Privacy Policy
We treat your data
confidentially

1. Preface

UmweltBank is aware of the importance of the data entrusted to us. Therefore, we consider it one of our most important responsibilities to treat all data entrusted to us by customers and interested parties confidentially. In the following text, you will find an overview of which personal data we collect from you and for what purpose. In addition, you will find information about your rights under applicable data protection law.

Responsible entity
UmweltBank AG
Laufertorgraben 6
90489 Nuremberg

If you have any questions regarding data protection, please contact our Data Protection Officer:

UmweltBank AG
Data Protection Officer
Laufertorgraben 6
90489 Nuremberg
Email: datenschutz[at]umweltbank.de

Confidential inquiries to the Data Protection Officer should be sent to dsb[at]umweltbank.de.

2. Addressees of this Privacy Policy

Processing personal data means that we, for example, collect, store, use, transmit, or delete data. This privacy policy applies to:

  • Users of our website 
  • Interested parties and customers of UmweltBank AG who are natural persons,
  • all other natural persons who are in contact with our bank, e.g. representatives or employees of legal entities.

3. Which personal data are processed?

As soon as you contact us, for example as an interested party, applicant, or customer, we store personal data. This applies, for example, when you use our website or contact us by email, telephone, or in person. This also takes place in the context of carrying out an existing business relationship.

The following personal data are processed:

  • Website usage:
    • Server log files, protocol data recorded when accessing the website, e.g.: IP addresses, information about the browser type and browser version used, the page accessed, the page from which the website was accessed, the volume of data transmitted, the user’s operating system, the user’s internet service provider, date and time of access.
    • Data about your location (if you have allowed the collection of location data in your device settings)
  • Customers and interested parties
  • Name, email address or telephone number and the content of inquiries that you submit to us, e.g. by email or telephone 

4. Source of your data 

UmweltBank collects your data directly from you. 

5. Purposes and legal bases of data processing

Your data is used exclusively in compliance with the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

5.1 Ensuring the correct delivery of our website and IT and cyber security

Usage data and log files that are transmitted from your internet browser to our servers when you use our website and form a log file are processed in order to ensure the correct delivery of the content of our website, to guarantee the long-term functionality of our information technology systems and website technology, to ensure the efficient detection, identification, and tracing of misuse incidents, and to provide law enforcement authorities and, where applicable, supervisory authorities with the information necessary for prosecution in the event of a cyberattack. On the one hand, this information is evaluated statistically and, on the other hand, with the aim of increasing data protection and data security in our company in order to ensure an optimal level of protection for the personal data we process.

The legal basis for the data processing described is Art. 6 para. 1 lit. f GDPR. The processing is absolutely necessary for the provision of the website and for the purpose of fraud prevention for the reasons stated above and therefore serves to safeguard the legitimate interests of UmweltBank.

5.2 Cookies 

This website uses exclusively technically necessary cookies. Specifically, a session cookie of the TYPO3 content management system is used. This cookie is required to provide basic website functions and is automatically deleted at the end of the session. 

The use is based on § 25 para. 2 no. 2 TDDDG in conjunction with Art. 6 para. 1 sentence 1 lit. b (initiation or performance of a contract) and lit. f GDPR (overriding legitimate interests). The latter interests include, in particular, monitoring the technical performance of the website. 

5.3 Fulfillment of (pre-)contractual and legal obligations in connection with the customer relationship 

The processing of your personal data as a customer is carried out primarily for the purpose of fulfilling our contracts with you. This also includes pre-contractual data processing. The legal basis for this data processing is Art. 6 para. 1 lit. b GDPR. The content and scope of the personal data processed by us in this context are determined by the content of the existing business relationship and the associated legal requirements and their establishment, implementation, and termination. 

5.4 Implementation of data subject rights requests
If you assert your data subject rights pursuant to Art. 12 et seq. GDPR, we process your data to implement your request. This data processing is carried out on the legal basis of Art. 6 para. 1 lit. c GDPR in conjunction with Art. 12 et seq. GDPR.

5.5 Transfer of data to supervisory authorities
In the event of data protection and data security incidents, it may be necessary to transfer data of affected persons to supervisory authorities (Art. 33 GDPR). 

5.6 Customer management

You may contact us by email, post, or telephone. We process the personal data you provide in order to respond to your inquiry and, if applicable, to send you documents. The legal basis for the described data processing is Art. 6 para. 1 sentence 1 lit. b GDPR (pre-contractual measure and/or contract performance) and/or Art. 6 para. 1 sentence 1 lit. f GDPR (overriding legitimate interests). 

6. Whether you are obliged to provide UmweltBank with certain personal data

In the context of our business relationship, we require the following personal data from you:

  • Data required for establishing and conducting a business relationship
  • Data required to fulfill the associated contractual obligations
  • Data that we are legally obliged to collect

Without this personal data, we are generally unable to enter into or perform a contract with you. 

7. Recipients of the data 

7.1 Your data within UmweltBank AG

Within the bank, only those departments have access to your data that require it for initiating contracts or fulfilling our contractual and legal obligations and safeguarding our legitimate interests.

7.2 Your data outside UmweltBank AG

We will only disclose personal data if we are legally obliged to do so, if it is necessary in the context of initiating or fulfilling contractual obligations, or if you have consented to the disclosure.

A legal obligation to disclose your personal data exists in particular for the following recipients:

  • Public authorities and supervisory authorities, such as tax authorities and data protection authorities,
  • Law enforcement authorities and judicial bodies, such as police, public prosecutors’ offices, courts,
  • Auditors, lawyers, and notaries, for example in insolvency proceedings.

Service providers supporting us

We are supported by various service providers whom we select carefully. These include, for example, companies from the following categories 

  • IT services: design, development, and maintenance of internet-based tools and applications, provision of application or infrastructure services (e.g. cloud services)
  • Marketing activities or events and management of communication with customers
  • Printing service providers for materials and product design

These service providers receive data to fulfill their purposes. We have concluded data protection agreements with all service providers to ensure the best possible protection of your data.

7.3 Transfer of data to third countries

We do not intend to transfer the personal data collected from you to a so-called third country outside the European Union. If, in exceptional cases, your data is processed in third countries, this is done exclusively in accordance with legal requirements (Art. 44–49 GDPR).

8. Storage period of your personal data

We use and store your personal data as long as necessary for the duration of the business relationship. This also includes the initiation and execution of a contract.

UmweltBank is also subject to various statutory retention obligations arising from the German Commercial Code (HGB), the Fiscal Code (AO), and tax legislation. The retention periods under these laws can be up to ten years. In addition, limitation periods under civil law may be up to 30 years.

As soon as your personal data is no longer required for the purpose for which it is processed, we delete or anonymize it in accordance with applicable laws and regulations.

9. Your rights

The General Data Protection Regulation grants data subjects extensive rights. Your rights are particularly important to us; therefore, we explain them in more detail below.

Right of access

You have the right to request confirmation as to whether we process personal data concerning you. If this is the case, you have the right to access the information specified in Art. 15 para. 1 GDPR, provided that the rights and freedoms of other persons are not adversely affected, cf. Art. 15 para. 4 GDPR. We will also be happy to provide you with a copy of the data.

Rectification of personal data

If stored data is incorrect, you may request correction. If data is incomplete, you may request completion. If we have disclosed your data to third parties, we will also inform those third parties of your corrections, insofar as this is legally required.

Erasure of personal data 

We store your personal data only as long as necessary for the business relationship, as long as you have given consent, as long as there are overriding legitimate reasons for storage, or as required by statutory retention periods. 
You have the right to request the erasure of your personal data. If none of the above reasons oppose this, we will comply with your request for erasure. 

Restriction of processing of personal data

You may request a restriction of processing if the purpose of data processing no longer applies, but we require the data due to statutory retention obligations or for the establishment, exercise, or defense of legal claims. 

Right of withdrawal

You have the right to withdraw consent you have given for the processing of your personal data at any time, in whole or in part, with effect for the future, without stating reasons. In the event of withdrawal, we will no longer process your personal data. The legality of the processing of your personal data carried out on the basis of your consent up to the time of withdrawal remains unaffected. 

Right to lodge a complaint

You have the right to lodge a complaint with our Data Protection Officer. You also have the right to lodge a complaint with the data protection supervisory authority of the (federal) state in which you have your residence or habitual abode, or – corresponding to the registered office of the company – with the Bavarian State Office for Data Protection Supervision.

Bavarian State Office for Data Protection Supervision
P.O. Box 606
91511 Ansbach

Data portability

For the purpose of easy data portability to third parties, you may request that we provide you with the personal data you have provided to us in a transferable format.

Information about your right to object

You have the right to object to the processing of your personal data. This requires that the data processing is based on your consent, in the public interest, or on the basis of a balancing of interests. This also applies to the processing of personal data concerning you for the purposes of direct marketing, as well as profiling within the meaning of Article 4 No. 4 GDPR, insofar as it is related to such direct marketing.

In the event of an objection, we will no longer process your personal data unless your personal data serves the establishment, exercise, or defense of legal claims.

The objection may be made informally and should preferably be addressed to:
UmweltBank AG
Data Protection Officer
Laufertorgraben 6
90489 Nuremberg
Email: datenschutz[at]umweltbank.de