At DWS we recognize the importance of personal information entrusted to us. It is one of our fundamental responsibilities as an asset manager to ensure that we protect the information entrusted to us by our clients and our website visitors. Please find below select security measures we established to protect your privacy.

Why does DWS collect personal information?

We collect, process, and use personal information on our websites in order to offer you even better products and services, best adapt our business processes to our clients’ needs, and steer you to the most suitable product information and applications.

How is information collected and how long is it retained?

Information collected on our website will only be retained for as long as necessary to fulfil the purpose for which it was collected. If you wish to access or correct any information, you may have your data deleted, blocked or corrected (if compliant with applicable law). You have the right to access the personal information we hold about you; this service is free of charge.
Furthermore, DWS strives to continuously improve the website. For this reason, we collect anonymized data on the use of our website, such as domain of origin, number of page views, length of stay, etc. This data is used purely for statistical and market research purposes and is not passed on to third parties. For this purpose, we use the offer of Mapp Digital c/o Webtrekk GmbH (Berlin). It collects and evaluates anonymized information that is transmitted by your browser when visiting the DWS website. You can object to the procedure for the future by clicking here:

Opt-Out

In accordance with the requirements of European data protection law, our website visitors are informed separately about any collection of personal data on the websites concerned that goes beyond the use of Mapp Digital. We do not collect, use or process any personal data without your explicit consent, which can also be declared electronically (e.g. when requesting brochures). Once consent has been given, it can be revoked at any time.

How is information retained, protected, and used?

Information input collected through this website will be transferred to the responsible DWS division. Banking secrecy as well as confidentiality are maintained. Data will not be transferred to third parties, unless necessary to answer your queries (i.e. leaflets dispatched by vendors). Your information is used to exclusively fulfil the purpose for which it is collected, relating to the website through which it is collected.

Websites through which we collect your information are usually encoded using the encryption module of your browser. These sites are certified by renowned institutions for international encryption technique. Moreover, DWS put in place additional and comprehensive state-of-the-art security measures when both accounts and custody accounts are accessed via the internet. Firewalls prevent unauthorized access.

Diverse encryption and identification layers protect customer information from intrusion or disclosure to third parties during data transfer. Furthermore, DWS internally uses sophisticated encryption methods in order to prevent de-coding by unauthorized persons. Moreover, an electronic identifier is generated during data transfer to safeguard your information.

Cookies

In view of the importance of data privacy, and our obligations of transparency, we provide information below about cookies, how we use them on our website based on Article 6 GDPR, lawfulness of processing, and what options you have if you want to activate or deactivate these cookies.

What are cookies?

Cookies are small text files that are sent to your computer to ensure the technical functionality of the website. DWS uses cookies in some areas of its web pages to make it easier for you to use the pages and to make them more personalized.

When trying to understand and manage cookies, it can help to know following terminology:

  • Cookies installed on your device by the organization running the website you are visiting are known as “first party” cookies.
  • Cookies installed on your device via the website you are visiting by another organization are termed “third party” cookies. An example is a cookie set by a specialist website analytics company that provides the website owner with data on the numbers of people visiting its website (cookies for reach and usage analysis).
  • So-called “persistent cookies” remain on your device even after you close your internet browser. They are activated each time you visit the website that created that particular cookie. For example, where a "persistent cookie" is used on a website to remember your login details, you will not need to enter those details each time you visit that website (functional and preference cookies).
  • "Session cookies", by contrast, are temporary and are typically used to enable the website to operate, e.g. by permitting a user to move from page to page without having to log in again. Once you close your browser, all session cookies are deleted (technically necessary cookies).
  • "Flash cookies" are installed by websites that contain media (e.g. video clips). Adobe Flash software is required for this. This allows content to be downloaded more quickly and information to be stored, for example that the content has been accessed from your device (functional and preference cookies).

What cookies do we use?

Essential Cookies

Our websites use cookies, which are necessary for the technical functionality of our websites and the detection of errors and security-relevant anomalies or to offer a service or option you have requested.

Functional and preference cookies

Functional and preference cookies enable our website to save information that has already been entered (such as username, language selection or location information) and to offer improved, personalized functionalities. Such cookies are also used to enable functionalities such as playing videos.

Analysis cookies

We strive to continuously improve the website. For this purpose, we use cookies providing us with overall statistics about the number of visitors, which areas of a page are viewed most frequently, information about the city or location of the users and the length of stay, etc. but also as a statistical audience tool to assess the success of digital communication and marketing measures. These can be installed by external analysis providers commissioned by us.

To adapt our website to your interests and needs, as well as for the purpose of market research, we analyze data that is generated when visiting our website in case you have given explicit consent to analysis cookies. We use the Mapp Digital c/o Webtrekk GmbH (Berlin) offers for this purpose.

Mapp Digital collects anonymized usage data on our website visitors' browsing behavior on our behalf. For this purpose, Mapp Digital sets a session cookie through your browser. The session cookie enables us to record your visit across several DWS websites. The session cookie is set anew each time you visit our website and expires after you leave our website. Mapp Digital also sets a temporary cookie that enables us to identify you pseudonymized using the cookie ID as a returning visitor to our website.

Marketing Cookies

Our websites use cookies so that we can measure and optimize the success of our marketing campaigns. To do this, we track the needs of users in order to prevent them from being shown content that is not relevant to them. Based on these cookies, we personalize our marketing campaigns to the needs of the users.

If you have consented to the use of marketing cookies, we use the re-marketing technology of our below listed partners on our website. It enables us to recognize visitors to our websites on the websites of our advertising partners using a pseudonym and to address them with information relating to their interests. During a visit to our website, a temporary cookie from our advertising partners is placed by the browser of your end device as part of the re-marketing. This cookie enables us to carry out the re-marketing in real time.

To display advertisements on the websites of our advertising partners, we use technologies, so-called "remarketing pixels", from third-party providers. The "remarketing pixels" also use cookies to assign a pseudonymized identification number to your browser. The use of cookies enables publishers (based on your visits to our website) to place advertisements on the websites of our advertising partners. The cookies do not contain any information that would allow conclusions to be drawn about you as a natural person.

If you want to prevent the use of these cookies, you can deactivate the marketing cookies under cookie settings. This also prevents the transmission of data to the above-mentioned publishers.

As part of re-marketing, no personal data will be processed or passed on to Mapp Digital or our advertising partners without your explicit consent.

The following cookies are used if you have given your consent:

Cookie-name

Purpose

Category

Lifetime

Type

Processing entity

Tealium Collect

Collects data on user preferences such as language settings or topic preferences

Functional and preference cookies

1 Year

Session-Cookie

Tealium

11095 Torreyana Road

San Diego, CA 92121

EID Ever ID / Cookie ID

Collects aggregated data on website usage and functioning

Essential Cookies

6 Months

Session-Cookie

Mapp Digital Germany GmbH

Robert-Koch-Platz 4

10115 Berlin

Google Analytics

Collects aggregated data on website usage

Analysis cookies

2 Years

Session-Cookie

Google Ireland Limited

Google Building Gordon House

4 Barrow Street

Dublin D04 E5W5, Ireland

Google Remarketing

Enables targeted display advertising

Marketing Cookies

30 Days

Session-Cookie

Google Ireland Limited

Google Building Gordon House

4 Barrow Street

Dublin D04 E5W5, Ireland

Facebook Pixel

Enables targeted Social Media Marketing

Marketing Cookies

88 Days

Session-Cookie

Facebook Ireland Limited

4 Grand Canal Square

Grand Canal Harbour

Dublin, D02, Ireland

LinkedIn

Enables targeted Social Media Marketing

Marketing Cookies

2 Years

Session-Cookie

LinkedIn Ireland Unlimited Company

Wilton Place, Dublin 2, Ireland

How to control cookies

Some cookies allow you to take full advantage of the functionality of our website. In order to offer certain functionalities, certain technically necessary cookies can be used to display these functionalities correctly.

You can set your web browser to disable cookies. Please note that most browsers offer different ways to protect your privacy. If you do not activate or deactivate certain cookies via the browser settings, it is possible that certain functionalities will not be available to you as expected. For example, you can allow first-party cookies, but block third-party cookies, or receive a notification each time a website wants to install a cookie.

Please note that if you disable cookies in this way, you will not be able to set new cookies. However, it will not prevent previously set cookies from continuing to work on your device until you clear all cookies in your browser settings. Instructions for managing cookies on your browser can usually be found under the browser's help function or in the operating instructions for your smartphone.

Data protection information under the General Data Protection Regulation

In addition to the above mentioned website-specific data protection information, the following data protection information under the General Data Protection Regulation also apply.

Download DWS Investments UK Limited
PFD
If you are not satisfied with the data protection measures described here, or if you have any questions regarding the collection, processing and/or use of your personal data, we would be pleased to hear from you. We will do our best to answer your questions as quickly as possible and to implement your suggestions. Please direct your privacy issues to privacy@dws.com

The following information gives you an overview of the way in which Xtrackers, Xtrackers II and Xtrackers (IE) plc (each a “Company”) and other third parties may process your personal data and your rights under data protection law. The specific types of data processed, and how they are processed, are largely determined by the requested/agreed services in question.

1. Who we are

The Company is a data controller in respect of your personal information that we process in connection with our business. In this Notice, reference to "we", "us" or "our" are references to the Company.

This Notice applies to you and to any third parties whose information you provide to us in connection with our relationship with you. Please ensure that a copy of this Notice is provided to any third parties whose personal data you provide to us. We may update this Notice from time to time and we will notify you in writing of any changes we make.

You, as an investor, remain responsible to inform any of your potential authorised representatives or beneficial owners about the existence and content of this Privacy Notice.

2. The Types of Personal Data that we Process

Due to our contractual relationship with you, or in order to fulfil our legal obligations, we must collect certain personal information from you. If you do not provide this personal data to us, we may not be able to process your investor application or otherwise maintain a business relationship with you or provide you with our services.

We process some or all of the following types of personal data:

Name, address/other contact details (telephone, email address), date/place of birth, gender, nationality, language, marital status, legal capacity, professional group key/type of partnership (employed/self-employed), identification data (e.g. ID card data), authentication data (e.g. specimen signature), tax ID and information, FATCA status, current occupation or previous occupation if relevant and financial status (assets, liabilities, income from employment/self-employment/trade or business, expenses).

3. Why do we process your data (purpose of processing) and on what legal basis?

Your personal data will be processed to process, manage and administer your holding(s) and any related accounts, on an ongoing basis. This includes the assessment of your application, the management of your investment, maintaining the register of investors, and the provision of associated services to you (such as account statements or other communications relevant to your application or investment), directly or through the use of service providers.

We process your personal data for the purposes above to the extent necessary to perform our contractual obligations to you.

In addition, we are subject to various Luxembourg and international legal and regulatory obligations or statutory requirements (e.g. Luxembourg company law, UCITS Law, laws and regulations relating to anti-money laundering, tax laws) as well as supervisory requirements (e.g. of the Luxembourg Commission de Surveillance du Secteur Financier). We will process your personal data to the extent necessary to comply with our legal and regulatory obligations, including identity verification, prevention of fraud and money laundering, prevention and detection of crime and compliance with monitoring and reporting duties required by tax law such as reporting to the tax authorities under Foreign Account Tax Compliance Act (FATCA), the Common Reporting Standard (CRS) or any other tax identification legislation to prevent tax evasion and fraud as applicable.

We may be obliged to collect and report any relevant information in relation to you and your investments (including but not limited to name and address, date of birth and U.S. tax identification number (TIN), account number, balance on account) to the Luxembourg tax authorities (Administration des contributions directes) which will exchange this information (including personal data, financial and tax data) on an automatic basis with the competent authorities in the United States or other permitted jurisdictions (including the U.S. Internal Revenue Service (IRS) or other US competent authority and foreign tax authorities located outside the European Economic Area) only for the purposes provided for in FATCA and CRS at OECD and European levels or equivalent Luxembourg legislation.

It is mandatory that you answer questions and requests with respect to your identification and investment and, as applicable, FATCA and/or CRS. We reserve the right to reject any application for investment if you do not provide the requested information and/or documentation and/or if you do not comply with the applicable requirements. You acknowledge that failure to provide relevant information may result in incorrect or double reporting, prevent you from acquiring or maintaining your investment and may be reported by us to the relevant Luxembourg authorities.

We may also ask for your specific consent to the processing of your personal data for other specific purposes (e.g. to provide marketing or more general information about our services to you). You will have the right to withdraw such consent at any time.

We may also process your personal data in furtherance of our legitimate business interests, which include:

  • Assertion of legal entitlements and defence in the event of legal disputes;
  • Ensuring IT security and IT operations of the Company;
  • Prevention of criminal acts;
  • Measures for business control and the further development of products;
  • Risk management.
 

In assessing our legitimate interests listed above, we consider that the processing of your personal data in furtherance of these objectives does not prejudice your interests, fundamental rights or freedoms as a data subject. If you wish to obtain additional information in relation to this, please get in contact with us ('Questions and Concerns').

Where processing is based on the furtherance of our legitimate interest, you have the right to object to this processing of your personal data.


4. Disclosure of your information

Xtrackers and Xtrackers II

Your personal data will be disclosed to, and processed by, State Street Bank International GmbH, Luxembourg Branch which will be the administrator of your investment(s) for the purposes of this Notice, and is acting as depositary, administrative agent, paying agent, domiciliary agent as well as registrar and transfer agent for the Company.

To the extent necessary to perform our services and fulfil our contractual obligations to you and/or our legal or regulatory obligations, we will disclose your personal data to:

  • DWS Investment S.A., Luxembourg, acting in its capacity as the management company of the Company or any of its duly authorised agents or any of its affiliates and their duly authorised agents;
  • State Street Bank International GmbH, Luxembourg Branch acting in its capacity as depositary or any of its duly authorised agents;
  • DWS International GmbH, acting in its capacity as investment manager, or any of its duly authorised agents;
  • DWS Investments UK Limited , acting in its capacity as distributor, investment manager and/or sub-portfolio manager, or any of its duly authorised agents;
  • Harvest Global Investments Limited, acting in its capacity as investment manager, or any of its duly authorised agents;
  • International Financial Data Services (Canada), in its capacity as provider of information technology applications;
  • Syntel Services Privacy Limited, which will assist with operations, including account set-up;
  • Victor Buck Services S.A., as issuer of contract notes, monthly statements and other update information;
  • DST Financial Services International Limited, in its capacity as provider of information technology applications;
  • State Street Bank and Trust, which will assist with client account opening;
  • Other credit and financial services institutions, comparable institutions and order processors, to which we transfer personal data for the purpose of managing and administering the Company and managing our investment relationship with you;
  • The Luxembourg Commission de Surveillance du Secteur Financier and any other public or regulatory entities or institutions which we are required to disclose your data to pursuant to a legal requirement; and
  • Other third parties including professional, legal or financial advisors, auditors and/or technology providers.
 

We take all reasonable steps to ensure the safety and integrity of your personal information and may, as appropriate, enter into contracts with such third parties to protect the privacy and integrity of any personal data supplied to us.

Xtrackers (IE) plc

Your personal data will be disclosed to, and processed by, State Street Fund Services (Ireland) Limited, which will be the administrator of your investment(s) for the purposes of this Notice, and is acting as registrar and transfer agent for the Company.

To the extent necessary to perform our services and fulfil our contractual obligations to you, we will disclose your personal data to:

  • DWS Investment S.A., Luxembourg, acting in its capacity as the management company of the Company or any of its related companies, affiliates or duly authorised agents;
  • State Street Custodial Services (Ireland) Limited, acting in its capacity as depositary or any of their duly authorised agents;
  • DWS Investments UK Limited , acting in its capacity as the distributor for the Company or any of their duly authorised agents;
  • DWS International GmbH, acting in its capacity as investment manager, or any of their duly authorised agents;
  • Dave Burns, Carne Global Financial Services Limited, and any appointed successor, acting in his capacity as money-laundering reporting officer;
  • International Financial Data Services (Canada), in its capacity as provider of information technology applications;
  • Syntel Services Privacy Limited, which will assist with operations, including account set-up;
  • Victor Buck Services S.A., as issuer of contract notes, monthly statements and other update information;
  • DST Financial Services International Limited, in its capacity as provider of information technology applications;
  • State Street Bank and Trust, which will assist with client account opening;
  • Other credit and financial services institutions, comparable institutions and order processors, to which we transfer personal data for the purpose of managing and administering the Company and managing our investment relationship with you;
  • The Central Bank of Ireland, the Irish Revenue Commissioners and any other public or regulatory entities or institutions which we are required to disclose your data to pursuant to a legal requirement; and
  • Other third parties including professional, legal or financial advisors, auditors and/or technology providers.
 

We take all reasonable steps to ensure the safety and integrity of your personal information and may, as appropriate, enter into contracts with such third parties to protect the privacy and integrity of any personal data supplied to us.

5. Keeping your information secure

We take all reasonable steps to ensure the safety, privacy and integrity of your personal data. We ensure that we have appropriate technical, organisational and security measures, appropriate to the sensitivity of your information to ensure it is secure.

6. Transfers outside the European Economic Area

We will transfer your personal data to countries outside the European Economic Area if this is necessary for the performance of our contractual obligations to you, or to the extent that this is required by law. Transfers to countries outside the European Economic Area will, to the extent required, be made to Australia, Canada, Japan, Hong Kong, India, Singapore, Thailand and the United States.

For any transfers of your personal data outside the European Economic Area, we will ensure that appropriate safeguards are in place, which might include one or more of the following:

  • The country which we are transferring the personal data to may be approved by the European Commission as offering an adequate level of data protection;
  • The recipient of the data may have signed 'standard contractual clauses' approved by the European Commission, obliging them to protect the personal data;
  • If the recipient is located in the United States, it might be a certified member of the EU-US Privacy Shield (or such equivalent scheme approved by the appropriate regulatory bodies from time to time).
 

We may also transfer your personal data to countries outside the European Economic Area where we have obtained your consent to do so. You will be entitled to withdraw such consent at any time.

You can obtain more information about data transfers, appropriate safeguards and standard contractual clauses by contacting us ('Questions and Concerns').

7. How long is my data stored for?

Personal Data will be retained by Company and/or its processors until investors cease to hold shares and a subsequent period of 10 years thereafter to the extent necessary to comply with laws and regulations applicable to them or to establish, exercise or defend actual or potential legal claims, subject to the applicable statutes of limitation, unless a longer period is required by laws and regulations applicable to them. In any case, your personal data will not be retained for longer than necessary with regard to the purposes and legal and regulatory obligations or statutory requirements contemplated hereunder (or any other information notice provided by the Company from time to time), subject always to applicable legal minimum retention periods. If you have any questions, please contact us ('Questions and Concerns').

8. What data protection rights do I have?

Under certain circumstances, by law you have the right to:

Request access to your personal information (commonly known as a "data subject access request"). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it;

Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected;

Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below);

Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes;

Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it;

Request the transfer of your personal information to another party.

If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact us in writing ('Questions and Concerns').

9. Questions and Concerns

Xtrackers and Xtrackers II

There is no need to take any action as a result of receiving this letter. If you have any questions or concerns about how we handle your personal data, further information can be obtained from State Street Bank International GmbH, Luxembourg Branch (49, Avenue J.F. Kennedy, L-1855 Luxembourg, Grand Duchy of Luxembourg), acting in its capacity as administrator and transfer agent of the Company (ssbquerydesk@statestreet.com).

If you are unhappy with how we are handling your personal data, or how we respond to a query/complaint about the processing of your personal data, you have the right to make a complaint to the relevant data protection supervisory authority.

Xtrackers (IE) plc

If you are have any questions or concerns about how we handle your personal data, further information can be obtained from State Street Fund Services (Ireland) Limited (78 Sir John Rogerson's Quay, Dublin 2, Ireland), acting in its capacity as administrator and transfer agent of the Company (by emailing taregistration.eb@statestreet.com or ETF_Servicing@statestreet.com).

If you are unhappy with how we are handling your personal data, or how we respond to a query/complaint about the processing of your personal data, you have the right to make a complaint to the Irish Data Protection Commissioner, or any other relevant privacy regulator.

 

Xtrackers ETC plc

This privacy notice explains the manner in which Xtrackers ETC plc (the Company) collects, processes and maintains personal data about you pursuant to the Data Protection Law.

You should review this notice carefully as it contains information about the treatment of your personal data and your rights under Data Protection Law.

 

Interpretation

For the purposes of this privacy notice: (i) Data Protection Law means the General Data Protection Regulation (EU) 2016/679 and the Irish Data Protection Acts 1988 to 2018, as amended from time to time (ii)  controller, processor, data subject, personal data, and processing shall have the meanings given to them under Data Protection Law, (iii) we, us or our means the Company in its capacity as controller of the personal data, and (iv) you or your means the securityholder under the Secured Xtrackers ETC Precious Metal Linked Securities Programme (the Programme) (the investor) and includes any person owning or controlling the investor, having a beneficial interest in the investor, or for whom the investor is acting as agent or nominee. For the avoidance of doubt, Processor (as defined below) shall include State Street Fund Services (Ireland) Limited (and its affiliates) acting as determination agent, issuing agent and paying agent in relation to the Programme in its capacity as processor of the personal data.

 

Sources of personal data

Personal data includes identifiers such as: name, date of birth, gender, address and proof of address, email address, nationality, copy of official identification, tax identification number (TIN), financial and investment qualification, shareholder reference number, national identification number, telephone/mobile number, fax number, bank details, and power of attorney details.

The Company collects personal data about investors mainly through the following sources:

  1. subscription forms, investor questionnaires and other information provided by the investor in writing (including any anti-money laundering, identification, and verification documentation), in person, by telephone (which may be recorded), electronically or by any other means;
  2. from third party vendors, transfer agencies, financial intermediaries and/or financial administrators;
  3. transactions within the Programme, including account balances, investments, distributions, payments and withdrawals; and
  4. we may also collect personal data relating to you from credit reference agencies and available public databases or data sources, such as news outlets, websites and other media sources and international sanctions lists.

 

Purposes

The storage, processing and use of personal data will take place for the following purposes:

Where the processing is necessary for compliance with a legal obligation to which the Company is subject

  1. to comply with in-house procedures and statutory/regulatory requirements applicable to the Company (including (where applicable) under FATCA, CRS, AML legislation and customer due diligence verification purposes).

Where the processing is necessary for the Company to perform a contract to which you are a party or for taking pre-contract steps at your request

  1. to manage or administer your investment and any related accounts on an ongoing basis;
  2. to administer and operate the Programme and/or the Company;
  3. risk management and risk controlling purposes relating to the Company or any entity in the same group as the Company.

Where the processing is necessary in order to pursue the Company’s legitimate interests

  1. to carry out statistical analysis or market research;
  2. for direct marketing purposes;
  3. to help detect, prevent, investigate, and prosecute fraud and/or other criminal activity, and share this data with our legal, compliance, risk and managerial staff to assess suspicious activities;
  4. to investigate and respond to any complaints about us and to help maintain service quality and train staff to deal with complaints and disputes.

Where you consent to the processing of personal data

  1. for any other specific purpose to which you have given specific consent. 

As a controller, we will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

 

Automated decision-making

We do not envisage that any decisions producing legal or other significant effects will be taken about you using fully automated means, however we will notify you in writing if this position changes.

 

Disclosure of personal data

Any disclosure of personal data shall be in accordance with the obligations of the disclosing party under the Data Protection Law. Further:

  1. where you have notified us of your adviser, the personal information provided may be shared with such adviser. You must notify us in writing if you no longer wish us to share your personal information with your adviser or of any change to your adviser. Your adviser should have its own arrangements with you about its use of your personal information;
  2. we may share your personal information with any third party to whom the Company may delegate certain functions in relation to the Company which may include DWS International GmbH (and its affiliates) in its capacity as Programme Administrator, Wilmington Trust SP Services (Dublin) Limited in its capacity as Trustee, JPMorgan Chase Bank N.A. in its capacity as Secured Account Custodian, Subscription Account Custodian, Fee Account Custodian and Sub-Custodian, J.P. Morgan SE in its capacity as Bank Account, State Street International Bank GmbH in its capacity as German Paying Agent, State Street Fund Services (Ireland) Limited in its capacity as Issuing Agent and Determination Agent and/or other service providers (Processors) for the purposes set out in this Privacy Notice. Some of these third parties are located outside the European Economic Area (the “EEA”); and
  3. in the course of the processing of personal data such personal data may be transferred to Processors situated or operating in countries and territories outside of the EEA and such countries and territories may not have data protection laws equivalent to those in the EEA. When we transfer personal data to entities outside of the EEA, we will do so on the basis of (a) an adequacy decision from the European Commission; or (b) on the basis of European Commission-approved standard contractual clauses which will ensure that any such entity is contractually bound to provide an essentially equivalent level of protection in respect of the personal data transferred to it. For more information about these transfer mechanisms and to obtain a copy of any relevant contract concerning the transfer of your personal data, please contact us using the details provided below.

 

Investor rights

You have the right to:

  1. receive information about how we process your personal data and to access your personal data;
  2. rectify your personal data where it is inaccurate or incomplete;
  3. restrict under certain circumstances the further processing of your personal data;
  4. ask for erasure of your personal data under certain circumstances;
  5. object to the use of your personal data (including for direct marketing purposes);
  6. ask for personal data portability under certain circumstances.

Further, you may at your discretion refuse to communicate personal data to the Company or object to some processing of your personal data. There are situations where the Company may not be able to comply with a request, for example, where it is subject to a legal obligation to retain or process the data, or where the data is required to perform the investment services. If you refuse to provider certain information to the Company (e.g. contact information), then the Company may not be able to provide investment services to you.

Where the processing is based on your consent, you may withdraw your consent at any time. However, the withdrawal of consent shall not affect the lawfulness of processing based on such consent before the consent is withdrawn, nor will it affect the lawfulness of processing based on other grounds.

You also have the right to lodge a complaint with a supervisory authority under the GDPR. For further information, see the “Complaints” section below.

 

Exercise of rights

You may exercise your rights by writing to the Company at the following e-mail address: privacy@dws.com.

 

Complaints

Should you have any unresolved complaints in relation to the retention or processing of personal data, you may lodge a complaint with the Irish Data Protection Commission at www.dataprotection.ie. Alternatively, you may submit a complaint to your local supervisory authority, the details of which are available at www.edpb.europa.eu/about-edpb/about-edpb/members_en.

 

Retention of Personal Data

We keep your personal data only as long as necessary to fulfil: (a) the specific purpose for which the data is processed; (b) the Company’s legitimate business and operational needs; and (c) in order to comply with the legal obligations to which the Company is subject. The retention period is determined on a case-by-case basis and depends on several factors, including:

  1. The nature of the information and why it is collected and processed (e.g. we process investor personal data in order to administer the Programme).
  2. Whether the information is required for legal reasons (e.g. compliance with KYC obligations, in addition to obligations under FATCA and CRS).
  3. Our operational retention needs (e.g. fraud detection and prevention; training staff to deal with complaints and disputes; maintaining financial records).

Generally speaking, the Company retains personal data for at least the duration of the relevant statute of limitations, in order to ensure that it is able to established and defend legal claims relating to the Programme. 

For further information on the Company’s retention practices, please contact us at privacy@dws.com.

 

Changes to Privacy Notice

The Company reserves the right to update this Privacy Notice at any time, and will ensure that any update to this privacy notice is made available on its website www.etf.dws.com. We encourage you to regularly review this and any updated Privacy Notice to ensure that you are always aware of how personal data is collected, used, stored and disclosed. We may also notify you in other ways from time to time about the processing of your personal data.

DB ETC plc

This privacy notice explains the manner in which DB ETC plc (the Company) collects, processes and maintains personal data about you pursuant to the Data Protection Law.

You should review this notice carefully as it contains information about the treatment of your personal data and your rights under the Data Protection Law.

Interpretation

For the purposes of this privacy notice: (i) Data Protection Law means the Data Protection (Jersey) Law 2018, as amended from time to time (ii) data controller, data processor, data subject, personal data, and processing shall have the meanings given to them under the Data Protection Law, (iii) we, us or our means the Company in its capacity as data controller of the personal data, and (iv) you or your means the securityholder under the Secured ETC Precious Metal Linked Securities Programme (the Programme) (the investor) and includes any person owning or controlling the investor, having a beneficial interest in the investor, or for whom the investor is acting as agent or nominee. For the avoidance of doubt, Processor (as defined below) shall include Deutsche Bank AG, London Branch (and its affiliates) acting as arranger and distributor in relation to the Programme in its capacity as processor of the personal data, and Computershare Investor Services (Jersey) Limited (Computershare) acting as registrar of the Company in its capacity as processor of the personal data.

Sources of personal data

Personal data includes identifiers such as: name, date of birth, gender, address, email address, nationality, tax identification number (TIN), financial and investment qualification, shareholder reference number, national identification number, telephone/mobile number, fax number, bank details, and power of attorney details.

The Company collects personal data about investors mainly through the following sources:

  1. subscription forms, investor questionnaires and other information provided by the investor in writing (including any anti-money laundering, identification, and verification documentation), in person, by telephone (which may be recorded), electronically or by any other means;
  2. from third party vendors, transfer agencies, financial intermediaries and/or financial administrators including but not limited to Computershare;
  3. transactions within the Programme, including account balances, investments, distributions, payments and withdrawals; and
  4.  we may also collect personal data relating to you from credit reference agencies and available public databases or data sources, such as news outlets, websites and other media sources and international sanctions lists.

Purposes

The storage, processing and use of personal data will take place for the following purposes:

Where the processing is necessary for compliance with a legal obligation to which the Company is subject

  1. to comply with in-house procedures and statutory/regulatory requirements applicable to the Company (including (where applicable) under FATCA, CRS, AML legislation and customer due diligence verification purposes).

Where the processing is necessary for the Company to perform a contract to which you are a party or for taking pre-contract steps at your request

  1.  to manage or administer your investment and any related accounts on an ongoing basis;
  2. to administer and operate the Programme and/or the Company;
  3. risk management and risk controlling purposes relating to the Company or any entity in the same group as the Company.

Where the processing is necessary in order to pursue the Company's legitimate interests

  1. to carry out statistical analysis or market research;
  2. for direct marketing purposes;
  3. to help detect, prevent, investigate, and prosecute fraud and/or other criminal activity, and share this data with our legal, compliance, risk and managerial staff to assess suspicious activities;
  4. to investigate and respond to any complaints about us and to help maintain service quality and train staff to deal with complaints and disputes.

Where you consent to the processing of personal data

  1. for any other specific purpose to which you have given specific consent.

As a data controller, we will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Automated decision-making

We do not envisage that any decisions will be taken about you using fully automated means, however we will notify you in writing if this position changes.

Disclosure of personal data

  1. Any disclosure of personal data shall be in accordance with the obligations of the disclosing party under the Data Protection Law. Further:
  2. where you have notified us of your adviser, the personal information provided may be shared with such adviser. You must notify us in writing if you no longer wish us to share your personal information with your adviser or of any change to your adviser. Your adviser should have its own arrangements with you about its use of your personal information;
  3. if we undergo a group reorganization or are sold to a third party, the personal information provided to us may be transferred to that reorganized entity or third party and used for the purposes highlighted above;
  4. we may share your personal information with companies or other entities or persons affiliated with the Company and any third party to whom the Company may delegate certain functions in relation to the Company which may include an administrator, registrar, distributor and/or other service providers (Processors) for the purposes set out in this Privacy Notice;
  5. in the course of the processing of personal data such personal data may be transferred to Processors situated or operating in countries outside of Jersey and the European Economic Area, and such countries may not have data protection laws equivalent to those in Jersey and the EEA. The Company will, where required to do so by law or where it considers appropriate, implement contracts which seek to ensure that any such entity is contractually bound to provide an adequate level of protection in respect of the personal data transferred to it.

Investor rights

You have the right to:

  1. access your personal data;
  2. correct your personal data where it is inaccurate or incomplete;
  3. restrict under certain circumstances the further processing of your personal data;
  4. ask for erasure of your personal data under certain circumstances;
  5. object to the use of your personal data (including for direct marketing purposes);
  6. ask for personal data portability under certain circumstances. Further, you may at your discretion refuse to communicate personal data to the Company or object to some processing of your personal data.

There are situations where the Company can refuse to comply with such a request, for example, where it is subject to a legal obligation to process the data. The Company may also reject your investment or withhold payments until such time as the requisite data has been provided.

Where the processing is based on your consent, the withdrawal of consent shall not affect the lawfulness of processing for other reasons and based on other grounds where this is permitted under applicable law.

Exercise of rights

You may exercise your rights by writing to the Company at the following email address: privacy@dws.com.

Complaints

Should you have any unresolved complaints in relation to the retention or processing of personal data, you may lodge a complaint with the Data Protection Authority in Jersey: Tel +44 (0)1534 716530 or at www.OICJersey.org.

Retention of Personal Data

The personal data shall not be held by the Company for longer than necessary with regard to the purposes of the data processing, subject to any limitation periods provided by law.

Changes to Privacy Notice

The Company reserves the right to update this Privacy Notice at any time, and will ensure that any update to this privacy notice is made available on its website www.etf.dws.com. We encourage you to regularly review this and any updated Privacy Notice to ensure that you are always aware of how personal data is collected, used, stored and disclosed. We may also notify you in other ways from time to time about the processing of your personal data.

CIO View