Privacy Policy

1 Information about how personal data is collected

1.1 In this privacy policy, we inform you about how personal data about you - the data subject - is collected and how such data is processed during the course of the use of our website. Personal data includes any information relating to an identified or identifiable natural person, such as name, address, email addresses, user behaviour. Data processing includes collection, storage, use and transmission.

1.2 The responsible office for data processing can be found in our Imprint.

2. Collection of personal data on this website

2.1 General

When you use the website for mere information purposes, i.e. when you do not register or otherwise transmit information to us, we will only collect those personal data which your browser transfers to our server. If you want to view our website, we will collect the following data which is necessary for us in a technical respect to display our website in your browser and to ensure stability and security:

• IP address
• Host name of your computer
• Date and time of the request
• Time zone difference compared to Greenwich Mean Time (GMT)
• Content of the request (the specific page)
• State of access/HTTP status code
• Transferred data volume
• Website from which the request is made
• Browser type and -version
• Operating system
• Language and version of the browser software.

This data is stored in our server log files.

The legal basis for this processing is Art. 6(1) 1 f GDPR. Our legitimate interest lies in being able to deliver our website to the user’s browser and for it to be displayed properly.

The data will be erased as soon as they are no longer required to achieve the purpose for which they were collected. For collecting the data to provide the website, this is when the session is ended.

The data required for providing the website and the saving of the data in log files is essential for operating the website. Users therefore have no right to object to the data being processed.

2.2 Cookies

In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files which are placed on your computer and are saved by your browser. They provide the party setting the cookie (in this case, us) with certain information. Cookies cannot execute programs or transmit viruses to your computer. They make the website as a whole more user-friendly and effective.

The legal basis for the processing of personal data using cookies is Art. 6(1) f GDPR.

2.2.1 Use of cookies

This website uses the following types of cookies whose scope and functionality are explained below:

• Transient cookies (see 2.2.2)
• Persistent cookies (see 2.2.3)

2.2.2 Transient cookies are automatically deleted when you close the browser. These include so-called session cookies. These cookies store a session ID, with which different browser requests can be assigned to a common session. This allows your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close your browser.

2.2.3 Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

2.2.4 You can configure your browser settings as you see fit, for example, by rejecting third-party cookies or all cookies. If you chose to do so, it is possible that you will be unable to use all the features of this website.

2.3 Right to object to and right to remove all services that use cookies

2.3.1 Cookies are saved on the user’s computer and sent from the computer to our site. Therefore, as the user, you have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transfer of cookies. Cookies that have already been saved can be deleted at any time. This can be done automatically. If you disable cookies for our website, you may not be able to take full advantage of all the features of our website.

2.3.2 Below you will find links where you can find out how to manage and also disable cookies for some of the most important browsers:

Mozilla Firefox: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Chrome Browser: https://support.google.com/accounts/answer/61416?hl=en

3. Additional functions and website features and related data processing

3.1 In addition to using our website for mere informational purposes, we also offer other services that you can use if you are interested. These services usually require you to provide additional personal data, which we use to provide the service.

3.2 Contact form and email contact

You can contact us using a contact form provided on our website. The data you enter in the input mask will be sent to us and saved when you send them. The data transmission is SSL-encrypted.

Here we ask for your name, your email address and your request as mandatory data in an input mask. Further details are optional, but will help make it easier for us to contact you. As well as your IP address, the data and time is also saved.

Before you send the form, we will ask you for your consent to our processing the data, and reference is made to this privacy policy.

Furthermore, you can contact us using the provided email address. In this case, your personal data submitted with the email will be saved. In any case, this is your email address.

In the event that you contact us by email, your data will be processed exclusively for the purpose of handing your concern. The data from this processing will not be forwarded to third parties.

The legal basis for the processing the data sent in our contact form is Art. 6(1) a GDPR. The legal basis for processing the data sent in an email is Art. 6(1) f GDPR. If the purpose of the email contact is to conclude a contract, the additional legal basis for processing the data is Art. 6(1) b GDPR.

We delete the data accruing in this context when they are no longer required to achieve the purpose. The data will be erased when they are no longer required to achieve the purpose for which they were collected, in other words when the conversation is ended. The conversation is ended when it appears from the circumstances that the matter in question has been fully clarified. You have the opportunity at any time to revoke your consent for processing the personal data. If you have contacted us by email, you can object to the saving of your personal data. You can address your objection by contacting us at the address stated in the imprint.

Please note that in such a case the conversation cannot be continued and must be brought to an end. In this case, we will delete the data sent and saved in the course of contacting you.

3.3 Newsletter

Our website offers you the possibility to subscribe to a free newsletter. This newsletter informs you about our current interesting offers.

The data are entered into an input mask and are sent to us and saved. The data will not be forwarded to third parties and will only be used for sending the newsletter. When you subscribe to the newsletter, we only ask for your email address. As well as your IP address, the data and time of the subscription is also saved.

Before you send the form, we will ask you for your consent to our processing the data, and reference is made to this privacy policy.

We use the so-called double opt-in procedure for newsletter subscriptions. This means that after you have subscribed, we will send an email to the email address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. The purpose of this procedure is to be able to confirm that you did subscribe, and, if necessary, to be able to clarify any potential misuse of your personal data.

The legal basis for this processing is Art. 6(1) a GDPR.

The data will be erased when they are no longer required to achieve the purpose for which they were collected. Your email address will therefore continue to be stored as long as the subscription to the newsletter is active. You can revoke your consent at any time by unsubscribing from the newsletter. You can revoke your consent by clicking on the link provided in every newsletter email or by email to [Newsletter@example.com] or by sending an email to the contact address in the imprint.

3.4 If our service providers or partners are based in a country outside the European Union, we will inform you about the consequences of this circumstance in the offer description.

4. Sentifi Widgets

This website / application / service has integrated widgets operated by Sentifi AG, located at Löwenstrasse 3, 8001 Zurich, Switzerland. A widget is a graphical user interface (GUI) element. A Sentifi widget displays information about stock quotes and other stock market-related news or allows a user to interact with the Sentifi Eco system in specific ways. The widgets are integrated using frame technology. This means that when users access these widgets, they enter Sentifi's IT environment (and leave our IT environment). From time to time, the widgets may contain surveys from Sentifi AG. The widgets can also provide further functionality such as an option to provide feedback.

When you interact with Sentifi Widgets, Sentifi automatically collects and stores personal information and other information about you. The data mainly includes traffic and web analytics data but, depending on the functionality, may also include uniquely personal data (e.g. your name and email address in the case of the feedback feature). IP address anonymisation is activated by default. This means that each new visitor IP address (ipv4 or ipv6 format) is saved in the database without the last elements of the address in order to protect user privacy.

Sentifi only collects and processes data if there is a sufficient legal basis. The data collected during your interaction with Sentifi Widgets is used to analyse the performance of the widgets, generate reports about such website activity, and for market research and customisation of these websites. The information is also used to optimise the performance of widgets by improving content and technology.

Data collected in connection with surveys is processed to measure community sentiment about the performance of a stock and about other financial market-related topics such as the performance of a stock relative to an index, the prediction of macroeconomic events such as interest rate hikes, and so on.

For further information on data collection and processing by Sentifi, please refer to the Sentifi Privacy Policy.

5. Google Analytics

5.1 This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be sent to and stored by Google on servers in the United States. In case of activation of the IP anonymization, Google will truncate/anonymize the last octet of the IP address for Member States of the European Union as well as for other parties to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the USA. On behalf of the website provider Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage to the website provider.

5.2 The legal basis for the use of Google Analytics is Art. 6(1) 1 f GDPR.

5.3 Google will not associate your IP address with any other data held by Google.

5.4 You may refuse the use of cookies by selecting the appropriate settings on your browser. However, we point out that if you do this, you may not be able to use the full functionality of this website. Furthermore, you can prevent Google’s collection and use of data (including your IP address) by downloading and installing the browser plug-in available under https://tools.google.com/dlpage/gaoptout?hl=en.

5.5 On this website, Google Analytics code is supplemented by “gat._anonymizeIp()”. This has the effect of truncating IP addresses before further processing, so that the data cannot be related to any specific person. If the data that is collected about you allows conclusions about you as a person, this is immediately prevented and the relevant personal data are thus erased immediately.

5.6 We use Google Analytics to analyse use of our website and to improve it at regular intervals. The statistical data we receive in this way helps us to improve our website and to make it more interesting for you as a user. For exceptional cases in which personal data is transferred to the United States, Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

5.7 Third-party vendor information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User terms and conditions: https://marketingplatform.google.com/about/analytics/terms/us/; data protection overview: http://www.google.com/intl/de/analytics/learn/privacy.html, and privacy policy: https://policies.google.com/privacy?hl=en&gl=en.

6. Social media plug-ins

6.1 We currently use the following social media plug-ins: Facebook, Google+, Twitter, Xing, T3N, LinkedIn, Flattr. In this context, we use the double-click solution, for which you must first give your consent. This means that, when you visit our website, as a rule, no personal data is transferred to the plug-in provider at first. You can recognize the plug-in provider by the mark in the box above the provider’s initial letter or by its logo. We offer you the possibility to communicate directly with the plug-in provider via the button. Only when you click the marked field and thus activate it, the plug-in provider is informed that you have accessed the relevant website of our online presentation. The data mentioned in Section 3) of this Privacy Policy is transferred, too. With Facebook and Xing, pursuant to the information provided by the relevant providers in Germany, the IP address is anonymised immediately after collection. This means that, when you activate the plug-in, your personal data is transferred to the relevant plug-in provider and stored there (in the case of US providers in the USA). Since the plug-in provider collects data especially by cookies, we recommend that you delete all cookies in the security settings of your browser before you click the greyed-out box.

6.2 The legal basis for the use of plug-ins is Art. 6(1) 1 a GDPR.

6.3 We have no influence on the collected data or data processing activities nor are we aware of the scope of data collection, the purposes of the processing and the duration of data storage. We do not know about the deletion of the collected data by the plug-in provider either.

6.4 The plug-in provider stores the data collected from you in the form of user profiles and uses them for advertising and market research purposes and/or to tailor its website to the users’ demands. The analysis in particular serves to display customised advertisements (also for users who are not logged in) and to inform other users of the social network about your activities on our website. You have the right to object to, and thus prevent, the preparation of user profiles; if you want to exercise this right, you have to address the relevant plug-in provider. We offer you the possibility, via the plug-ins, to interact with the social networks and other users which enables us to improve our presentation and services and offer you as the user a more interesting design.

6.5 The data is transferred regardless of whether or not you have an account with the plug-in provider and whether or not you are logged in there. When you are logged in to the plug-in provider, the data we have collected from you is immediately allocated to your account with the plug-in provider. When you click the activated button and, for instance, set a link on the page, the plug-in provider will also store this information in your user account and publicly communicate it to your contacts. We recommend that you always log out when you have visited a social network, especially before you activate the button, to so prevent any allocation to your profile with the plug-in provider.

6.6 Further information on the purpose and scope of data collection and data processing by the plug-in provider is available in the privacy policies of these providers set out below. These also contain further information on the rights to which you are entitled in this context and the possible settings to protect your privacy.

6.7 Addresses of the relevant plug-in providers and privacy policies:

a) Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has agreed to respect and comply with the EU-US Privacy-Shield: https://www.privacyshield.gov/EU-US-Framework.

b) Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=en. Google has agreed to respect and comply with the EU-US Privacy-Shield: https://www.privacyshield.gov/EU-US-Framework.

c) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has agreed to respect and comply with the EU-US Privacy-Shield: https://www.privacyshield.gov/EU-US-Framework.

d) Xing AG, Gänsemarkt 43, 20354 Hamburg, DE; http://www.xing.com/privacy.

e) T3N, yeebase media GmbH, Kriegerstr. 40, 30161 Hannover, Deutschland; https://t3n.de/store/page/datenschutz (German only).

f) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy. LinkedIn has agreed to respect and comply with the EU-US Privacy-Shield: https://www.privacyshield.gov/EU-US-Framework.

g) Flattr Network Ltd, whose registered office is at 2nd Floor, White bear yard 114A, Clerkenwell Road, London, Middlesex, England, EC1R 5DF, United Kingdom; https://flattr.com/privacy

7. Google Maps integration

7.4 Further information on the purpose and scope of data collection and data processing by the plug-in provider is available in the particular privacy policy. They also contain further information on your rights and the possible settings to protect your privacy: https://policies.google.com/privacy?hl=en&gl=en. Google processes your personal data also in the USA and Google has agreed to respect and comply with the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

8. Rights of data subjects

8.1 You are entitled to assert against us the following rights regarding your personal data:

8.1.1 Information

You have the right to access information about the personal data we have stored about you. We will gladly provide you with this information when you ask for it. We will be pleased to inform you on request to which third parties your personal data has been sent.

8.1.2 Rectification

You have the right to ask us to rectify or complete your personal data. If you do not notify us, this will be done immediately should we become aware that the data we have stored is incorrect or incomplete.

8.1.3 Deletion

You have the right to demand that we delete the personal data we have stored about you. The possibility of an actual deletion depends on whether the fulfilment of a legal obligation by us, such as compliance with legal storage obligations and the assertion, exercise and defence of legal claims allows us to do so. Statutory retention periods based on commercial and tax law provisions are up to 10 years. Limitation periods for claims are up to 30 years. You have the right to demand that we restrict processing. This is particularly relevant if there are reasons for not deleting the data. From this point on, your personal data will only be processed with your consent.

8.1.4 Restriction of processing

You have the right to demand that we restrict processing. This is particularly relevant if there are reasons for not deleting the data. From this point on, your personal data will only be processed with your consent.

8.1.5 Right to data portability

You have the right to request that we transfer your personal data to you or to a third party in a structured, commonly used and machine-readable format.

8.1.1 Right to object to data processing

Where we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case when the processing is not necessary, in particular, for the performance of a contract with you. If you exercise your right to object, we will kindly ask you to explain the reasons why you do not want us to process your personal data in the way we have done. If your objection is justified, we will check the facts and either stop or adjust the data processing or explain to you any compelling legitimate reasons why we have to continue the processing. Of course, you can object to the processing of your personal data for marketing or data analytics purposes at any time. You can object to the processing for advertising by contacting us under the contact data stated in the imprint.

8.1.2 Right to revoke consent

If you have given your consent to data processing, you have the right to revoke this consent at any time. However, this shall not affect the lawfulness of the processing carried out on the basis of your consent until you revoke your consent.

8.1.3 Right to lodge a complaint

You also have the right to complain to a data protection supervisory authority about our processing of your personal data.

9. No automated decision making

9.1 We do not perform automated decision-making within the meaning of Art. 22 GDPR.

10. Digital micropayments - SatoshiPay

Our website only displays some digital content in a readable form after activation. To unlock an item, you must purchase the item from our distributor -SatoshiPay Ltd, Hill Dickinson Llp, The Broadgate Tower, 20 Primrose Street, London, EC2A 2EW United Kingdom-.

You will need SatoshiPay coupons, called credits, for the unlocking process. These credits are based on the Stellar Blockchain's cryptocurrency Lumens - for more details, visit https://www.stellar.org/.

A digital coupon book (wallet) is created in your browser when you visit this website. This consists of a certificate that is only known to you (private key) and a second certificate assigned to this certificate (public key). This public key can be used to identify your wallet.

You can top up your wallet with credits by loading funds to SatoshiPay using one of the payment service providers offered. You will then be transferred corresponding credits by SatoshiPay using the Stellar blockchain. When you transfer credits back to SatoshiPay for unlocking digital content, this is also posted on the Stellar Blockchain.

Your public key is added to the blockchain's booking history.

Deletion of transactions containing your public key is not possible due to blockchain technology. It takes a great deal of effort to read your public key from the blockchain.

The entire data processing operation is SatoshiPay Ltd. You can find out more about data processing by SatoshiPay Ltd and your rights against SatoshiPay Ltd by following this link: https://satoshipay.io/privacy. We will in turn ensure that you receive the digital content you have purchased - as agreed. For this purpose, your browser transmits a digital payment receipt to us, which contains, among other things, your public key. We need this data to identify you as a reader.

If you have any questions or wish to exercise any of the above rights, feel free to contact us at info@boersenmedien.de.

11. Data processing during the SatoshiPay token giveaway campaign by “DER AKTIONÄR”

We collect your email address and mobile phone number as part of the SatoshiPay Token Giveaway promotion. The legal basis for this data processing data is Art. 6(1) f GDPR. For fraud prevention purposes, it is necessary to record this data and match it with other registrations. In order to protect your data, we do not process it in plain text, but only store it pseudonymously with the help of a cryptographic procedure. We only use the encrypted data to match duplicate applications. Your personal data will also be deleted as soon as the promotion has expired. This is the case when the quota of credits provided by us is exhausted, but no later than 31/12/2020.

This data is also passed on in cryptographically pseudonymised form to SatoshiPay Ltd, Hill Dickinson LLP The Broadgate Tower, 20 Primrose Street, London, EC2A 2EW United Kingdom. This is necessary for the performance of the contract as per 6(1) b GDPR. SatoshiPay is solely responsible for the processing of the submitted data. You can find out more about data processing by SatoshiPay Ltd. and your rights against SatoshiPay Ltd. via this link: https://satoshipay.io/privacy. Data transfer outside the EU/EEA is not envisaged.

12. Data processing in the "Sales" area (B2B)

In the "Sales" area we offer extensive information possibilities for advertising customers (B2B).

12.1 Within the sales area we provide a contact form for B2B customers, in which we ask for the following mandatory information: your name, your email address, your company and your request. Further details are voluntary, but make it easier for us to contact you.

The data entered in the input mask will be sent to us and stored when the message is sent. In addition, your IP address and the time of sending will be stored.

Before you send the form, we will ask you for your consent to our processing the data, and reference is made to this privacy policy.

When you contact us, the data you provide will be processed exclusively for the purpose of handling your contact.

The legal basis for this processing is Art. 6(1) a GDPR. If the purpose of the email contact is to conclude a contract, the additional legal basis for processing the data is Art. 6(1) b GDPR.

The personal data collected in this context will be deleted by us as soon as this data is longer required to achieve the purpose. This is the case when the conversation has come to an end. The conversation is ended when it appears from the circumstances that the matter in question has been fully clarified.

You have the opportunity at any time to revoke your consent for processing the personal data. You can address your objection by contacting us at the address stated in the imprint.

Please note that in the case of an objection or revocation, the conversation cannot be continued and must be brought to an end. In this case, we will delete the data sent and saved in the course of contacting you.

12.2 We also allow you to request links to the download centre in the sales area in order to download media data, target group analyses and offers.

To do so, your name, your email address and your company are requested in the input mask. This data is sent to us and stored. As well as your IP address, the data and time is also saved.

Before you send the form, we will ask you for your consent to our processing the data, and reference is made to this privacy policy.

The data you provide will be processed solely for the purpose of providing a link to the download centre.

The legal basis for the processing is Art. 6(1) a and Art. 6(1) b GDPR.

The personal data collected in this context will be deleted by us as soon as this data is longer required to achieve the purpose. Your data will therefore be stored until the generated link to the download centre has been redeemed by you.

12.3 Within the Sales area it is also possible to subscribe to our free newsletter. With this we offer you the possibility to inform you about current sales offers.

To send your data, we ask for your name as well as your email address in an input mask. This data is sent to us and stored. As well as your IP address, the data and time of the subscription is also saved.

The data will only be used for sending the newsletter.

Before you send the form, we will ask you for your consent to our processing the data, and reference is made to this privacy policy.

We use the so-called double opt-in procedure for newsletter subscriptions. This means that after you have subscribed, we will send an email to the email address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. The purpose of this procedure is to be able to confirm that you did subscribe, and, if necessary, to be able to clarify any potential misuse of your personal data.

The legal basis for this processing is Art. 6(1) a GDPR.

The data will be erased when they are no longer required to achieve the purpose for which they were collected. Your email address will therefore continue to be stored as long as the subscription to the newsletter is active. You can revoke your consent at any time by unsubscribing from the newsletter. You can revoke your consent by clicking on the link provided in every newsletter email or by sending an email to sales@boersenmedien.de or by sending a message to the contact address in the imprint.

12.4 ZOHO CRM

Personal data that you have provided to us through the contact form, by requesting a link to the download centre or by subscribing to the newsletter will be processed by us using a Customer Relationship Management System, CRM for short) is processed and maintained.

We use the customer relationship management system Zoho CRM, a service of ZOHO CORPORATION B. V. ( Zoho Corporaton, 4141 Hacienda Drive, Pleasanton, California 94588, USA). Zoho Corporation Pvt. Ltd. Ltd. ("Zoho India", Estancia IT Park, Plot No. 140 & 151, GST Road, Vallancherry Village, Chengalpattu Taluk, Kanchipuram District 603 202, India) is involved in the provision of Zoho. Please note that while India, as a third country, does not have an adequate level of data protection and there is no adequacy decision by the EU Commission, Zoho Corporation Pvt. Ltd. Ltd has provided sufficient guarantees to ensure an adequate level of data protection. Specifically, we have entered into the Order Processing Agreement with ZOHO CORPORATION B. V. and Zoho Corporation Pvt. Ltd. Ltd on the basis of the EU standard contractual clauses for processing orders in third countries.

For details about Zoho's privacy practices and how to protect your personal information, please refer to Zoho's Privacy Notice: https://www.zoho.eu/privacy.html.