Privacy Notice

Under this privacy notice, the Capital Markets Academy of Deutsche Börse AG (hereinafter 'We' or 'Us') informs you about how we process your personal data. Your personal data is information that concerns you (hereinafter 'personal data'), such as name or contact details.
We pay particular attention to the processing of personal data in accordance with the General Data Protection Regulation EU 2016/679 ('GDPR') and applicable national data protection laws.

1 Controller


1.1 Our identity and contact details

We are:
Deutsche Börse AG
Capital Markets Academy
60485 Frankfurt am Main
Deutschland
Tel. +49-(0) 69-2 11 - 1 37 67
E-Mail: academy@deutsche-boerse.com

1.2 Contact details of Our data protection officer

Our data protection officer is:
Datenschutzbeauftragte(r) der Gruppe Deutsche Börse
Deutsche Börse AG
60485 Frankfurt am Main
E-Mail: dataprotection@deutsche-boerse.com

2 Purpose, Categories of Personal Data, Legal Basis and Retention


2.1 Our data processing activities

We process the following categories of your personal data for the following purposes with the following legal basis and retention period:


2.1.1 General contact by email, chat, mail or phone

We collect your personal data when you provide it to us through our contact forms or contact us directly. Then we process the information that you have provided to us in the course of contacting us. This includes in particular names and transmitted contact data (address, telephone number or e-mail address), date and reason for contact. The personal data we collect will only be used to respond to and fulfill your specific requests. The legal basis is Art. 6 (1) lit. (f) of the GDPR, which allows the processing of personal data for the purpose of our legitimate interest in processing and responding to your request. Your personal data processed in this regard will be stored by us for as long as necessary to carry out our relationship (communication) with you and this is required in accordance with the applicable legal retention requirements.


2.1.2 Sales, marketing and invitations

We process your personal data (first and last name, address, company, phone number, email address) to send you information about our services, partners, promotions and events that we think may interest you. We may contact you by email based on our legitimate interests under Article 6 (1) lit. (f) of the GDPR if we have a direct business relationship with you or with the company you work for and if you have not objected to this. We may also contact you by email on the basis of consent pursuant to Article 6 (1) lit. (a) GDPR if you have given us your permission. We may contact you by telephone if you have given your permission (Article 6 (1) lit. (a) GDPR) or on the basis of an assumed consent on condition that you welcome the call. We may contact you by letter based on our legitimate interests under Article 6 (1) lit. (f) GDPR as long as you have not objected to this. In these cases, our legitimate interest is to inform business partners or potential customers about our services and products that may be of interest to you and to support our existing or future business. Your personal data processed in this regard will be stored by us for as long as necessary for the performance of our relationship (communication) with you and in accordance with applicable legal retention requirements.


2.1.3 Newsletter

Capital Markets Academy offers product newsletters to keep you regularly informed about ongoing initiatives as well as upcoming projects and any future updates or news about products and events. On our website, you can sign up for the categories to which you would like to subscribe by entering your email address. After entering your details, you will receive an email where you can confirm your registration to activate the newsletter. You can unsubscribe from this service in any newsletter and revoke your consent with effect for the future. With regard to the processing of your personal data, the relevant legal basis is your consent pursuant to Article 6 (1) lit. (a) in conjunction with Article 7 GDPR.


2.1.4 Competitions

Personal data of the participant that is collected in connection with competitions are used exclusively for the performance of the competition, i.e. for the determination of the winners and delivery of the prizes, used and then deleted. Any further use of the data will only take place if the participant agrees. The required personal data result from the input fields. Mandatory fields are marked with an asterisk, all other fields are voluntary. With regard to the processing of your personal data, the relevant legal basis is your consent in accordance with Article 6 (1) lit. (a) in connection with Article 7 GDPR.


2.1.5 Events, online events and exams

If you participate in our events, we collect your participant data (e.g., name, contact data, e-mail address, billing data) for the organization and implementation of the respective event or for the same reason if we receive your participant data from our cooperation partners (e.g., universities or your employer). In order to carry out and organize the event, your data may also be passed on to other parties involved in the event if this is necessary (e.g. for access control). In case of participation in a trader examination, the result of the examination will be transmitted to the Member Section of Deutsche Börse AG for further processing of your trader admission. The legal basis is Art. 6 (1) lit. (b) of the GDPR, which permits the processing of personal data for the purpose of fulfilling a contract. Your personal data processed in this regard will be stored by us for as long as is necessary for the performance of our relationship (participation in the event) with you and in accordance with the applicable legal retention obligations.


2.1.6 "Qualified Supervisory Board" or "Financial Expert Supervisory Board" examination

If you apply to participate in one of the above exams, we will process your participant data (name, contact data, e-mail address, certificate of good conduct, extract from the trade registry, invoice data) for the admission process and for organizing and conducting the respective exams. For the implementation and organization of the event, your data may also be shared with other parties involved in the event if necessary (e.g. with the admission committee). The legal basis is Art. 6 (1) lit. (b) of the GDPR, which permits the processing of personal data for the purpose of contract performance, and Art. 6 (1) lit. (f) of the GDPR, which permits the processing of personal data for the purpose of our legitimate interest in admitting only qualified and trustworthy participants to the exam. Your personal data processed in this regard will be stored by us for as long as necessary for the performance of our relationship (application and participation in the exam) with you and in accordance with applicable legal retention requirements. 


2.1.7 General use of our websites

When you use our website and online platform, we will automatically log information about the browser that is used to access the website, such as your IP address, session time, pages viewed from that address and the website from which you are visiting the website. We may also collect device-specific information, such as your hardware model and operating system. We use this information to identify and prevent malpractice and crime and to investigate improper conduct. The legal basis for the processing of your personal data for these purposes is Art. 6 (1) lit. (c) GDPR in fulfilling our legal obligation to take technical and organisational measures to ensure secure data processing in accordance with Article 32 GDPR and Article 6 (1) lit. (f) GDPR in order to pursue our legitimate interests in data processing for network and information security. After the specified period of 30 days, the above data will be deleted. If data is processed for a longer period of time, we will anonymise or delete the data as soon as their storage no longer serves the respective purposes.


2.2 Do you have to provide Us with your personal data?

The provision of your personal data is necessary to access the protected areas of our website that are restricted to members of our customer groups, to contact us directly, to receive a newsletter, or to participate in a seminar, online training, certificate course, or exam and receive a corresponding credential (e.g., certificate or certificate of attendance). This means that you are required to provide us with your personal data as part of a user registration process when you use these options. If you have registered as a user on the website, you can view or change your data at any time using the 'My Profile' function. The consequences of not providing us your personal data are that you may no longer be able to use the relevant service.


2.3 Do we make automated decisions about you?

We do not make any automated decisions solely on automatic processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.


2.4    Retention periods 

The retention periods for personal data depend on the purpose of the processing. We will store the personal data mentioned under 2.1 above as long as (i) this is necessary for the respective purpose and / or (ii) this is required in accordance with the applicable statutory retention laws. We will keep personal data that you provide us for as long as our business relationship with you or with your company exists, plus all applicable retention periods that are in accordance with the statutory provisions (e.g. based on tax regulations) or to the extent they are necessary to pursue our legitimate interests after the end of the business relationship (e.g. to assert claims within the statutory limitation periods).


3 Transfer of Personal Data to Third Parties


We will not transfer your Personal Data to third parties except such transfer is permitted by law or you have explicitly consented to the transfer.

In order to provide our contractual services, we use selected service providers (processors) and vicarious agents of the categories listed below, who can obtain access to your personal data to the required extent and use them for the fulfillment of the orders we have placed.

We may transfer your Personal Data to public authorities where this is required by the applicable law (e.g. the German Stock Exchange Act (Börsengesetz) or the German Securities Trading Act (Wertpapierhandelsgesetz)). A transfer of your Personal Data is also permitted if there is a suspicion of a criminal offence or the abuse of the services offered on Our website. In this event, we shall be entitled to transfer your Personal Data to the criminal prosecution authority.

Otherwise, your personal data will be stored exclusively in our database and on our servers, or on those of our commissioned data processing providers. We will only share your Personal Data with other controllers for their own purposes such as cooperation or advertising partners under the condition that you explicitly and voluntarily agreed to such transfer of your Personal Data; in this case, we will obtain your consent separately from this Notice.

Under these conditions, recipients of your personal data can be for example:

  • public bodies and institutions in the presence of a legal or regulatory obligation (eg. financial authorities),
  • other companies and service providers (processors) / vicarious agents in the following areas:
    • Print Service Provider
    • Telecommunications service providers
    • Billing service provider
    • Financial institutions
    • Collection agencies
    • Management consultancies as well as business and tax audit companies
    • Bodies involved in the performance of the event, e.g. speakers/ referents
    • Cooperating universities and other educational institutions.

4. Cookies

When you visit the website and Our online platform, information is stored on your terminal device in the form of a "cookie." Cookies are small files that are stored on your terminal device and save certain settings and data to exchange with our websites via your browser.
For example, cookies enable us to tailor a website to better match your interests or to store your password so that you do not have to re-enter it every time. As a general rule, we never collect personal data via cookies, unless you have given us your express permission to do so.
If you do not want us to recognize your terminal device, please configure your Internet browser to erase all cookies from your device, to block all cookies or to receive a warning before a cookie is stored. You will find brief instructions on how to do this below.

Please note that certain functions of our website may no longer work, or not correctly, without cookies.

a. Types of cookies

Cookies can be assigned to four categories, depending on their function and intended purpose: absolutely necessary cookies, performance cookies, functional cookies, and cookies for marketing purposes.

i. Absolutely necessary cookies
Are needed for you to navigate within websites and operate basic website functions, such as the issuance of anonymous Session IDs for bundling several related queries to a server.

ii. Performance cookies

collect information on the usage of our websites, including for example the Internet browsers and operating systems used, the domain name of the website which you previously visited, the number of visits, average duration of visit, and pages called up. These cookies do not store any information that would make it possible to personally identify the user. The information collected with the aid of these cookies is aggregated and is therefore anonymous. Performance cookies serve the purpose of improving the user friendliness of a website and therefore enhancing the user’s experience. You can block the use of such cookies by creating an exclusion cookie (see “managing cookies” below).

iii. Functional cookies
enable a website to store information the user has already entered (such as user ID, language selection, or the user’s location), in order to offer improved, personalized functions to the user. Functional cookies are also used to enable requested functions such as playing videos and to make a user’s decision to block or disable a certain function (e.g. web analysis) - “opt-out cookies”.

iv. Cookies for marketing purposes

are used to offer more relevant content to users, based on their specific interests. They are also used to limit the display frequency of an ad and to measure and control the effectiveness of advertising campaigns. They register whether users have visited a website or not, and which contents were used. This information may possibly also be shared with third parties, such as advertisers, for example. These cookies are often linked to the functions of third-party websites. You can block the use of such cookies by creating an opt-out cookie (see “Managing cookies” below).


b. Cookies on Our website and Our online platform


Cookie name
CategoryDescription
Retention period

Sxcookieagreement


Absolutely necessary cookies
This cookie stores info about user’s choice about cookies. The cookie is set once the user accepts ('yes') or declines ('no') the usage of cookies.1 year

<session id> cookie

Absolutely necessary cookies

The cookie is set to handle the login to the website, needed to book seminars.

Current session

sid_key:oxid

Absolutely necessary cookies

The cookie is set to handle the login to the website, needed to book seminars.

Current session

LMS_SSO

Functional cookies

The cookie is set to handle the login to the learning management system for the use of online  trainings

1 month

PHPSESSID

Functional cookies

The cookie is set to handle the login to the learning management system for the use of online  trainings

Current session

Google Analytics




_pk_hsr
InnoCraft Ltd

This is a Matomo Analytics Cookie used for Heatmap Functionality.

Session
_pk_id
IInnoCraft Ltd

This is a Matomo Analytics Cookie in order to differentiate between new and returning users.

1 year
_pk_ses
InnoCraft Ltd

This is a Matomo Analytics Cookie used to keep one session.

Session

c. Manage cookies:

You can change your cookie settings at any time by clicking on the "Cookie Manager" link. You can then click on the buttons to "Yes" or "No" and then "Save". You may need to refresh your page for your settings to take effect. Please note: If you are using our website on a mobile device, not all of the above cookies will necessarily be used.

d. Manage cookies:

Below we have compiled links where you can find detailed information on how to disable cookies in popular browsers:

5 Usage of Matomo

Subject to your consent, we use Matomo (formerly known as PIWIK) to analyse your visit on our website. Matomo is an open-source tool for web analytics. During its use, none of your data will be sent to servers outside our control. 

Matomo also uses cookies which are stored on the hard drive of your PC and give us no clue whatsoever on your identity.

Provided your consent to the analysis via Matomo, the following data will be processed: 

(1) 2 bytes of the IP address of the user's calling system.

(2) The accessed web page

(3) The web page from which the user has reached the accessed web page (referrer)

(4) The subpages that are called up from the called-up website

(5) The time spent on the website

(6) The frequency with which the web page is accessed

(7) The Klicks and Actions during the visit

The software solely runs on our servers, which is the sole place of storage for your personal data. That data will not be transferred.


6 Youtube

Our online platform uses embedded videos from YouTube, a service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). As soon as you visit a part of our website with an embedded video page, you will be connected to YouTube's servers and YouTube will be informed on which site you are currently on. It can also connect to the Google DoubleClick network. Starting the video can trigger further data processing. We have no further influence on that. For more information about privacy on YouTube, see their privacy notice at https://policies.google.com/privacy?hl=en-GB&gl=uk

7 Your Rights


Under applicable data protection laws, you have rights

  • of access to, rectification of, and/or erasure of your Personal Data;
  • to restrict or object to its processing;
  • to tell Us that you do not wish to receive marketing information; and
  • (in some circumstances) to require certain of your Personal Data to be transferred to you or a third party, which you can exercise by contacting Us at the details set out at the beginning of this Notice.

To the extent Our processing of your Personal Data is based on your consent, you also have the right to withdraw your consent, without affecting the lawfulness of Our processing based on your consent before its withdrawal. To exercise your rights, you can contact Us as set out in Section 1.1 above. You can also lodge a complaint about Our processing of your Personal Data with a data protection authority.