Privacy notice

Privacy notice

Under this privacy notice (hereinafter the “Notice”), Deutsche Börse AG (hereinafter “We” or “Us”) informs you how We process your personal data. Your personal data means any information relating to you (hereinafter the “Personal Data”), such as name or contact details.

We pay special attention on the processing of Personal Data in accordance with the General Data Protection Regulation EU 2016/679 (“GDPR”) and applicable national data protection laws.

1. Controller

a. Our identity and contact details

We are:
Deutsche Börse Venture Network
Deutsche Börse AG
60485 Frankfurt am Main
Germany
+49 (0)69 211 11880
venture-network@deutsche-boerse.com

b. Contact details of Our data protection officer

Data Protection Officer
Deutsche Börse AG
60485 Frankfurt am Main
Germany
dataprotection@deutsche-boerse.com

2. Purpose, Categories of Personal Data, Legal Basis and Retention

We process the following categories of your Personal Data for the following purposes:

a. General contact via e-mail, postal mailing and phone
Name, address, telephone number or e-mail address if you wish to make direct contact with us. We collect your personal information when you provide it to us through our contact forms or make direct contact with us. Then we process the information that you provided us in the context of contacting. These include in particular names and submitted contact details (address, telephone number or e-mail address) date and reason for contacting. The personal information you collect will only be used to answer and fulfill your specific requests.

The legal basis is Art. 6 para. 1 lit. (f) of the GDPR, permitting the processing of Personal Data for the purposes of Our legitimate interests in processing and answering your request.

Your personal data processed in this regard will be stored by Us as long as it is necessary to carry out Our relationship (communication) with you and required by applicable statutory retention laws.

b. Newsletter
With your consent, you can subscribe to our Venture Weekly Newsletter, which will keep you informed about global announcements on start-up funding rounds, M&As, new funds, and occasional highlights from the Deutsche Börse Venture Network, such as current reports, case studies, and event announcements.

To register for our newsletter, we use the so-called double opt-in procedure. This means that after you have registered, we will send you an e-mail to the e-mail address specified in which we ask you to confirm that you wish to receive the newsletter. In addition, we store your IP addresses and times of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to inform you about possible misuse of your personal data. The legal basis is Article 6 (1) (a) and (c), Article 7 (1) GDPR.

The only requirement for sending the newsletter is your e-mail address. The specification of additional, separately marked data is voluntary and will be used to address you personally. After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 lit. a) GDPR. Your personal data will be deleted as soon as it is no longer necessary for the purpose of its collection. The e-mail address of the user is therefore stored as long as the subscription to the newsletter is active.

You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter with future effect, i.e. the withdrawal of the consent does not affect the lawfulness of processing based on the consent before its withdrawal. You can declare the revocation by clicking on the link provided in each newsletter e-mail or by sending a message to the contact details stated in the imprint. If the consent is withdrawn, We may only further process the personal data where there is another legal ground for the processing.

c. Registration on Our online platform
Type of user (investor or company), first name, surname, title, address, telephone number, financial information, e-mail address, position and company and personal data you may provide to us in your pitch presentation, if you wish to register for the closed user group at Deutsche Börse Venture Network (hereinafter “DBVN”). Mandatory fields are marked accordingly. All other fields are voluntary. Closed user group means the group of all registered members of DBVN that have successfully registered via Our online platform.

We use the so-called double-opt-in procedure for registration. Your registration is only completed if you have previously confirmed your registration via a confirmation email sent to you for this purpose by clicking on the link contained therein. The specification of the aforementioned data is mandatory, all other information you can volunteer by using our online platform.

The legal basis is Art. 6 para. 1 lit. (b) of the GDPR, permitting the processing of Personal Data for the purposes of the performance of a contract.

Your personal data processed in this regard will be stored by Us as long as it is necessary to carry out Our relationship (registration and use of Our online platform) with you and required by applicable statutory retention laws.

d. Use of Our online platform
Type of user (investor or company), first name, last name, title, address, telephone number, photo, financial information, e-mail address, if you wish to register for the closed user group at Deutsche Börse Venture Network (hereinafter “DBVN”). Closed user group means the group of all registered members of DBVN that have successfully registered via Our online platform.

The purposes for which we process your Personal Data are to:
i. Register you for clients service, to create user account, for accounting and billing.

ii. Provide you with news or alerts via e-mail informing you about Our services, Our/partner events/trainings, transaction news, DBVN news and surveys.

iii. Onboard you to Our closed DBVN user group and to publish your profile on the online platform. Within the closed DBVN user group on the online platform you are given the opportunity to add additional company related information to your personal profile (e.g. sales pitches) which might also include Personal Data. This information is available for all users within DBVN’s closed user group. You may add additional information and grant access to these information only to a designated group within the closed DBVN user group of your choice.

iv. Use of the Transaction Support: When setting up a deal for investors to commit an investment in. There are two options of deal visibility for your choice:
1. In a private deal: Company creates a deal and defines who (1 – n) can view the deal; After mutual agreement / shown interest, the company’s identity is disclosed to investor.
2. In a public deal: Company creates a deal that is visible to every User (disclosed or anonymized). Contact details are revealed; means of direct communication are granted.
3. The Transaction Support also includes the Cap Table Tool, a functionality to provide an analysis of the founders' and investors' percentage of ownership, equity dilution, and value of equity in each round of investment including equity, convertible loans, ESOP, VSOP and Investment Groups.
4. In an extra Data Room you have the opportunity to upload files and data related to your company that might also include personal data. In this data room you can manage the visibility settings individually and limit the accessibility of this data to selected users of the network.

The legal basis is Art. 6 para. 1 lit. (b) of the GDPR, permitting the processing of Personal Data for the purposes of the performance of a contract. If you wish to provide additional information about you the legal basis a consent in accordance with Art. 6 para. 1 lit (a) of the GDPR.

Your personal data processed in this regard will be stored by Us as long as it is necessary to carry out Our relationship (registration and use of Our online platform) with you and required by applicable statutory retention laws.

e. Use of Our products and services
Personal Data according to a Deutsche Börse Venture Network membership are processed if you wish to receive a specific service from us in accordance with a contract you are entering, or have entered with us. We only collect information necessary for us to provide you with the service that you have requested such as name, billing address.

Therefore the legal basis for processing your personal data during the provision of Our services is Art. 6 para. 1 lit. (b) of the GDPR, permitting the processing of Personal Data for the purposes of the performance of a contract.

Processing of your Personal Data is necessary for the performance of the following Deutsche Börse Venture Network services:
i. Training, workshops and networking/investor events
ii. Introduction, i.e. forwarding Personal Data to parties within Our closed user group Deutsche Börse Venture Network and to third parties if you have explicitly consented to the transfer
iii. Being contacted by other parties of the closed DBVN user group
iv. Personal meetings, telephone calls, surveys, feedback collection for DBAG employees
v. Development of new services

Your personal data processed in this regard will be stored by Us as long as it is necessary to carry out Our relationship (registration and use of Our online platform) with you, for the respective purpose and required by applicable statutory retention laws.

f. General use of Our website and online platform
When you use Our website and online platform, We will automatically log information from the browser used to access the Website, for example your IP address, session durations, the pages that are visited from that address, and the website from where you visit the Website, if your computer is set to allow that type of collection. We may also collect device-specific information, such as your hardware model and operating system. We use this information to detect and prevent wrongdoings and crimes and carrying out investigations in connection with improper conduct.

The legal basis for processing your personal data for these purposes is Art. 6 para. 1 lit. (c) of the GDPR in fulfilling Our legal obligation to implement technical and organisational measures to ensure secure data processing according to Article 32 GDPR and Article 6 para. 1. lit. (f) of the GDPR to pursue Our legitimate interests in data processing for the network and information security.

After the specified period of 30 days, the above-mentioned data will be deleted. To the extent that data are processed longer, we will anonymize or delete the data as soon as their storage no longer serves the respective purpose(s).

3. Do you have to provide your personal data to Us?

The provision of your Personal Data is necessary to access the protected areas of this website which is limited to members of Our customer groups, to make direct contact with us, or to receive a newsletter. This means that you are obliged to provide your Personal Data to Us as part of a user registration process when making use of these options. Within Our online platform Personal Data remain under your control at all times via the “My Profile” facility. Your user account can be viewed or modified at any time by you, the account owner.

4. Do We make automated decisions on you?

We do not make any automated decisions solely on automatic processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

5. Cookies

When you visit the DBVN website and Our online platform, information is stored on your terminal device in the form of a "cookie." Cookies are small files that are stored on your terminal device and save certain settings and data to exchange with our websites via your browser.

For example, cookies enable us to tailor a website to better match your interests or to store your password so that you do not have to re-enter it every time. As a general rule, we never collect personal data via cookies, unless you have given us your express permission to do so.

If you do not want us to recognize your terminal device, please configure your Internet browser to erase all cookies from your device, to block all cookies or to receive a warning before a cookie is stored. You will find brief instructions on how to do this below.

Please note that certain functions of our website may no longer work, or not correctly, without cookies.

a. Types of cookies
Cookies can be assigned to four categories, depending on their function and intended purpose: absolutely necessary cookies, performance cookies, functional cookies, and cookies for marketing purposes.
i. Absolutely necessary cookies
Are needed for you to navigate within DBVN websites and operate basic website functions, such as the issuance of anonymous Session IDs for bundling several related queries to a server.

ii. Performance cookies
collect information on the usage of our websites, including for example the Internet browsers and operating systems used, the domain name of the website which you previously visited, the number of visits, average duration of visit, and pages called up.

These cookies do not store any information that would make it possible to personally identify the user. The information collected with the aid of these cookies is aggregated and is therefore anonymous. Performance cookies serve the purpose of improving the user friendliness of a website and therefore enhancing the user’s experience. You can block the use of such cookies by creating an exclusion cookie (see “managing cookies” below).

iii. Functional cookies
enable a website to store information the user has already entered (such as user ID, language selection, or the user’s location), in order to offer improved, personalized functions to the user. Functional cookies are also used to enable requested functions such as playing videos and to make a user’s decision to block or disable a certain function (e.g. web analysis) - “opt-out cookies”.

iv. Cookies for marketing purposes
are used to offer more relevant content to users, based on their specific interests. They are also used to limit the display frequency of an ad and to measure and control the effectiveness of advertising campaigns. They register whether users have visited a website or not, and which contents were used. This information may possibly also be shared with third parties, such as advertisers, for example. These cookies are often linked to the functions of third-party websites. You can block the use of such cookies by creating an opt-out cookie (see “Managing cookies” below).

b. Cookies on Our website and Our online platform

Cookie nameDescriptionRetention period
cookiesPolicyAccepted

This cookie stores info about users choice about cookies. The cookie is set once the user accepts ('true') or declines('false') the usage of cookies.

Session

„webtrekkOptOut“ Cookie

This Cookie is set when a user refuses data storage of his visit. (Privacy Notice)


wt_rla

This cookie prevents unwanted multiple tracking requests.

Three month
wt_eid

This cookie allows a user to be recognized as a website visitor by using an anonymous and unique ID.

Session

wt_sid

This cookie detects related user sessions.

Session
wt_nbg_Q3

For anonymous statistical purposes: Ensures that a visit to the statistics remains a visit (no multiple counting), even if the page is closed at short notice or a tab switch occurs in between.

300 Seconds
wt_geid

Cookie for detection of new/root deviceSession

Session
wt_cdbeid

This cookie allows anonymous counting of the number of visitors across devices.

Session
_ga

This cookie allows a user to be recognized as a website visitor by using an anonymous and unique ID.

Two years
_gid

This cookie is used for Google Analytics to store and update a unique value for each page visited.

One day
personalization_id

This cookie is set due to Twitter integration and sharing capabilities for the social media.

Two years
guest_id

This cookie is set due to Twitter integration and sharing capabilities for the social media.

Two years
__RequestVerificationToken

This cookie verifies the login for https://portal.venture-network.com

Session
.AspNet.ApplicationCookie

When you log on, the server returns a cookie that contains encrypted and signed claims about the user of the browser for https://portal.venture-network.com.

Session

c. Managing cookies
Please note: Not all of the cookies mentioned above will necessarily be used when you browse our website using a mobile terminal device.

d. How can I deactivate cookies?
In the following you will find a summary of links that provide detailed information on the deactivation of cookies in commonly used browsers.

6. WebTrekk

In order to improve the quality and to ensure a user-friendly design of our offered services, we make use of “Webtrekk” from the company Webtrekk GmbH. “Webtrekk” is a statistics programme, through which the company Webtrekk GmbH records the use of our App by users on an anonymized basis. Webtrekk GmbH acts as our commissioned data processing provider. The web analysis service of Webtrekk GmbH has been verified in terms of data safety and is certified by the Technical Control Board (TÜV). The use of “Webtrekk” enables us to receive user behaviour analysis. As a result, we are able to enhance our services and adapt individually adapt them to user requests. We also make use of so-called cookies, i.e. small files stored on your device. The cookies are not assignable to any certain or identifiable person. Profiles capable of being related to an individual person in respect to your user behaviour will not be created. You are entitled to raise an objection to the collection of pseudonymous data by Webtrekk or cookies.

Most of the cookies used are so-called “Session Cookies”, which are stored on a temporary basis, exclusively for the duration of your utilization of the App. On the other hand, we also make use of “Permanent Cookies” to record information about visitors who repeatedly access one of our servers via the App. The content of a permanent cookie is limited to an identification number. Your full IP address or other personal data will not be stored. We and our statistical service provider, Webtrekk GmbH, only store your IP address in a shortened (anonymized) form and use it for identification of the session, so that the collected data will be anonymous and allocation to the identity of an individual user is not possible. The shortened IP address will then be deleted without delay as soon as it is no longer required. You are entitled to raise an objection against the pseudonymous collection and processing of your data through cookies.

Pursuant to § 15 Section 3 of the German Telemedia Act, website visitors are entitled to object to the storage of their visitor data, so that this data will no longer be recorded on this website in the future. If you object to the data storage, a cookie called “webtrekkOptOut” will be placed by the domain webtrekk.net for purposes of exemption from the web controlling process. Technically, the withdrawal notice will remain effective until the aforementioned cookie is deleted.

7. Use of Video-Platforms

a. YouTube
Our online platform uses embedded videos from YouTube, a service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). As soon as you visit a part of our website with an embedded video page, you will be connected to YouTube's servers and YouTube will be informed on which site you are currently on. It can also connect to the Google DoubleClick network. Starting the video can trigger further data processing. We have no further influence on that. For more information about privacy on YouTube, see their privacy notice at https://policies.google.com/privacy?hl=en-GB&gl=uk

b. Vimeo
Our online platform uses embedded videos from Vimeo, a service of Vimeo, Inc. (555 West 18th Street New York, New York 10011; „Vimeo“). As soon as you visit a part of our website with an embedded video page, you will be connected to Vimeo's servers and Vimeo will be informed on which site you are currently on. Starting the video can trigger further data processing. We have no further influence on that. For more information about privacy on Vimeo, see their privacy notice at https://vimeo.com/privacy

8. Social-Media Plug-Ins
We currently use the following social media plug-ins: Twitter. For more information on the purpose and scope of the data collection and its processing by the plug-in provider, please refer to the privacy notice of these providers provided below. There you will also find further information about your rights and options for the protection of your privacy- 

Twitter stores the data collected about you as usage profiles and uses them for purposes of advertising, market research and / or tailor-made website design. Such an evaluation is carried out in particular (also for non-logged-in users) for the presentation of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the formation of these user profiles, whereby you must contact Twitter to exercise your rights. Social Media Plug-Ins allow us to interact with social networks and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 lit. f) GDPR.
The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged into the plug-in provider, your data will be assigned directly to your existing account with the plug-in provider. We recommend logging out regularly after using a social network, but especially before activating the button, as this will prevent you from being assigned to your profile with the plug-in provider.

Further information on the purpose and scope of the data collection and processing by the plug-in provider can be found in the following data protection declaration of this provider. There you will also find further information on your rights in this regard and setting options to protect your privacy:

Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy and https://help.twitter.com/en/twitter-for-websites-ads-info-and-privacy
Twitter has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

9. Transfer of personal data

We will not transfer your Personal Data to third parties except such transfer is permitted by law or you have explicitly consented to the transfer.

In order to provide our contractual services, we use selected service providers (processors) and vicarious agents of the categories listed below, who can obtain access to your personal data to the required extent and use them for the fulfillment of the orders we have placed.

We may transfer your Personal Data to public authorities where this is required by the applicable law (e.g. the German Stock Exchange Act (Börsengesetz) or the German Securities Trading Act (Wertpapierhandelsgesetz)). A transfer of your Personal Data is also permitted if there is a suspicion of a criminal offence or the abuse of the services offered on Our website. In this event, we shall be entitled to transfer your Personal Data to the criminal prosecution authority.

Otherwise, your personal data will be stored exclusively in our database and on our servers, or on those of our commissioned data processing providers. We will only share your Personal Data with other controllers for their own purposes such as cooperation or advertising partners under the condition that you explicitly and voluntarily agreed to such transfer of your Personal Data; in this case, we will obtain your consent separately from this Notice.

Sometimes the recipients to whom We transfers your personal data are located in countries in which applicable laws do not offer the same level of data protection as the laws of your home country.

In such cases, We take measures to implement appropriate and suitable safeguards for the protection of your personal data.

Personal data published by you on Our Deutsche Börse Venture Network (such as chat rooms or forums) may be globally accessible to other registered user of Our platform.

Under these conditions, recipients of your personal data can be for example:

  • public bodies and institutions in the presence of a legal or regulatory obligation (eg. financial authorities),
  • other companies and service providers (processors) / vicarious agents in the following areas:
    • Print Service Provider
    • Telecommunications service providers
    • Billing service provider
    • Financial institutions
    • Collection agencies
    • Management consultancies as well as business and tax audit companies
    • Provider of the online platform
    • Newsletter shipping provider
    • Cooperating partners of the Deutsche Börse Venture Network

10. Your rights

Under applicable data protection laws, you have rights
a. of access to, rectification of, and/or erasure of your Personal Data;
b. to restrict or object to its processing;
c. to tell Us that you do not wish to receive marketing information; and
d. (in some circumstances) to require certain of your Personal Data to be transferred to you or a third party, which you can exercise by contacting Us at the details set out at the beginning of this Notice.

To the extent Our processing of your Personal Data is based on your consent, you also have the right to withdraw your consent, without affecting the lawfulness of Our processing based on your consent before its withdrawal.

To exercise your rights, you can contact Us as set out in Section 1 above. You can also lodge a complaint about Our processing of your Personal Data with a data protection authority.

A list and contact details of local data protection authorities is available here.

Version 2.0 – December 2018 

Additional Information

We invite you to get to know Deutsche Börse Venture Network

Are you interested and would you like to learn more or register?

Then contact us:

Deutsche Börse Cash Market

Deutsche Börse AG

60485 Frankfurt am Main

Germany