Universal-Investment-Labs GmbH takes protecting your personal data very seriously. We process personal data that is collected when you visit our websites in compliance with the applicable provisions of data protection and privacy law. We do not publish your data or disclose it to third parties without authorisation. This text explains which data we collect during your visit to our websites and how exactly this data is used.
1. Data protection at a glance
The information below provides a simple overview of what happens to your personal data when you visit our website. “Personal data” means all data that can be used to identify you personally. For detailed information on data protection, please see our data protection policy, which appears below.
Data processing on this website is performed by the website operator. You can find the operator’s contact details in the legal notice (Impressum) of this website.
We collect your data in different ways. First, there is data that you communicate to us. This may include data that you enter in a contact form, for example.
Other data is automatically collected by our IT systems when you visit the website. Such data is primarily technical in nature (such as your internet browser and operating system, or the time when you accessed the page). This data is collected automatically as soon as you visit our website.
Some of the data is collected in order to ensure that the website can be provided correctly. Other data may be used to analyse your behaviour as a user.
You have the right to obtain information on the source, recipient(s) and purpose of your stored personal data free of charge at any time. You also have the right to demand that this data be rectified, blocked or erased. To do so, or if you have any other questions about data protection or privacy, you can contact us at the address stated in the legal notice (Impressum) at any time. You also have the right to lodge a complaint with the competent supervisory authority.
In addition, you have the right to demand that the processing of your personal data be restricted under certain circumstances. For details, please see the section of the data protection policy entitled “Right to restriction of processing”.
When you visit our website, your surfing behaviour may be analysed in statistical terms. This analysis relies primarily on cookies and analytics programs. Your surfing behaviour is typically analysed anonymously; it cannot be traced back to you. You may object to this analysis or prevent it by not using certain tools. For detailed information, please see the data protection policy below.
You may object to this analysis. This data protection policy provides information on the possible ways to object.
2. General information and required information
The operators of these pages take protecting your personal data very seriously. We treat your personal data as confidential and in compliance with the statutory provisions on data protection and privacy, as well as this data protection policy.
When you use this website, various items of personal data are collected. “Personal data” means data that can be used to identify you personally. This data protection policy explains which data we collect and what we use it for. It also explains how and for what purpose this takes place.
Please note that there may be security gaps in transmission of data via the internet (for example, when communicating by e-mail). It is not possible to protect the data from third-party access without any gaps.
The controller responsible for data processing on this website is:
D-60486 Frankfurt am Main
Phone: +49 (0) 69 71043-7666
Fax: +49 (0) 69 71043-87666
“Controller” means the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data (such as names, e-mail addresses and similar).
We have appointed a data protection officer for our company.
Data Protection Officer
D-60486 Frankfurt am Main
Many data processing operations are possible only with your express consent. You may withdraw your consent at any time after giving it. A notification sent to us by e-mail is sufficient. No particular form is required. The lawfulness of data processing based on consent before its withdrawal is not affected.
If the data processing takes place on the basis of point (e) or (f) of Article 6(1) of the General Data Protection Regulation (GDPR), you have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you, including profiling based on those provisions. Please see this data protection policy for information on the specific legal basis for processing. If you object, we will no longer process the personal data in question unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims (objection pursuant to Article 21(1) GDPR).
Where your personal data is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where you object, your personal data will subsequently no longer be used for direct marketing purposes (objection pursuant to Article 21(2) GDPR).
In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedy.
You have the right to receive data which we process via automated means on the basis of your consent or to perform a contract in a commonly used and machine-readable format, provided to you or to a third party. The data will be transmitted directly to another controller upon your request only if technically feasible.
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you transmit to us as the site operator. You can recognise an encrypted connection if the address bar in your browser changes from “http://” to “https://” and the lock symbol appears in your browser line.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties in transit.
Within the scope of the applicable statutory provisions, you have the right at any time to receive access to information, free of charge, on your stored personal data, the source and recipients thereof, and the purpose of processing. Where applicable, you also have the right to rectification, blocking or erasure of these data. To exercise these rights, or if you have any other questions about personal data, you can contact us at the address stated in the legal notice (Impressum) at any time.
You have the right to demand that the processing of your personal data be restricted. To do so, you may contact us at the address stated in the legal notice (Impressum) at any time. The right to restriction of processing exists in the following cases:
- If you contest the accuracy of your personal data that is stored by us. We typically need time to review such claims. For the duration of this review, you have the right to obtain restriction of processing of your personal data.
- If the processing of your personal data took place or is taking place unlawfully. In this case, you can demand that data processing be restricted instead of having the data erased.
- If we no longer need your personal data, but you require it for the establishment, exercise or defence of legal claims. In this case, you have the right to demand that the processing of your personal data be restricted instead of having the data erased.
- If you have lodged an objection pursuant to Article 21(1) GDPR. In this case, it is necessary to weigh your interests against ours. Until it has been determined which party has the overriding interests, you have the right to obtain restriction of the processing of your personal data.
Where you have restricted the processing of your personal data, such personal data shall, with the exception of storage, only be processed with your consent; for the establishment, exercise or defence of legal claims; for the protection of the rights of another natural or legal person; or for reasons of important public interest of the European Union or of a Member State.
We hereby object to the use of contact data published within the scope of the obligation to publish a legal notice (Impressum) to transmit advertising and informational materials not expressly solicited. The operators of these sites expressly reserve the right to take legal action in the event of unsolicited transmission of advertising information such as spam e-mails.
3. Data collection on our website
When you visit our websites, our web servers temporarily store all access in a log file. The following data is collected and stored until automatic erasure thereof:
- IP address of the computer submitting the query
- Date and time of access
- Name and URL of file retrieved
- Volume of data transmitted
- Report on whether the retrieval was successful
- Identification data on the browser and operating system used
- Website (URL) from which the access took place
This data is automatically transmitted by your internet browser to our web server when you access our website. The data is processed for the purpose of enabling the use of the website (establishing a connection), for the purpose of system security and technical administration of the network infrastructure, and to optimise the website. The IP address is stored only temporarily and in truncated (shortened) form in order to enable our web analytics tool to engage in geolocation of access to our pages. This information is not analysed at the individual level. Personal user profiles are not created. Section 15 (3) of the German Telemedia Act (Telemediengesetz, TMG) permits the use of user profiles under a pseudonym where the user does not object thereto. Should we make use of this option within our website, we will notify you in an appropriate place of your right to object.
Personal data is not collected and processed beyond the cases outlined above unless you expressly consent to further processing thereof.
This data is collected on the basis of point (f) of Article 6(1) GDPR. The website operator has a legitimate interest in the presentation of its website without any technical errors and in the optimisation of its website. The server log files must be collected for this purpose.
Any and all use of your personal data takes place only for the stated purposes and within the scope necessary to achieve these purposes. Transfers of personal data to government institutions and agencies take place only within the scope of non-waivable national provisions of law or if the disclosure is necessary for the purpose of asserting rights and/or law enforcement in the event of attacks on our network infrastructure. No disclosure to third parties for other purposes takes place.
The use of certain offerings on our website, such as newsletters, requires prior registration and further processing of personal data, such as the longer-term storage of e-mail addresses, user IDs and passwords. Such data is used only if you have transmitted it to us and have consented beforehand to its use.
In connection with any application or enquiry, regardless of whether through our website or in another form, Universal-Investment-Labs GmbH receives personal data concerning you, such as a curriculum vitae. Universal-Investment-Labs GmbH is permitted to use this personal data within the company for the purpose of deciding whether to employ you or to respond to your enquiry. In the case of applications that do not lead to an offer of employment, the documents are deleted no later than six months after the application process is concluded. Application documents are not stored for later selection procedures unless you have consented thereto beforehand.
If you order informational materials, we use the address information indicated in the process only to process your order. This information is not disclosed to third parties.
Universal-Investment-Labs GmbH uses technical and organisational security measures to protect the personal data administered by us against accidental, incidental or intentional manipulation or destruction and against unauthorised access. Our security measures undergo continuous improvement in keeping with technological developments.
Cookies are used only to store data for technical session management in your browser cache. You will be notified separately if we exceptionally also wish to store personal data such as a user ID in a cookie. You can also view our websites without cookies, of course. However, most browsers automatically accept cookies. You can prevent cookies from being stored by adjusting your browser settings accordingly. The functionality of our site may be restricted if you do not accept any cookies.
By default, Universal-Investment-Labs GmbH does not use any cookies containing personal data in the fund finder or on the website (https://uilabs.de). However, the following types of cookies are used on both websites:
- Technical cookies for distribution of queries across various servers in the back end (content of cookies does not vary by user)
- Cookies for service measurement and observation by Microsoft. These cookie values vary by user and browser. Universal-Investment-Labs GmbH receives a different value in the cookie for each computer/browser/PC user. These values are unique, but do not permit identification of the person.
- Cookies to measure user behaviour through etracker
- Cookies to measure user behaviour through Google Analytics
The fund finder function also places additional cookies
- depending on the user’s selection of country of origin and
- depending on the user’s selection of investor type, as well as
- a cookie that is identical for all users of the fund finder.
The etracker (web analytics) and Microsoft (technical analysis) cookies have a term of up to one year. We have no influence over the content or term of these cookies. The one-year Microsoft and etracker cookies are already placed when the address https://uilabs.deis accessed, which means they are placed even before any notice is displayed.
When the PowerPortal is accessed, an authentication cookie is placed (term: one day after user login) and a cookie is placed to store a date (term: one year), along with two session cookies (term: until the browser is closed).
The data in these cookies is not associated with your other data. You can visit www.allaboutcookies.org to learn more about how cookies work.
When you send us queries using our contact form, we store the information you provide in the query form, including the contact details you provide there, for purposes of processing your query and in the event of any follow-up questions. We do not disclose this data without your consent.
The processing of the data entered in the contact form therefore takes place exclusively on the basis of your consent (point (a) of Article 6(1) GDPR). You may withdraw this consent at any time. A notification sent to us by e-mail is sufficient. No particular form is required. The lawfulness of data processing operations based on consent before its withdrawal is not affected.
The data you enter in the contact form remains with us until you request its erasure or withdraw your consent to storage thereof, or until the purpose for which it is stored ceases to apply (for example, when processing of your query has been concluded). Non-waivable statutory provisions, particularly on time limits for storage, are not affected.
If you contact us by e-mail, phone or fax, we store and process your query, including all personal data indicated therein (name, query), for the purpose of handling your request. We do not disclose this data without your consent.
The processing of this data takes place on the basis of point (b) of Article 6(1) GDPR, to the extent that your query is associated with the performance of a contract or is necessary in order to take steps prior to entering into a contract. In all other cases, the processing is based on your consent (point (a) of Article 6(1) GDPR) and/or our legitimate interests (point (f) of Article 6(1) GDPR), since we have a legitimate interest in the effective processing of the queries addressed to us.
The data you transmit to us via contact queries remains with us until you request its erasure or withdraw your consent to storage thereof, or until the purpose for which it is stored ceases to apply (for example, when processing of your query has been concluded). Non-waivable statutory provisions, particularly statutory time limits for storage, are not affected.
4. Social media
Our pages use plug-ins for social media (such as Facebook, Twitter, Google+, Instagram, Pinterest, XING, LinkedIn and Tumblr).
You can generally recognise these plug-ins based on the relevant social media logos. To ensure data protection on our website, we use these plug-ins only together with a solution known as “Shariff”. This application prevents the plug-ins integrated into our website from transmitting data to the respective providers right away when you first access the page.
A direct connection to the provider’s server is not established unless and until you activate the relevant plug-in by clicking the associated button (consent). As soon as you activate the plug-in, the respective provider receives the information that you have visited our site with your IP address. If you are logged in to your respective social media account (e.g. Facebook) at the same time, that provider can associate your visit to our pages with your user account.
Activating the plug-in constitutes consent within the meaning of point (a) of Article 6(1) GDPR. You may withdraw this consent at any time with effect for the future.
The use of the Twitter plug-in takes place on the basis of point (f) of Article 6(1) GDPR. The website operator has a legitimate interest in ensuring that it is as visible as possible on social media.
You can adjust your privacy settings for Twitter by accessing the account settings at https://twitter.com/account/settings.
Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
Any time you access one of our sites that contains functions of LinkedIn, a connection to LinkedIn’s servers is established. LinkedIn is notified that you have visited our websites with your IP address. If you click on LinkedIn’s “Recommend” button and are logged into your LinkedIn account at the time, LinkedIn will be in a position to allocate your visit to our website to your user account. We have to point out that we as the provider of the websites do not have any knowledge of the content of the transferred data and its use by LinkedIn.
The use of the LinkedIn plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in being as visible as possible on social media.
For further information on this subject, please consult LinkedIn’s Data Privacy Declaration at: https://www.linkedin.com/legal/privacy-policy .
Our website uses functions of the XING network. The provider is the XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.
Any time one of our sites/pages that contains functions of XING is accessed, a connection with XING’s servers is established. As far as we know, this does not result in the archiving of any personal data. In particular, the service does not store any IP addresses or analyse user patterns.
The use of the XING plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in being as visible as possible on social media.
For more information on data protection and the XING share button please consult the Data Protection Declaration of Xing at: https://www.xing.com/app/share?op=data_protection .
5. Analysis tools and advertising
This website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The storage of Google Analytics cookies and the use of this analytics tool take place on the basis of point (f) of Article 6(1) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its web offerings and its advertising.
We have activated the IP anonymisation function on this website. This means that Google truncates (shortens) your IP address within Member States of the European Union or other states that are signatories to the Agreement on the European Economic Area before it is transferred to the United States. Only in isolated instances is the full IP address transferred to a Google server in the United States and truncated there. Google will use this information on behalf of the operator of this website to analyse your use of the website, compile reports on website activity and perform further services associated with website use and internet use for the website operator. The IP address transferred by your browser within the scope of Google Analytics is not combined with other Google data.
You can prevent the storage of cookies by adjusting your browser settings accordingly; however, please note that you may not be able to use all functions of this website in full if you do so. You can also prevent the collection of the data generated by the cookie relating to your use of the website (including your IP address), the transfer thereof to Google and the processing of this data by Google by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de .
You can prevent the collection of your data by Google Analytics by clicking the link below. This will place an opt-out cookie on your computer, preventing the collection of your data on future visits to this website: Deactivate Google Analytics.
We have signed a contract with Google for the processing of data on our behalf. We implement the stringent provisions established by the German data protection authorities in full in the use of Google Analytics.
This website uses the “Demographics” function of Google Analytics. This makes it possible to prepare reports containing information on the age, gender and interests of visitors to the site. This data originates from interest-related Google ads and visitor data from third-party providers. This data cannot be associated with a specific individual. You can deactivate this function at any time using the ad settings for your Google account or prohibit the collection of your data by Google Analytics in general as explained under “Objection to collection of data”.
Data stored by Google at the user and event level that are associated with cookies, user identifiers (such as user IDs) or advertising IDs (such as DoubleClick cookies, Android advertising ID) are anonymised or erased after 14 months. For details, please see the following link: https://support.google.com/analytics/answer/7667196?hl=de .
Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
This function makes it possible to associate the advertising target groups established using Google Analytics Remarketing with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-related personalised advertising messages that have been adjusted to you depending on your earlier use and surfing behaviour on one device (such as a cell phone) can also be displayed on another of your devices (such as a tablet or computer).
If you have consented to this, Google will associate your Web and app browser cache with your Google account for this purpose. In this way, the same personalised ads can be shown on every device on which you log in using your Google account.
To support this function, Google Analytics collects Google-authenticated user IDs, which are temporarily associated with our Google Analytics data in order to define and form target groups for cross-device advertising.
You can object to cross-device remarketing/targeting on a permanent basis by deactivating personalised ads in your Google account; to do so, click this link: https://www.google.com/settings/ads/onweb/.
The data collected in your Google account are combined exclusively on the basis of your consent, which you can provide or withdraw by dealing with Google (point (a) of Article 6(1) GDPR). In the case of data collection operations that are not combined in your Google account (for example, because you do not have a Google account or have objected to the combination thereof), the collection of the data is based on point (f) of Article 6(1) GDPR. The legitimate interest arises from the fact that the website operator has an interest in analysing website visitors on an anonymised basis for advertising purposes.
This website uses Google AdWords. AdWords is an online advertising program of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
Within the scope of Google AdWords, we use what is known as “conversion tracking”. If you click on an ad placed by Google, a cookie is placed on your computer for conversion tracking. Cookies are small text files that the internet browser stores on the user’s computer. These cookies expire after 30 days and do not serve to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, we and Google can see that the user has clicked on the ad and been redirected to this page.
Each Google AdWords customer receives a different cookie. The cookies cannot be traced via the websites of AdWords customers. The information collected using the conversion cookie serves to prepare conversion statistics for AdWords customers that have chosen to use conversion tracking. These customers learn the total number of users who have clicked on their ad and been redirected to a page with a conversion tracking tag. However, they do not receive any information that permits users to be identified personally. If you do not wish to participate in tracking, you can object to this use by simply deactivating the Google conversion tracking cookie in the user settings for your internet browser. You will then not be included in the conversion tracking statistics.
The storage of conversion cookies and the use of this tracking tool take place on the basis of point (f) of Article 6(1) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its web offerings and its advertising.
You can adjust your browser settings so that you are notified when cookies are placed and permit cookies only in individual cases, rule out acceptance of cookies for certain cases or in general, or automatically activate the deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted.
Our website uses the etracker analytics service. The provider is etracker GmbH, Erste Brunnenst. 1, 20459 Hamburg, Germany. This data can be used to create use profiles under a pseudonym. Cookies may be used for this purpose. Cookies are small text files stored locally in your internet browser cache. The cookies make it possible to recognise your browser. The data collected using the etracker technologies are not used to identify visitors to our website personally without the separate consent of the data subject, nor are they combined with personal data concerning the subject of the pseudonym.
etracker cookies stay on your device until you delete them.
Storage of etracker cookies and the use of this analytics tool take place on the basis of point (f) of Article 6(1) GDPR. The website operator has a legitimate interest in analysing user behaviour on an anonymised basis in order to optimise both its web offerings and its advertising.
If you integrate your magazines with an individual WEBKiosk or using embed with custom domain, we recommend that you integrate the following parts of our data protection policy into yours and supplement your cookie guidelines accordingly. Example: http://kataloge.domain.com/
We use https://www.yumpu.com/ from i-magazine AG (“i-mag” – Gewerbestrasse 3, 9444 Diepoldsau, Switzerland) on our website. Yumpu provides a digital platform for publishing magazines, brochures or catalogues. Via Yumpu, the content of PDF files is presented in “flip book” form and displayed directly in the web browser without loading the PDF files. Switzerland is recognised by the European Commission as a country with an adequate level of data protection pursuant to Article 45 GDPR. For more information, please click here. Yumpu places absolutely necessary cookies in order to ensure fundamental functions of the service. You can opt out of the use of these cookies at any time by adjusting your cookie settings accordingly. The process of doing this varies according to the browser you use. Browsers can be set up to reject a certain type of cookies or certain cookies. Your browser can also display when a cookie is transmitted. You can do so by adjusting your web browser settings to reflect your cookie preferences. However, you may have to adjust certain settings manually every time you visit a website. Some services and functions may therefore not work correctly.
Google Analytics deactivation link: You can prevent Google from collecting information on further visits to this website. Please note that deleting cookies, using incognito or private mode in your browser, or using another browser will cause data to be collected again. Deactivate Google Analytics.
Log files: Yumpu automatically collects and stores information in what are known as “server log files”, which your browser automatically transmits. We store this information for as long as one month and erase it afterward. This information is as follows:
- Browser type and version
- Operating system used
- Referrer URL
- URL requested
- Time of server query
- IP address
This data is not combined with other data sources. Pursuant to point (f) of Article 6(1) GDPR, processing takes place on the basis of our legitimate interest in improving the stability and functionality of the website. The data is not disclosed or used otherwise.
If you wish to receive the newsletter offered on the website, we require an e-mail address from you, along with information that allows us to verify that you are the owner of the e-mail address stated and agree to receive the newsletter. Further data is not collected or is collected only on a voluntary basis. We use this data exclusively to send out the information requested and do not share it with third parties.
The processing of the data entered in the newsletter subscription form takes place exclusively on the basis of your consent (point (a) of Article 6(1) GDPR). You can withdraw your consent to the storage of the data and your e-mail address, as well as the use thereof to send out the newsletter, at any time by clicking the “Unsubscribe” link in the newsletter, for example. The lawfulness of the data processing operations that have already taken place is not affected by the withdrawal of consent.
We store the data concerning you that we have on file for the purpose of your newsletter subscription until you unsubscribe from the newsletter and then erase it afterward. This does not affect any data we have stored for other purposes.
8. Plug-ins and Tools
This site uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps, it is necessary to store your IP address. This information is typically transferred to a Google server in the United States and stored there. The provider of this site has no influence over this transfer of data.
The use of Google Maps takes place in the interests of ensuring that our online offerings are presented in an appealing manner and that the places indicated by us on the website are easy to find. This constitutes a legitimate interest for the purposes of point (f) of Article 6(1) GDPR.
9. Rights of data subjects and contact information
You have a right to information regarding the personal data concerning you that is stored. Moreover, you have a right to rectification of inaccurate data, the right to restriction of processing, the right to erasure of your data and a right to data portability regarding your data. You have the right to object to the processing of your data at any time. You have the right to object to decisions based solely on automated processing.
In the case of violations of data protection or privacy laws, you have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for matters of data protection is the German state commissioner for data protection of the state in which our company has its registered office.
If you wish to assert your rights in relation to your personal data, or if you have further questions about the use of your data that have been provided to us, please contact us as follows:
Data Protection Officer
D-60486 Frankfurt am Main
10. Incorporation of data protection policy by reference; validity and current version of data protection policy
By using our website, you consent to the use of data as described above. The data protection policy is currently valid and is dated 23 January 2019. The further development of our websites or the implementation of new technologies may necessitate changes in this data protection policy. Universal reserves the right to update the data protection policy at any time with effect for the future. We therefore recommend that you read through the current data protection policy again from time to time.