Privacy Policy

• General information

• This privacy policy contains detailed information about what happens to your personal data when you visit our website https://eiqf.de/. Personal data is any data that can be used to identify you personally. We strictly comply with the statutory provisions when processing your data, in particular the General Data Protection Regulation ("GDPR"), and place great importance on ensuring that your visit to our website is completely secure.
  

• Controller

• The party responsible under data protection law for the collection and processing of personal data on this website is:
  
  Name: European Institute of Quantitative Finance GmbH & Co. KG
  
  Street, house number: Neckarsteige 6-10
  Postal code, city: D-72622 Nürtingen
  Country: Germany
  Email: info@eiqf.de
  Tel.: +49 7022 2011021
  

• Access data (server log files)

• When you access our website, we automatically collect and store access data in so-called server log files, which your browser automatically transmits to us. This includes:
  
  • Browser type and browser version of your PC
    
  • Operating system used by your PC
    
  • Referrer URL (source/reference from which you arrived at our website)
    
  • Hostname of the accessing computer
    
  • Date and time of the server request
    
  • The IP address currently used by your PC (if applicable, in anonymized form)
    
• As a rule, we are not able to establish a personal reference, nor is this intended. Such data is processed in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interest in improving the stability and functionality of our website.
  

• Cookies

• To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies. These are small text files that are stored on your device. Cookies cannot run programs or transmit viruses to your computer system.
  
• Cookies that are required to carry out the electronic communication process or to provide certain functions you request are stored on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in storing cookies to provide our services in a technically error-free and optimized manner. Where other cookies (e.g., cookies for analyzing your browsing behavior) are stored, these are addressed separately in this privacy policy.
  
• Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser the next time you visit.
  
• You can configure your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general, and to activate the automatic deletion of cookies when closing the browser. If cookies are disabled, the functionality of this website may be limited.
  

• Web analytics tools and advertising

• 1. Google Analytics
     
     

     Our website uses the web analytics service Google Analytics in the version Google Analytics 4. The provider is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

     Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of our website. In Google Analytics, all data from devices located in the EU (based on geographic location according to the IP address) is collected via domains and servers in the EU before the traffic is forwarded to Analytics servers for processing.

     The legal basis for processing your data is the consent you provide via the cookie consent tool in accordance with Art. 6(1) sentence 1(a) GDPR.

     1. IP anonymization
        
        

        In Google Analytics, the IP anonymization function is automatically activated on the website. This means that your IP address is shortened by Google within EU member states or in other states party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of our website, to compile reports on website activity, and to provide us with other services related to website and internet use. According to Google, IP addresses are not logged or stored in Google Analytics, but are processed only briefly for geo-localization and deleted immediately thereafter. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data.

     2. Data processing agreement
        
        

        We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

     3. Storage period
        
        

        Data stored by Google at the user and event level that is linked to cookies, user identifiers (e.g., User ID) or advertising IDs (e.g., DoubleClick cookies, Android advertising ID) is deleted after 2 months. Details can be found at the following link: https://support.google.com/analytics/answer/7667196?hl=de.

     4. Right of withdrawal
        
        

        Many data processing operations are only possible with your explicit consent. If the processing of your data is based on your consent, you have the right to withdraw consent once given for the processing of data at any time with effect for the future in accordance with Art. 7(3) GDPR by accessing the cookie settings and changing your selection there. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. The storage of data for billing and accounting purposes is not affected by a withdrawal.

     For more information on how Google Analytics handles user data, please see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

     Further information on data protection can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de&gl=de

  2. Google Tag Manager
     
     

     Our website uses Google Tag Manager. The provider is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Tag Manager is a solution that allows marketers to manage website tags via an interface. The tool that implements the tags is a cookie-less domain and does not store any personal data. The tool triggers other tags, which may in turn collect data. Google Tag Manager does not access this data. If deactivation has been carried out at the domain or cookie level, it remains in effect for all tracking tags implemented with Google Tag Manager.

  3. Google Ads and Google conversion tracking
     
     

     Our website uses Google Ads (formerly Google AdWords). Google Ads is an online advertising program provided by Google.

     Google Ads enables us to use advertising materials on external websites to draw attention to our offerings and to determine how successful individual advertising measures are. This helps us to show you advertising that is of interest to you, to make our website more interesting for you, and to achieve a fair calculation of advertising costs.

     As part of Google Ads, we use so-called conversion tracking. The advertising materials are delivered by Google via so-called "ad servers". For this purpose, we use so-called ad server cookies, which allow certain parameters for measuring success to be recorded, such as the display of ads or clicks by users. If you click on an ad placed by Google, a cookie for conversion tracking is set. Cookies are small text files that the internet browser stores on the user's computer. These cookies expire after 30 days and are not used to personally identify users. These cookies enable Google to recognize your web browser. If you visit certain pages of our website while the cookie has not yet expired, Google and we can recognize that you clicked on the specific ad and were redirected to that page.

     Each Google Ads customer receives a different cookie. Cookies therefore cannot be tracked across the websites of Ads customers. The following information is generally stored in the cookie as analysis values: unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), opt-out information (marker indicating that the user no longer wishes to be addressed). The information obtained using the conversion cookie is used to create conversion statistics for Ads customers who have opted for conversion tracking. Ads customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can object to this use by easily disabling the cookie of Google conversion tracking via your internet browser under user settings. You will then not be included in the conversion tracking statistics.

     The aggregation of the collected data in your Google account is carried out exclusively on the basis of your consent, which you can give or withdraw at Google (Art. 6(1)(a) GDPR). For data collection operations that are not merged in your Google account (e.g., because you do not have a Google account or have objected to the merging), data collection is based on Art. 6(1)(f) GDPR. The legitimate interest arises from our interest in the anonymized analysis of visitors to our website for advertising purposes in order to optimize both our web offering and our advertising.

     Further information and the data protection provisions can be found in Google's privacy policy at: https://policies.google.com/technologies/ads?hl=de.

• Social media

• 1. LinkedIn plugin
     
     

     Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA ("LinkedIn").

     To increase the protection of your data when visiting our website, the LinkedIn plugins are not integrated without restriction, but only by using an HTML link (so-called "Shariff" solution by c't). This integration ensures that when you access a page on our website that contains such plugins, no connection to LinkedIn's servers is established yet. Only when you click the LinkedIn button does a new window open in your browser and access the LinkedIn page.

     Information about the purpose and scope of data collection and the further processing and use of the data by LinkedIn, as well as your rights in this regard and settings options to protect your privacy, can be found in LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy.

• Contact form

• If you contact us by email or via a contact form, the transmitted data, including your contact details, will be stored in order to process your request or to be available for follow-up questions. This data will not be passed on without your consent.
  
• The data entered in the contact form is processed exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time. An informal notification by email is sufficient for withdrawal. The lawfulness of the data processing operations carried out up to the time of withdrawal remains unaffected by the withdrawal.
  
• Data transmitted via the contact form will remain with us until you request its deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies. Mandatory statutory provisions—especially retention periods—remain unaffected.
  

• Use and disclosure of data

• We will neither sell nor otherwise market the personal data you provide to us, e.g., by email (e.g., your name and address or your email address), to third parties. Your personal data will be processed only for correspondence with you and only for the purpose for which you provided the data to us. To process payments, we pass your payment data on to the credit institution commissioned with the payment.
  

  
  Data that is automatically collected when you visit our website is used only for the purposes stated above. No other use of the data takes place.

  We assure you that we will not disclose your personal data to third parties, unless we are legally obliged to do so or you have given us your prior consent.

• SSL/TLS encryption

• For security reasons and to protect the transmission of confidential content, such as inquiries that you send to us as the site operator, our website uses SSL/TLS encryption. You can recognize an encrypted connection by the browser address line changing from "http://" to "https://" and by the lock symbol in your browser line.
  
• If SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.
  

• Storage period

• Personal data that has been communicated to us via our website is stored only for as long as is necessary to fulfill the purpose for which it was entrusted to us. Where commercial and tax retention periods must be observed, the storage period for certain data may be up to 10 years.
  

• Data subject rights

• With regard to your personal data, as a data subject of data processing you have the following rights vis-à-vis the controller in accordance with the statutory provisions:
  
  
  1. Right of withdrawal
     
     

     Many data processing operations are only possible with your explicit consent. If the processing of your data is based on your consent, you have the right to withdraw consent once given for the processing of data at any time with effect for the future in accordance with Art. 7(3) GDPR. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. The storage of data for billing and accounting purposes is not affected by a withdrawal.

  2. Right of access
     
     

     You have the right, in accordance with Art. 15 GDPR, to request confirmation from us as to whether we process personal data concerning you. If such processing is taking place, you have the right to access your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria used to determine the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, the right to lodge a complaint with a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the scope and intended effects of such processing for you, as well as your right to be informed of the safeguards in place under Art. 46 GDPR when your data is transferred to third countries.

  3. Right to rectification
     
     

     You have the right, in accordance with Art. 16 GDPR, to request without undue delay the rectification of inaccurate personal data concerning you and/or the completion of your incomplete data.

  4. Right to erasure
     
     

     You have the right, in accordance with Art. 17 GDPR, to request the erasure of your personal data if one of the following reasons applies:

     1. Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
        
     2. You withdraw your consent on which the processing was based pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing.
        
     3. You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR.
        
     4. The personal data has been processed unlawfully.
        
     5. The erasure of the personal data is necessary for compliance with a legal obligation under Union law or the law of the Member State to which we are subject.
        
     6. The personal data was collected in relation to the offer of information society services pursuant to Art. 8(1) GDPR.
        

     
     However, this right does not apply insofar as the processing is necessary:

     1. to exercise the right to freedom of expression and information;
        
     2. to comply with a legal obligation that requires processing under the law of the Union or the Member State to which we are subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in us;
        
     3. for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) GDPR;
        
     4. for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the data subject right is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
        
     5. to establish, exercise, or defend legal claims.
        

     
     If we have made your personal data public and are obliged to erase it as described above, we will take appropriate measures, including technical measures, taking into account available technology and implementation costs, to inform controllers processing the personal data that you, as the data subject, have requested the erasure of all links to, or copies or replications of, that personal data.

  5. Right to restriction of processing
     
     

     You have the right, in accordance with Art. 18 GDPR, to request the restriction of processing (blocking) of your personal data. To do so, you may contact us at any time at the address provided in the legal notice. The right to restriction of processing applies in the following cases:
     

     1. If you contest the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the verification, you have the right to request the restriction of processing of your personal data.
        
     2. If the processing of your personal data was/is unlawful, you may request restriction of data processing instead of erasure.
        
     3. If we no longer need your personal data, but you need it to establish, exercise, or defend legal claims, you have the right to request restriction of processing of your personal data instead of erasure.
        
     4. If you have lodged an objection pursuant to Art. 21(1) GDPR, a balancing of your interests and ours must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of processing of your personal data.
        

     
     If you have restricted the processing of your personal data, such data—apart from being stored—may be processed only with your consent or to establish, exercise, or defend legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest of the EU or a Member State.

  6. Right to notification
     
     

     If you have asserted your right to rectification, erasure, or restriction of processing against us, we are obliged to notify all recipients to whom your personal data has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right, in accordance with Art. 19 GDPR, to be informed about these recipients upon request.

  7. Right not to be subject to a decision based solely on automated processing—including profiling
     
     

     You have the right, in accordance with Art. 22 GDPR, not to be subject to a decision based solely on automated processing—including profiling—that produces legal effects concerning you or similarly significantly affects you.

     This does not apply if the decision

     1. is necessary for entering into, or performance of, a contract between you and us,
        
     2. is authorized by Union or Member State law to which the controller is subject and that law provides for appropriate measures to safeguard your rights and freedoms and legitimate interests, or
        
     3. is based on your explicit consent.
        

     
     However, decisions in the cases referred to in (a) to (c) may not be based on special categories of personal data pursuant to Art. 9(1) GDPR, unless Art. 9(2)(a) or (g) applies and appropriate measures have been taken to protect your rights and freedoms and legitimate interests.

     In the cases referred to in (a) and (c), we take appropriate measures to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express your point of view, and to contest the decision.

  8. Right to data portability
     
     

     If processing is based on your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, or on a contract pursuant to Art. 6(1)(b) GDPR, and is carried out by automated means, you have the right, in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format and to transmit it to another controller, or to request that it be transmitted to another controller, insofar as this is technically feasible.

  9. Right to object
     
     

     If we base the processing of your personal data on the balancing of interests pursuant to Art. 6(1)(f) GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on this provision. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to establish, exercise, or defend legal claims (objection pursuant to Art. 21(1) GDPR).

     If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection pursuant to Art. 21(2) GDPR).

     In connection with the use of information society services—regardless of Directive 2002/58/EC—you may exercise your right to object by automated means using technical specifications.

  10. Right to lodge a complaint with the competent supervisory authority pursuant to Art. 77 GDPR
      
      

      In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place of the alleged infringement. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedies.

      The supervisory authority responsible for us is:
      

      The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
      
      P.O. Box 10 29 32
      70025 Stuttgart
      
      or:
      
      Lautenschlagerstraße 20
      70173 Stuttgart
      
      Telephone: 07 11/61 55 41-0
      Email: poststelle@lfdi.bwl.de
      Website: https://www.baden-wuerttemberg.datenschutz.de

• Validity and changes to this privacy policy

• This privacy policy is effective as of March 19, 2025. We reserve the right to amend this privacy policy at any time in compliance with the applicable data protection regulations. This may be necessary, for example, to comply with new legal requirements or to reflect changes to our website and/or new services on our website. The version available at the time of your visit shall apply.
  
• If this privacy policy is amended, we intend to publish changes to our privacy policy on this page so that you are fully informed about which personal data we collect, how we process it, and under what circumstances it may be disclosed.