Source: https://1stmarkets.de/en/privacy
Timestamp: 2019-04-18 18:19:51+00:00

Document:
By means of this data protection declaration we would like to inform the public about the type, scope and purpose of the personal data collected, used and processed by us. Furthermore, data subjects will be informed of their rights by means of this data protection declaration. 1stmarkets GmbH as operator of these pages takes the protection of your personal data very seriously. We always treat personal data, such as the name, address, email or telephone number of a natural person ('data subject'), confidentially and in accordance with the statutory data protection laws, in particular the European General Data Protection Regulation (GDPR), the new German Federal Data Protection Act (BDSG-neu), the German Telemediengesetz (TMG) and the German data protection provisions of the Telekommunikationsgesetz (TKG).
The use of our website is in general possible without providing personal data. Should personal data such as name, address, telephone number or email be collected on our pages, this is always done, as far as possible, for a specific purpose and on a optional basis. 1stmarkets GmbH, as the responsible for the processing, has implemented technical and organisational measures to ensure a complete protection of the personal data collected and processed through this website. Nevertheless, Internet-based data transmissions can have security gaps (e.g. email communication), so that absolute protection cannot be guaranteed. For this reason, every person concerned is also free to transmit personal data to us by alternative means, e.g. by telephone, if this is required.
This data protection declaration refers to terms used by the European legislator for directives and regulations when adopting the General Data Protection Regulation (GDPR). Our data protection declaration should be easy to read and understand both for the public and for our customers and business partners. To ensure this, we would like to explain these terms.
‘Data subject’ is any identified or identifiable natural person whose personal data are processed by the controller.
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a General Data Protection Regulation (GDPR) serves as the legal basis. In the processing of personal data required for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis. In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6 para. 1 lit. d GDPR serves as the legal basis. If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.
In questions regarding data protection, please contact the managing director.
If, in the course of our processing, we disclose data to other persons and companies (contracted processors or third parties), transfer them to them or otherwise grant them access to the data, this shall only take place on the basis of a legal permit. For example, in accordance with Art. 6 para. 1 lit. b GDPR, the transmission of data to a payment service provider which is necessary for the fulfilment of the contract. You have consented to the transmission of the data, a legal obligation to do so or it is necessary on the basis of our legitimate interests (e.g. when using agents or hosters) to carry out the processing. If we delegate the processing of data to third parties, this is done on the basis of Art. 28 GDPR within the framework of a so-called order processing contract.
According to Art. 32 GDPR we protect access to our pages by a secure transport encryption via HTTPS with Perfect Forward Secrecy and the current encryption protocol TLS 1.2. In this context we would like to remind you to keep your internet browser always up to date to ensure a secure data communication.
On the websites of 1stmarkets GmbH, a series of general data and information is recorded each time a person or an automated system accesses the website. This general data and information is stored in the log files of the server.
(h) any other data and information that may serve security purposes in the event of attacks on the IT systems we use.
(4) to provide law enforcement authorities with the information necessary for law enforcement in the event of a cyber attack.
These anonymously collected data and information are therefore evaluated by 1stmarkets GmbH statistically and with the aim of increasing data protection and data security in order to ensure an optimal level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.
Required fields (marked with * above) are only your name, the email address to contact you and the message describing your request. This allows us to contact you with your name via email. If you wish to be contacted by telephone, you can also enter your telephone number. Your consent is obtained for the processing of the data within the scope of the sending process and reference is made to this data privacy statement. Alternatively, you can contact us via the email address provided. In this case, the user's personal data transmitted by email will be stored. In this context, the data will not be passed on to third parties. The data will only be used to process your request.
The legal basis for the processing of data is Art. 6 para. 1 lit. a GDPR if the user has given his consent. The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR. If the email contact aims at the conclusion of a contract, then additional legal basis for the processing is Art. 6 exp. 1 lit. b GDPR.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those that were sent by email, this is the case when the respective conversation with the user is finished. The conversation is terminated when it can be assumed from the circumstances that the facts in question have been finally clarified.
We have deliberately decided against the use of certain web analysis services, mainly for data protection reasons. This enables us to ensure that no personal data (e.g. IP addresses) collected on our pages is transferred to countries outside the European Union and the European Economic Area EEA.
As a security cautious company, we refrain from automatic decision making or profiling in accordance with Art. 22 para. 1 and para. 4 GDPR.
To fully comply with our information obligations, we would like to refer you to https://gdpr-info.eu/chapter-3/ where you will find a detailed description of the rights of data subjects listed above. If you wish to exercise your rights, please send an email to 'dataprivacy[at]1stmarkets[dot]com' or send a letter to the person responsible for data privacy named in section 4. In addition, you have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 para. 1 GDPR. For further information, please contact your local supervisory authority.
We reserve the right to modify this data protection declaration at any time to reflect the current legal situation and any changes to our online services. Therefore, please check the currently valid data protection declaration every time you visit our pages.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 32
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 77