Data Protection Policy

Data protection information

Overview

By publishing this privacy notice, we inform you in accordance with Art. 13 GDPR about how, to what extent and for what purposes we process personal data when you use our website www.pe-magazin.de.

1. Controller

The controller responsible for processing within the meaning of data protection law is P+P Training GmbH, Färbergraben 18, 80331 Munich.

If you have any questions on the subject of data protection, please feel free to contact us using the following contact details: Datenschutz P+P Training GmbH c/o P+P Pöllath + Partners, Potsdamer Platz 5, 10785 Berlin, phone +49 (30) 253 53 0, email: DSB(Replace this parenthesis with the @ sign)pplaw.com.

2. Website: Processing of your personal data

2.1. Using the website, access data

In principle, you can use our website for purely informational purposes without disclosing your identity. When you access the individual pages of the website in this sense, this only results in access data being transferred to our provider so that the website can be displayed to you. This is the following data:

Browser type/browser version
Operating system used
Language and version of the browser software
Hostname of the accessing device
IP address
Website from which the request comes
Content of the request (specific page)
Date and time of the server request
Access status / HTTP status code
Referrer URL (website visited before)
Volume of data transferred
Time zone difference from Greenwich Mean Time (GMT).

It is necessary for this data to be processed temporarily in order to make it technically possible for you to visit our website and to deliver the website to your device. The access data is not used to identify individual users and is not combined with other data sources. The data is also stored in log files, in order to ensure the functionality of the website and the security of the information technology systems. The legal basis for the processing is Art. 6(1) Sentence 1(f) GDPR. Our legitimate interests lie in ensuring the functionality, integrity and security of the website. Storing access data in log files, in particular the IP address, for a longer period of time enables us to detect and prevent misuse. This includes, for example, defending against requests that would overload the service as well as against bots. The access data will be erased as soon as it is no longer required for achieving the purpose of its processing. In the case of recording the data to provide the website, this is the case when you end your visit to the website. In principle, data is erased after seven days at the latest; further processing is possible in individual cases. In this case, the IP address is erased or so transformed that an assignment of the retrieving client is no longer possible.

You may object to the processing. Your right of objection exists if you have reasons arising from your particular situation. You may send us your objection using the contact details specified under “Controller” above.

2.2. Cookies

In addition to the aforementioned access data, so-called cookies are stored in the internet browser of the device you use to access the website. These are small text files with a sequence of numbers that are stored locally in the cache of the browser used. Cookies do not become part of your device’s operating system and cannot execute programs. They serve to make our website user-friendly. The use of cookies may be technically necessary or may occur for other purposes (e.g. analysis/evaluation of website use).

2.2.1. Technically necessary cookies

Some elements of our website require that the retrieving browser can be identified even after a page change. This involves processing things like language settings.

The user data collected by technically necessary cookies is not processed to create user profiles. If we use technically non-essential cookies, we inform you about this separately in this privacy notice. We also use session cookies, which store a session ID that can be used to assign various requests from your browser to the shared session. Session cookies are required for using the website. In particular, they enable us to recognise the device used when you return to the website. We use session cookies to make using our website more attractive and effective. Session cookies are erased as soon as you log out or close your browser. The legal basis for this processing of personal data using cookies is Art. 6 para. 1 sentence 1 lit. f) GDPR.

2.2.2. Cookie management

We use third-party services on our website to understand how visitors interact with our website, to improve the visitor experience accordingly (see section 2.2.2.), to measure the success of our advertisements (see section 2.4.1.) and to show you audiovisual content (see section 2.3.2.). The third-party services use cookies and similar technologies and process your personal data. This also includes the storage and reading of information from your end device. We use a consent management tool from Borlabs GmbH to request consent for the use of these services. You can use a banner displayed on the website to give or refuse your consent for all purposes or third-party services or to give your consent for individual purposes or services. You can also change the settings you have made at a later date by clicking on the ‘Cookie settings’ link in the footer of the website. The purpose of integrating the cookie banner is to allow our website users to decide on the use of cookies and similar technologies and to offer you the option of changing settings already made during continued use of our website. While using the cookie banner, personal data and information about the end devices used, such as the IP address, are processed. The legal basis for the processing is Art. 6 (1) sentence 1 lit. f) GDPR. Our legitimate interests in the processing lie in storing user settings and preferences related to the use of cookies and other functionalities. We store your data for as long as your user settings are active. Two years after the user settings have been made, your consent will be requested again. The user settings made will then be saved again for this period.

Your cookie selection history

Datum	Version	Einwilligungen

2.3. Integration of third-party content

2.3.1. Google Tag Manager

Our website uses Google Tag Manager, which is provided by Google (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001). Google Tag Manager is a solution that allows website tags and other elements to be managed through a single interface.

Firstly, when you visit the website with Google Tag Manager, an HTTP request is sent to Google. As a result, device information and personal data – such as your IP address and information about your browser settings – are transmitted to Google. We use Google Tag Manager to facilitate electronic communications by providing information to third-party providers, including through programming interfaces. Google Tag Manager implements the respective tracking codes of the third-party providers without us having to go to the effort of changing the source code of the website ourselves. Instead, integration is performed by a container that places what is known as placeholder code in the source code. Google Tag Manager also enables the exchange of users’ data parameters in a certain order, in particular by ordering and systematising the data packets. For data transfers to the US, the EU Commission has issued the adequacy decision “EU-U.S. DPF”, under which Google is certified.

The legal basis for this processing is Art. 6(1) Sentence 1(f) GDPR. We have legitimate interests in the processing for the purposes of facilitating and carrying out electronic communication by identifying communication endpoints, control options, exchanging data elements in a defined order, and identifying transmission errors. Google Tag Manager does not initiate data storage. For further information about privacy at Google, please refer to: http://www.google.de/intl/en/policies/privacy

You may object to the processing, insofar as processing is based on Art. 6(1) Sentence 1(f) GDPR. Your right of objection exists if you have reasons arising from your particular situation. You can prevent the processing by deleting the browser history and other website data in your browser settings or by opening your browser in “private mode”.

On the other hand, Google Tag Manager integrates tags from third-party providers, such as tracking codes or tracking pixels, on our website. The tool triggers other tags, which in turn record your data; our privacy policy explains this separately in each case. Google Tag Manager itself does not evaluate the device information and personal data of users collected by the tags. Rather, your data is forwarded to the respective third-party service for the purposes specified in our consent management tool. We have configured Google Tag Manager to work with our consent management tool in such a way that triggering certain third-party services in Google Tag Manager depends on the selections you make in our consent management tool, so that only those tags from third-party providers trigger data processing for which you have given consent. The use of Google Tag Manager is subject to your consent for the specific third-party service. The legal basis of this processing is your consent under Art. 6(1) Sentence 1(a) GDPR. Google also processes the data in part in the US. For data transfers to the US, the EU Commission has issued the adequacy decision “EU-U.S. DPF”, under which Google is certified. The following descriptions of the individual third-party services specify how long your data will be stored in each case. For further information about privacy at Google, please refer to: http://www.google.de/intl/en/policies/privacy

You can withdraw your consent to the processing and transfers to third countries at any time by moving the slider back for the respective third-party provider in the consent tool “Settings”. This does not affect the lawfulness of the processing carried out on the basis of the consent prior to the withdrawal.

2.3.2. Integration of YouTube videos

Our website uses plug-ins from the video platform “YouTube.de” or “YouTube.com”, a service provided by YouTube LLC (head office at 901 Cherry Avenue, San Bruno, CA 94066, US; hereinafter referred to as YouTube), for which Google (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001) is responsible as the controller under data protection law. The purpose of this is to integrate visual content (“videos”) on the website that we have published on “YouTube.de”/”YouTube.com”. When the streaming feature is used, information is also processed which is stored on your device (e.g. IP address). The videos are embedded in “extended privacy mode”, which means that no data about you as a user will be transferred to YouTube if you do not play the videos. When videos are played on our website, YouTube receives the information that you have retrieved the corresponding page of our website. In addition, some of the data mentioned under “Using the website” is transmitted to Google. This occurs regardless of whether YouTube provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish for this data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and processes it, regardless of whether you have a Google account, for the purposes of advertising, market research and/or the demand-oriented design of its website.

The legal basis for the associated end device access and the processing of your personal data is your consent in accordance with Section 25 (1) TDDDG and Art. 6 (1) sentence 1 lit. a) GDPR. In cases in which Google also processes your personal data in the USA, the following applies: Insofar as a decision of the European Commission on the existence of an adequate level of protection (cf. Art. 45 (3) GDPR) in a third country exists, no additional measures are required for such data transfers. If data is transferred to recipients based in the USA, this is done based on the Transatlantic Data Privacy Framework (DPF) of July 10, 2023, provided the recipient has appropriate certification. This is the case for Google and its headquarters in the USA (see https://www.dataprivacyframework.gov/list).

You can withdraw your consent to processing at any time by moving the slider in the ‘Advanced settings’ of the consent tool. This does not affect the lawfulness of the processing carried out based on the consent until the revocation.

2.4. Services for statistical, analysis and marketing purposes

2.4.1. Google Analytics 4

In order to tailor our website perfectly to user interests, we use Google Analytics, a web analytics service provided by Google (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland and Google, LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA; hereinafter: “Google” and “Google Analytics 4”).

“Google Analytics 4” uses so-called “cookies”, which are stored on your device for recognition purposes, as well as similar tracking methods for the recognition of end devices such as tracking pixels, device fingerprinting and programming interfaces (e.g. APIs and SDKs) in order to process information from your device. For this purpose, a randomly generated identification number (cookie ID/device ID) is assigned to your device.

With the help of these technologies, “Google” processes the information generated about the use of our website by your device as well as access data for the purpose of statistical analysis – e.g. call-up of a specific web page, number of unique visitors, entry and exit pages, dwell time, click, swipe and scroll behaviour, activation of buttons, registration for the newsletter, bounce rate and similar user interactions. For this purpose, it can also be determined whether different end devices belong to you or your household. Access data includes in particular the IP address, browser and device information, cookie ID/device ID, the website previously visited and the date and time of the server request.

In “Google Analytics 4” systems, no individual IP addresses are logged or stored. At the moment, the IP address is collected by Google in special local data centres in the EU, your IP address is used to determine location information. Subsequently, the IP address is deleted before the access data is stored in a data centre or on a server for “Google Analytics”. In “Google Analytics 4”, no precise data on the geographical location is provided, but only general location information such as the region and city of the location of the end device, which is derived from the IP address. “Google” will process this information for the purpose of evaluating your use of the website, compiling reports on website activity for us and, where separately indicated, providing us with other services relating to website activity. If you are registered with a Google service, “Google” can assign the website visit to your user account and create and evaluate user profiles across applications.

In addition, a cross-platform analysis of user behaviour is carried out on websites and apps that use “Google Analytics 4” technologies. This makes it possible to record, measure and compare user behaviour in different environments. For example, scroll events of the user are automatically recorded, which should enable a better understanding of the use of websites and apps. For this purpose, different cookie IDs/device IDs are used for different end devices. Subsequently, we are provided with anonymised statistics on the use of the different platforms, compiled according to selected criteria.

With the help of “Google Analytics 4”, target groups are automatically created for certain cookie IDs/device IDs or mobile advertising IDs, which are later used for individualised advertising. Target group criteria that can be considered are, for example: Users who have viewed products but not added them to a shopping cart or added them to a shopping cart but not completed the purchase OR users who have purchased specific items. A target group comprises at least 100 users. With the help of the “Google Ads” tool, interest-based advertisements can then be displayed in search results. Similarly, users of websites can be recognised on other websites within the “Google” advertising network (in Google search, on “YouTube”, so-called “Google Ads” or on other websites) and presented with tailored advertisements based on the defined target group criteria.

The legal basis for the associated end device access and the processing of your personal data is your consent in accordance with Section 25 (1) TDDDG and Art. 6 (1) sentence 1 lit. a) GDPR. Your data in connection with Google Analytics will be deleted after fourteen months at the latest. In exceptional cases in which your data is transferred to the USA, the following applies: Insofar as a decision of the European Commission on the existence of an adequate level of protection (cf. Art. 45 (3) GDPR) in a third country exists, no additional measures are required for such data transfers. If data is transferred to recipients based in the USA, this is done based on the Transatlantic Data Privacy Framework (DPF) of July 10, 2023, provided the recipient has appropriate certification. This is the case for Google and its headquarters in the USA (see https://www.dataprivacyframework.gov/list). Further information on data protection at Google can be found at: http://www.google.de/intl/de/policies/privacy

2.4.2. Google Ads Conversion

We use Google Ads, which is a service provided by Google (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001), in order to use ads (formerly known as “Google AdWords”) to draw attention to our attractive services on external websites. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. These ads are delivered by Google via so-called ad servers. For this purpose, we use ad server cookies, which can be used to measure certain parameters for reach measurement, such as the display of ads or clicks by users. If you reach our website via a Google ad, Google Ads stores a cookie on your device. Google uses the cookies to process the information generated by your device about interactions with our ads (retrieval of a particular web page or clicking on an ad), and the data mentioned under “Using our website” – in particular the IP address, browser information, the website visited before and the date and time of the server request – for the purpose of analysing and visualising the reach measurement of our ads. For this purpose, it is also possible to determine whether different devices belong to you or to your household. Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will obtain and process your IP address. We only receive statistical analyses from Google for the purpose of measuring the success of our ads. The legal basis of the processing of your data is your consent pursuant to Art. 6(1) Sentence 1(a) GDPR.

In cases in which Google processes your data in the USA, the following applies: Insofar as a decision of the European Commission on the existence of an adequate level of protection (cf. Art. 45 (3) GDPR) in a third country exists, no additional measures are required for such data transfers. If data is transferred to recipients based in the USA, this is done based on the Transatlantic Data Privacy Framework (DPF) of July 10, 2023, provided the recipient has appropriate certification. This is the case for Google and its headquarters in the USA (see https://www.dataprivacyframework.gov/list).

The legal basis for the associated end device access and the processing of your personal data is your consent in accordance with Section 25 (1) TDDDG and Art. 6 (1) sentence 1 lit. a) GDPR. The maximum storage period at Google is twenty-four months. Further information on data protection and the storage period at Google can be found at: https://policies.google.com/privacy

2.5. Newsletter marketing

You have the possibility to subscribe on the website to our email newsletter, which we use to inform you regularly of current news about M&A and tax, trends in the private equity industry, and our own events. In order to receive the newsletter, you need to give us a valid email address. To send out newsletters, we use the WordPress plug-in, but we do not analyse how users read or otherwise use our newsletters. Information about the WordPress plug-in is available at: https://www.thenewsletterplugin.com/. Registering for our email newsletter takes the form of a so-called double opt-in process. Once you have entered the data marked as mandatory, we will send you an email to the email address you have provided, in which we ask you to expressly confirm your subscription to the newsletter (by clicking on a confirmation link). This is how we ensure that you really want to receive our email newsletter. If no confirmation takes place within 24 hours, we block the information transferred to us and erase it automatically after one month at the latest. After your confirmation, we will process the email address of the recipient concerned for the purpose of sending our email newsletter. The legal basis for the processing is Art. 6(1) Sentence 1(a) GDPR. We erase this data when you unsubscribe from the newsletter. We will process the data until you withdraw your consent by unsubscribing from our newsletter.

You can withdraw your consent to the processing of your email address for receiving the newsletter at any time, either by sending us a message (see the contact details under “Controller”) or by clicking directly on the unsubscribe link in the newsletter. This does not affect the lawfulness of the processing carried out on the basis of the consent prior to the withdrawal.

When you register, we also process your IP address, the time of registration for the newsletter and the time of your confirmation in order to document your newsletter registration and to prevent abuse of your personal data. The legal basis of the processing is Art. 6(1) Sentence 1(f) GDPR. Our legitimate interest in this processing lies in fraud prevention. We erase this data at the latest when the newsletter subscription ends.

We would like to point out that you can object to receiving direct marketing and to the processing of the data for direct marketing purposes at any time without incurring any costs other than the transmission costs according to the basic rates. Here you have a general right of objection without giving reasons (Art. 21(2) GDPR). To do this, click on the unsubscribe link in the relevant email or send us your objection to the contact details provided under “Controller”.

2.6. Contacting our company

When you contact our company by email, we will process the personal data you provide so that we can respond to your request. The legal basis of this processing is Art. 6(1) Sentence 1(f) GDPR and Art. 6(1) Sentence 1(b) GDPR, if the contact is made with the intention of concluding a contract. If the request is aimed at concluding a contract, it is necessary for you to provide your data in order to conclude a contract. If you do not provide your data, it will not be possible to conclude or execute a contract (in the form of establishing contact or processing the request). Processing the personal data serves the sole purpose of processing the contact you make with us. If you contact us by email, this also constitutes the necessary legitimate interest in the processing of the data. The data will not be transmitted to third parties in this context. As soon as processing is no longer necessary, we erase the data generated in this context – usually two years after the end of the communication – or, if statutory retention obligations apply, restrict processing of the data.

3. Social Media Profiles

3.1 General

We maintain publicly accessible profiles on various social networks (hereinafter collectively: “our profiles”). Your visit to our profiles initiates a variety of data processing operations. Below we provide you with an overview of which of your personal data is collected, used and stored by us when you visit our profiles. You are not obliged to provide us with your personal data. However, this may be necessary for individual functionalities of our profiles in social networks. These functionalities will not be available to you or only to a limited extent if you do not provide us with your personal data.

When you visit our profiles, your personal data is not only collected, used and stored by us, but also by the operators of the respective social network. This also happens if you yourself do not have a profile in the respective social network. The individual data processing operations and their scope differ depending on the operator of the respective social network and they are not necessarily traceable for us. For details on the collection and storage of your personal data as well as on the type, scope and purpose of their use by the operator of the respective social network, please refer to the data protection declarations of the respective operator:

a) LinkedIn

For the privacy policy for the social network LinkedIn, operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, please refert to https://www.linkedin.com/legal/privacy-policy?.

b) YouTube

For the privacy policy for the social network YouTube, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, please refer to https://policies.google.com/privacy.

3.2 Advertising and communication with users

The use of our profiles is for the purpose of the advertisement of our services as well as communication and contact with users.

In the course of using our profiles, we process personal data such as your name, profile picture and information you have provided in the course of the interactive functions (e.g. commenting, sharing and rating). The legal basis for the operation of our profiles and the processing of personal data is Art. 6 para. 1 p. 1 lit. f) GDPR. Our legitimate interest is the advertisement of our services via our profiles and the communication with users.

When visiting our profiles, data may be processed outside the European Union and in particular in the USA. For more information on any data transfer to a third country and the relevant legal basis for this, please refer to the privacy statements of the social networks.

We have no influence on the storage period of your personal data that you have published on our profiles. We store your data until the purpose of the processing has been achieved or we restrict the processing if there are legal retention obligations. For more information on data protection and the storage period, please refer to the privacy statements of the social networks linked above.

3.3 Statistical information and shared responsibility with social networks

The operators of the social networks on which we maintain our profiles provide us with anonymised statistical analyses of the interactions with our profiles. We use this data to improve the user experience on our profiles. Conclusions about individual users and access to individual user profiles by us are not possible. Our legal basis for processing the information from the statistical evaluation is Art. 6 para. 4 GDPR in conjunction with. Art. 6 para. 1 p. 1 lit. f) GDPR. Our legitimate interest in the statistical evaluation lies in the improvement and adaptation of our advertising measures based on the information collected and the possibility to learn more about the interaction of the users on our profiles.

According to the case law of the European Court of Justice, the use of statistical evaluations may under certain circumstances be classified as data processing under the joint responsibility of the operator of the social network and the profile owner. Against this background, we have concluded a Joint Controller Agreement pursuant to Art. 26 GDPR with the following social network operators:

You can view the Joint Responsibility Agreement for LinkedIn Page Insights at https://legal.linkedin.com/pages-joint-controller-addendum.

4. Your rights

You can request access to the personal data stored by P+P about you at any time, free of charge (Art. 15 GDPR), and – subject to the relevant legal requirements – you can request that such data be rectified (Art. 16 GDPR), erased (Art. 17 GDPR), or that its processing be restricted (Art. 18 GDPR). If P+P processes your data to pursue legitimate interests, you can exercise your right to object (Art. 21 GDPR). Whether and to what extent these rights exist in individual cases and which conditions apply is determined by the law, in particular the GDPR. The GDPR also grants you a right to data portability under certain circumstances (Art. 20 GDPR). If you have given your consent under data protection law, you can withdraw it at any time with effect for the future (Art. 7(3) GDPR). You also have the right to lodge a complaint with the competent data protection supervisory authority (Art. 77 GDPR).

5. No automated individual decision-making

We will not use your personal data for automated individual decision-making within the meaning of Art. 22(1) GDPR.

6. Changes to this privacy notice

New legal requirements, business decisions or technical developments may require changes to our privacy notice. The privacy notice will then be adjusted accordingly. The latest version is always available on our website.

Last amended: January 2025