Data privacy statement WM Leiportal Website

Any collection, processing and use (hereinafter "use") of data is solely for the purpose of providing our services. Our services have been designed to use as little personal information as possible. For that matter, "personal data" is understood as all individual details about a person or factual circumstances of an identifiable natural person (so-called "affected person").

The following statements on data protection describe what types of data are collected when accessing our website, what happens with these data and how you may object to data usage.

General information on data processing

Person Responsible (Controller)

Responsible within the meaning of the EU General Data Protection Regulation (GDPR) and the new Federal Data Protection Act (BDSG) is:

Herausgebergemeinschaft WERTPAPIER-MITTEILUNGEN
Keppler, Lehmann GmbH & Co. KG

Address: Sandweg 94, 60316 Frankfurt am Main

Phone: +49 (0)69 2732-0

Email: verlag@wmgruppe.de

Name and address of the Data Protection Officer

The data protection officer is:

Anna Tiede of WS Datenschutz GmbH

If you have questions about data protection, you can contact WS Datenschutz GmbH at the following email address: wm-gruppe@ws-datenschutz.de

WS Datenschutz GmbH
Dircksenstraße 51
D-10178 Berlin

https://webersohnundscholtz.de

Protection of your data

We have taken technical and organizational measures to ensure that the requirements of the EU General Data Protection Regulation (GDPR) are met by us, as well as, by external service providers working for us.

If we work with other companies to provide our services, such as email and server providers, this will only be done after an extensive selection process. In this selection process, each individual service provider is carefully selected for its suitability in terms of technical and organizational data protection skills. This selection procedure will be documented in writing and an agreement on the order processing of data (data processing agreement) will only be concluded if the third party complies with the requirements of Art. 28 GDPR.

Your information will be stored on specially protected servers. Access to it is only possible for a few specially authorized persons.

Our website is SSL/TLS encrypted, as can be seen by the https:// at the start of our URL. This also involves e-mail communications, which is encoded via SSL certificate.

Erasure of personal data

We process personal data only if necessary. As soon as the purpose of the data processing is fulfilled, erasure of the data is carried out according to the standards of the erasure concept, unless legal or contractual regulations oppose this.

Data processing of the Leiportal website (www.wm-leiportal.org/de/)

Use of data on this website and in logfiles

Description and scope of processing personal data

When visiting our website, our web servers temporarily store every access in a log file. The following data is collected and stored until automated erasure:

IP-address of the requesting computer
Date and time of access
Name and URL of the retrieved file
Detection data of the browser and operating system used
Website from which access is made

This data is stored on WM's internal servers.

Legal basis for data processing personal data

The legal basis for the temporary storage of the data and log files is Art. 6 para. 1 s. 1 lit. f) GDPR. Our legitimate interest is to make our website accessible for you.

Purpose of data processing

The processing of this data serves: the purpose of enabling the use of the website (connection establishment), system security, the technical administration of the network infrastructure, as well as to optimize the website. The IP address is evaluated only in case of attacks on our network infrastructure or the network infrastructure of our internet provider.

Duration of storage

The personal data will be deleted as soon as it is no longer required for the above-mentioned purposes. As a rule, deletion takes place after a maximum of 7 days. This is the case when you close the website. We may use the data for statistical surveys. However, the data is anonymized for this purpose. This data is stored on WM's internal servers.

Right of objection and erasure

The website can only be displayed if the described data is processed. If you wish to object to the further processing of your data, please contact our data protection officer.

Use of cookies

Description and scope of data processing

Our website uses cookies. These are stored on your computer when you use our website. Cookies are small text files that are stored on your hard disk, assigned to the browser you are using, and through which certain information flows to us or the body that sets the cookie. Cookies cannot execute programs or transmit viruses to your computer. They are used by us to enable you to log in and to analyze the use of our website and to present you with interesting offers on this website. Various data can be transmitted in this way:

Frequency of website visits
Which functions of the website you use
Search terms used
Your cookie setting
Your language setting
Your shopping cart contents

When you access the website, a cookie banner informs you about the use of cookies and refers you to the privacy policy. They are used by us to analyze your use of our website and to present you with interesting offers on this website. Various data may be transmitted in this way.

Legal basis for data processing

The legal basis for the processing of data by cookies, which do not only serve the functionality of our website, is Art. 6 para. 1 s. 1 lit. a) GDPR.

The legal basis for the processing of data for cookies, which serve only the functionality of this website, is Art. 6 para. 1 s. 1 lit. f) GDPR.

Purpose of data processing

Our legitimate interests are to provide you with a working website connection and to ensure a comfortable use of this website. Also, we need to process your personal data to solve occurring safety and security issues, as well as to ensure system stability.

The data processing takes place to make a statistical evaluation of our website possible.

Duration of storage

This website uses the following types of cookies. The extend and function of each are being explained below:

Transient cookies (see a)
Persistent cookies (see b)

a) Transient cookies are automatically deleted when you close the browser. This is especially true for session cookies which store your session ID, with which various requests from your browser can be assigned to your session. This will allow your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close the browser.

b) Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie.

Right to objection and erasure

You have the possibility to revoke your consent to the data processing by means of cookies, which do not only serve the functionality of the website. In addition, we do not set cookies until you have agreed to set cookies when you visit the site. In this way, you can prevent data processing via cookies on our website. You can also delete the cookies in your browser's security settings at any time. Please note that you may not be able to use all the features of this website. The setting of cookies can also be prevented at any time by appropriate settings in your internet browser.

Cookiebot

Description and scope of data processing

Cookiebot serves the practical implementation of the GDPR and other data protection-relevant law with regard to the use of cookies on our website and the integration of analysis tools by means of consent. If you give your consent via the cookie banner, the following data will be processed:

Your anonymized IP address
Browser type agent
URL of the consent website
Date and time of consent
Unique, encrypted key

These are stored, logged and documented in the data center of the Cybot cloud vendor, Microsoft Ireland Operations Ltd. in Dublin, Ireland. The data processing is carried out by: Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark.

You can find more information about data processing at: https://www.cookiebot.com/de/privacy-policy/

Legal basis for data processing

The legal basis depends on Art. 6 para. 1 s. 1 lit. c) GDPR.

Purpose of data processing

The purpose is in line with our legitimate interest in data processing and the legally compliant guarantee of the full functionality of our website.

Duration of storage

The data will only be stored for as long as is necessary for the review, unless legal regulations require the data to be stored for longer. Cookiebot will delete your consent after 12 months.

Right to objection and erasure

You can revoke the consent given via Cookiebot by deleting the corresponding cookie called “CookieConsent” or “CookieConsentBulkTicket”.

Contact

Description and scope of data processing

Via our website it is possible to contact us via e-mail or via contact form or via Phone. This will require different data to answer the request, which will be automatically saved for processing. The following data are required to process your request:

Name/Surname
Subject
E-Mail
Message

You can also provide the following information voluntarily:

Salutation
Title
Telephone number

Your data will not be passed on to third parties, unless you have given your consent.

Legal basis for data processing

The legal basis depends on Art. 6 para. 1 s. 1 lit. b) GDPR.

Purpose of data processing

The processing of personal data from the input form is used solely handling the contact request.

Duration of storage

The data will be deleted as soon as we answer your request. There might occur rare cases when legal or contractual retention periods interfere with the erasure of your personal data. In this case your data will be deleted after these periods.

Right to objection and erasure

The user has the right to withdraw their consent to the processing of personal data at any time. If the user contacts us, they can object to storage of their personal data at any time. In such cases, the conversation cannot be continued. All personal data that has been stored in the course of the contact will be deleted.

Registration on the website

Description and scope of data processing

You can register on our website. For this purpose, you must enter personal data into the registration form. The following data are collected as mandatory fields:

Email address
Password
Company name
Country
Federal state
Postal code
City
Street and house number
Salutation
First and last name

The following data can be provided optionally:

Phone number

The data you enter in the registration form is used exclusively for processing the registration and is generally not passed on to third parties.

Legal basis for data processing

If you enter personal data that are part of the mandatory field entry masks, the data processing is based on Art. 6 para. 1 s. 1 lit. b) GDPR. If you additionally enter personal data in the optional fields, the data processing is based on Art. 6 para. 1 s. 1 lit. a) GDPR.

Purpose of data processing

We process your data exclusively for the purpose of completing your registration and managing your user account on our website.

Duration of storage

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case when you close your account with us and no legal or regulatory retention periods oppose deletion.

Right to objection and erasure

You are free to change, correct, or delete the information you provided both during and after registration. If you wish to object to further processing or delete your account, please contact our data protection officer.

Description and scope of data processing

We offer the option to subscribe to our newsletter on our website. When ordering the newsletter, personal data is collected via the corresponding input mask. The following data marked with an asterisk (*) are mandatory fields:

First name
Last name
Email address

These fields are necessary to send you the newsletter.

The newsletter is sent via email and only after successful subscription. To comply with GDPR requirements, we use the Double-Opt-In (DOI) procedure. After subscribing to the newsletter, you will receive a confirmation email to the email address provided. This email contains a confirmation link that you must click. After this confirmation, you are successfully registered for the newsletter. For the purpose of this process, the IP address, date, and time of registration are stored to prevent misuse.

The data is not passed on to third parties as a rule.

Legal basis for data processing

The legal basis for data processing is your consent pursuant to Art. 6 para. 1 s. 1 lit. a) GDPR.
Existing customers may receive newsletters from us even without explicit consent. This is done solely within the strict limits of § 7 para. 3 UWG, interpreted in light of Art. 95 GDPR, and corresponds to Art. 6 para. 1 s. 1 lit. f) GDPR. Our legitimate interest is to inform our existing customers about our products via promotional emails and to maintain contact.

Purpose of data processing

The purpose of the newsletter is to inform you regularly about offers and news from us.

Duration of storage

We process your data only as long as necessary to fulfill the purpose and as long as no legal or official retention obligations prevent deletion.

Right to objection and erasure

You can revoke your consent to the processing of personal data in connection with the newsletter at any time. To do this, you can click the unsubscribe link integrated in each newsletter or notify us of your revocation in another way.

Newsletter service provider Emarsys

Description and scope of data processing

The newsletter is sent using "Emarsys", an online marketing platform provided by Emarsys Interactive Services GmbH, Stralauer Platz 34, 10243 Berlin, Germany.

The email addresses and other data described here are stored on Emarsys servers in the EU. Emarsys uses this information to send and evaluate newsletters on our behalf. Emarsys does not use this data for its own purposes or pass it on to third parties.

Each newsletter contains a "web beacon" (a pixel-sized file) retrieved from Emarsys’s server when opened. This allows the collection of technical data such as system information, IP address, and access time. Statistics such as newsletter opens and link clicks may also be recorded. While technically traceable to individuals, neither we nor Emarsys track specific users.

We rely on Emarsys’s IT and data security.

Legal basis for data processing

The legal basis is your consent in accordance with Art. 6 para. 1 s. 1 lit. a) GDPR.

Purpose of data processing

We use Emarsys to manage contacts efficiently and to communicate with you via newsletter.

Duration of storage

According to Emarsys, your data is stored only while we use it for sending newsletters. It is deleted 30 days after you are removed from our mailing list or after our account is closed.

Right to objection and erasure

You can revoke your consent at any time, for example by clicking the unsubscribe link in any newsletter or by contacting us directly. Once unsubscribed, your data will be deleted and no longer processed by Emarsys. This does not apply to data held by Emarsys on behalf of other clients.

Newsletter service provider Mailchimp

Description and scope of data processing

The newsletter is sent via "Mailchimp", a platform operated by The Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.

Email addresses and related information are stored on Mailchimp’s servers in the USA. Mailchimp uses this data to send and analyze newsletters on our behalf. It may use anonymized data to improve services (e.g., optimizing email delivery), but does not contact recipients or share the data with third parties.

Mailchimp newsletters include a "web beacon" to track open rates, link clicks, and other user interactions. Technically, this can be linked to individual users, but monitoring specific individuals is not intended.

We have a data processing agreement with Mailchimp to ensure data protection compliance. This is a contract in which Mailchimp undertakes to protect the data of our users, to process it on our behalf in accordance with its privacy policy and, in particular, not to pass it on to third parties. You can view Mailchimp's privacy policy at https://Mailchimp.com/legal/privacy/.

Legal basis for data processing

The legal basis is your consent in accordance with Art. 6 para. 1 s. 1 lit. a) GDPR.

Purpose of data processing

Mailchimp is used to manage mailing lists and stay in contact with newsletter subscribers.

Duration of storage

Mailchimp stores your data only as long as needed for newsletter distribution. Data is deleted when you unsubscribe and are removed from our list.

Right to objection and erasure

You can withdraw your consent at any time. This can be done via the unsubscribe link in any newsletter, which will result in us deleting your email address from our address database. You can also contacting our data protection officer. Once unsubscribed, Mailchimp no longer processes your data for us. Data held for other clients remains unaffected.

Shopping in the online shop

Description and Scope of Data Processing

When you make a purchase from us (e.g., LEI application, LEI transfer, or LEI renewal), we process not only company-related data but also personal data, depending on the chosen authorization method (by function or by power of attorney):

For persons acting by function (e.g., management, board of directors, authorized signatories):

Full name
Date of birth
Residential address

For power of attorney (both grantor and proxy):

In each case, the data of the principal and the authorized representative:

Full name
Date and place of birth
Residential address

Legal Basis for Data Processing

The legal basis for this data processing is Art. 6 para. 1 s. 1 lit. b) and lit. c) GDPR, i.e., the processing is necessary for fulfilling purchase contracts and legal obligations.

Purpose of Data Processing

We process your data in order to conclude the purchase contract including the delivery agreement with you, to process the purchase contract including invoicing by e-mail or post and receipt of payment, to ensure punctual delivery and to inform you of delivery dates ans/or changes to the delivery.

Your data may be passed on to our service providers so they can fulfill the delivery and contact you to coordinate delivery arrangements.

Duration of Storage

Your data is stored only for as long as necessary for fulfilling the stated purposes and as long as we are legally, contractually, or officially required to retain it.

Right to Objection and Erasure

The data processing is mandatory for the execution of the purchase contract and cannot be waived. Therefore, there is no option for erasure or objection as long as the contract is active.

PayPal

Description and Scope of Data Processing

We offer PayPal as a possible payment method. PayPal is a virtual account system and online payment method. To use PayPal, prior registration with PayPal is required. The data processing is carried out by:
PayPal (Europe) S.à r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg

If you choose PayPal, your personal data will be transmitted to PayPal. This includes:

First name
Last name
Address
Email address
IP address
Telephone number
Mobile number (if applicable)
Any other data required for payment processing

In addition to forwarding data to credit agencies, PayPal may also transmit personal data to affiliated companies and subcontractors if necessary to fulfill contractual obligations or as part of commissioned data processing.

PayPal secures data processing through binding corporate rules (BCRs):
https://www.paypal.com/de/webapps/mpp/ua/bcr
PayPal’s privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Legal Basis for Data Processing

The legal basis is Art. 6 para. 1 s. 1 lit. b) GDPR.

Purpose of Data Processing

The data is transferred to prevent potential abuse. PayPal may also transmit your personal data to credit agencies to verify identity and creditworthiness.

Duration of Storage

Your data is stored only as long as necessary for payment processing and invoicing, unless legal or contractual retention periods prevent deletion.

Right to Objection and Erasure

Data processing is essential for completing your payment via PayPal and therefore cannot be waived if you have selected this payment method. No erasure or objection is possible in this case.

Purchase on Invoice - Klarna

Description and Scope of Data Processing

We use the payment service "Purchase on Invoice" by Klarna (hereinafter "Purchase on Invoice"). For this purpose, we have integrated Klarna components on our website. The data processing is carried out by: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter Klarna).
If you wish to use the "Purchase on Invoice" payment option for payment processing, your personal data will be transmitted to Klarna. The following categories of personal data are involved:

Contact and identification data,
Information about goods/services,
Payment information,
Other data that may be necessary for payment processing.

In the case of a "Purchase on Invoice," Klarna also shares personal data with credit agencies to verify the identity and creditworthiness of the individual concerned. Additionally, it is possible that Klarna may forward personal data to affiliated companies and/or subcontractors if necessary to fulfill contractual obligations. Further information can be found at https://www.klarna.com/international/privacy-policy and https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/invoice.

Legal Basis for Data Processing

The legal basis is Art. 6 para. 1 s. 1 lit. b) GDPR.

Purpose of Data Processing

We use Klarna to facilitate and expedite payment processing for "Purchase on Invoice."

Duration of Storage

We store your data only as long as necessary for the completion of the purchase transaction and invoicing, unless there are statutory or contractual retention periods preventing the deletion of your data. For billing purposes with the online provider and to fulfill legal retention obligations, Klarna stores name, account number, bank code, subject, date, and transfer amount within the statutory retention periods. In the case of SEPA transfers and depending on your bank, BIC and IBAN may be required for the transfer to your online banking account, and Klarna also stores BIC and IBAN within the statutory retention periods. The statutory retention periods range from three to ten years.

Right to Objection and Erasure

The data processing is mandatory to process your payment if you choose "Purchase on Invoice," and therefore cannot be waived.

Payone

Description and Scope of Data Processing

For payment processing, we use the payment service provider Payone. The data processing for central network operations, processing, encryption, and further transmission is carried out by: PAYONE GmbH, Lyoner Straße 9, 60528 Frankfurt am Main, Germany.

For payment, the following data are processed:

Card data: Card number, card type (e.g., VISA, Mastercard, American Express), and expiration date.
Other payment data: Amount, date, time, check data of your card-issuing institution ("EMV data"), and possibly your signature.
PIN: Your PIN entry is cryptographically secured and verified by the card-issuing institution. Payone ensures cryptographic security and transmission but does not store the PIN and has no access to the encrypted PIN.
Reversal: In the event of a reversal, the purchase receipt and possibly other information about you (e.g., name and address) may be forwarded to the card-issuing institution to prove our claim.

Further information on data protection at Payone can be found here: https://www.payone.com/DE-de/GDPR

Legal Basis for Data Processing

The data is processed to verify and execute your payment to us, based on Art. 6 para. 1 s. 1 lit. b) GDPR.

Purpose of Data Processing

The data is processed to facilitate payment processing and to conclude the purchase agreement, including the delivery agreement, with you.

Duration of Storage

Payone stores your data as long as it is necessary for the performance of the contract and for the purpose of data processing, provided no legal, contractual, or official regulations prevent deletion.

Right to Objection and Erasure

The data processing is mandatory to process your payment, and therefore, it cannot be waived. If you have any questions about data protection at Payone, you can contact the Data Protection Officer at the following email address: privacy@payone.com.

Prepayment/Bank Transfer by Customer

Description and Scope of Data Processing

If you choose prepayment, you transfer the agreed invoice amount to us from a financial institution of your choice. This institution transmits the following payment data to us:

Name of the account holder,
IBAN,
Order number, and
Invoice amount.

We do not process the payment data ourselves; instead, they are processed directly by the service provider handling the payment.

Our service provider cannot link this information to other data (such as your address or email address). Please refer to the privacy policy of our service provider for more details.

Legal Basis for Data Processing

The legal basis for the data processing is Art. 6 para. 1 s. 1 lit. b) GDPR.

Purpose of Data Processing

The processing of the data is necessary for the payment via prepayment and thus for the execution of the contract.

Duration of Storage

Your data will only be stored as long as necessary for the completion of the purchase and invoicing, unless statutory or contractual retention periods prevent the deletion of your data.

Right to Objection and Erasure

The data processing is mandatory to process your prepayment, and therefore cannot be waived if you have chosen this payment method. Consequently, there is no option to remove the data.

Credit Card

Description and Scope of Data Processing

If you wish to pay for your order via credit card in our online shop, we require data for payment processing. In particular, the following information is requested:

Name
Address
Email address
Credit card number
Name of the credit card holder
Expiry date of the credit card

We verify the entered data along with the details of your order.

Legal Basis for Data Processing

The legal basis for the associated data processing is Art. 6 para. 1 s. 1 lit. b) GDPR, meaning the processing of your data is necessary for the fulfillment of the agreement regarding payment by credit card.

Purpose of Data Processing

We process this data to detect any potential misuse of the credit card or credit card payment option at an early stage and use the data, after successful verification, to process the agreed payment by credit card.

Duration of Storage

Your data will only be stored as long as necessary for the completion of the purchase and invoicing, unless statutory or contractual retention periods prevent the deletion of your data.

Right to Objection and Erasure

The data processing is mandatory to process your credit card payment, and therefore cannot be waived if you have chosen this payment method. Consequently, there is no option to remove the data.

Use of Credit Agencies

We partially process your data automatically with the aim of evaluating certain personal aspects (profiling). We use profiling in the following cases, for example:

Due to legal and regulatory requirements, we are obligated to combat money laundering, terrorist financing, and financially harmful crimes. This includes data analyses (e.g., in payment transactions). These measures also serve to protect you.

To provide you with targeted information and advice about products, we use evaluation tools. These enable need-based communication and advertising, including market and opinion research.

In the context of assessing your creditworthiness, we use scoring. This calculates the likelihood that a customer will fulfill their payment obligations as agreed. The calculation may include factors such as income, expenditures, existing liabilities, profession, employer, duration of employment, experiences from previous business relationships, timely repayment of previous loans, as well as information from credit agencies. The scoring is based on a mathematically-statistically recognized and established method. The calculated score values help us in decision-making for product contracts and are also part of our ongoing risk management.

Schufa

To assess your creditworthiness, we obtain information from SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany (SCHUFA information). For this purpose, we transfer personal data relevant to the credit assessment (e.g. name, address, date of birth) to SCHUFA and in return receive information about your previous payment behaviour and existing credit obligations. The SCHUFA information is only provided if we can demonstrate our legitimate interest in your personal data.

The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. b) GDPR and Art. 22 para. 2 lit. a) GDPR. An automated individual decision is only made under the conditions of Art. 22 GDPR and § 31 BDSG, insofar as it is necessary for the conclusion or execution of a contract.

The purpose of this data processing is to assess your creditworthiness in order to minimise potential payment default risks. The credit check may influence the decision on whether to conclude a contract with you.

The data received will not be passed on to third parties and will be deleted immediately after the purpose has been fulfilled.

We have integrated social media platforms via links into our services, which may result in the respective social media providers receiving data from you. If you click on the social media link, the website of the respective social media provider will be opened. By accessing the website of the respective social media provider via our services, the relevant referral data will be transmitted to the respective social media provider. This informs the social media provider that you have visited our site.

Note on Data Processing in the USA:

If you click on a social media link, your data may be processed by the respective provider in the USA. The data protection standard in the USA is considered insufficient by the European Court of Justice (ECJ), and there is a risk that your data may be processed by US authorities for control and surveillance purposes, possibly even without legal recourse. If you do not click on the links of the social media providers, no data transmission will take place.

For more information on data processing by the social media providers, please visit the following links:

LinkedIn: https://www.linkedin.com/legal/privacy-policy
Instagram: https://help.instagram.com/155833707900388
https://www.instagram.com/about/legal/privacy/

Trackers and Analytics Tools

To continuously improve our website offerings, we use the following analytics tools. Below, you will find information on the data processed by these tools and how you can reach the respective service providers:

Google Analytics 4.0

Description and Scope of Data Processing

We use Google Analytics 4.0, a service for analyzing website traffic provided by Google LLC (“Google”), to improve our website offerings. The data processing for the European Economic Area (EEA) and Switzerland is carried out by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The collected information may include:

IP address
Access time
Duration of access
The website from which you accessed our site
Interaction on the website
Demographic characteristics (if the website visitor is logged into their Google Account)
Device categories, browser type, operating system, screen resolution

This data is transmitted to a Google server in the USA and stored there. The analysis of your activities on our website is provided to us in the form of reports. Google may share the collected information with third parties if required by law or if third parties process this data on behalf of Google. The IP anonymization is performed by Google by default, meaning IP addresses are only processed in a shortened form, reducing the possibility of identifying a person.

At https://www.google.de/intl/de/policies/, https://support.google.com/analytics/answer/6004245?hl=de&ref_topic=2919631#zippy=%2Ccookies-und-kennzeichnungen-von-google-analytics and https://support.google.com/analytics/answer/9019185?hl=de#zippy=%2Cthemen-in-diesem-artikel you will find more information on the terms of use and data protection of Google Analytics.

Legal Basis for Data Processing

The Legal basis for data processing personal data is your consent under Art. 6 para. 1 lit. a) GDPR.

Purpose of Data Processing

The processing of your personal data allows us to analyze your browsing behavior. By evaluating the collected data, we can compile information on how different components of our website are used. This helps us to continually improve the website and its user-friendliness. The anonymization of IP addresses sufficiently addresses the users' interest in protecting their personal data.

Duration of Storage

The data will be deleted 14 months after your last visit to our website.

Right to Object and Erasure

You can withdraw your consent to data processing at any time. To do so, please contact our data protection officer. You can also prevent the installation of cookies by adjusting your browser settings. However, this may affect your ability to fully use all features of our website. Google Analytics can also be deactivated and controlled through browser extensions, for example, https://tools.google.com/dlpage/gaoptout?hl=en.

Google Tag Manager

Description and Scope of Data Processing

Google Tag Manager is a solution that allows us to manage website tags from a central interface (e.g., integrating Google marketing services into our online offering). It serves as a "manager" of the implemented tags. This allows us to centrally manage the Google products or other analytics tools integrated into our website. The tags on the website are small code snippets that allow us to track your activities on our website. When you use our website, Google Tag Manager is downloaded, which automatically sends your IP address to Google.

Data processing for the European Economic Area and Switzerland is carried out by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

You can find the terms of use for Google Tag Manager here: https://www.google.com/intl/de/tagmanager/use-policy.html

Legal Basis for Data Processing

The Legal basis for data processing personal data is your consent under Art. 6 para. 1 lit. a) GDPR.

Purpose of Data Processing

Google Tag Manager simplifies the management and organization of analytics tools used on our website. To integrate an analytics tool, JavaScript codes need to be embedded on the website. By using Google Tag Manager, we can manage these embedded codes from one central location.

Duration of Storage

As Google Tag Manager does not store data directly but forwards it to tracking tools, you must check the data storage duration in the privacy policies of the individual tracking tools.

Right to Object and Erasure

You can withdraw your consent for data processing at any time. To do so, you must contact the respective data protection officers of the tools. More information regarding data management can be found in the privacy policies of the tools used.

Clarity by Microsoft

Description and Scope of Data Processing

We use Microsoft Clarity, a service for analyzing website traffic provided by Microsoft Corporation, to improve our website offerings. The data processing for the European Economic Area and Switzerland is carried out by Microsoft Ireland Operations Limited, One Microsoft Place, South Country Business Park, Leopardstown, Dublin 18, Ireland, a subsidiary of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

The collected information may include:

IP address
Access time
Duration of access
Interaction on the website (clicks, scrolls, mouse movements)
Location
Browser information
Screen resolution
Language settings

Cookies are used to collect and analyze this data, provided you consent to data processing. The information collected via cookies may be transferred to a server of Microsoft Corporation in the USA and stored there. We have entered into a data processing agreement with Microsoft to ensure the protection of our customers' data.

You can find more information on data privacy at Microsoft here: https://privacy.microsoft.com/de-de/privacystatement

Legal Basis for Data Processing

The Legal basis for data processing personal data is your consent under Art. 6 para. 1 lit. a) GDPR.

Purpose of Data Processing

The processing of your personal data allows us to analyze how you use our website. By evaluating the collected data, we can compile information on the usage of individual components of our website, helping us to continuously improve our website and its user-friendliness.

Duration of Storage

The data will be deleted 30 days after your last visit to our website.

Right to Object and Erasure

You can withdraw your consent to data processing at any time. To do so, you can change your settings in our Consent Manager.

Salesviewer

Description and Scope of Data Processing

We use the web analytics system SalesViewer on our website. The data processing is carried out by SalesViewer GmbH, Huestraße 30, 44787 Bochum, Germany.

SalesViewer uses a JavaScript-based tracking code on our website, which collects the following company data:

Name, origin, and industry of the visiting company
Source/referrer of the visiting company
Keyword
Visitor behavior (e.g., visited pages, visit time, visit duration)

No direct access is made to any information stored on the device of website visitors, nor are cookies or similar files stored on the device. The data collected is encrypted using a one-way function (hashing), ensuring pseudonymization.

For more information on data privacy at SalesViewer, visit: https://www.salesviewer.com/de/datenschutzerklaerung/

Legal Basis for Data Processing

The use of SalesViewer is based on your consent under Art. 6 para. 1 lit. a) GDPR.

Purpose of Data Processing

The purpose of data processing is to analyze your visitor behavior to continuously optimize our offering.

Duration of Storage

The data stored by SalesViewer will be deleted once it is no longer required for its purpose, provided no legal retention periods apply.

Right to Object and Erasure

You can withdraw your consent for data processing at any time by contacting our data protection officer. You can also object to data collection and storage in the future by clicking on https://www.salesviewer.com/opt-out, which will prevent further tracking by SalesViewer on this website. If you delete cookies in this browser, you will need to click this link again.

Advertising and Marketing Tools

Our website also integrates tools that help ensure our website is shown to you as a relevant search result or as an advertisement during an internet search. Below, we have outlined the programs used in connection with our website:

Bing Ads

Description and Scope of Data Processing

We have integrated the services of Bing Ads on this website. Bing Ads is an online advertising service. The data processing is carried out by: Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052, USA; and Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

If you reached our website via a Bing ad, Microsoft will set a so-called conversion cookie on your system. For further explanations on cookies, we refer to the para. on cookies. The conversion cookie is used to create and analyze visit statistics. The conversion cookie stores the IP address when visiting the website. This data is stored in the USA. It is possible that Microsoft may also share this data with third parties. For further privacy notices from Microsoft, please refer to: https://privacy.microsoft.com/de-de/privacystatement

Legal Basis for Data Processing

The legal basis for data processing is your consent pursuant to Art. 6 para. 1 s. 1 lit. a) GDPR.

Purpose of Data Processing

The purpose of the processing is to enable user-specific advertisements. We use Bing Ads to place targeted advertising of our company in Bing search results as well as on Microsoft websites. This type of advertising allows us to reach a larger audience of users and potential customers. Additionally, it increases our visibility.

Duration of Storage

One year after the conversion cookie is set, the cookie expires. This means that you can no longer be identified. Within this year, both we and Microsoft can track which subpages were accessed based on the conversion cookie.

Right to Object and Erasure

You have the right to withdraw your consent to data processing at any time. Please contact our data protection officer or use our Consent Manager for this.

Cookies can be blocked at any time by adjusting the settings in your internet browser. The cookies already set can also be deleted via the browser settings.

You can opt out of user-specific advertising by Microsoft at any time. If you have a Microsoft account, we refer you to: https://choice.microsoft.com/de-de/opt-out. You can also disable behavioral targeting through third-party sites, e.g., via https://www.networkadvertising.org/choices/ and https://www.aboutads.info/.

Google Ads and Google Conversion Tracking

Description and Scope of Data Processing

We have integrated the services of Google Ads (formerly Google AdWords) on this website. Google Ads is an internet advertising service. Data processing for the European Economic Area and Switzerland is carried out by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If you reached our website via a Google ad, Google will set a so-called conversion cookie on your system. For further explanations on cookies, we refer to the para. on cookies. The conversion cookie is used to create and analyze visit statistics. The conversion cookie stores the IP address when visiting the website. This data is stored in the USA. It is possible that Google may also share this data with third parties. For further privacy notices from Google, please refer to: https://www.google.de/intl/de/policies/privacy/

Legal Basis for Data Processing

The legal basis for data processing is your consent pursuant to Art. 6 para. 1 s. 1 lit. a) GDPR.

Purpose of Data Processing

We use Google Ads to place targeted advertisements of our company in Google search results.

Duration of Storage

30 days after the conversion cookie is set, the cookie expires. This means that you can no longer be identified. Within these 30 days, both we and Google can track which subpages were accessed based on the conversion cookie.

Right to Object and Erasure

You have the right to withdraw your consent to data processing at any time. Please contact our data protection officer for this.

Cookies can be blocked at any time by adjusting the settings in your internet browser. The cookies already set can also be deleted via the browser settings. We advise that preventing cookies from being set may result in certain functions not being fully available.

You can permanently prevent data processing in your browser using this link: http://www.google.com/settings/ads/plugin. As a result, it is possible that features of our website may no longer be fully available.

In the browser settings, it is also possible to object only to the conversion tracking cookies, and thus to the user-specific advertising by Google. Please click the following link to do so: www.google.de/settings/ads. We point out that re-adjustment will be required if you delete cookies in your browser.

Additionally, you can deactivate the user-specific ads that are part of the self-regulation campaign "About Ads" by clicking the following link. Please note that re-adjustment will be required if you delete cookies in your browser.

Further Third-Party Tools

Additionally, we use third-party providers that assist us in the presentation and functionality of the website. These are listed below:

Cloudflare

Description and Scope of Data Processing

We use the services of Cloudflare on our website to ensure a secure and error-free use of our website. Cloudflare, as a Content Delivery Network (CDN), ensures the security and optimization of loading times for this website. For this purpose, Cloudflare generates log data that may contain the number of page views, IP address, system information, and information about pages accessed before and after visiting our website. Using this data, Cloudflare looks for attack patterns, and its analysis helps protect our website. This analysis usually takes place within minutes, so security rules for our website can be updated promptly. The data processing is carried out by: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.

Further information can be found in Cloudflare’s privacy policy: https://www.cloudflare.com/privacypolicy

Legal Basis for Data Processing

The data processing is based on your consent in accordance with Art. 6 para. 1 s. 1 lit. a) GDPR. Our interest lies in ensuring the secure use of our website. By implementing Cloudflare, we also comply with the principle of integrity and confidentiality of your data according to Art. 5 para. 1 lit. f) GDPR.

Purpose of Data Processing

The purpose of the data processing is to ensure the confidentiality and integrity of our data processing and the full functionality of our website.

Duration of Storage

Your data will only be stored as long as necessary to achieve the intended purpose, and there are no legal obligations preventing the deletion of your data.

Right to Object and Erasure

You have the right to withdraw your consent to data processing at any time. Please contact our data protection officer for this. You can prevent the processing of your data by Cloudflare by disabling the execution of script code in your browser or installing a script blocker, but this may cause our website to not display correctly.

Vimeo Video

Description and Scope of Data Processing

We use videos from the Vimeo platform on our website. The provider is Vimeo.com, Inc., 555 West 18th Street, New York, New York 10011, USA.

When you visit a page where a Vimeo video is embedded, a connection to Vimeo’s servers is established. During this connection, personal data such as your IP address, technical information about your device (e.g., browser type, operating system), and information about the page you visited may be transmitted to Vimeo.

If you are logged into Vimeo, this data can be linked to your user account. Vimeo also uses cookies or similar technologies to gather additional information about user behavior.

Data transmission takes place in the USA. However, Vimeo is certified under the EU-US Data Privacy Framework (DPF), thus offering an adequate level of data protection according to Art. 45 GDPR. Further information on Vimeo's privacy policy can be found at: https://vimeo.com/privacy

Legal Basis for Data Processing

The use of Vimeo is solely based on your consent according to Art. 6 para. 1 lit. a) GDPR and § 25 para. 1 TTDSG (if cookies or similar technologies are used). Your consent is obtained via our cookie banner and can be withdrawn at any time.

Purpose of Data Processing

The integration of Vimeo serves to provide you with videos and present our content in an engaging manner.

Duration of Storage

The data collected by Vimeo is stored as long as necessary to fulfill the respective purpose or until you withdraw your consent. We do not have control over the storage duration at Vimeo itself. Further information on Vimeo's data storage duration can be found in the privacy policy: https://vimeo.com/privacy

Right to Object and Erasure

You can withdraw your consent to the processing of your personal data at any time by adjusting the settings in the cookie banner or blocking the loading of Vimeo videos through corresponding settings in your browser. However, please note that in this case, some features of our website may not be fully available.

Font Awesome

Description and Scope of Data Processing

This website uses the Font Awesome product from Fonticons, Inc. to ensure consistent display of fonts.

Data processing for the European Economic Area and Switzerland is carried out by: Fonticons, Inc., 6 Porter Road Apartment 3R, Cambridge, MA 02140, USA.

We use the fonts and icons provided by Fonticons, Inc. When you visit our website, the necessary web fonts or icons are loaded into your browser cache to display texts, fonts, and icons correctly. For this purpose, the browser you use must connect to the Fonticons servers, thereby allowing Fonticons to know that our website was accessed through your IP address and which page was displayed.

According to their statement, Font Awesome complies with data protection rights under the EU General Data Protection Regulation (GDPR).

You can find the terms of use for Fonticons at https://fontawesome.com/tos and the privacy policy at https://fontawesome.com/privacy

Legal Basis for Data Processing

The legal basis for using Font Awesome is Art. 6 para. 1 s. 1 lit. a) GDPR.

Purpose of Data Processing

The purpose of the data processing is to ensure the consistent presentation of fonts and icons on our website.

Duration of Storage

The data will be deleted once it is no longer needed for the purpose of data processing, unless there are legal obligations preventing deletion.

Right to Object and Erasure

You can set your browser to prevent fonts from being loaded from the Fonticon servers. If your browser does not support Font Awesome or you block access to the Fonticon servers, the text will be displayed in the system’s default font.

You can send any data protection-related questions, complaints, and inquiries to Font Awesome at privacy@fontawesome.com.

Google Maps

Description and Scope of Data Processing

This website uses the Google Maps product from Google LLC. Data processing for the European Economic Area and Switzerland is carried out by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit a page, your browser loads the necessary geo-information into its cache to display the map correctly. For this purpose, the browser you use must connect to Google's servers, allowing Google to know that our website was accessed through your IP address and which map was displayed. The terms of use for Google Maps can be found at https://www.google.com/intl/de_de/help/terms_maps.html

Legal Basis for Data Processing

The legal basis is your consent pursuant to Art. 6 para. 1 s. 1 lit. a) GDPR.

Purpose of Data Processing

The use of Google Maps helps you find our location and interact with it in various ways, such as planning routes.

Duration of Storage

The data will be deleted once it is no longer needed for the processing purpose unless legal, regulatory, or contractual requirements prevent deletion.

Right to Object and Erasure

You have the right to withdraw your consent to data processing at any time. Please contact our data protection officer for this.

If you do not wish to use Google Maps, some parts of our website may not be available to you.

We operate the following social media profiles:

Instagram: https://www.instagram.com/wmgruppe/

LinkedIn: https://de.linkedin.com/company/wm-gruppe

X: https://x.com/boersenzeitung

Facebook: https://www.facebook.com/profile.php?id=108520422504961&_rdr

Additionally, we publish our podcast on the following platforms:

Spotify: https://open.spotify.com/intl-de

Apple: https://podcasts.apple.com/de/browse

We utilize the services of:

Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA or Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Instagram”)
LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland or LinkedIn Corporation, 1000 W. Maude Ave., Sunnyvale, California 94085, USA (“LinkedIn”)
Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA (“X”)
Spotify USA Inc., 150 Greenwich Street, Floor 62, New York, NY 10007, USA (“Spotify”)
Apple Inc., 1 Apple Park Way, Cupertino, CA 95014, USA (“Apple”)

According to the judgment of the European Court of Justice from June 5, 2018 (available at http://curia.europa.eu/juris/document/document.jsf?text=&docid=202543&pageIndex=0&doclang=DE&mode=req&dir=&occ=first&part=1&cid=298398), operators of social media profiles and the social media platform providers are jointly responsible for data processing.

We would like to point out that you use our social media profiles and their functions at your own responsibility. This applies especially to the use of interactive functions (e.g., commenting, sharing, rating). Alternatively, you can also retrieve the information we provide on our own website.

The data protection officers of the respective social media platforms can be contacted via the respective platforms.

You can reach the data protection officer of Facebook and Instagram via the following linked contact form: https://www.facebook.com/help/contact/540977946302970

You can reach LinkedIn's data protection officer via the following linked contact form: https://www.linkedin.com/help/linkedin/ask/TSO-DPO?lang=en-US

You can reach the data protection officer of X via the following linked contact form: https://help.x.com/en/forms/privacy

You can contact Spotify's data protection officer via the e-mail address privacy@spotify.com or by post at the following address Spotify USA Inc., 150 Greenwich Street, Floor 62, New York, NY 10007, USA.

You can reach the data protection officer of Apple Podcasts via apple.com/de/privacy/contact or vir the Apple Support phone number

When you visit our social media profiles, the platform providers collect, among other things, your IP address and other information stored in cookies on your device. This information is used to provide us, as the profile operator, with statistical information about the use of the page. The data collected about you in this context is processed by the platform providers and may be transferred to countries outside the European Union. For more information on what data is collected by the platform provider and how it is used, refer to the privacy policies of the respective social networks. You will also find contact details there.

For more information, you can check the following links:

Instagram: https://help.instagram.com/155833707900388
https://www.instagram.com/about/legal/privacy/

LinkedIn: https://www.linkedin.com/legal/privacy-policy

X: https://x.com/en/privacy

Spotify: https://www.spotify.com/de/legal/privacy-policy/

Apple: https://www.apple.com/de/legal/privacy/

How the platform providers use the data from visiting our profiles for their own purposes, to what extent activities on social media profiles can be attributed to individual users, how long the platform providers store this data, and whether data from a visit to social media profiles is shared with third parties, is not clearly stated by the platform providers and is not known to us.

When accessing our social media profiles, the IP address assigned to your device is transmitted to the respective platform provider. Additionally, social media platforms store information about users' devices (e.g., for the "login notification" feature); this may enable platform providers to associate IP addresses with individual users.

If you are currently logged into the respective social network, a cookie with your individual identifier for that network is stored on your device. This allows the platform provider to track that you visited a specific page and how you interacted with it. Based on this data, content or advertising can be tailored to your previous visits to websites.

If you wish to avoid this, you should log out of the social network, disable the "stay logged in" function, delete the cookies stored on your device, and restart your browser. This way, login information that could directly identify you will be deleted. You can then use our social media profiles without revealing your user ID. If you access interactive functions of the page (like, comment, share, messages, etc.), a login prompt will appear. After logging in, you will be identifiable to the social network as a specific user.

For more information on how to manage or delete the data stored within the social network, please refer to the support pages of the respective social network.

Description and scope of data processing

The data you enter on social networks, especially your username and content published under your account, will be processed by us if we respond to your messages. Additionally, your published posts, ratings, and comments will link to your account on the respective social network. If you mention us with @ or # or something similar, this mention may be published on our page under your username.

The data you freely publish and share on the respective social network may be included in our offering and made accessible to other users of the platform. If you mark our profile with "Like," "Follow," or similar interactions, this will be communicated to us along with your username and a link to your account.

Legal basis for data processing

Data processing by us is based on Art. 6 para. 1 s. 1 lit. f) GDPR. Our legitimate interest arises from the advertising function of social media. We use this to increase the visibility of our company.

Purpose of data processing

The data you provide and may be accessible to us (e.g., username, images, possibly interests, contact details) will be processed solely for the purpose of customer and prospect communication. Our legitimate interest is to provide you with a platform where we can display current information and where you can quickly address any inquiries to us, so we can respond to them as quickly as possible.

Duration of Storage

Your data will be deleted as soon as we no longer operate the respective social media profile.

Data Processing in the Context of Events

Processing of Contact Data in the Context of Events

Description and Scope of Data Processing

In the context of events, trade fairs, or other business meetings, we collect contact data (e.g., through the exchange of business cards) for business purposes. This data typically includes your name, company affiliation, email address, and phone number, and is used for contacting you and maintaining business relationships.

Legal Basis for Data Processing

The processing of this contact data is carried out based on our legitimate interest according to Art. 6para. 1 lit. f) GDPR, in order to establish and maintain business relationships.

Purpose of Data Processing

The purpose of data processing is to contact you and exchange information regarding business offers and services. The data processing supports us in promoting business contacts and establishing new partnerships.

Duration of Storage

The contact data is stored as long as it is necessary for the continuation of business relationships or until you object to the processing.

Right to Object and Erasure

You have the right to object to the processing of your contact data at any time. In this case, we will promptly delete your data unless there are statutory retention periods that prevent this.

Recording and Use of Photos and Videos at Events

Description and Scope of Data Processing

During our events, photos and videos may be taken, on which you could be recognizable. These recordings are used to document the event, share them for promotional purposes on our website and social media, or use them in internal and external communication materials.

Legal Basis for Data Processing

The legal basis for the processing of photos and videos is your consent according to Art. 6 para. 1 lit. a) GDPR. Consent is obtained before or during the event and can be withdrawn at any time.

Purpose of Data Processing

The recordings serve to visually document the event, promote our activities, and increase the reach of our events and projects.

Duration of Storage

Photos and videos are stored as long as they are necessary for the stated purpose or until you withdraw your consent.

Right to Object and Erasure

You have the right to withdraw your consent to the use of photos and videos at any time with future effect. Please send your withdrawal to our data protection officer. In this case, we will immediately delete the corresponding recordings.

Data Processing from Public Sources for Business Contact

Description and Scope of Data Processing

We process personal data obtained from publicly accessible sources, such as company websites, professional networks (e.g., LinkedIn), industry directories, or commercial registers, for sales and marketing purposes. The processed data typically includes names, company affiliation, positions, professional contact details, and other information relevant for business contact.

Legal Basis for Data Processing

The data processing is carried out based on our legitimate interest according to Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in identifying potential business contacts, acquiring new customers, and maintaining business relationships. The processing is carried out exclusively within the limits of § 7(3) of the German Unfair Competition Act (UWG), which restricts the use of contact data for direct marketing purposes.

Purpose of Data Processing

The Purpose of data processing is to approach potential customers and business partners to promote our sales and marketing activities. This includes, in particular, the targeted approach and promotion of services or products.

Duration of Storage

The data will be stored as long as it is necessary to achieve the sales and marketing objectives or until you object to further processing.

Right to Object and Erasure

You have the right to object to the processing of your data at any time. You can direct your objection to our data protection officer.

Video surveillance

Description and scope of data processing

Image data is collected in the monitored area by means of permanently installed cameras. Recording takes place continuously and without sound. There is no automated evaluation (e.g. by facial recognition). Surveillance is used exclusively to protect the monitored area from unauthorised access, vandalism, theft or other security-related incidents. Additional information about video surveillance is provided in the monitored area.

Legal basis for data processing

Image data is processed in accordance with Art. 6 (1) lit. f) GDPR. Our legitimate interest lies in exercising our domiciliary rights and protecting our property and the safety of persons and property.

Purpose of data processing

Video surveillance serves to protect our property rights and to protect persons, buildings, facilities and other property from theft, vandalism and unauthorised access. In addition, it can contribute to the investigation of security-related incidents and to the preservation of evidence in the event of criminal offences or civil disputes.

Storage

The recorded image data is usually deleted automatically after 72 hours. Longer storage only takes place if this is necessary to assert, exercise or defend legal claims (e.g. in the context of criminal or civil proceedings).

Right to Object and Erasure

You have the right to object to the processing of your data at any time. You can address your objection to our data protection officer.

Service providers from third countries

In order to be able to provide our services, we use the support of service providers from third party countries (non-EU countries). In order to ensure the protection of your personal data in this case, we conclude processing contracts with each - carefully selected - service provider. All of our processors provide sufficient guarantees to implement appropriate technical and organizational measures. Our third country data processors are either located in a country with an adequate level of data protection (Art. 45 GDPR) or provide appropriate safeguards (Art 46 GDPR).

Adequate level of protection: The provider comes from a country whose level of data protection has been recognized by the EU Commission. For more information, see: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en

EU standard contract clauses: Our provider has submitted to the EU standard contractual clauses to ensure secure data transfer. For more information, see: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=en

Binding Corporate Rules: Art. 47 of the GDPR provides the possibility of ensuring data protection when transferring data to a third country via Binding Corporate Rules. These are examined and approved by the data security authorities within the framework of the consistency mechanism pursuant to Art. 63 GDPR.

Consent: In addition, a data transfer to a third country without an adequate level of protection will only take place if you have given us your consent in accordance with Art. 49 sec. 1 lit. a) GDPR for this purpose.

Your rights

You have the following rights with respect to the personal data concerning you:

Right to withdraw a given consent (Art. 7 GDPR)

If you have given your consent to the processing of your data, you can withdraw it at any time. This will affect the admissibility of processing your personal data by us for the time after you have withdrawn your consent. To withdraw your consent, contact us personally or in written form.

Right to rectification and erasure (Art. 16, 17 GDPR)

You have the right to obtain from us without undue delay the rectification and completion of inaccurate personal data concerning yourself.

You may also request the erasure of your personal data if any of the following applies to you:

the personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed;
you withdraw consent on which the processing is based according to Art. 6 para. 1 s.1 lit. a) or Art. 9 para. 2 lit. a) GDPR, and where there is no other legal ground of processing;
you object to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or the you object to the processing pursuant to Art. 21 para. 2 GDPR;
the personal data have been unlawfully processed;
the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which we are subject;
the personal data have been collected in relation to the offer of information society services referred to in Art. 8 para. 1.

Where we made the personal data public and are obliged to erase the personal data pursuant to Art. 17 para. 1 GDPR, we, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

These rights shall not apply to the extent that processing is necessary:

for exercising the right of freedom of expression and information;
for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
for reasons of public interest in the area of public health in accordance of Art. 9 para. 2 lit. h) and i) as well as Art. 9 para. 3 GDPR;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR, in so far as the right referred to above is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
for the establishment, exercise or defence of legal claims.

Right to restriction of processing (Art. 18 GDPR)

You shall have the right to obtain from us restriction of processing where one of the following applies:

the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data;
the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims;
you have objected to processing pursuant to Art. 21 para. 1 GDPR pending the verification whether our legitimate grounds override yours.

Where processing has been restricted under the aforementioned conditions, such personal data shall, except for storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If the limitation of the processing is restricted, you will be informed by us before the restriction is lifted.

Right to information (Art. 19 GDPR)

If you have asserted us your right to rectification, erasure or restriction of data processing, we will inform all recipients of your personal data to correct, delete or restrict the processing of data, unless this proves impossible or involves disproportionate effort.

You also have the right to know which recipients have received your personal data.

Right of access (Art. 15 GDPR)

You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to your personal data and the following information:

the Purpose of data processing;
the categories of personal data concerned;
the recipients or the categories of recipient to whom your personal data have been or will be disclosed, in particular recipients in countries outside of the EU or international organisations;
where possible, the envisaged period for which your personal data will be stored, or, if not possible, the criteria used to determine that period;
all available information on the source of your personal data;
the existence of automated decision-making, including profiling, referred to Art. 22 para. 1 and 4 GDPR and, in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

In the case of such a request, you must provide enough information about your identity to proof that the request concerns your own personal data.

Right to data portability (Art. 20 GDPR)

You have the right to receive your personal data, which you provided to us, in a structured, commonly used and machine-readable format. Also, you have the right to transmit those data to another controller, where

the processing is based on consent pursuant of Art. 6 para. 1 s.1 lit. a) GDPR or of Art. 9 para. 2 lit. a) GDPR or is based on a contract pursuant of Art. 6 para. 1 s. 1 lit. b) DS-GVO; and
the processing is carried out by automated means.

In exercising your right to data portability, you have the right to obtain that personal data transmitted directly from us to another controller, as far as technically feasible. The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority that has been delegated to us.

Right to object (Art. 21 GDPR)

Where we based the processing of your personal data on a legitimate interest (Art. 6 para. 1 s. 1 lit. f) GDPR), you may object to the processing. The same applies if the data processing is based on Art. 6 para. 1 s. 1 lit. e).

In this case, we ask you to explain the reasons why we should not process your personal data. Based on this we will terminate or adapt the data processing or show you our legitimate reasons why we continue the data processing.

Right to lodge a complaint with supervisory authority (Art. 77 GDPR)

Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you is against the infringes of the GDPR.

The supervisory authority to which the complaint has been submitted shall inform you of the status and results of the complaint, including the possibility of a judicial remedy according to Art. 78 GDPR.

How you perceive these rights

To exercise these rights, please contact our data protection officer:

Anna Tiede from Webersohn & Scholtz GmbH

e-mail: wm-gruppe@ws-datenschutz.de

or by mail: WS Datenschutz GmbH
Dircksenstraße 51
D-10178 Berlin

Subject to change

We reserve the right to change this privacy policy in compliance with legal requirements.

June 2025

Data privacy statement WM Leiportal Website

General information on data processing

Person Responsible (Controller)

Name and address of the Data Protection Officer

Protection of your data

Erasure of personal data

Data processing of the Leiportal website (www.wm-leiportal.org/de/)

Use of data on this website and in logfiles

Description and scope of processing personal data

Legal basis for data processing personal data

Purpose of data processing

Duration of storage

Right of objection and erasure

Use of cookies

Description and scope of data processing

Legal basis for data processing

Purpose of data processing

Duration of storage

Right to objection and erasure

Cookiebot

Description and scope of data processing

Legal basis for data processing

Purpose of data processing

Duration of storage

Right to objection and erasure

Contact

Description and scope of data processing

Legal basis for data processing

Purpose of data processing

Duration of storage

Right to objection and erasure

Registration on the website

Description and scope of data processing

Legal basis for data processing

Purpose of data processing

Duration of storage

Right to objection and erasure

Newsletter and existing customer mailings

Description and scope of data processing

Legal basis for data processing

Purpose of data processing

Duration of storage

Right to objection and erasure

Newsletter service provider Emarsys

Description and scope of data processing

Legal basis for data processing

Purpose of data processing

Duration of storage

Right to objection and erasure

Newsletter service provider Mailchimp

Description and scope of data processing

Legal basis for data processing

Purpose of data processing

Duration of storage

Right to objection and erasure

Shopping in the online shop

Description and Scope of Data Processing

Legal Basis for Data Processing

Purpose of Data Processing

Duration of Storage

Right to Objection and Erasure

PayPal

Description and Scope of Data Processing

Legal Basis for Data Processing

Purpose of Data Processing

Duration of Storage

Right to Objection and Erasure

Purchase on Invoice - Klarna

Description and Scope of Data Processing

Legal Basis for Data Processing

Purpose of Data Processing

Duration of Storage

Right to Objection and Erasure

Payone

Description and Scope of Data Processing

Legal Basis for Data Processing

Purpose of Data Processing

Duration of Storage

Right to Objection and Erasure

Prepayment/Bank Transfer by Customer