In this privacy policy, Deutsche Börse AG (hereinafter "We" or "Us") informs you how we process your personal data. Your personal data is any information relating to you (hereinafter the "Personal Data"), such as name or contact details.

We pay particular attention to the processing of personal data in accordance with the General Data Protection Regulation EU 2016/679 ("GDPR") and applicable national data protection laws.

1. controller

a. Our identity and contact details
We are:
Deutsche Börse Venture Network
Deutsche Börse AG
60485 Frankfurt am Main
Germany
+49 (0)69 211 11880
venture-network@deutsche-boerse.com

b. Contact details of our data protection officer
Data Protection Officer
Deutsche Börse AG
60485 Frankfurt am Main
Germany
dataprotection@deutsche-boerse.com

2. purpose, categories of personal data, legal basis and retention.

We process the following categories of your personal data for the following purposes:

a. General contact by e-mail, mail or telephone:
Name, address, telephone number or email address if you wish to contact us directly. We collect your personal data when you provide it to us through our contact forms or contact us directly. Then we process the information that you have provided to us in the course of contacting us. This includes in particular names and transmitted contact data (address, telephone number and/or e-mail address), date and reason for contacting us. The personal data you provide will only be used to answer and fulfill your specific requests.

The legal basis is Art. 6 (1) lit. (f) of the GDPR, which allows the processing of personal data for the purpose of our legitimate interest in processing and responding to your request.

Your personal data processed in this regard will be stored by us for as long as necessary to carry out our relationship (communication) with you and this is required in accordance with the applicable legal retention requirements.

b. Newsletter
With your consent, you can subscribe to our Venture Weekly newsletter, which will keep you informed about global announcements on funding rounds at start-ups, M&As, new funds and various current events of Deutsche Börse Venture Network, such as recent reports, case studies and event announcements.

For the registration to our newsletter we use the so-called double opt-in procedure. This means that after registration we send you an e-mail to the specified e-mail address in which we ask you to confirm that you would like to receive the newsletter. In addition, we store your IP addresses and times of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to inform you about a possible misuse of your personal data. The legal basis is Article 6(1)(a) and (c), Article 7(1) of the GDPR.

A prerequisite for sending the newsletter is your e-mail address. The provision of additional, separately marked data is voluntary and will be used to address you personally. After your confirmation, we store your e-mail address in order to send you the newsletter. The legal basis is Art. 6 para. 1 lit. (a) GDPR. Your personal data will be deleted as soon as they are no longer required for the purpose of collection. The user's e-mail address is therefore stored as long as the subscription to the newsletter is active.

You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter with effect for the future, which means that the revocation of consent does not affect the lawfulness of the processing based on the consent before the revocation. You can declare the revocation by clicking on the link contained in each newsletter email or by sending a message to the contact details provided in the imprint. If consent is revoked, we may only continue to process the personal data if there is another legal reason for the processing.

c. Registration as a member of the Deutsche Börse Venture Network in a separate area on our homepage www.venture-network.com and use of your personal data.
Type of user (investor or company), first name, last name, title, address, telephone number, financial information, e-mail address, position and company as well as personal data that you may provide to us in your company presentation if you wish to register as a member of Deutsche Börse Venture Network (hereinafter "DBVN").

Mandatory areas are marked accordingly. All other areas are voluntary. Closed user group is the group of all registered members of DBVN who have successfully registered for the network via www.venture-network.de or the registration link. 

For the registration we use the so-called double opt-in procedure. Your registration is only completed when you complete your registration via the registration link that you have previously received for this purpose and then received an e-mail as confirmation. The above mentioned data is obligatory.

With their registration as a member, they will receive notifications by email about news that will inform you about our services, partner events / trainings, transaction news, DBVN news and surveys.

The legal basis is Art. 6 (1) lit. (b) of the GDPR, which allows the processing of personal data for the purpose of fulfilling a contract.

Your personal data processed in this respect will be stored by us for as long as necessary to perform our relationship (registration as a member of Deutsche Börse Venture Network and use of the Services) with you and as required by applicable legal retention requirements.

d. Use of our products and services
Personal data pursuant to a membership in the Deutsche Börse Venture Network is processed when you request or have received a specific service from us. We collect only the information necessary to provide you with the service you have requested, such as name company, financial information, and contact details.

The legal basis for the processing of your personal data during the provision of our services is therefore Art. 6 (1) lit. (b) of the GDPR, which permits the processing of personal data for the purpose of fulfilling a contract.

The processing of your personal data is necessary for the provision of the following Deutsche Börse Venture Network services:
i. Training, workshops and networking/ investor events
ii. Introduction, i.e. transfer of personal data to parties within our, closed user group Deutsche Börse Venture Network and to third parties if you have expressly consented to the transfer 
iii. Face-to-face meetings, phone calls, surveys, feedback gathering for DBAG employees
iv. Development of new services

Your personal data processed in this regard will be retained by us for as long as necessary to carry out our relationship (registration and membership) with you for the relevant purpose and in accordance with applicable legal retention laws.

When you join the network, we store the contact details you provide (e.g. e-mail address, name and telephone number). In the event of a cooperation potential, we transfer this contact data to business partners within the Deutsche Börse Group who may be of interest to you in order to enable you to network with them for potential future business activities. If you have any objections to such transfer, you may object to this at any time. In this case, please inform us to which group entity the data may not be transferred. The transfer is based on a presumed legitimate interest as a participant of the network according to Art. 6 para. 1 lit. f. GDPR as long as no objection is declared. An overview of the Deutsche Börse Group can be found here. If you are not the contact person, please share this information with him or her and make sure that he or she has no objection to the described use. 

e. General use of our website 
When you use our website, we will automatically log information about the browser used to access the website, such as your IP address, session duration, pages viewed from that address, and the website from which you visit the website. The computer is set to allow this type of collection. We may also collect device-specific information, such as your hardware model and operating system. We use this information to detect and prevent misconduct and crime and to conduct investigations related to improper behavior.

The legal basis for processing your personal data for these purposes is Art. 6 para. 1 lit. (c) of the GDPR in fulfilling our legal obligation to take technical and organizational measures to ensure secure data processing in accordance with Article 32 of the GDPR and Article 6 para. 1. lit. (f) of the GDPR to pursue our legitimate interests in data processing for network and information security.

After the specified period of 30 days, the above data will be deleted. Insofar as data is processed for longer, we will anonymize or delete the data as soon as its storage no longer serves the respective purposes.

3. do you have to provide us with your personal data?

Providing us with your personal data is necessary in order to contact us directly, to receive a newsletter or to conclude a membership in the Deutsche Börse Venture Network. This means that you are required to provide us with your personal data as part of a user registration process when you use the membership option.

4. do we make automated decisions for you?

We do not make automated decisions that have legal or similar effects for you.

5. cookies

When you visit the DBVN website, information is stored on your terminal device in the form of a "cookie". Cookies are small files that are stored on your terminal device and save certain settings and data for exchange with our websites via your browser.

Cookies enable us, for example, to adapt a website to your interests or to save your password so that you do not have to re-enter it each time. As a general rule, we never collect personally identifiable information through cookies unless you have specifically given us permission. 

If you do not want us to recognize your terminal device, configure your Internet browser to delete all cookies from your device, block all cookies, or receive a warning before a cookie is stored. Below you will find brief instructions on how to do this.

Please note that certain features of our website may stop working or not work properly without cookies.

a. Types of cookies
Cookies can be classified into four categories depending on their function and purpose: absolutely necessary cookies, performance cookies, functional cookies and cookies for marketing purposes. 

i. Absolutely necessary cookies
Are needed to allow you to navigate DBVN websites and operate basic website functions such as assigning anonymous session IDs to bundle multiple related queries to a server.

ii. Performance Cookies
Collect information about the use of our websites, including the Internet browsers and operating systems used, the domain name of the website previously visited, the number of visits, the average length of visits, and the pages viewed.
These cookies do not store information that would allow personal identification of the user. The information collected through these cookies is aggregated and therefore anonymous. Performance cookies are used to improve the usability of a website and thus enhance the user experience. You can block the use of such cookies by creating an exclusion cookie (see "Managing Cookies" below).

iii. Functional cookies
Allow a website to store information that the user has already entered (e.g., user ID, language selection, or user location) in order to provide enhanced, personalized features to the user. Functional cookies are also used to enable requested features, such as video playback, and the user's choice to block or disable a particular feature (e.g., web analytics) ("opt-out cookies").

iv. Cookies for marketing purposes
Are used to offer users more relevant content depending on their specific interests. They are also used to limit the display frequency of an ad and to measure and control the effectiveness of advertising campaigns. They record whether or not users have visited a website and what content has been used. This information may also potentially be shared with third parties, such as advertisers. These cookies are often linked to the functions of third party websites. You can block the use of such cookies by creating an opt-out cookie (see "Manage cookies" below).

b. Cookies on the Website 

c. Manage cookies:
Please note: If you are using our website with a mobile device, not all of the above cookies will necessarily be used.
Manage cookies:

Below we have compiled links where you can find detailed information on how to disable cookies in popular browsers:

• Mozilla Firefox 
• Internet Explorer
• Google Chrome
• Safari 

6. WebTrekk

In order to improve the quality and to ensure a user-friendly design of our offered services, we make use of “Webtrekk” from the company Webtrekk GmbH. “Webtrekk” is a statistics programme, through which the company Webtrekk GmbH records the use of our App by users on an anonymized basis. Webtrekk GmbH acts as our commissioned data processing provider. The web analysis service of Webtrekk GmbH has been verified in terms of data safety and is certified by the Technical Control Board (TÜV). The use of “Webtrekk” enables us to receive user behaviour analysis. As a result, we are able to enhance our services and adapt individually adapt them to user requests. We also make use of so-called cookies, i.e. small files stored on your device. The cookies are not assignable to any certain or identifiable person. Profiles capable of being related to an individual person in respect to your user behaviour will not be created. You are entitled to raise an objection to the collection of pseudonymous data by Webtrekk or cookies.

Most of the cookies used are so-called “Session Cookies”, which are stored on a temporary basis, exclusively for the duration of your utilization of the App. On the other hand, we also make use of “Permanent Cookies” to record information about visitors who repeatedly access one of our servers via the App. The content of a permanent cookie is limited to an identification number. Your full IP address or other personal data will not be stored. We and our statistical service provider, Webtrekk GmbH, only store your IP address in a shortened (anonymized) form and use it for identification of the session, so that the collected data will be anonymous and allocation to the identity of an individual user is not possible. The shortened IP address will then be deleted without delay as soon as it is no longer required. You are entitled to raise an objection against the pseudonymous collection and processing of your data through cookies.

Pursuant to § 15 Section 3 of the German Telemedia Act, website visitors are entitled to object to the storage of their visitor data, so that this data will no longer be recorded on this website in the future. If you object to the data storage, a cookie called “webtrekkOptOut” will be placed by the domain webtrekk.net for purposes of exemption from the web controlling process. Technically, the withdrawal notice will remain effective until the aforementioned cookie is deleted.

Object to data storage now 

7. social media plug-ins

We currently use the following social media plug-ins: Twitter. The purpose and scope of the data collection and the further processing and use of the data by the providers on their pages, as well as your rights in this regard and setting options for protecting your privacy, can be found in the privacy notices of the providers. 

The plug-in provider stores the data collected about you as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Via the plug-ins, we offer you the opportunity to interact with the social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 lit. f) GDPR.

The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, your data will be directly assigned to your account with the plug-in provider. We recommend that you log out regularly after using a social network, but especially before activating the button, as this allows you to avoid an assignment to your profile with the plug-in provider.

For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the privacy policy of this provider, which is communicated below. There you will also receive further information on your rights in this regard and setting options for protecting your privacy:

Twitter, Inc, 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy and https://help.twitter.com/de/twitter-for-websites-ads-info-and-privacy.
Twitter has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

8. disclosure of personal data

We will not disclose your personal data to third parties apart from the conditions set out in this Privacy Notice unless such disclosure is permitted by law or you have expressly consented to the disclosure.
In order to provide our contractual services, we use selected service providers (order processors) and vicarious agents in the categories listed below, who may have access to your personal data to the extent necessary and use it to process orders placed by us.

We may transfer your personal data to public authorities if required by applicable law (e.g. Stock Exchange Act or Securities Trading Act). Transfer of your personal data is also permitted if there is a suspicion of a criminal offense or misuse of the services offered on our website. In this case, we are entitled to transfer your personal data to the law enforcement agency.

Otherwise, your personal data will be stored exclusively in our database and on our servers or on those of our contracted processors. We will only share your personal data with other data controllers for their own purposes, e.g. with cooperation or advertising partners, if you have expressly and voluntarily consented to the sharing of your personal data. In this case, We will obtain your consent separately from this Privacy Policy.

The recipients to whom We transfer your personal data are sometimes located in countries whose data protection laws provide a level of protection that is not equivalent to the level of protection provided by the country in which you are (resident) domiciled.

In such cases, we take measures to ensure adequate and appropriate safeguards to protect your personal data elsewhere. 

Under these conditions, recipients of your personal data may be, for example:

• public bodies and institutions in the event of a legal or official obligation (e.g. tax authorities), 
• other companies and service providers (order processors) / vicarious agents in the following areas:
• Printing service providers 
• Deutsche Börse Group entities
• Telecommunications service providers
• Billing service providers 
• financial institutions
• Collection service providers 
• Management consultancies as well as accounting and tax auditing firms
• Newsletter distribution providers
• Cooperating partners of the Deutsche Börse Venture Network

9. Usage of Matomo

Subject to your consent, we use Matomo (formerly known as PIWIK) to analyse your visit on our website. Matomo is an open-source tool for web analytics. During its use, none of your data will be sent to servers outside our control.
Matomo also uses cookies which are stored on the hard drive of your PC and give us no clue whatsoever on your identity.
Provided your consent to the analysis via Matomo, the following data will be processed: 

1. 2 bytes of the IP address of the user's calling system.
2. The accessed web page
3. The web page from which the user has reached the accessed web page (referrer)
4. The subpages that are called up from the called-up website
5. The time spent on the website
6. The frequency with which the web page is accessed
7. The Klicks and Actions during the visit

The software solely runs on our servers, which is the sole place of storage for your personal data. That data will not be transferred.

10. Your rights

Under applicable data protection laws, you have the right to

a. To request access, rectification and / or deletion of your personal data;
b. Restrict or object to processing;
c. inform us that you do not wish to receive marketing information; and
d. (in certain circumstances) request that certain of your personal data be transferred to you or a third party, which you may exercise by contacting us using the contact details at the beginning of this Privacy Policy.

Where our processing of your personal data is based on your consent, you also have the right to withdraw your consent without affecting the lawfulness of our processing based on your consent prior to its withdrawal.

To exercise your rights, you can contact us as described in Section 1 above. You may also lodge a complaint about the processing of your personal data with a data protection authority.