The security of your data and the adherence to data protection regulations is a matter of great importance for IKB Deutsche Industriebank AG (hereafter: “IKB” or “we”). The processing of personal data in the framework of the operation of our web pages takes place exclusively in accordance with the European Union’s current data protection standards (especially the General Data Protection Regulations, hereafter “GDPR”) and the provisions of German data protection laws.
We use technical as well as organisational security measures to protect your personal data. The usual special confidentiality obligations customary in credit institutions apply to our employees. The technical safety precautions used are continuously updated in accordance with technological developments. In this data privacy notice, we inform you about which personal data we use and to what extent, and for which purpose they are processed when you use our website www.ikb.de (hereafter “website”). You can retrieve this information on our website at https://www.ikb.de/datenschutz at any time.
Controller / contact information for the data protection
The controller in the sense of Article 4 No. 7 of the GDPR is:
IKB Deutsche Industriebank AG
Telephone: +49 211 8221-0
If you have questions or comments on data protection, you can contact our data protection and data security officer at the email address firstname.lastname@example.org, by telephone at +49 211 8221-4341 or by post at the above-mentioned address, c/o Datenschutzbeauftragter [data protection officer].
The matter of data protectionPersonal data are the matter of data protection. In accordance with Article 4 No. 1 of the GDPR, this means any information relating to an identified or identifiable natural person. This includes, for example, identifiers such as a name, postal address, email address or telephone number, but also usage data. Usage data are data which are necessary to use our websites, such as information about the beginning, end and extent of the use of our website, the IP address and registration data.
You have the following rights against us with regard to your respective personal data:
- Right to access
- Right to rectification or erasure of your personal data
- Right to the restriction of the processing of your personal data
- Right to object to the processing of your personal data
- Right to data portability
In addition, you always have the right to complain about our processing of your personal data to a data protection supervisory authority.
Processing of your data
Automated processing when visiting our internet siteWhen accessing our website, your internet browser will, for technical reasons, automatically transfer information to us. The following information will be saved separately from other information that you may transmit to us:
- Date and time of access
- Browser type and Version
- Operating system used
- The internet address requested (URL)
- URL of the website visited previously as well as the access method used (protocol)
- Quantity of data sent
- Duration of the Connection
- HTTP status code
- Client browser signature
- IP address
At no point in time are these data associated with a certain person. If this information still relates to personal data, they are processed on the basis of Article 6(1) lit. f) of the GDPR. The processing takes place in order to show the visitor the website as well as to ensure the stability and security of the website.
In addition to the previously-mentioned data, cookies are saved on your end device (workstation computer, smartphone, tablet, etc.) when you use our website. “Cookies” are small text files which, with the help of your internet browser, are saved on a storage medium in your end device and associated with the internet browser you use. By means of these cookies, certain information will be transmitted to the user of the cookies.
Cookies cannot execute any programs or transfer viruses to your computer. They generally serve to shape the websites in a more user-friendly and effective way.
- a)This internet site uses the following types of cookies. The extent of their use and their function will be explained in the following:
• -Transient Cookies (see b)
• -Persistent Cookies (see c)
- b)Transient cookies are automatically deleted when you close the browser. These especially include session cookies. These save what is known as a session ID, with which the various requests from your browser from the joint session can be associated. In doing so, your internet browser can be recognised again if you return to our website. The session cookies are deleted if you log out of or close the browser.
- c)Persistent cookies are automatically deleted after a prescribed period of time, which can vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
If you do not want cookies to be used, you can prevent cookies from being saved on your computer through the appropriate settings of your internet browser. Please note that the functionality and range of functions of our offerings may be limited by doing so.
Data entered by the user
In some areas of our web site, you can enter or submit personal data or register for investments and securities. Naturally, you alone decide which data you would like to disclose to us. IKB always respects the principle of data minimisation and only marks input fields as mandatory if their information is actually necessary for the purpose of processing. If you would not like to provide us with certain information, this can, however, mean that you may not be able to use certain products or not be able to use them to their fullest extent.
Registration for the private customer area
In order to use our online offerings for private customers, you must register yourself for our websites by going through the process of opening an account. The data transmitted in the course of this process and during your use of our website as a private customer will be processed in accordance with your consents submitted there and the provisions of the Data privacy notice for products for private customers.
In order to retrieve and use the protected private customer area, you must register with the customer number and password created during the account opening process. You must change the password after the first time you log into the customer area.
In order to contact us, you can use our contact form and enter your contact and address data there, as well as your email address. These data will be transmitted to and saved by us, so that we can accordingly respond to your request and, in doing so, react to your wishes, questions and criticism. The legal basis for this is Article 6(1) lit. f) of the GDPR. We delete the data we obtain in this context after it is no longer necessary to save it, or we restrict the processing, if there are statutory storage obligations. If your request should later lead to the conclusion of a contract, the data is stored for as long as it is necessary to carry out measures prior to entering into a contract or for the performance of the contract.
We offer our applicants the possibility to apply for current job openings online. In order to apply for a job, you must enter your name, address and contact data and attach your prepared application documents. This information is necessary in order to process your application, examine it and come into contact with you again. The legal basis is Article 88(1) of the GDPR, in association with Article 26, Paragraph 1, Sentence 1 of the German Bundesdatenschutzgesetz [German Federal Data Protection Act, new version] (BDSG-neu). We delete the incoming data after it is no longer necessary to store it or restrict the processing, if there are statutory storage obligations.
Requests for informational materials
On our website, you can request that information material be sent to you. To do so, the personal data you share during the request is transmitted to us through your browser and stored by us.
The processing of the personal data you entered serves the purpose of sending the informational materials. This processing is lawful because the response to your request is in our legitimate interest, in accordance with Article 6(1) lit. f) of the GDPR.
The personal data you share will be stored, as it is necessary to send the informational materials, and will be deleted afterwards.
Disclosure of dataBasically, your personal data will be disclosed (e.g. through transfer to a third party) without your explicit, prior consent only in the following cases:
- If the processing is necessary to comply with a legal obligation (Article 6(1) lit. c) of the GDPR). This can especially be the case if the processing is necessary to uncover the unlawful use of our websites or is necessary for prosecuting rights and personal data must be forwarded to law enforcement authorities or courts as well as to aggrieved third parties. This will only be done, however, if concrete indications for unlawful or otherwise abusive behaviour is present. In addition, the IKB is legally required to provide information upon request to certain public authorities. These are law enforcement agencies, agencies which pursue administrative offences and tax authorities.
- Occasionally, we are dependent on contractually-bound external companies and external service providers to provide services, such as in the areas of the transmission of advertising campaigns (only if you have previously explicitly agreed to this) as well as customer service. In such cases, information will be transmitted to these companies or individuals in order to make further processing possible. These external service providers are carefully selected by us and regularly examined in order to ensure that your privacy remains protected. The service providers may exclusively use the data for the purposes prescribed by IKB and use them according to IKB’s instructions within the framework of a so-called data processing, in accordance with Article 28 of the GDPR. Furthermore, the service providers are contractually bound by us to handle your data exclusively in accordance with this data privacy notice as well as German data protection laws. If there is a disclosure of your personal data in this sense, we will inform you in the following about the respective processing. In doing so, we will also name the criteria for the defined storage period.
On our website, you can subscribe for various newsletters. In these newsletters, we will inform you about new products or draw your attention to services. In order to be able to send you one or more newsletters, we process the information entered by you in the registration form exclusively in accordance with the declaration of consent submitted by you. The processing is lawful, because you have given us your consent in accordance with Article 6(1) lit. a) of the GDPR.
You can unsubscribe from the newsletter at any time and revoke your consent, in particular, by sending an e-mail to email@example.com, by opening the link “Newsletter abbestellen” [“Unsubscribe from the newsletter”] at the end of the newsletter or by contacting us at the address given in the imprint. The revocation of consent has no effect on the processing of the personal data which took place up to the point of revocation.
We evaluate your reactions and responses to the newsletter in a personalized way and create a user profile from it in order to individualise the approach in the newsletter, as well as for purposes of market research. At the same time, a persistent cookie will be placed on your end device for follow-up (see the above section on cookies). The user profile will not be used for any other than the previously-mentioned purposes. This is lawful as well, because you have provided us with your consent in accordance with Article 6(1) lit. a) of the GDPR.
Google Web Fonts
If you visit our website, so-called web fonts will be downloaded. These contents are provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). When opening our website, your browser loads the necessary web fonts in your browser cache, in order to correctly show texts and fonts. For this purpose, your browser must make a connection with Google’s servers in California. In doing so, Google gains the knowledge that your IP address called up our web site.
Google Web Fonts are used for the purpose of a uniform and appealing presentation of our website. This constitutes a legitimate interest in the sense of Article 6(1) lit. f) of the GDPR. The data transfer to the USA takes place in accordance with the EU commission’s implementing decision (EU) 2016/1250 (EU-U.S. Privacy Shield). Your IP address will also be processed by us to the extent that it will allow the transfer to Google. If your browser does not support web fonts or if you deactivate this function, no data transfer takes place.
Google Maps is used for the purpose of creating an appealing, comfortable presentation of our website and helps you to find the locations specified on the website. The processing of your data therefore serves a justified interest in the sense of Article 6(1) lit. f) of the GDPR. The data transfer to the USA takes place in accordance with the EU commission’s implementing decision (EU) 2016/1250 (EU-U.S. Privacy Shield). Your IP address will also be processed by us to the extent that it will allow the transfer to Google. You are not required to provide us with this personal data; but you will not be able to use the relevant parts of our website, unless you provide it.
Website improvement: Webtrekk GmbH
IKB uses the services of the company Webtrekk GmbH in order to collect statistical data about the use of its websites and to optimise its offerings accordingly. The data is only transmitted to Webtrekk GmbH under a contract for processing, in accordance with Article 28 of the GDPR. If the transmitted data has to do with personal data (especially the IP address), it is for the purpose of economic optimization and the needs-based presentation of our website. This is a justified interest in the sense of Article 6(1) lit. f) of the GDPR.
1. Data collected for web tracking
In the framework of your website visit, some information transmitted by your browser will be collected and evaluated for IKB’s web controlling. The collection takes place through a pixel which is integrated into every website and is loaded when the website is called up by your browser. In doing so, the following data can be collected and further processed by us:
- Request (file name or requested file)
- Browser type / version (example: Internet Explorer 6.0)
- Browser language (example: German)
- Operating system used (example: Windows XP)
- Internal resolution of the browser window
- Display Resolution
- Java script activation
- Whether Java is on or off
- Whether cookies are on or off
- Colour depth
- Referring URL (the previously visited site)
- IP address – is immediately anonymised and deleted again after processing
- Time of access
2. IP adress
By accessing the website, the IKB obtains knowledge for the purpose of web controlling that this website was called up via your IP address. In doing so, we guarantee that your IP address is stored in an abbreviated (anonymised) format and is only processed for session recognition, geolocalisation (up to the city level) and for defence against attacks. The IP address is then immediately deleted again, so that the data collected are anonymous and cannot be used to establish your identity.
The following cookies are placed by Webtrekk:
- Session cookie (for session recognition; duration: one session)
- Persistent long-term cookie, maximum of six months (for the recognition of new / regular customers)
- Opt-out cookie (if there is an objection against the tracking)
In your browser settings, you can specify whether cookies may be placed or not. If you specifically do not want to be tracked on this website, you may object to this below (for more information on cookies, see above).
4. Revocation of permission to save data
Webseitenbesucher können der Datenspeicherung Ihrer pseudonymisiert erfassten Besucherdaten widersprechen, so dass sie in Zukunft auf dieser Webseite nicht mehr erhoben (erfasst) werden. Für den Ausschluss vom Webtrekk Web-Controlling auf dieser Webseite wird ein Cookie mit dem Namen „webtrekkOptOut" von der Domain gesetzt. Dieser Widerspruch gilt so lange, wie Sie das Cookie nicht löschen. Das Cookie ist für die genannte Domain, pro Browser und Endgerät gesetzt. Daher zum Beispiel, falls Sie die IKB Webseite von zu Hause und der Arbeit oder mit unterschiedlichen Browsern besuchen, müssten Sie von jedem Endgerät und Browser das Cookie setzen.
Website visitors can revoke their consent to save their pseudonymised collected visitor data, so that in the future, they are no longer collected (recorded) on this website. For the exclusion of Webtrekk web controlling on this website, a cookie with the name “webtrekkOptOut” is placed by the domain. This revocation is valid for as long as you do not delete the cookie. The cookie is placed for the domain named, per browser and end device. Therefore, for example, if you visit the IKB website from home and work from different browsers, you must set the cookie for every end device and browser.
To complete the revocation of consent, please click on the Send button.
Hannoversche Str. 19
Our website uses re-targeting technologies. We use these technologies to make our internet offerings more interesting. This technology makes it possible for internet users who are already interested in our services or products to be addressed with advertising on our partners’ websites. We are convinced that the appearance of personalised ads related to interests is, normally, more interesting for the internet user than advertising that does not have a personal relation. The appearance of this advertising material on our partners’ pages takes place on the basis of a cookie technology and an analysis of the previous usage behaviour. The persistent cookies saved on your PC or mobile end device are automatically deleted after a prescribed period of time (max. 120 days). Advertising based on re-targeting technology takes place anonymously. No personal data are saved and no user profiles with your personal data are complied.
If you would like to delete cookies placed in the framework of re-targeting before the end of their storage life, you can do this at any time via the relevant settings of your internet browsers (for extensive information on cookies, see above). Otherwise, our advertising partners’ websites normally offer the possibility to unsubscribe from advertising based on re-targeting technologies via a specific link or you can be extensively informed about the topic of re-targeting.
We implement the tool nfxTrack to evaluate the success of our advertising measures as well as for re-targeting and re-marketing. In doing so, it helps us to better understand which advertising, advertising channels and advertising campaigns are interesting for our customers, through which advertisements at our advertising network’s partners you reached our website (redirect and view tracking), how you navigate our website and whether this finally led to the conclusion of a contract (conversion tracking).
For these purposes, cookies and so-called tracking pixels are implemented both on our website and on those of the partner network on which we advertise. By means of the cookies, each visitor is assigned a unique identification number (ID). Furthermore, additional values are saved which allow us to understand which advertising material was shown to the visitor, with which device, at which time, at which location. It also shows which ads they clicked on as well as from which internet site the visitor was forwarded to the advertising material’s website and to which website the advertising material is forwarded, itself. In doing so, the following information about the visitor is processed:
- User ID as a hash value
- Device platform
- Browser signature
- IP address
- Country, determined from the IP address
- City, determined from the IP address
- Latitude and longitude, determined from the IP address
- Time stamp of the visit
This information is transmitted to the nfxTrack service provider, netzeffekt GmbH, Theresienhöhe 28, 80339 München, Germany (“netzeffekt”). The data will exclusively be processed by netzeffekt in Germany. Netzeffekt cannot make a connection to a natural person by using this information alone. As regards the previously-mentioned personal data, netzeffekt is IKB’s processor in accordance with Article 28 of the GDPR. The data will be deleted as soon as storage is no longer necessary for the evaluation of an advertising campaign by us. The legal basis for the processing is Article 6(1) lit. f) of the GDPR.
You can object to the use of the above-mentioned cookies by clicking on the following opt-out link on every device on which you would like to prevent cookies from being stored:
For more information on re-targeting and usage-based advertising please go to: http://www.youronlinechoices.com/de/
Erasure of your data
If your data are no longer necessary for the above-mentioned purposes, they will be deleted. The data are then no longer available for further processing by IKB.
Automated decision-making, including profiling
No automated decision-making, including profiling (Article 22 of the GDPR) will take place during the use of our websites.
Right to information and authorization
IKB reserves the right to change this data privacy notice. The current version of the data privacy notice will always be available at https://www.ikb.de/datenschutz.
If a contract is concluded between you and the IKB via the website, the data privacy notice for private customers applies.
Status: May 2018