Overview
Operating Entities
Privacy Notices
STOXX Privacy Notice
DAX Privacy Notice
Disclaimers & Conditions of Use
STOXX Conditions of Use
DAX Conditions of Use
DAX Disclaimer
Imprint
Under this privacy notice (hereinafter the “Notice”), ISS STOXX Index GmbH (hereinafter “We” or “Us”) informs you how We process your personal data. Your personal data means any information relating to you (hereinafter the “Personal Data”), such as name or contact details.
1. Controller
ISS STOXX Index GmbH
Mergenthalerallee 73-75
65760 Eschborn
Germany
dax-indices.com
For all enquiries related to data protection and privacy, please contact Us as follows:
Data Protection
ISS STOXX Index GmbH
Mergenthalerallee 73-75
65760 Eschborn
Germany
E-Mail: dataprotectionofficer@issgovernance.com
2. Purpose, Categories of Personal Data, Legal Basis and Retention
2.1 Categories of your Personal Data and purposes of Our processing
2.1.1 As a rule, We collect your personal data directly from you. However, we may obtain your personal data from third parties (for example cooperation partners or other members of the Deutsche Börse Group).
2.1.2 When you use our website (www.dax-indices.com and sub-sites; the “Website”), We will automatically log information from the browser used to access the Website, for example your IP address, session durations, the pages that are visited from that address, and the website from where you visit the Website, if your computer is set to allow that type of collection. We may also collect device-specific information, such as your hardware model and operating system. We use this information to evaluate interest in our Website and to perform other market research activities, such as surveying browsing habits on our Website. We do not use such information to identify the user who is accessing the Website. Further information is provided below in the “Use of Web Analytics Services” section.
2.1.3 We will collect Personal Data when you register with Us, when you later log on to our Website and when you contact Us through email or otherwise. When you register with Us using your LinkedIn or similar accounts, We will collect and store certain information from your account, such as your name(s), address and email address, but We will never access your contact list, post on your behalf, or keep your LinkedIn credentials on record after the registration is completed.
2.1.4 We process Personal Data when you contact Us or when We contact you, for example when you write or call Us. We usually require only limited information for this purpose such as your name and contact data and the content and time of the relevant messages. We use this information to provide you with information, process your request and communicate with you..
2.1.5 We work with various companies, for example with suppliers, service purchasers, other partners and service providers. These include our customers and business partners, and IT service providers that we use for hosting, data processing, service and data distribution and other services. We process Personal Data about employees and other persons who work with these partners and providers, for example their name, function and title or information about the communication with these persons. We collect this information either from these persons directly or from the partners and use it and may share it with these partners to carry out our business with them and to improve customer relations.
2.1.6 We process Personal Data for our internal and group-internal administration, for example managing our IT, for accounting and archiving purposes and generally for our internal processes, and We may process Personal Data in relation with sales and purchases of assets including shares and receivables, and similar transactions.
2.1.7 We process Personal Data in order to protect our rights, for example to establish, exercise or defend legal claims in and out of court and before local and foreign authorities and courts. We also process Personal Data to comply with legal requirements, including for example by operating a complaint reporting system, by conducting internal investigations or by disclosing documents to an authority or court if We have good reason or are under a legal obligation to do so.
For additional information about our processing of Personal Data, please see your or your employer’s agreement with ISS STOXX Index GmbH or additional privacy notices provided to you separately.
2.2 Legal basis for Our processing of your Personal Data
Our processing of your Personal Data is allowed by law. The legal basis is usually that our processing:
2.2.1 is based on consent, should We ask for consent specifically;
2.2.2 is necessary for compliance with a legal obligation;
2.2.3 is necessary for legitimate interests, including ours and those of our affiliates, provided they are not overridden by the interests of the affected data subjects. These interests include detecting and preventing wrongdoings and crimes and carrying out investigations in connection with improper conduct; advertisement and direct marketing activities; customer support and communication; understanding customer behavior, activities, concerns and needs; improving and innovating our products and services; protecting our customers, suppliers, employees and other individuals as well as data, confidential information and assets; maintaining the safety of systems and premises; maintaining, administering and improving business operations including IT systems and our Website; corporate governance and development; and evaluating and consummating business transactions.
2.3 Do you have to provide your Personal Data to Us?
Providing Personal Data to Us is usually not a legal requirement, unless an agreement with Us requires it. However, Personal Data is a requirement to access the protected areas of our Website, to subscribe to a newsletter or to communicate with Us, and the company you work for may require you to provide Us with Personal Data in order for them to proceed with a contract with Us.
2.4 Do We make automated decisions on you?
We do not make any automated decisions solely on automatic processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
2.5 Retention periods
We retain your Personal Data for as long as it is necessary for the respective purpose, it is necessary to carry out our relationship (contract or communication) with you, if we have obtained your consent separately and/or it is required under applicable law.
3. Transfer of Personal Data to Third Parties
We may transfer Personal Data to third party service providers who perform certain business operations on our behalf, for example IT services. We may also transfer your Personal Data to authorities or courts where this is required by applicable law. A transfer of your Personal Data is also permitted if there is a suspicion of a criminal offence, or the abuse of the services offered on Our Website. In this event, We will be entitled to transfer your Personal Data to criminal prosecution authorities.
We may share your personal data with other controllers for their own purposes, for example with cooperation partners or with authorities, on the basis of your consent, or legitimate interest, or under applicable law. We may also share your personal data with other members of Deutsche Börse Group for legitimate interests, including for internal administrative purposes and direct marketing carried out by Us or other Deutsche Börse Group members.
The recipients of your Personal Data may be located abroad including in countries whose laws do not protect your Personal Data to the same extent as the laws where you reside. In this case we take appropriate measures to ensure the protection of your Personal Data, for example by entering into standard data protection clauses that are approved, issued or recognised by the European Commission and/or the Swiss Federal Data Protection and Information Commissioner. Please contact Us if you would like to obtain a copy of our data transfer agreements applicable to your Personal Data.
4. Advertising
The advertising published on our Website may be based on cookies placed on your terminal device, in order to adjust advertising for products and services based on your individual interests. These cookies collect data on the utilization of the Websites in anonymized form and do not permit profiling.
You can inactivate the cookie option in your browser. Please find information on how to change your browser here: http://cookiepedia.co.uk/how-to-manage-cookies. However, rejecting or deactivating cookies may imply that you are not able to use all functions of the Website.
5. Use of Analytics Services
Our Website uses Google Analytics , a web-based analytics tool that tracks and reports on the manner in which the Website is used to help Us to improve it. Google Analytics does this by placing cookies on your device. The information that the cookies collect, such as the number of visitors to the Website, the pages visited and the length of time spent on the Website, is aggregated and therefore anonymous. Google’s ability to use and share information collected by Google Analytics about your visits to this Website is restricted by the Google Analytics Terms of Use (https://www.google.com/analytics/terms/) and the Google Privacy Policy (https://policies.google.com/privacy). Please also see “Advertising” above.
We also use Adobe Analytics, another analytics tool with tracking and reporting facilities similar to Google Analytics. Further information about Adobe Analytics, links to Adobe Analytics’ Privacy Policy and an opt-out tool for Adobe Analytics can be found in the Adobe Privacy Center (http://www.adobe.com/privacy/analytics.html).
6. Your Rights
Under applicable data protection laws, you have rights of access to, rectification of, and/or erasure of your Personal Data; to restrict or object to its processing; to tell Us that you do not wish to receive marketing information; and (in some circumstances) to require certain of your Personal Data to be transferred to you or a third party, which you can exercise by contacting Us at the details set out at the beginning of this Notice.
To the extent Our processing of your Personal Data is based on your consent, you also have the right to withdraw your consent, without affecting the lawfulness of Our processing based on your consent before its withdrawal.
To exercise your rights, you can contact Us as set out in Section 1 above. You can also lodge a complaint about Our processing of your Personal Data with a data protection authority (responsible authority: Landesbeauftragte für Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1,
65189 Wiesbaden, poststelle@datenschutz.hessen.de).
This Notice was updated on April 24, 2024.