Herewith we inform you about the processing of your personal data in accordance with Article 13 and 14 of the General Data Protection Regulation (GDPR) as well as about the rights you have under data protection and privacy law. The content and extent of data processing depend on the products and services you have requested or agreed upon with us
We do not use automated decision-making mechanisms as per Article 22 GDPR for deciding on whether to enter into a business relationship or the pertaining provision of services. Before applying such procedures in individual cases and as required by law, we will inform you about this separately.
Due to legal and regulatory requirements, we are obliged to combat money laundering, terrorist financing and criminal offences that endanger assets. In the process, data analyses (including payment transactions) are conducted. These measures protect you as well. We use scoring to assess your creditworthiness. It calculates the probability that a customer will meet his or her payment obligations in accordance with the contract. The calculation may include inter alia income, expenses, existing liabilities, occupation, employer, length of employment, experience from previous business relationships, repayment of previous loans in accordance with the contract as well as information from credit agencies. The scoring is based on a mathematically-statistically accepted and proven procedure. The calculated score values support us in our decision-making of product transactions and are included in the ongoing risk management.
The GDPR grants data subjects the following rights:
In accordance with Art. 15 GDPR, you can request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the categories of
The data subject shall have the right to obtain from us confirmation as to whether or not personal data concerning him or her are being processed, the categories of recipients to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request rectification, erasure, restriction of processing or objection, the existence of the right to lodge a complaint, the source of the personal data if they were not collected by us, whether they will be transferred to a third country or to an international organisation, and the existence of automated decision-making, including profiling and, where applicable, meaningful information about the details thereof.
In accordance with Art. 16 DSGVO, you can immediately request the correction of incorrect or the completion of your personal data stored by us.
Pursuant to Art. 17 DSGVO, you may request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.
Pursuant to Article 18 of the GDPR, you may request the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful, we no longer need the data and you object to their deletion because you need them to assert, exercise or defend legal claims. You also have the right under Art. 18 DSGVO if you have objected to the processing in accordance with Art. 21 DSGVO.
Pursuant to Art. 20 DSGVO, you may request to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or you may request that it be transferred to another controller.
In accordance with Art. 7 para. 3 GDPR, you can revoke your consent to us at any time. As a result, we are no longer permitted to continue the data processing based on this consent in the future. This also applies to the revocation of declarations of consent that were given to us before the GDPR came into force, i.e. before 25 May 2018.
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the competent data protection supervisory authority (State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, P.O. Box 20 04 44, 40102 Düsseldorf, Tel.: 0211/38424-0, Fax: 0211/38424-999, e-mail: poststelle@ldi.nrw.de).
Within the scope of our business relationship, you must provide those personal data that are necessary for the establishment and execution of a business relationship and the fulfilment of the associated contractual obligations or which we are legally obliged to collect. Without this data, we will usually have to refuse the conclusion of the contract or the execution of the order or will no longer be able to perform an existing contract and may have to terminate it.
In particular, we are obliged under money laundering regulations to identify you before establishing the business relationship, for example by means of your identity card, and in doing so to verify your
name, place of birth, date of birth, nationality and your residential address. To enable us to fulfil this legal obligation, you must provide us with the necessary information and documents in accordance with Section 10 (6) GwG and notify us immediately of any changes that arise in the course of the business relationship. If you do not provide us with the necessary information and documents, we may not enter into or continue the business relationship requested by you.
Please note that changes in the legal situation, technical developments as well as changes to our range of services and organisational changes may make it necessary to adapt or update the data protection declaration.
We expressly reserve the right to amend this privacy policy, in particular due to changes in the legal situation or changes to banking processes and products. The current version of the privacy policy will be published on this website, stating the date of amendment.
