The data controller as defined by the General Data Protection Regulation (GDPR) is:
(hereinafter also referred to as "Sparkasse", "we", "our" or "us")
Hans-und-Sophie-Scholl Platz 2
When we process personal data, it means that we collect, store, transmit, delete or otherwise use the information. Personal data refers to information about natural persons who use this website to obtain information on Sparkasse's products and offers.
Below you will find an overview of which data we collect when you visit this website and for what purposes the data is processed.
When you use our website for purely informational purposes, we collect the following data, which we require for technical purposes:
In accordance with Art. 6 para. 1 lit. f) GDPR, the processing of the above-mentioned data is necessary for the purposes of pursuing our legitimate interests. In the event of the unlawful use of this website, the data may also be used to identify potential violations.
In addition, this information will be analysed for statistical purposes as well as to improve our website. This will be done without creating personal user profiles.
If you do not want cookies to be stored on your device, you can prevent this by configuring your browser settings accordingly. You can also delete any cookies that have already been stored. However, when deactivating technical cookies (strictly necessary cookies), the full functionality of the website may no longer be available.
Most of the technical cookies used are so-called "session cookies". These are automatically deleted at the end of your visit, i.e. when you close your session or browser. Some cookies, however, remain on your device until you delete them, or they expire (so-called persistent cookies have set expiration dates).
For the use of basic online banking without any additional convenience functions, the following cookies are essential:
You can object to the use of analytical cookies and the associated analysis services. More information on how to object (opt out) can be found in the relevant sections below.
This website uses web analysis services and bid management technology provided by IntelliAd Media GmbH, Sendlinger Straße 7, 80331 Munich. Only anonymised usage data is collected, aggregated, stored and converted into pseudonymised user profiles. IntelliAd then provides us with various statistics based on this data.
Purpose of processing: IntelliAd is used to monitor and evaluate the success of our online marketing activities and to continuously optimise them.
Opt-out: You may object to the use of your data by IntelliAd by clicking on following opt-out link: https://login.intelliad.de/optout.php
This website uses web analysis services provided by Adform A/S, Wildersgade 10B, 1st Floor, DK-1408, Copenhagen, Denmark. Only anonymised usage data is collected, aggregated, stored and converted into pseudonymised user profiles. adForm then provides us with various statistics based on this data.
Purpose of processing: adForm is used to monitor and evaluate the success of our online marketing activities and to continuously optimise them.
Opt-out: You may object to the use of your data by adForm by clicking on following opt-out link: https://site.adform.com/privacy-center/platform-privacy/opt-out/
This website has the technical means to carry out A/B testing. This testing method (also termed split testing) compares two or more versions of a website in order to discover a more user friendly version. Cookies are employed to assign users randomly chosen specific variants of the website. Only anonymised usage data and information on the test variants are collected, aggregated and saved. Sparkasse can use this data to generate a range of statistics in order to evaluate tests.
Intended Purpose of Data Processing: Users' behaviour on the website is analysed anonymously in order to enhance their website experience and to adapt the website to their preferences.
Objection: You can decline to participate in A/B testing by clicking the button.
The legal basis for the processing of technical cookies is Art. 6 para. 1 lit. b) of the General Data Protection Regulation (GDPR), as these are essential for making the website available.
The processing of data by means of other cookies is necessary for the purpose of pursuing our legitimate interests and on the basis of a balance of interests, which always takes your interests as the data subject into account (Art. 6 para. 1 lit. f) GDPR). Processing is necessary to pursue the above-mentioned legitimate interests, listed below:
This website uses the map service Google Maps, which allows the display of interactive maps and the use of the map feature directly on our website. The Google Maps service uses persistent cookies. When visiting the page on our website that uses Google Maps, Google will receive a notification that you have accessed the page. In addition, the information listed under Section III. 1 will be transmitted to Google. This takes place regardless of whether you are logged in to a Google user account. If you are logged in to Google, your data will be assigned to your user account. If you do not want the data to be assigned to your account, you will need to log out before accessing the map feature. Google stores your data as a user profile and utilises it for advertising, market research and/or to provide personalised services on their website. More specifically, such analysis is carried out (even for users who are not logged in) to provide targeted advertising and to provide other social network users with information about your activities on this website. You have the right to object to the creation of these user profiles. This right can be exercised directly with Google.
WhatsApp communication with your Sparkasse is facilitated by the technical service provider S-Markt & Mehrwert GmbH & Co. KG, Grenzstraße 21, 06112 Halle.
Once you send your first message, your personal data will be processed by S-Markt & Mehrwert in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR (for example, your first and last names, phone number, Messenger ID, profile image, messages). WhatsApp (WhatsApp Inc. WhatsApp Legal 1601 Willow Road Menlo Park, California 94025, USA) is a service based in the United States, which means the data you send is first transferred to WhatsApp in the United States before being forwarded to your Sparkasse. If you do not wish your data to be sent to the U.S., your Sparkasse asks that you refrain from using the WhatsApp service.
An existing WhatsApp account is required for the use of this service.
All data processed for this service will be saved for a maximum of 90 days.
You can use the "Live Chat" feature on this website to contact us. The live chat feature is a service provided by talkevent Software GmbH on behalf of Sparkasse. Talkevent Software GmbH is based at Carlswerkstr. 13b, 51063 Cologne.
In order to prevent abuse and in addition to the information you enter, the following data is stored when using the chat assistant:
The legal basis for the processing of this information is Art. 6 para. 1 lit. b) and f) of the General Data Protection Regulation (GDPR). The chat data will be deleted no later than 90 days after the chat.
You can also use our chat function to ask our chatbot Linda any questions you may have. Linda is operated by Sparkassen-Finanzportal GmbH, Friedrichstraße 50, 10117 Berlin on behalf of your Sparkasse.
The legal basis for the processing of this information is Art. 6 para. 1 lit. b) and f) of the General Data Protection Regulation (GDPR). The Linda chat data will be deleted no later than 90 days after the chat.
To receive information on the latest offers and news, you can subscribe to Sparkasse's newsletter via this website. We will only send the newsletter with your consent or where we have a lawful basis for doing so. To this end, we have appointed the Sparkassen-Finanzportal GmbH, Friedrichstraße 50, 10117 Berlin as the service provider.
The so-called double opt-in procedure is used to register for the newsletter. Once you have registered, an email will be sent to the email address with which you registered, in which you will be asked to confirm your registration. If you do not confirm the registration within the time frame specified in the email, your details will be automatically deleted. Only if you confirm your registration within the specified time frame will your email address be saved for the purpose of sending the newsletter.
You IP address, as well as the date and time of registration, will also be saved. The purpose of this is to be able to provide proof of your registration (consent) and, if necessary, to identify any potential abuse of your personal information.
You may withdraw your consent to the receipt of our newsletter at any time. An unsubscribe link is included at the bottom of every newsletter.
The legal basis for this data processing is Art. 6 para. 1 lit a) and b) GDPR.
Your information will only be shared with third parties insofar as you have consented to this or where we have a legal obligation to do so. In particular such recipients may include:
Our service providers may also receive such data if they meet Sparkasse's special confidentiality requirements. In particular, these may include IT service providers, consulting services and companies in sales and marketing. The appropriate data protection agreements will be arranged with these service providers.
Should the data mentioned in this policy no longer be required for its original purpose, it will be deleted. In the event that the further processing of the data is – temporarily – required for other purposes, this will not apply.
Insofar as the storage period defined for individual services differs from the above, this information will be available in the description for each service.
As a rule, the data we collect when you visit this website is not transmitted to international organisations or third countries (states outside the European Economic Area -EEA). For more information on the possible transmission of pseudonymised data by analysis services, please see the section "Analytical cookies".
You have the following rights concerning your personal information held by Sparkasse:
You have the right to object at any time, on grounds relating to your own particular situation, to the processing of your personal data based on Art. 6 para. 1 lit. e) GDPR (processing carried out in the public interest) or Art. 6 para. 1 lit. f) GDPR (data processing necessary for pursuing the legitimate interests of the controller); including profiling based on these provisions as defined by Art. 4 para. 4 GDPR.
Should you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for such processing which outweigh your personal interests, rights and freedoms; or where such processing serves in the establishment, exercise or defence of legal claims.
In individual cases, we process your personal information for the purposes of direct marketing. You have the right to object at any time to the processing of your personal data for such marketing; this includes profiling insofar as it is related to such direct marketing.
Should you object to the processing of your data for direct marketing purposes, we will no longer process your personal data for such purposes.
The objection need not follow a particular form and should be addressed to:
You also have the right to lodge a complaint with the following supervisory authority regarding the processing of your data:
[Please enter the contact details of the responsible supervisory authority here.]
The data collected from visits to this website is not used for automated decision making as defined by Art. 22 GDPR.
We may process data captured when you visit our website in order to provide you with information and advice about products that are relevant to you. This processing may include an assessment of personal aspects for the purpose of needs-based communication and advertising, including market and opinion research. For more information, please see the section "Analytical cookies".
Updated: January 2019