Privacy Policy

With the following information, we provide you with an overview of the processing of your personal data by us and your rights under data protection law.

1. Who is responsible for data processing and whom can I contact?

The responsible entity is:

Deutsche Warenbörsen GmbH
Böblingerstr. 245
70199 Stuttgart
 
Phone: +49 711 / 252 79 500
 

Web: www.deutsche-warenboersen.de 
Email: kroeger@deutsche-warenboersen.de

2. Who is this privacy policy applicable to?

This privacy policy pertains to the visitors of our website, particularly to interested parties as well as individuals who wish to use our offerings or obtain information about DW Deutsche Warenbörsen GmbH and the 65th European Commodities Exchange 2025 in Berlin, as well as serving as initial information for all individuals whose data we have researched from publicly available sources or obtained through business cards.

3. What data do we use?

3.1 Visiting our website

3.1.1 Log files

Each time our website is accessed, our system automatically collects data and information from the computer system of the requesting device. In order for the pages to be displayed in your browser, the IP address of the device you are using must be processed. Additionally, further information about the browser on your device is gathered.

We are legally obligated to ensure the confidentiality and integrity of the personal data processed by our IT systems.

For this purpose, the following data is logged:

IP address of the requesting device

Operating system of the requesting device

Browser version of the requesting device

Name of the retrieved file

Date and time of the retrieval

Amount of data transmitted

Referring URL

This data is also used to troubleshoot any errors on the website.

Our website is hosted by a service provider within the European Economic Area. A data processing agreement in accordance with Article 28 of the GDPR is in place.

The legal basis for this data processing is our legitimate interest according to Article 6(1)(f) of the GDPR. Our legitimate interest is the operation of this website and the implementation of the protection goals of confidentiality, integrity, and availability of data.

3.1.2. Contact Initiation

If you get in touch with us via email or through the contact forms to request information, the information you provide will be stored for the purpose of processing your request. The details requested in the contact form on the website are necessary for us to process your inquiry, address you correctly, and send you a response.

3.2 Newsletter

3.2.1 Signing up to the Newsletter

If you would like to receive our newsletters and informational letters, we require an email address from you, as well as information that allows us to verify that you are the owner of the provided email address and consent to receive the newsletters. No additional data will be collected, or only on a voluntary basis. We will use this data exclusively for sending the requested information and will not share it with third parties.

The processing of the data entered in the info distribution registration form is based solely on your consent (Article 6(1)(a) of the GDPR). You may revoke your consent for the storage of your data, email address, and its use for sending newsletters at any time via email. The lawfulness of data processing operations that have already taken place remains unaffected by the revocation.

The data you provide for the purpose of receiving info distribution from us will be stored until you unsubscribe from the distribution list and will be deleted after you cancel the newsletters. Data stored for other purposes (e.g., email addresses for the members' hub) will not be affected by this.

3.2.2 Analysis of the Newsletter

Our newsletters may involve a statistical analysis of usage data. For this purpose, we may track both the openings of the email and the internal clicks. This information is used to measure and optimise the success of our newsletter campaigns by making the content of the newsletters more relevant to our target audience.

The legal basis for this data processing is our legitimate interest according to Article 6(1)(f) of the GDPR. Our legitimate interest lies in evaluating and optimising communication with customers and interested parties.

3.2.3 Newsletter Service Provider

We use an external service provider as a data processor for sending and for the analysis of our newsletter based on a data processing agreement in accordance with Article 28 of the GDPR.

3.3 Cookies

This site uses cookies. Cookies are information transmitted from our web server or third-party web servers to your browser, where they are stored for later retrieval. Cookies can consist of small files or other forms of information storage. They store information that relates to the specific device being used. Cookies contain a distinctive character string that allows for the unique identification of the browser when revisiting the website. A cookie also includes information about its origin and the storage duration. However, this does not mean that we gain direct knowledge of your identity.

When you visit our website, some cookies are set that are essential for the operation of the site. These essential cookies may include those necessary for displaying the website with a content management system (e.g., TYPO3), recognising language settings, or documenting whether you consented to the setting of additional (non-essential) cookies or declined them.

The legal basis for processing personal data using essential cookies is our legitimate interest in accordance with Article 6(1)(f) of the GDPR. Our predominant legitimate interest is the operation of our website.

We also use non-essential cookies to gather additional information about the interests of visitors to our websites or their usage behaviour, in order to analyse and optimise our website and overall customer interactions based on this data.

The legal basis for processing personal data using such non-essential cookies is your explicit consent, which we request when you visit our website before setting non-essential cookies.

3.4 Google Analytics

We use the web analysis service Google Analytics with IP anonymisation. Google Analytics is a web analysis service provided by Google Ireland Limited. Within the framework of Google Analytics, cookies are set.

As part of the IP anonymisation process, the collected IP addresses of users are shortened by Google within the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address sent to Google in the USA, where it is then shortened. The transmitted IP addresses are not merged with other data from Google.

You can prevent the storage of cookies by adjusting the settings of your browser. Additionally, you can prevent the collection of data generated by the cookie and related to your use of the online services by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link, which informs Google Analytics via JavaScript that no data and information about visits to websites should be transmitted to Google Analytics:

http://tools.google.com/dlpage/gaoptout?hl=de

When using Google Analytics, there may be a transfer of personal data to a third country outside the EU without an adequate level of data protection. There are appropriate safeguards for data transfer in accordance with Article 46 of the GDPR. We are happy to provide proof of the appropriate safeguards (standard contractual clauses) upon request. Please contact us using the contact details provided above.

3.5 ReCAPTCHA

We use the reCAPTCHA service from Google Ireland Limited. This service is used to distinguish whether the input in a form is made by a natural person or abusively by automated processing. As part of reCAPTCHA, your IP address and other data required by Google for the reCAPTCHA service are transmitted to Google. For more information on Google Inc.'s privacy policies, please visit https://www.google.com/intl/de/policies/privacy/.

The legal basis for this data processing when using reCAPTCHA is Article 6(1)(f) of the GDPR. Our legitimate interest is the security of our website and protection against spam.

When using reCAPTCHA, there may be a transfer of personal data to a third country outside the EU without an adequate level of data protection. There are appropriate safeguards for data transfer in accordance with Article 46 of the GDPR. We are happy to provide proof of the appropriate safeguards (standard contractual clauses) upon request. Please contact us using the contact details provided above.

3.5 Registration for the Event

If you register as a participant for the 65th European Commodities Exchange through our website, our external service provider processes your personal data as a data processor for the organiser as part of the registration.

3.5.1 Registration for the Event

When you register for participation in the 65th European Commodities Exchange, the organiser processes the data you provide during registration primarily to enable your participation in the event, specifically to send you a registration confirmation, for identification at the event entrance if necessary, and to process payments for paid events if applicable.

The legal basis for this is Article 6(1)(b) of the GDPR, as processing your data is necessary for the fulfilment of the contract regarding your participation in the event.

If the organiser collects additional data that is not strictly necessary for fulfilling the contract with you, this data collection aims to optimise the event or your event experience, for example, to adapt and improve the event according to the interests of the participants and the target audience, as well as for the preparation, evaluation, and analysis of the event.

The legal basis for this processing is Article 6(1)(f) of the GDPR, which represents the organiser's legitimate interest in optimising, evaluating, and analysing the event.

If you also provide your explicit consent for the processing of certain data for specific purposes during the registration process, the legal basis for this processing is your revocable consent in accordance with Article 6(1)(a) of the GDPR.

The organiser uses doo as a data processor for registration for the 65th European Commodities Exchange based on a data processing agreement in accordance with Article 28 of the GDPR.

The following explains which data is processed during registration for an event and for what purposes.

3.5.2 Payment Information

If you order paid tickets for the event, your data and payment information will be processed for payment processing either by NovalNet AG in Germany as the payment service provider or by a payment service provider selected by the organiser. The payment service provider is responsible for this payment data and payment information.

Detailed information on data processing and data protection at NovalNet AG can be found here:

https://www.novalnet.com/privacy?auto_toggle=true

3.5.3 Participation at the 65th European Commodities Exchange

During participation in the event, data will be collected and processed. At the entry control, the data stored on the ticket related to the ticket holder will be collected and processed. Additionally, data regarding the time of entry and, if applicable, the time of exit from the event may also be stored.

The legal basis for this is Article 6(1)(b) of the GDPR, as processing your data is necessary for the fulfilment of the contract regarding your participation in the event.

Doo is used by the organiser as a data processor for conducting entry control in accordance with Article 28 of the GDPR.

3.5.4 Event Photography

Photo and video recordings may be captured during the event. These photos and videos may show and identify participants of the event. They may be used for public relations and documentation of the event. The publication of these photos and videos can occur both offline (print) and online, particularly on the organiser's website and the organiser's pages on various social media platforms.

The legal basis for this processing is Article 6(1)(f) of the GDPR, representing the organiser's legitimate interest in documenting the event and using photos and videos from the event for public relations purposes.

If you have consented to the creation and publication of photos and videos, the legal basis for this processing is your revocable consent in accordance with Article 6(1)(a) of the GDPR.

4. Purpose and Legal Basis for Data Use

We process your personal data in accordance with the provisions of the General Data Protection Regulation (EU GDPR) and the Federal Data Protection Act (BDSG). Please also refer to our information about your right to object under Article 21 of the EU GDPR.

a) To Fulfil Contractual Obligations (Art. 6(1)(b) EU GDPR)

The processing of personal data is carried out to implement our services as well as to conduct pre-contractual measures that take place at your request.

Participation in our events

Information about our events

b) Based on Your Consent (Art. 6(1)(a) EU GDPR)

Insofar as you have granted us consent to process personal data for specific purposes (e.g., participation in one of our events or subscription to a newsletter), the legality of this processing is based on your consent. Consent may be revoked at any time. Please note that the revocation takes effect only for the future. Processing that occurred before the revocation is not affected by it.

c) Within the Framework of Balancing Interests (Art. 6(1)(f) EU GDPR)

As necessary, we process your data beyond the actual fulfilment of the contract to safeguard our legitimate interests or those of third parties.

Responding to your inquiry

Enforcement of legal claims and defence in legal disputes

Ensuring IT security

5. Integration of Third-Party Services and Content

Our offerings sometimes include content, services, and features from other providers. This includes, for example, maps provided by Google Maps, videos from YouTube, as well as graphics and images from other websites. To access and display this data in the user's browser, the transmission of the IP address is essential. The providers (hereinafter referred to as ‘third-party providers‘) therefore receive the IP address of the respective user. While we strive to use only third-party providers that require the IP address solely to deliver content, we have no control over whether the IP address may be stored. In such cases, this process serves, among other things, statistical purposes. If we become aware that the IP address is being stored, we will inform our users.

6. Who can access my data?

At DW Deutsche Warenbörsen GmbH, access to your data is granted to those parties that require it to fulfill our contractual and legal obligations or within the framework of balancing interests. For the purpose of responding to inquiries, it may be necessary to transmit this information to third parties. Service providers and agents engaged by us may also receive data for these purposes, provided they maintain confidentiality and adhere to our data protection instructions. Disclosure to third parties occurs exclusively in accordance with the provisions of the EU GDPR and the Federal Data Protection Act (BDSG).

7. Disclosure for the Order of Publications/Correspondence of the Arbitration Court

The personal data we collect is shared with the delivery company entrusted with the shipment (e.g., DHL).

8. Is data being transmitted to a third country?

Generally, there is no transfer of data to countries outside the EU or the EEA (so-called third countries).

9. How long will my data be stored?

We process and store your personal data as long as it is necessary to fulfil our contractual and legal obligations. Once the data is no longer needed for these purposes, it is regularly deleted, unless its temporary further processing is required to comply with commercial and tax retention periods, such as those stipulated in the Commercial Code and the Fiscal Code. The prescribed retention periods range from six to ten years.

10. Data Protection Rights

You have the right to access under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object under Article 21 GDPR, and the right to data portability under Article 20 GDPR. Additionally, you have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR in conjunction with § 19 BDSG).

A list of supervisory authorities and their contact details can be found at the following link:

www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html You can revoke your consent to the processing of personal data at any time. Please note that the revocation only takes effect for the future. Processing that occurred before the revocation is not affected. Please also refer to our information about your right to object under Article 21 GDPR.

To exercise your rights, please use the contact information provided above.

11. Obligation to Provide Data

In the context of our business relationship or the ordering of services, you must provide the personal data that is necessary for the execution of the business relationship or the provision of a service, as well as for fulfilling the associated contractual obligations or that we are legally required to collect. Without this data, we generally must refuse to conclude the contract or cannot execute an existing contract, and may therefore need to terminate it.

12. Information About Your Right to Object Under Article 21 GDPR

Right to Object on a Case-by-Case Basis
You have the right to object to the processing of your personal data for reasons arising from your particular situation. The requirement for this is that the data processing is carried out in the public interest or based on a balancing of interests. In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if your personal data is necessary for the establishment, exercise, or defence of legal claims.

13. Status and Update of this Privacy Policy

This privacy policy is current as of September 4, 2024. We reserve the right to update the privacy policy in due course to improve data protection and/or to adapt it to changes in regulatory practices or case law.