Integritetspolicy

Last updated: August 2026

  1. General Information

The protection of your personal data is important to us.

This Privacy Policy explains how EC European Capital Markets SE (“European Capital”, “EC”, “we”, “us” or “our”) processes personal data when you visit our website european-capital.de, contact us through our website or use services integrated into our website.

Personal data means any information relating to an identified or identifiable natural person.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) and other applicable German and European data protection legislation.

  1. Controller

The controller responsible for the processing of personal data on this website is:

EC European Capital Markets SE

Mr. Daniel Jacob

Emil-Riedel-Str. 21
80538 München
Tyskland

Email: jacob@european-capital.de
Telephone: 0049 160 568 31 91

Further corporate information can be found in our Legal Notice / Imprint.

  1. Hosting by IONOS

Our website is hosted by:

IONOS SE
Elgendorfer Str. 57
56410 Montabaur
Tyskland

When you visit our website, technical information may automatically be processed in order to provide the website securely and reliably.

Depending on the technical configuration, this may include information such as:

  • the website or file requested;
  • referrer URL;
  • browser type and browser version;
  • operating system;
  • device type;
  • date and time of access; and
  • IP address in anonymised form.

According to IONOS, data collected as part of its web hosting services is used in particular to ensure the security, stability and quality of the service.

The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and efficient provision of our website.

Where IONOS processes personal data on our behalf, such processing is carried out on the basis of the applicable data processing arrangements pursuant to Article 28 GDPR.

  1. Contact Forms and Business Enquiries

Our website provides contact forms through which you may contact us.

Depending on the form used, we may collect the following information:

  • first name;
  • last name;
  • company name;
  • city;
  • country;
  • email address; and
  • any other information you voluntarily provide in connection with your enquiry.

We process this information solely for the purpose of receiving, reviewing and responding to your enquiry and, where applicable, establishing or managing a business relationship with you.

Where your enquiry relates to the initiation or performance of a contractual relationship, the legal basis is Article 6(1)(b) GDPR.

For general business enquiries, processing may be based on our legitimate interest in communicating with potential clients, investors, issuers, business partners and other interested parties pursuant to Article 6(1)(f) GDPR.

We do not sell personal data and do not disclose personal data to third parties for their own advertising or marketing purposes.

Personal data may be made available to service providers acting on our behalf where this is necessary for the operation of our website, the provision of our services or the handling of your enquiry and where such processing is permitted by applicable law.

Information submitted through a contact form will be retained only for as long as necessary to process the respective enquiry and any subsequent business relationship, subject to applicable statutory retention requirements.

  1. Google Analytics

Subject to your consent, we use Google Analytics to obtain statistical information about the use of our website and to better understand how visitors interact with our website.

Google Analytics is a web analytics service provided by Google.

Google Analytics may process information relating to your use of our website, which may include, depending on the configuration of the service:

  • pages visited;
  • time and duration of visits;
  • interactions with the website;
  • technical information about your browser and device;
  • approximate geographic information; and
  • online identifiers and related usage information.

Google Analytics is only activated after you have given your consent through our consent management system.

The legal basis for the storage of or access to information on your device is your consent in accordance with the applicable German telecommunications and digital services privacy legislation. The legal basis for the subsequent processing of personal data is Article 6(1)(a) GDPR.

You may refuse consent or withdraw consent previously given at any time through the cookie/privacy settings available on our website.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Where data is transferred to countries outside the European Union or European Economic Area, such transfers are made in accordance with the applicable requirements of Articles 44 et seq. GDPR.

Further information about Google’s processing of personal data can be found in Google’s privacy information.

  1. Google reCAPTCHA v3

We use Google reCAPTCHA v3 in connection with forms on our website to protect our website against automated access, spam, misuse and malicious submissions.

reCAPTCHA analyses certain information and user interactions in order to determine whether an action is likely to have been performed by a human user or by an automated system.

In connection with this analysis, information may be transmitted to Google. Depending on the technical implementation, this may include information such as:

  • IP address;
  • browser and device information;
  • date and time of access;
  • referrer information;
  • user interactions with the website; and
  • technical information required to assess the likelihood of automated activity.

The purpose of this processing is to protect our website, our forms and our IT infrastructure against spam, automated attacks and misuse.

The use of reCAPTCHA and any access to or storage of information on your device will be carried out in accordance with applicable data protection and consent requirements.

Where processing is based on consent, the legal basis is Article 6(1)(a) GDPR.

Where applicable and legally permissible, processing necessary to protect our website and systems against abusive or malicious activity may also be based on our legitimate interests pursuant to Article 6(1)(f) GDPR.

Further information regarding Google’s processing of personal data is available in Google’s privacy information.

  1. Calendly – Scheduling an Initial Briefing

We use Calendly to allow visitors to schedule meetings and initial briefings with us.

Calendly is provided by Calendly LLC, United States.

If you choose to use our Calendly scheduling function, personal data required to arrange the meeting may be processed by Calendly.

Depending on the information you provide, this may include:

  • your name;
  • email address;
  • company information;
  • requested meeting date and time;
  • time zone;
  • information relating to the scheduled meeting; and
  • any additional information you voluntarily provide during the booking process.

We use this information solely for the purpose of arranging, preparing and conducting the requested meeting and managing the related communication.

Where the appointment relates to the initiation of a business relationship, processing is based on Article 6(1)(b) GDPR.

Where consent is required for the loading or operation of Calendly on our website, the relevant processing is based on Article 6(1)(a) GDPR.

Calendly may process and store personal data in the United States. International transfers of personal data are subject to the safeguards provided for under applicable data protection law, including, where applicable, the EU-U.S. Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.

Further information regarding the processing of personal data by Calendly is available in Calendly’s Privacy Notice.

  1. Cookies and Consent Management

Our website uses cookies and similar technologies.

Some technologies are technically necessary for the secure and functional operation of the website. Other technologies, particularly those used for analytics or external services, are only activated after you have provided your consent where consent is legally required.

When you first visit our website, you can make your selection through our cookie consent banner.

You can:

  • accept optional technologies;
  • reject non-essential technologies; or
  • manage your individual preferences.

Google Analytics and other non-essential tracking technologies are not activated before the required consent has been given.

You may change or withdraw your consent at any time with effect for the future through the cookie/privacy settings provided on our website.

Technically necessary technologies may be used without consent where the statutory requirements for doing so are met.

  1. Google Fonts

Our website does not use Google Fonts.

In particular, fonts used on our website are not loaded from Google servers for the purpose of displaying the website.

  1. No Embedded Videos, Maps or Social Media Plugins

At present, our website does not use embedded YouTube or Vimeo videos, Google Maps or social media plugins.

Consequently, no personal data is transferred to such providers merely as a result of displaying these services on our website.

Should we integrate such services in the future, this Privacy Policy will be updated accordingly and, where required, such services will only be activated after obtaining the necessary consent.

  1. Recipients and Service Providers

We use carefully selected service providers where necessary for the operation and security of our website and the provision of individual website functions.

These may include, in particular:

  • hosting and IT service providers;
  • website development and technical maintenance providers;
  • analytics providers;
  • security and anti-spam providers;
  • scheduling providers; and
  • consent management providers.

Where such service providers process personal data on our behalf, we enter into the legally required contractual arrangements where applicable.

We do not sell your personal data.

  1. International Data Transfers

Our website is hosted in Germany.

However, individual services used on our website, in particular services provided by Google and Calendly, may involve the processing of personal data outside the European Union or European Economic Area, including in the United States.

Where personal data is transferred to a country outside the European Union or European Economic Area, we ensure that the applicable requirements of Articles 44 et seq. GDPR are observed.

Depending on the relevant provider and processing activity, transfers may be based on an adequacy decision of the European Commission, including the EU-U.S. Data Privacy Framework where applicable, Standard Contractual Clauses approved by the European Commission or another legally recognised transfer mechanism.

  1. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected.

Personal data may be retained for a longer period where:

  • statutory retention obligations apply;
  • continued storage is necessary for the establishment, exercise or defence of legal claims;
  • an ongoing contractual or business relationship requires continued processing; or
  • another legal basis permits continued storage.

Once the relevant purpose and any mandatory retention periods have expired, the personal data will be deleted or anonymised.

  1. Your Rights Under the GDPR

Subject to the applicable statutory requirements, you have the following rights regarding your personal data:

  • Right of access – Article 15 GDPR;
  • Right to rectification – Article 16 GDPR;
  • Right to erasure – Article 17 GDPR;
  • Right to restriction of processing – Article 18 GDPR;
  • Right to data portability – Article 20 GDPR;
  • Right to object – Article 21 GDPR; and
  • Right to withdraw consent – Article 7(3) GDPR.

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.

Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

  1. Right to Object

Where we process your personal data on the basis of our legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation in accordance with Article 21 GDPR.

Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.

  1. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

You may contact, in particular, the supervisory authority responsible for EC European Capital Markets SE or a supervisory authority at your habitual residence, place of work or place of the alleged infringement.

  1. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures are reviewed and adapted where appropriate in light of technological developments, the nature of the processing and the associated risks.

  1. Automated Decision-Making

We do not use personal data collected through this website for automated decision-making producing legal effects concerning you or similarly significantly affecting you within the meaning of Article 22 GDPR.

The automated analysis performed by reCAPTCHA for the purpose of detecting spam and abusive automated activity does not constitute such decision-making for the purposes of our business relationship with you.

  1. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy where necessary, in particular where we change our website, introduce new services or where legal or regulatory requirements change.

The version published on this website at the relevant time applies.

Last updated: August 2026