Data Protection Policy

Data protection information

Overview

By publishing this privacy notice, we inform you in accordance with Art. 12 GDPR about how, to what extent and for what purposes we process personal data when you use our website www.pe-magazin.de.

1. Controller and data protection officer

The controller responsible for processing within the meaning of data protection law is P+P Training GmbH, Färbergraben 18, 80331 Munich.

You can contact our data protection officer at c/o P+P Pöllath + Partners, Potsdamer Platz 5, 10785 Berlin, phone +49 (30) 253 53 0, email: DSB(Replace this parenthesis with the @ sign)pplaw.com.

2. Website: Processing of your personal data

2.1. Using the website, access data

In principle, you can use our website for purely informational purposes without disclosing your identity. When you access the individual pages of the website in this sense, this only results in access data being transferred to our provider so that the website can be displayed to you. This is the following data:

Browser type/browser version
Operating system used
Language and version of the browser software
Hostname of the accessing device
IP address
Website from which the request comes
Content of the request (specific page)
Date and time of the server request
Access status / HTTP status code
Referrer URL (website visited before)
Volume of data transferred
Time zone difference from Greenwich Mean Time (GMT).

It is necessary for this data to be processed temporarily in order to make it technically possible for you to visit our website and to deliver the website to your device. The access data is not used to identify individual users and is not combined with other data sources. The data is also stored in log files, in order to ensure the functionality of the website and the security of the information technology systems. The legal basis for the processing is Art. 6(1) Sentence 1(f) GDPR. Our legitimate interests lie in ensuring the functionality, integrity and security of the website. Storing access data in log files, in particular the IP address, for a longer period of time enables us to detect and prevent misuse. This includes, for example, defending against requests that would overload the service as well as against bots. The access data will be erased as soon as it is no longer required for achieving the purpose of its processing. In the case of recording the data to provide the website, this is the case when you end your visit to the website. In principle, data is erased after seven days at the latest; further processing is possible in individual cases. In this case, the IP address is erased or so transformed that an assignment of the retrieving client is no longer possible.

You may object to the processing. Your right of objection exists if you have reasons arising from your particular situation. You may send us your objection using the contact details specified under “Controller and data protection officer” above.

2.2. Cookies

In addition to the aforementioned access data, so-called cookies are stored in the internet browser of the device you use to access the website. These are small text files with a sequence of numbers that are stored locally in the cache of the browser used. Cookies do not become part of your device’s operating system and cannot execute programs. They serve to make our website user-friendly. The use of cookies may be technically necessary or may occur for other purposes (e.g. analysis/evaluation of website use).

2.2.1. Technically necessary cookies

Some elements of our website require that the retrieving browser can be identified even after a page change. This involves processing things like language settings.

The user data collected by technically necessary cookies is not processed to create user profiles. If we use technically non-essential cookies, we inform you about this separately in this privacy notice. We also use session cookies, which store a session ID that can be used to assign various requests from your browser to the shared session. Session cookies are required for using the website. In particular, they enable us to recognise the device used when you return to the website. We use session cookies to make using our website more attractive and effective. Session cookies are erased as soon as you log out or close your browser. The legal basis of this processing is Art. 6(1) Sentence 1(f) GDPR.

You may object to the processing. Your right of objection exists if you have reasons arising from your particular situation. You can also prevent data processing based on cookies as follows: by deactivating or restricting or deleting cookies in your browser settings, or by opening your browser in “private mode”.

2.2.2. Cookie management

Our website uses a consent management tool which asks users for their consent to the use of cookies or similar technologies. A banner displayed on the website gives you the opportunity to refuse your consent to certain features of our website, e.g. the integration of streamed content, statistical analysis and reach measurement. You can use the cookie banner to grant or refuse your consent for all functions or to grant your consent for individual purposes or services. You can change your settings again later on under “Advanced Settings”. The purpose of integrating the cookie banner is to allow users of our website to decide whether to allow cookies and similar technologies, and to offer them the opportunity to change settings that they have already made when they continue to use our website. When the cookie banner is used, personal data as well as information from the device used, such as the IP address, will be processed. The legal basis for this processing is Art. 6(1) Sentence 1(f) GDPR. Our legitimate interests in this processing lie in the storage of users’ settings and preferences with regard to the use of cookies and other features. We will store your data for as long as your user settings are active. A new request for your consent will be made two years after you saved your user settings. Your user settings will then be saved again for the same period.

Your cookie selection history

Datum	Version	Einwilligungen

2.3 Newsletter marketing

You have the possibility to subscribe on the website to our email newsletter, which we use to inform you regularly of current news about M&A and tax, trends in the private equity industry, and our own events. In order to receive the newsletter, you need to give us a valid email address. To send out newsletters, we use the WordPress plug-in, but we do not analyse how users read or otherwise use our newsletters. Information about the WordPress plug-in is available at: https://www.thenewsletterplugin.com/. Registering for our email newsletter takes the form of a so-called double opt-in process. Once you have entered the data marked as mandatory, we will send you an email to the email address you have provided, in which we ask you to expressly confirm your subscription to the newsletter (by clicking on a confirmation link). This is how we ensure that you really want to receive our email newsletter. If no confirmation takes place within 24 hours, we block the information transferred to us and erase it automatically after one month at the latest. After your confirmation, we will process the email address of the recipient concerned for the purpose of sending our email newsletter. The legal basis for the processing is Art. 6(1) Sentence 1(a) GDPR. We erase this data when you unsubscribe from the newsletter. We will process the data until you withdraw your consent by unsubscribing from our newsletter.

You can withdraw your consent to the processing of your email address for receiving the newsletter at any time, either by sending us a message (see the contact details under “Controller and data protection officer”) or by clicking directly on the unsubscribe link in the newsletter. This does not affect the lawfulness of the processing carried out on the basis of the consent prior to the withdrawal.

When you register, we also process your IP address, the time of registration for the newsletter and the time of your confirmation in order to document your newsletter registration and to prevent abuse of your personal data. The legal basis of the processing is Art. 6(1) Sentence 1(f) GDPR. Our legitimate interest in this processing lies in fraud prevention. We erase this data at the latest when the newsletter subscription ends.

We would like to point out that you can object to receiving direct marketing and to the processing of the data for direct marketing purposes at any time without incurring any costs other than the transmission costs according to the basic rates. Here you have a general right of objection without giving reasons (Art. 21(2) GDPR). To do this, click on the unsubscribe link in the relevant email or send us your objection to the contact details provided under “Controller and data protection officer”.

2.4. Contacting our company

When you contact our company by email, we will process the personal data you provide so that we can respond to your request. The legal basis of this processing is Art. 6(1) Sentence 1(f) GDPR and Art. 6(1) Sentence 1(b) GDPR, if the contact is made with the intention of concluding a contract. If the request is aimed at concluding a contract, it is necessary for you to provide your data in order to conclude a contract. If you do not provide your data, it will not be possible to conclude or execute a contract (in the form of establishing contact or processing the request). Processing the personal data serves the sole purpose of processing the contact you make with us. If you contact us by email, this also constitutes the necessary legitimate interest in the processing of the data. The data will not be transmitted to third parties in this context. As soon as processing is no longer necessary, we erase the data generated in this context – usually two years after the end of the communication – or, if statutory retention obligations apply, restrict processing of the data.

Integration of third-party content

2.5. Google Tag Manager

Our website uses Google Tag Manager, which is provided by Google (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001). Google Tag Manager is a solution that allows website tags and other elements to be managed through a single interface.

Firstly, when you visit the website with Google Tag Manager, an HTTP request is sent to Google. As a result, device information and personal data – such as your IP address and information about your browser settings – are transmitted to Google. We use Google Tag Manager to facilitate electronic communications by providing information to third-party providers, including through programming interfaces. Google Tag Manager implements the respective tracking codes of the third-party providers without us having to go to the effort of changing the source code of the website ourselves. Instead, integration is performed by a container that places what is known as placeholder code in the source code. Google Tag Manager also enables the exchange of users’ data parameters in a certain order, in particular by ordering and systematising the data packets. In isolated cases, your data will also be transferred to the US. So-called standard contractual clauses have been concluded with Google to ensure that an appropriate level of data protection is maintained. A copy of the standard contractual clauses is available on request. The legal basis for this processing is Art. 6(1) Sentence 1(f) GDPR. We have legitimate interests in the processing for the purposes of facilitating and carrying out electronic communication by identifying communication endpoints, control options, exchanging data elements in a defined order, and identifying transmission errors. Google Tag Manager does not initiate data storage. For further information about privacy at Google, please refer to: http://www.google.de/intl/en/policies/privacy

You may object to the processing, insofar as processing is based on Art. 6(1) Sentence 1(f) GDPR. Your right of objection exists if you have reasons arising from your particular situation. You can prevent the processing by deleting the browser history and other website data in your browser settings or by opening your browser in “private mode”.

On the other hand, Google Tag Manager integrates tags from third-party providers, such as tracking codes or tracking pixels, on our website. The tool triggers other tags, which in turn record your data; our privacy policy explains this separately in each case. Google Tag Manager itself does not evaluate the device information and personal data of users collected by the tags. Rather, your data is forwarded to the respective third-party service for the purposes specified in our consent management tool. We have configured Google Tag Manager to work with our consent management tool in such a way that triggering certain third-party services in Google Tag Manager depends on the selections you make in our consent management tool, so that only those tags from third-party providers trigger data processing for which you have given consent. The use of Google Tag Manager is subject to your consent for the specific third-party service. The legal basis of this processing is your consent under Art. 6(1) Sentence 1(a) GDPR. Google also processes the data in part in the US. The EU Commission has not issued an adequacy decision for data transfers to the US; the legal basis for transfers to the US is your consent under Art. 49(1) Sentence 1(a) GDPR. The following descriptions of the individual third-party services specify how long your data will be stored in each case. For further information about privacy at Google, please refer to: http://www.google.de/intl/en/policies/privacy

You can withdraw your consent to the processing and transfers to third countries at any time by moving the slider back for the respective third-party provider in the consent tool “Settings”. This does not affect the lawfulness of the processing carried out on the basis of the consent prior to the withdrawal.

2.6. Integration of YouTube videos

Our website uses plug-ins from the video platform “YouTube.de” or “YouTube.com”, a service provided by YouTube LLC (head office at 901 Cherry Avenue, San Bruno, CA 94066, US; hereinafter referred to as YouTube), for which Google (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001) is responsible as the controller under data protection law. The purpose of this is to integrate visual content (“videos”) on the website that we have published on “YouTube.de”/”YouTube.com”. When the streaming feature is used, information is also processed which is stored on your device (e.g. IP address). The videos are embedded in “extended privacy mode”, which means that no data about you as a user will be transferred to YouTube if you do not play the videos. When videos are played on our website, YouTube receives the information that you have retrieved the corresponding page of our website. In addition, some of the data mentioned under “Using the website” is transmitted to Google. This occurs regardless of whether YouTube provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish for this data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and processes it, regardless of whether you have a Google account, for the purposes of advertising, market research and/or the demand-oriented design of its website. The legal basis for the processing is Art. 6(1) Sentence 1(a) GDPR. Google also processes the data in part in the US. The EU Commission has not issued an adequacy decision for data transfers to the US; the legal basis for transfers to the US is your consent under Art. 49(1) Sentence 1(a) GDPR. The following descriptions of the individual third-party services specify how long your data will be stored in each case. For more information about the purpose and scope of data processing by YouTube and how long YouTube stores such data, please refer to the privacy information at: https://policies.google.com/privacy

You can withdraw your consent to the processing at any time, either by sending us a message (see the contact details under “Controller and data protection officer”) or by moving the slider back in the Advanced Settings of the consent tool. This does not affect the lawfulness of the processing carried out on the basis of the consent prior to the withdrawal.

2.7. Integration of COVID-19 Impact Tool

On our website, we use the “COVID-19 Impact Tool” from BRYTER GmbH (Uhlandstrasse 175, 10719 Berlin; hereinafter: “BRYTER”) to provide you, in particular, with helpful information on assistance measures and information on legal innovations in connection with COVID-19.

To use the COVID-19 Impact Tool, you may select between the listed legal fields and topics within the superimposed tool that suit your particular query. By clicking on your chosen topics, you will be given the requested information in automated form. Under the subsequent specific topic, if you have further questions you may address a question to the responsible contact person to receive more information and to contact us directly. In order to forward your question or message to the responsible contact person, the “COVID-19 Impact Tool” processes end device information such as, e.g., your IP address and the time of access, as well as the information you entered and your personal details, particularly contact information such as, e.g., your first and last name, the company name and your e-mail address.

When you contact the responsible contact person, we will process the personal data you give us to answer your query and give you the requested information. To process your query, it is mandatory that you provide us your first and last name and your e-mail address; providing the company name is optional. The legal basis for the processing is Art. 6 (1) sentence 1 lit. f) GDPR and Art. 6 (1) sentence 1 lit. b) GDPR, if the intention of making contact is to conclude an agreement. If the query is made with the intention to conclude an agreement, providing your details is required and obligatory to conclude an agreement. If you do not provide your details, it is not possible to conclude or execute an agreement in the form of contacting us or processing the query. If the processing is based on Art. 6 (1) sentence 1 lit. f), our legitimate interests lie in improving both the quality of our service and our communication with visitors to our website, interested parties and clients.

In addition, we process your data for the purpose of statistical analysis, particularly to analyze the interaction with the “COVID-19 Impact Tool” in the form of anonymized statistics, e.g., on what topics or questions interested our website users to continuously improve our information and specific topics and identify any mistakes by using this information. For this purpose, particularly the data mentioned in the section “Use of the Website” will be processed and processed on the BRYTER servers through embedded programming interfaces; i.e., end device and browser information such as, e.g., your IP address, the time and duration of utilization of the “COVID-19 Impact Tool” and the total number of users. We thereby receive statistical information on how many users have utilized the “COVID-19 Impact Tool” and can then determine how appealing the topics offered within the tool are for our users. The legal basis for processing is Art. 6 (1) sentence 1 lit. f) GDPR. Our legitimate interests in the processing lie in the statistical analysis of the utilization of the tool and improving the quality of service and communication.

We will delete the data accrued in this connection after the processing is no longer necessary – generally two years after termination of the communication – or if necessary, we will restrict processing to comply with the existing legal obligation to retain data. You can find further information on data protection in connection with BRYTER’s “COVID-19 Impact Tool” under https://bryter.io/privacy-policy/

You may file an objection to the processing. Your right to object exists for reasons arising from your particular situation. You may exercise your right to object by contacting those listed in the section “Responsible Provider”.

2.8. Services for statistical, analysis and marketing purposes

2.8.1. Google Analytics

In order to tailor our website perfectly to user interests, we use Google Analytics, a web analytics service from Google (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001). Google Analytics uses cookies (see “Cookies” above), which are stored on your device. Google uses the cookies to process the information generated about the use of our website by your device – e.g. the fact that you have visited a certain page – and processes, among other things, the data mentioned under “Using our website”, in particular your IP address, browser information, the website visited before and the date and time of the server request, for the purpose of statistical analysis of how people use our website. For this purpose, it is also possible to determine whether different devices belong to you or to your household. This website uses Google Analytics with the “anonymizeIp()” extension. This shortens IP addresses before they are processed, in order to make it much more difficult to identify individuals. According to Google, your IP address is shortened beforehand within member states of the European Union. Only in exceptional cases will the full IP address be transferred to a Google server in the US and shortened there. On our behalf, Google will process this information for the purpose of evaluating your use of this website, compiling reports for us on website activity, and – where we point this out separately – providing us with other services relating to website usage. Google will not associate the IP address transmitted by your browser for these purposes with any other data held by Google. The legal basis of this processing is your consent under Art. 6(1) Sentence 1(a) GDPR. Google also processes the data in part in the US. The EU Commission has not issued an adequacy decision for data transfers to the US; the legal basis for transfers to the US is your consent under Art. 49(1) Sentence 1(a) GDPR. Your data processed in connection with Google Analytics will be erased after 14 months at the latest. For further information about privacy at Google, please refer to: http://www.google.de/intl/en/policies/privacy

You can withdraw your consent to the processing and transfers to third countries at any time by moving the slider back in the consent tool “Settings”. This does not affect the lawfulness of the processing carried out on the basis of the consent prior to the withdrawal.

2.8.2. Google Ads Conversion

We use Google Ads, which is a service provided by Google (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001), in order to use ads (formerly known as “Google AdWords”) to draw attention to our attractive services on external websites. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. These ads are delivered by Google via so-called ad servers. For this purpose, we use ad server cookies, which can be used to measure certain parameters for reach measurement, such as the display of ads or clicks by users. If you reach our website via a Google ad, Google Ads stores a cookie on your device. Google uses the cookies to process the information generated by your device about interactions with our ads (retrieval of a particular web page or clicking on an ad), and the data mentioned under “Using our website” – in particular the IP address, browser information, the website visited before and the date and time of the server request – for the purpose of analysing and visualising the reach measurement of our ads. For this purpose, it is also possible to determine whether different devices belong to you or to your household. Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will obtain and process your IP address. We only receive statistical analyses from Google for the purpose of measuring the success of our ads. The legal basis of the processing of your data is your consent pursuant to Art. 6(1) Sentence 1(a) GDPR. Google also processes the data in part in the US. The EU Commission has not issued an adequacy decision for data transfers to the US; the legal basis for transfers to the US is your consent under Art. 49(1) Sentence 1(a) GDPR. The maximum storage period with Google is 24 months. For further information about the protection of your data and how long Google stores your data, please refer to: https://policies.google.com/privacy

3. Your rights

You can request access to the personal data stored by P+P about you at any time, free of charge (Art. 15 GDPR), and – subject to the relevant legal requirements – you can request that such data be rectified (Art. 16 GDPR), erased (Art. 17 GDPR), or that its processing be restricted (Art. 18 GDPR). If P+P processes your data to pursue legitimate interests, you can exercise your right to object (Art. 21 GDPR). Whether and to what extent these rights exist in individual cases and which conditions apply is determined by the law, in particular the GDPR. The GDPR also grants you a right to data portability under certain circumstances (Art. 20 GDPR). If you have given your consent under data protection law, you can withdraw it at any time with effect for the future (Art. 7(3) GDPR). You also have the right to lodge a complaint with the competent data protection supervisory authority (Art. 77 GDPR). However, if you have any questions or complaints about data protection at P+P, we recommend that you first contact our data protection officer. To exercise these rights or if you have any other questions regarding data protection, please contact our company’s data protection officer (see (1) above). To ensure that your request is dealt with quickly, we recommend that you provide us with your last name, first name and, if available, your email address and – if you have received advertising and wish to object – that you send us a copy of the offending promotional material.

4. No automated individual decision-making

We will not use your personal data for automated individual decision-making within the meaning of Art. 22(1) GDPR.

5. Changes to this privacy notice

New legal requirements, business decisions or technical developments may require changes to our privacy notice. The privacy notice will then be adjusted accordingly. The latest version is always available on our website.

Last amended: February 2020