lawfulness of processing based on the consent before its withdrawal. You can declare the revocation by clicking on the link provided in each newsletter e-mail or by sending a message to the contact details stated in the imprint. If the consent is withdrawn, We may only further process the personal data where there is another legal ground for the processing.

2.1.5 Events:

If you participate in our events, we collect your participant data (e.g. name, contact data, e-mail address, billing data) for the organisation and execution of the respective event. In order to carry out and organise the event, your data may also be passed on to other parties involved in the event if this is necessary (e.g. for admission control). The legal basis is Art. 6 para. 1 lit. (b) of the GDPR, permitting the processing of Personal Data for the purposes of the performance of a contract. Further information may be provided in a privacy notice for the specific event, if this is necessary. Your personal data processed in this respect will be stored by us as long as it is necessary to maintain our relationship (participation in the event) with you and as long as it is necessary in accordance with the legal retention periods.

2.1.6 Applications:

Please refer to the privacy notice on our careers page for information on the application procedure.

2.1.7 Use of our websites:

When you use our website, we automatically log the information of the browser used to access the website, such as your session time, the pages visited from that address, and the website from which you visit the website, if your computer is located. We may also collect device-specific information, such as your hardware model and operating system. If you accept the use of performance cookies (see Section 5), your IP address and geographic location (limited to city and country) will also be collected. We use this information to differentiate individual users, limit request rates, and measure the performance of our web content. The legal basis for processing your personal data for these purposes is Article 6 para 1 lit. (c) of the GDPR in fulfilling our legal obligation to take technical and organisational measures to ensure secure data processing in accordance with Article 32 of the GDPR and Article 6 para. 1 lit. (f) of the GDPR in order to pursue our legitimate interests in data processing for network and information security. After the specified period of 30 days, the above data will be deleted. If data is processed for a longer period of time, we will anonymise or delete the data as soon as their storage no longer serves the respective purposes.

2.1.8 Webinars:

With the Eurex Webinars, you can participate in interactive presentations and live discussions and exchange views with renowned experts on current topics in the derivatives markets. If you would like to participate, you can register online for a webinar. Please enter your e-mail address, first name and surname. If you participate in the webinar with questions or comments, these will be saved. Your personal data processed in this respect will be stored by us as long as it is necessary to maintain our relationship (the webinar event) with you and as long as it is necessary in accordance with the applicable legal retention requirements. The legal basis is Art. 6 para. 1 lit. (b) of the GDPR, permitting the processing of Personal Data for the purposes of the performance of a contract. Your personal data processed in this respect will be stored by us for as long as it is necessary to maintain our relationship (participation in the webinar) with you and in accordance with the applicable legal retention periods.

2.2 Do you have to provide your Personal Data to Us?

The provision of your Personal Data is necessary to access the protected areas of this website which is limited to members of Our customer groups, to make direct contact with us, or to receive a newsletter. This means that you are obliged to provide your Personal Data to Us as part of a user registration process when making use of these options. Such Personal Data remain under your control at all times via the “My Profile” facility. Your user account can be viewed or modified at any time by you, the account owner.

The consequences if you do not provide your Personal Data to Us are that we will not be able to carry out the processings as set in Section 2..

2.3 Do We make automated decisions on you?

We do not make any automated decisions solely on automatic processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

3 Transfer of Personal Data to Third Parties

We will not transfer your Personal Data to third parties except such transfer is permitted by law or you have explicitly consented to the transfer.

We may transfer your Personal Data to public authorities where this is required by the applicable law (e.g. the German Stock Exchange Act (Börsengesetz) or the German Securities Trading Act (Wertpapierhandelsgesetz)). A transfer of your Personal Data is also permitted if there is a suspicion of a criminal offence or the abuse of the services offered on Our website. In this event, we shall be entitled to transfer your Personal Data to the criminal prosecution authority.

Otherwise, your personal data will be stored exclusively in our database and on our servers, or on those of our commissioned data processing providers. We will only share your Personal Data with other controllers for their own purposes such as cooperation or advertising partners under the condition that you explicitly and voluntarily agreed to such transfer of your Personal Data; in this case, we will obtain your consent separately from this Notice.

4 Use of Mapp Intelligence web analysis service

In order to improve the quality and to ensure a user-friendly design of our offered services, we make use of “Mapp Intelligence” from the company Mapp Digital c/o Webtrekk GmbH. “Mapp Intelligence” is a statistics programme, through which the company Mapp Digital c/o Webtrekk GmbH records the use of our App by users on an anonymized basis. Mapp Digital c/o Webtrekk GmbH acts as our commissioned data processing provider. The web analysis service of Mapp Digital c/o Webtrekk GmbH has been verified in terms of data safety and is certified by the Technical Control Board (TÜV). The use of “Mapp Intelligence” enables us to receive user behaviour analysis. As a result, we are able to enhance our services and adapt individually adapt them to user requestsWe also make use of so-called cookies, i.e. small files stored on your device. The cookies are not assignable to any certain or identifiable person. Profiles capable of being related to an individual person in respect to your user behaviour will not be created. You are entitled to raise an objection to the collection of pseudonymous data by Mapp Intelligence or cookies.

Most of the cookies used are so-called “Session Cookies”, which are stored on a temporary basis, exclusively for the duration of your utilization of the App. On the other hand, we also make use of “Permanent Cookies” to record information about visitors who repeatedly access one of our servers via the App. The content of a permanent cookie is limited to an identification number. Your full IP address or other personal data will not be stored. We and our statistical service provider, Mapp Digital c/o Webtrekk GmbH, only store your IP address in a shortened (anonymized) form and use it for identification of the session, so that the collected data will be anonymous and allocation to the identity of an individual user is not possible. The shortened IP address will then be deleted without delay as soon as it is no longer required. You are entitled to raise an objection against the pseudonymous collection and processing of your data through cookies.

Pursuant to § 15 Section 3 of the German Telemedia Act, website visitors are entitled to object to the storage of their visitor data, so that this data will no longer be recorded on this website in the future. If you object to the data storage, a cookie called “webtrekkOptOut” will be placed by the domain webtrekk.net for purposes of exemption from the web controlling process. Technically, the withdrawal notice will remain effective until the aforementioned cookie is deleted.

5 Your Rights

Under applicable data protection laws, you have rights

  • of access to, rectification of, and/or erasure of your Personal Data;
  • to restrict or object to its processing;
  • to tell Us that you do not wish to receive marketing information; and
  • (in some circumstances) to require certain of your Personal Data to be transferred to you or a third party, which you can exercise by contacting Us at the details set out at the beginning of this Notice.


To the extent Our processing of your Personal Data is based on your consent, you also have the right to withdraw your consent, without affecting the lawfulness of Our processing based on your consent before its withdrawal.

To exercise your rights, you can contact Us as set out in Section 1.1 above. You can also lodge a complaint about Our processing of your Personal Data with a data protection authority.

Our competent Data Protection Authority is: Der Hessische Datenschutzbeauftragte, Postfach 3163, 65021 Wiesbaden, Germany, Poststelle@datenschutz.hessen.de, Tel: +49 611 1408-0, Fax: +49 611 1408 - 611.