Data Protection

I. Name and address of controller

The controller under the General Data Protection Regulation is:

Bayerische Landesbank
Institution established under public law
Brienner Straße 18
80333 Munich, Germany

II. Contact details for the data protection officer

The data protection officer can be contacted at:

The Data Protection Officer
Dr Georg Schröder
c/o Bayerische Landesbank
Brienner Straße 18
80333 Munich, Germany
E-mail: datenschutz.bayernlb@bayernlb.de

III. General information on data processing

Protecting your personal data is very important to us. We mainly process it in order to keep our website running and easy to use. We would like to ensure that you are able to use our content and offerings through this website.

We also only process your data to the extent permitted by law. For further details please see below.

IV. Provision of website and creation of log files

Each time our website is accessed, our system automatically records data and information about your computer system. We collect the following data:

(1) Information about the type of browser and the version used
(2) Your IP address
(3) Date and time of access

This data is stored in the log files in our system. The data listed is not stored with other personal data.

Our system has to temporarily store your IP address, so the website can be delivered to your computer. To do this, your IP address has to be stored for the duration of each visit to the website. The log files are therefore saved so the website can function. We also use this data to optimise our website and protect our IT systems. Data in this context is not used for marketing purposes. The legal basis for temporarily storing data and log files is Article 6 (1) f) of the General Data Protection Regulation (hereinafter referred to as “GDPR”).

This data is stored as long as it is required to meet the purpose for which it was collected. If data is needed to provide the website, it ceases to be so once the session is ended. Your data is then automatically erased. In the case of data saved in log files, this occurs within 14 days. If this data remains stored your IP address is erased or redacted so it cannot be associated with the incoming internet connection.

V. Use of cookies

Our website uses cookies. These are text files saved on your computer by your browser. When you access our website, a cookie may be saved on your system. This contains an individual string of characters that allows your browser to be identified next time you access the website.

Except where other periods for deletion are specified below, the following provides a summary of the storage periods which apply regardless of the nature and purpose of the cookies:

You have unrestricted control over the use of cookies. They are saved on your computer and transmit data to our site. Most browsers are configured to accept cookies as standard; however, transmission of cookies can be limited or deactivated by changing the browser settings. Saved cookies can be deleted at any time. This can be done automatically using the appropriate setting in your browser.

We only use necessary cookies. Necessary cookies are crucial for the basic functions of the website. Without them, the website cannot function as intended. These cookies do not store any personal data.

VI. Log-in/registration

We offer you the opportunity to voluntarily register for the log-in area and gain access to exclusive content, functions and information.

When registering, please supply:
- your email address

Your data is deleted once it is no longer needed to achieve the purpose for which it was collected. For data collected as part of registration this is generally the case when you cancel your registration or delete your username.

If this data is required to perform an agreement or carry out pre-contractual measures, early deletion is only possible if permitted by contractual or statutory obligations. We may be under a contractual or statutory obligation to save data even after the agreement has ended (e.g. for tax purposes). The storage period applicable has to be determined separately for each agreement and contracting party.

VII. Contact form and e-mail contact

You can contact us using a contact form on our website or by e-mail. If you enter data in the template provided for the contact form, it will be sent to us and processed by us. This applies to the following mandatory information:

(1) salutation
(2) your name
(3) e-mail address

We also process data you give us voluntarily.

If you make contact via the e-mail address that has been provided, the personal data transmitted with your email will be saved. The legal basis for processing your data is therefore Article 6 (1) f) GDPR, as we have a legitimate interest in this. If you make contact using the form or by e-mail in connection with entering into or carrying out an agreement, Article 6 (1) b) GDPR is always the legal basis for the processing.

We process personal data from the entry template or e-mail solely to deal with processing the correspondence. The data is not transmitted to third parties.

We delete your data as soon as it is no longer needed to achieve the purpose for which it was collected. For personal data from the entry template in the contact form or submitted by e-mail, this is the case when the correspondence with you is completed. The correspondence is completed when the circumstances indicate that the matter in question has been fully dealt with.

If you make contact by e-mail you can object to your personal data being stored at any time. To do this please send a message to this effect, which does not need to be in any particular form, to the contact details provided under item I.

VIII. Your rights

Please find below a summary of your rights under the General Data Protection Regulation.

1. Right to withdraw consent (Article 7 (3) GDPR)

You have the right to withdraw your consents at any time. Withdrawing consent does not affect the legality of processing carried out with this consent before it was withdrawn. You will be informed of this before giving consent.

2. Right of access (Article 15 GDPR, section 34 BDSG)

Under Article 15 GDPR you have the right to request confirmation from us as to whether or not we are processing personal data concerning you. Where that is the case, you have the right to access this personal data and the following information:

Where personal data is transferred to a third country or to an international organisation, you have the right to be informed of the appropriate safeguards being used to ensure that the provisions of the GDPR will be observed by these recipients.

3. Right to rectification (Article 16 GDPR, section 35 BDSG)

You have the right to have inaccurate personal data concerning you rectified by us without undue delay. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

4. Right to erasure or “right to be forgotten” (Article 17 GDPR, section 35 BDSG)

You have the right to obtain the erasure of personal data by us without undue delay where one of the following grounds applies:

Where we have made your data public and are obliged to erase it, we take into account available technology and the cost of implementation while taking reasonable steps to inform the controllers that you have demanded erasure.

5. Right to restriction of processing (Article 18 GDPR)

Under Article 18 GDPR, we may only process data to a limited extent in the following cases. This applies where:

Where processing has been restricted, we may only store the data. Further processing is only permitted with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

You may withdraw consent given in this regard at any time.

You will be informed by us before the restriction is lifted.

6. Notification obligation (Article 19 GDPR)

We are obliged to communicate any rectification or erasure of your data or restriction of processing to all recipients to whom the data has been disclosed, unless this proves impossible or involves disproportionate effort.

We will inform you of these recipients at your request.

7. Right to data portability (Article 20 GDPR)

You have the right to receive the personal data concerning you which you have provided to us in a structured, commonly used and machine-readable format. You also have the right to transmit this data to a third party, provided

You can ask us to transmit your data directly to the third party, where technically feasible. This right must not adversely affect the rights and freedoms of others.

8. Automated individual decision-making, including profiling (Article 22 GDPR)

On our website your data is not used for decisions based solely on automated processing (e.g. profiling).

9. Right to object (Article 21 GDPR)

If we process your data on the basis of a legitimate interest (Article 6 (1) f) GDPR) you have the right to object if the reasons for doing so are based on your personal situation. The same applies to profiling based on these provisions. In such cases we will no longer process your data unless we can demonstrate compelling legitimate grounds for doing so. These must override your interests, rights and freedoms or the processing must serve to establish, exercise or defend legal claims.

Where your data is processed for direct marketing purposes, you may object at any time to the processing of the data. The same applies to profiling, to the extent that it is related to such direct marketing.

Once you have objected, your data will no longer be processed for these purposes.

To lodge an objection please send a message to this effect, which need not be in any particular form, to the contact details provided under item I.

10. Right to lodge a complaint with a supervisory authority (Article 77 GDPR)

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you believe that the processing of data relating to you violates the General Data Protection Regulation. This does not affect any other administrative or judicial remedy which may be open to you.