Data protection

Please note that this is just a generated translation. Only the German version is legally effective. It can be viewed on the German version of the website after selecting the language.

The protection of your personal data is very important to us. In the following, we would therefore like to inform you in detail about which personal data are processed when using our websites and offers.

1. General information about the processing of personal data

a) Responsible according to Art. 4 No. 7 General Data Protection Regulation ("GDPR"):

Phoenix Investor Services GmbH

Hainstrasse 24

61476 Kronberg im Taunus

represented by the managing director: Michael Siegle

Email: info@investor-rights.de

b) The data protection officer can be reached at info@investor-rights.de or by post at our address with the addition "z.Hd. of the data protection officer ”.

c) We only process personal data in compliance with the relevant data protection regulations. This means that the data will only be processed if there is legal permission. Ie, especially if the data processing for the provision of our contractual services as well as online services is required or is required by law, there is consent, as well as based on our legitimate interests (ie interest in the analysis, optimization and economic operation and security of our online offer in the sense 6 (1) (f) GDPR, especially when measuring range, creating profiles for advertising and marketing purposes, and collecting access data and using third-party services).

d) The legal basis for consent is Art. 6 Para. 1 lit. a and Art. 7 GDPR, the legal basis for processing to perform our services and carry out contractual measures is Art. 6 Para. 1 lit. b GDPR, the legal basis for processing to fulfill our legal obligations is Art. 6 Para. 1 lit. c GDPR, and the legal basis for processing to protect our legitimate interests is Art. 6 Para. 1 lit. f GDPR.

2. Data processing when visiting our website

a) When using our website for information purposes only, i.e. if you do not make a request, do not log in or otherwise provide us with personal information, we process the data that your browser transmits to our server and which is technically necessary to display our website to you and to ensure stability and security:

• IP address,

• date and time of the request,

• duration of the website visit,

• time zone difference to Greenwich Mean Time (GMT),

• content of the request (specific page),

• access status / HTTP status code,

• amount of data transferred in each case,

Website from which the request comes

• websites that you visit with us

Internet service provider,

• browser type,

Server log files,

• operating system and its interface,

• Language and version of the browser software.

b) The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR, namely our legitimate interest in the proper presentation of the websites accessed.

3. Data processing through the use of cookies

a) In addition to the aforementioned data, cookies are stored on your device when you use our website. Cookies are small text files that are stored on your hard drive and assigned to your browser and provide us with information. They serve to make our website more user-friendly and effective. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR, namely our legitimate interest in improving the user-friendliness of our website and evaluating our online marketing activities.

b) You can configure your browser settings according to your wishes and, for example, refuse to accept cookies. We would like to point out that in this case you may not be able to use all functions of our website.

c) Our websites generate temporary and persistent cookies, the function and scope of which are explained in the following sections.

i. Temporary cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This means that your end device can be recognized when you return to our website.

ii. Persistent cookies are automatically deleted after a predetermined period, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

4. Google Analytics

a) We use Google Analytics, a web analytics service provided by Google LLC, Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics also uses cookies. The information generated by the cookie about your use of our website is usually transferred to a Google server in the USA and stored there.

b) If IP anonymization is activated, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. IP anonymization is active in our web service. On our behalf, Google will use this information to evaluate the use of our website, to compile reports on activities and to provide us with other services related to website and internet use.

c) The IP address transmitted by your browser as part of Google Analytics is - according to Google - not merged with other Google data. In addition, we refer to Google's privacy policy. You can prevent Google from collecting the data generated by the cookie and related to its use (including your IP address) and from processing this data by Google by downloading and installing a browser plug-in.

5. Doubleclick

a) Doubleclick by Google is a service of Google LLC, Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). Doubleclick by Google uses cookies to present advertisements relevant to you. A pseudonymous identification number (ID) is assigned to your browser in order to check which advertisements have been shown in your browser and which advertisements have been called up. The cookies contain no personal information. The use of DoubleClick cookies only allows Google and its partner websites to place ads based on previous visits to our or other websites on the Internet.

b) The information generated by the cookies is transmitted by Google to a server in the USA for evaluation and stored there. Google only transfers the data to third parties on the basis of legal regulations or within the framework of order data processing. Under no circumstances will Google combine your data with other data collected by Google. By using our website, you declare your consent to the processing of data about you by Google and the previously described manner of data processing as well as the stated purpose.

c) You can prevent Google from collecting the data generated by the cookies and relating to your use of the website, as well as from processing this data by Google, by downloading and installing the browser plug-in extension available for the DoubleClick deactivation.

6. Facebook marketing services

a) Within our online offer, based on our legitimate interests in analysis, optimization and economic operation of our online offer and for these purposes, the so-called "Facebook pixel" of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland ("Facebook").

b) With the help of the Facebook pixel, Facebook is able to determine the visitors of our online offer as a target group for the display of advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to only display the Facebook ads we have placed to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products that are based on the visited Websites determined) that we transmit to Facebook (so-called "custom audiences"). With the help of the Facebook pixel, we would also like to ensure that our Facebook ads correspond to the potential interest of the users and are not annoying. With the help of the Facebook pixel, we can also understand the effectiveness of Facebook advertisements for statistical and market research purposes by seeing whether users were forwarded to our website after clicking on a Facebook advertisement (so-called "conversion").

c) The Facebook pixel is directly integrated by Facebook when you visit our website and can save a so-called cookie on your device, ie a small file. If you then log in to Facebook or visit Facebook while logged in, your visit to our online offering will be noted in your profile. The data collected about you is anonymous to us, so it does not provide us with conclusions about the identity of the user. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and can be used by Facebook and for its own market research and advertising purposes. If we should transmit data to Facebook for comparison purposes, it will be encrypted locally on the browser and only then sent to Facebook via a secure https connection. This is done solely for the purpose of comparing it with the data that is equally encrypted by Facebook.

d) The processing of the data by Facebook takes place within the framework of Facebook's data usage guidelines. You can find special information and details about the Facebook Pixel and how it works in the Facebook help section.

e) You can object to the recording by the Facebook pixel and the use of your data to display Facebook ads. To set which types of advertisements are displayed to you within Facebook, you can call up the page set up by Facebook and there follow the instructions on the settings for usage-based advertising.

7. Overheat

a) Within our online offer, based on our legitimate interests in analysis, optimization and economic operation of our online offer and for these purposes, the web analysis tool "Overheat" from the company "overheat UG (limited liability)" with its registered office in Haus Alsbach 2, 51766 Engelskirchen, Germany., Used. Interactions of randomly selected, individual visitors with the website are recorded anonymously. This creates an anonymous log of mouse movements and clicks, for example, with the aim of showing ways to improve the respective website. In addition, information on the operating system, browser, incoming and outgoing references (links), geographical origin, as well as resolution and type of device are evaluated for statistical purposes. This information is not passed on to third parties by overheat.de.

b) If you do not want a recording, you can deactivate it at any time by setting the DoNotTrack header in your browser. You can find information on this in the help section of Overheat.

8. Data processing when contacting us

When you contact us by email, phone or via a contact form, the data you provide (e.g. email address, name, telephone number or content of the request) will be processed by us to answer your questions and / or To process your request. The legal basis is Art. 6 Para. 1 lit. b) GDPR.

9. Data processing for contract processing

a) If you entrust us with the enforcement of your claim, we process your contact and payment data as well as communication, contract and case data (e.g. information on a case object) to fulfill, process and settle the contractual services. All of the aforementioned data are required for the conclusion of the contract, with the exception of the communication and payment data. A contract cannot be concluded without your information. Your data will be passed on to the service providers supporting us (hosters, service providers, operators of communication applications, etc.) for the aforementioned purpose, who we have of course carefully selected and who are bound by our instructions. These are, in particular, technical service providers who support us in the provision of services.

b) As part of our contractual services, we may commission lawyers with the enforcement of your rights and / or claims or, as a messenger, deliver your declaration to lawyers to conclude a legal contract. In this case, we will provide the lawyers with all information about your case to enable enforcement. Subsequently, we will exchange information with the lawyers on the further course of the case so that we can always keep you informed and enable further processing of the case (e.g. returning the disputed claim).

c) The legal basis is the existing contractual relationship (Art. 6 Para. 1 S. 1 lit. b GDPR).

10. Data processing for advertising purposes

If you have given your consent to receive our advertising (newsletter, email, post, etc.), we will inform you via the respective medium about our current offers using your respective data. You can withdraw your consent at any time.

11. Your rights

a) You have the following rights towards us with regard to your personal data:

• Right to information (Art. 15 GDPR),

• Right to correction and deletion (Art. 16 and 17 GDPR),

Right to restriction of processing (Art. 18 GDPR),

• Right to object to processing (Art. 21 GDPR),

• Right to data portability (Art. 20 GDPR).

b) You also have the right to complain to the data protection supervisory authority about the processing of your data by us.

c) We would like to point out that you can revoke any data protection consent you may have given us at any time with future effect. The same applies to consent to advertising. The best way to do this is to send an informal email to info@investorrights.de. The respective revocation can mean that our offers can no longer be made available to you or only to a limited extent.

d) Insofar as we base the processing of your personal data on a balance of interests (Art. 6 Para. 1 S. 1 lit. f GDPR), you can object to the processing. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either discontinue or adjust the data processing or show you our compelling reasons worthy of protection, on the basis of which we will continue the processing.

12. Disclosure of data to third parties and third-party providers

a) We only pass your data on to third parties if this is the case, for example, on the basis of Art. 6 Para. b) GDPR is required for contractual purposes or on the basis of legitimate interests in accordance with Art. 6 Para. 1 lit. f. GDPR can be justified.

b) If we use subcontractors to provide our services, we take appropriate legal as well as technical and organizational measures to ensure the protection of personal data in accordance with the relevant legal requirements.

c) If third-party providers are specified in the context of this data protection declaration and their registered office is located in a third country, it can be assumed that a data transfer will take place to the third-country providers' home countries. We only process your data in a third country if it fulfills our (pre) contractual obligations (Art. 6 Para. 1 b GDPR), based on your consent (Art. 6 Para. 1 a GDPR), due to a legal obligation (Art. 6 Para. 1 lit. c GDPR) or on the basis of our legitimate interests (Art. 6 Para. 1 lit. f GDPR). The same applies to processing by third parties on our behalf, the disclosure of your personal data to third parties and their transmission to third parties.

13. Data deletion

a) The data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory retention requirements. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be kept for commercial or tax reasons.

b) According to legal requirements, storage is carried out for six years in accordance with Section 257 (1) HGB (trading books, inventories, commercial letters, accounting documents, etc.) and for ten years in accordance with Section 147 (1) AO (books, records, management reports, accounting documents, Commercial and business letters, documents relevant for taxation, etc.).

14. Final provisions

a) We use technical and organizational security measures to protect your data, in particular against accidental or intentional manipulation, loss, destruction or against attacks by unauthorized persons. Our security measures are continuously improved in line with technological developments.

b) We will update the data protection declaration from time to time due to the technical progress of our offers. Insofar as the change in the data protection declaration does not affect the use of the existing data, the new data protection declaration applies from the date of its update on our website. The data protection declaration, which relates to the use of the data already collected, will only be changed if it is reasonable for you. In such a case, we will notify you in good time by email, on our website, in our application or in another form. You have the right to object to the new data protection declaration within four weeks of receiving notification. In the event of an objection, we reserve the right to terminate the contractual relationship. If there is no objection within the specified period, the changed data protection declaration is deemed to have been accepted by you. We will inform you of your right to object and the meaning of the period of objection in the notification.