The data controller as defined by the General Data Protection Regulation (GDPR) is:

Sparkasse Krefeld
Ostwall 155
47798 Krefeld
Germany
E-Mail: info@sparkasse-krefeld.de
Telephone: 02151 68 88888

(hereinafter also referred to as "Sparkasse", "we", "our" or "us")

If you have any questions regarding this privacy policy or about how we protect your personal data, please contact Sparkasse's data protection officer.

Data protection officer
Datenschutzbeauftragter
Ostwall 155
47798 Krefeld
Germany
datenschutz@sparkasse-krefeld.de

When we process personal data, it means that we collect, store, transmit, delete or otherwise use the information. Personal data refers to information about natural persons who use this website to obtain information on Sparkasse's products and offers.

If you are already a Sparkasse customer, your data will be processed in the context of your business relationship with Sparkasse. You can find more information about this in our privacy policy. The privacy policy also provides information regarding other products and services that can be accessed via this website (for example, about data processing in the context of online banking).

Below you will find an overview of which data we collect when you visit this website and for what purposes the data is processed.

1. Data needed to display the website and ensure its stability and security
 

When you use our website for purely informational purposes, we collect the following data, which we require for technical purposes:

• IP address of the device you are using
• Name of the accessed file (specific page)
• Date and time of access
• Volume of data transferred
• Access status (successful/unsuccessful)
• Browser type and version as well as which operating system you use
• URL of the previously visited page (so-called "referrer URL")

In accordance with Art. 6 para. 1 lit. f) GDPR, the processing of the above-mentioned data is necessary for the purposes of pursuing our legitimate interests. In the event of the unlawful use of this website, the data may also be used to identify potential violations.

In addition, this information will be analysed for statistical purposes as well as to improve our website. This will be done without creating personal user profiles.

2. Use of cookies and analysis services

This website uses cookies. Cookies are small text files which are stored on your device so that information can be retrieved again at a later date.

If you do not want cookies to be stored on your device, you can prevent this by configuring your browser settings accordingly. You can also delete any cookies that have already been stored. However, when deactivating technical cookies (strictly necessary cookies), the full functionality of the website may no longer be available.

a) Purpose and scope of data processing
 

Technical cookies:

• We use technical cookies to improve the security of our website and to make it more user-friendly. The data collected by the technical cookies is not used to create user profiles. The following data is stored and transmitted using these cookies:
  
  Current session ID
• Items in the shopping cart or current application processes
• Use of certain website content, including frequency or extent of use
• Viewing of certain website content, e.g. product information
• Settings relating to your regional Sparkasse branch
• Settings relating to search functions on the website

Most of the technical cookies used are so-called "session cookies". These are automatically deleted at the end of your visit, i.e. when you close your session or browser. Some cookies, however, remain on your device until you delete them, or they expire (so-called persistent cookies have set expiration dates).

For the use of basic online banking without any additional convenience functions, the following cookies are essential:

• JSESSIONID
• IF6CONTEXT
• IFCLONE

• Google Analytics
  Google Analytics is a web analytics service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), who acts as our data processor in this respect (Art. 28 GDPR).
  
  Google Analytics uses cookies that allow us to analyse your use of our website. This includes your use of those parts of the website (online banking) for which you are required to log in. Google Analytics cookies track visitor behaviour and conversions (pages visited, links clicked, applications, browser settings). These cookies do not collect any information on the data you provide on forms or other specific contents (e.g. those of a transfer). Google Analytics uses this information on behalf of your Sparkasse to compile reports about the use of this website for the purpose of reach measurement and to create personalised ads.
  
  If you have a Google account and activated “Personalised advertising”, Google Analytics will enrich these aggregated reports with your demographic data (e.g. age group and gender) and interests (e.g. technology enthusiasts, sport fans, foodies, product affinities) that Google has collected independently (e.g. on other websites).  Google processes information from e.g. your Google account, your searches and ad clicks for its “Personalised advertising”.
  
  If you have a Google account and have activated “Personalised advertising”, we will also analyse your use of this website with Google Analytics across all of your devices (cross-device tracking). This will allow us to identify you even if the device from which you are making e.g. a purchase on our website is different from the one you might have initially used to click on the advert that initiated the purchase. The reports created for Sparkasse (including cross-device) only contain aggregated data and do not contain data on individual users.
  
  You can deactivate “Personalised advertising” any time in your Google account.
  
  If you have a Google account and activated “Web and app activities” on it, you can also view aggregated data on your use of this website and hence manage your data yourself.
  
  The data generated from your use of this website may also be transferred to and saved on a Google server in the USA. However, part of your IP address will be masked before transmission to Google through the IP Anonymization feature enabled for this website. This means that the transferred data cannot be used to identify you as an individual based on your IP address.
  
  The Subprocessor Google LLC of our service provider Google Ireland Ltd. is certified under the EU-US Data Privacy Framework (https://ec.europa.eu/commission/presscorner/detail/de/ip_23_3721), which ensures that data processed in the USA is subject to EU-equivalent safeguards.
  
  The data that is processed through Google Analytics and is linked to cookies is automatically deleted after a maximum of 26 months.
  
  The legal basis for the processing of the data is your consent in accordance with Art. 6(1) and Art. 1(A) GDPR or Art. 25(1) of the Regulation of Data Protection and Privacy in Telecommunications and Telemedia (TTDSG).
  
  

• Google Ads
  Google Analytics is a web analytics service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The responsible data processing body is Google.
  
  We use Google Ads to enable us to provide you with online ads that are relevant to your interests. Google uses DoubleClick cookies to measure the success of our ad campaigns by collecting data on parameters such as ad display frequency or user clicks. Google provides us with information on e.g. statistical analyses of the frequency at which different adverts with different prices are clicked. However, Google does not provide us with information on the use of ads that would allow us to identify individual users.
  
  The analyses created with Google Analytics allow us to identify target groups (e.g. for end devices that users have used to visit a specific product page) and provide information on them to Google through Google Ads. These target groups comprise a list of ad IDs (that are also e.g. stored in DoubleClick cookies) that are filtered by specific criteria within Google Analytics. Google uses target groups to make sure that the majority of the product ads shown to you are of relevance to you (because e.g. you already accessed information on those products on our website). Please refer to Google’s privacy policy and Google Ads’ help section for more information on how Google processes your data for adverts.
  
  The legal basis for the processing of the data is your consent in accordance with Art. 6(1) and Art. 1(A) GDPR or Art. 25(1) of the Regulation of Data Protection and Privacy in Telecommunications and Telemedia (TTDSG).
  

3. Sparkassen marketing campaign analyses and measurements

The Sparkassen Finanzgruppe uses analytics and measurement platforms to deliver, analyse and measure the success of national and regional digital advertising campaigns.

After obtaining your consent on a landing page  (sparkasse.de), these analyses are performed with the help of the following platforms

• intelliAd
  If you click on a Sparkasse advertisement on a third-party website, you will be taken to a landing page with more information on the advertised product. The landing page for all Sparkassen adverts is sparkasse.de, from which users are then forwarded to their local Sparkassen website. sparkasse.de uses the web analytics service from intelliAd Media GmbH, Sendlinger Str. 7, 80331 Munich, Germany, to measure advertising campaigns’ success. You will be asked to consent to the use of the campaign measurement system before you will be able to access the contents pertaining to the advertised product on sparkasse.de. Once you have given your consent, the cookies set by intelliAd can be read out and assigned to specific interactions on sparkasse.de. This data then helps us to manage and optimise our marketing measures. This data cannot be used to identify any persons, because it is only collected on the basis of a cookie ID. The cookie ID, in turn, cannot be linked to an IP address because the IP address will have been anonymised immediately before the intelliAd cookie is set.
  
  The cookie is deleted after 100 days.
  
  The legal basis for this application is Art. 25 (1) TTDSG. You can withdraw your consent at any time at http://login.intelliad.de/optout.php. In this case, the cookie “intelliadNoTrack” will be set, which will block user interactions up until the cookie expires. This cookie is deleted after one year.
  

• Adform
  If you click on a Sparkasse advertisement on a third-party website, you will be taken to a landing page with more information on the advertised product. The landing page for all Sparkassen adverts is sparkasse.de, from which users are then forwarded to their local Sparkassen website. sparkasse.de uses the web analytics service from Adform A/S Wildersgade 10B, sal. 1 DK-1408 Copenhagen, Denmark, for both advertising delivery as well as campaign measurement. You will be asked to consent to the use of the campaign measurement system before you will be able to access the contents pertaining to the advertised product on sparkasse.de. Once you have given your consent, the cookies set by Adform can be read out and assigned to specific interactions on sparkasse.de. This data then helps us to manage and optimise our marketing measures. This data cannot be used to identify any persons, because it is only collected on the basis of a cookie ID. The cookie ID, in turn, cannot be linked to an IP address because the IP address will have been anonymised immediately before the Adform cookie is set.
  
  The cookie is deleted after 60 days.
  
  The legal basis for this application is Art. 25 (1) TTDSG. You can withdraw your consent at any time at  https://site.adform.com/de/privacy-center/platform/widerrufsrecht/. In this case, the opt-out cookie “C” will be set with a value of “3”, which will block user interactions up until the cookie expires. The cookie is deleted after 3650 days.
  

• Count server
  In order to establish whether an advertisement on a third-party website has led to a purchase from Sparkasse, sparkasse.de uses a so-called “count server”.
  
  If you click on a Sparkasse advertisement on a third-party website, you will be taken to a landing page with more information on the advertised product. The landing page for all Sparkassen adverts is sparkasse.de, from which users are then forwarded to their local Sparkassen website. You will be asked to consent to the use of the campaign measurement system before you will be able to access the contents pertaining to the advertised product on sparkasse.de. Once you have given your consent, a “zs_aff” cookie with a random ID will be set that allows us to manage and optimise our marketing measures. This data cannot be used to identify any persons, because it is only collected on the basis of a random ID.
  
  The cookie is deleted after 30 days.
  
  The legal basis for this application is Art. 25 (1) TTDSG. You can withdraw your consent for this cookie at any time under “Update cookie settings” on sparkasse.de.
  

4. Third-party applications

• YellowMap
  This website uses SmartMaps, a service provided by YellowMap AG, CAS-Weg 1-5, 76131 Karlsruhe, Germany, for displaying maps. This service makes it possible to display interactive maps directly on the website and for users to use these maps. In order to be able to provide the maps, YellowMap will be processing your IP address as well as range of other technical data. The data YellowMap collects will only be used for creating the map and deleted after 10 minutes. YellowMap does not use any cookies.
  
  For more information on the purpose and scope of the data collected and its processing by YellowMap can be found at https://www.smartmaps.net/datenschutz/.
  
  This page also contains more information on your rights concerning the above.
  
  The legal basis for processing your data is Art. 6(1)(1)(b) GDPR.
  
  
  

• Live Chat
  The "Live Chat" feature provided on this website can be used to contact your Sparkasse. The live chat feature is a service provided by talkevent Software GmbH, Carlswerkstr. 13b, 51063 Cologne, Germany, on behalf of your Sparkasse. In order to prevent misuse, the following data is stored when using the chat assistant in addition to the information you enter:
  
      - IP address
      - Date and time
  
  The above data and the information exchanged through the chat function are not used for any other purposes.
  
  The legal basis for processing this data is Arti. 6(1)(1)(b)(f) GDPR. The chat data will be deleted after a maximum of 90 days.

• Chatbot “Linda”
  You can also use the chat function to ask our chatbot Linda any questions you may have. Linda is operated by Sparkassen-Finanzportal GmbH, Friedrichstraße 50, 10117 Berlin on behalf of your Sparkasse.
  
   The use of Linda does not require the provision of any personal data and we would like to ask you to refrain from entering any such data. The legal basis for processing this data is Art. 6(1)(1)(b)(f) GDPR. The logs of any chats held with Linda will be deleted after a maximum of 90 days.

• Newsletter
  On this website, you can also subscribe to your Sparkasse's newsletter, through which it will provide you with information on the latest promotions and news. Your Sparkasse will only send you the newsletter with your consent or where legally permitted. The technical service provider appointed by your Sparkasse to provide this service is Sparkassen-Finanzportal GmbH, Friedrichstraße 50, 10117 Berlin, Germany.
  
  Subscribing to the newsletter involves a double-opt-in procedure. The first opt-in comprises your confirmation of an activation email sent to the email address you provided after registering. If you fail to confirm your activation email within the period of time set out in the email, your information will be automatically deleted. Your email address will only be saved for the purpose of sending you the newsletter if you confirm the activation email within the specified period of time.
  
  Your Sparkasse will furthermore store your IP address and the time of registration and confirmation respectively. The reason for this is to retain evidence of your registration and to be able to clarify any potential misuse of your personal data.
  
  You can opt-out of your email address being used for the distribution of the newsletter, i.e. unsubscribe at any time. The link for unsubscribing can be found at the end of every newsletter.
  
  The legal basis for processing this data is Art. 6(1)(1)(a)(b) GDPR.
  
  Sparkasse is constantly working on improving its newsletter service. As part of this, Sparkasse measures and analyses newsletter open and click rates. Open rates provide information on the percentage of newsletter recipients who have actually opened and hence read the newsletter. Click tracking makes it possible to track which and how often the links included in the newsletter are clicked. These analyses can be used to create targeted newsletters with contents that are of actual interest to their recipients.
  
  The legal basis for processing this data is your consent in accordance with Art. 25(1) TTDSG.
  
  You can withdraw your consent at any time under the “Manage” tab in the newsletter login section on the website, or the “Edit details” link in the newsletter.
  

Your information will only be shared with third parties insofar as you have consented to this or where we have a legal obligation to do so. In particular such recipients may include:

• Law enforcement
• Other Sparkassen Finance Group companies

Our service providers may also receive such data if they meet Sparkasse's special confidentiality requirements. In particular, these may include IT service providers, consulting services and companies in sales and marketing. The appropriate data protection agreements will be arranged with these service providers.

Should the data mentioned in this policy no longer be required for its original purpose, it will be deleted. In the event that the further processing of the data is – temporarily – required for other purposes, this will not apply.

Insofar as the storage period defined for individual services differs from the above, this information will be available in the description for each service.

As a rule, the data we collect when you visit this website is not transmitted to international organisations or third countries (states outside the European Economic Area -EEA). For more information on the possible transmission of pseudonymised data by analysis services, please see the section "Analytical cookies".

You have the following rights concerning your personal information held by Sparkasse:

• The right to information
• The right to rectification or deletion
• The right to restriction of processing
• The right to data portability
• The right to object or to withdraw consent

Information about your right to object in accordance with Art. 21 GDPR

1. Case-specific right to object

You have the right to object at any time, on grounds relating to your own particular situation, to the processing of your personal data based on Art. 6 para. 1 lit. e) GDPR (processing carried out in the public interest) or Art. 6 para. 1 lit. f) GDPR (data processing necessary for pursuing the legitimate interests of the controller); including profiling based on these provisions as defined by Art. 4 para. 4 GDPR.

Should you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for such processing which outweigh your personal interests, rights and freedoms; or where such processing serves in the establishment, exercise or defence of legal claims.

2. Objection to the processing of your data for the purposes of direct marketing by Sparkasse

In individual cases, we process your personal information for the purposes of direct marketing. You have the right to object at any time to the processing of your personal data for such marketing; this includes profiling insofar as it is related to such direct marketing.

Should you object to the processing of your data for direct marketing purposes, we will no longer process your personal data for such purposes.

The objection need not follow a particular form and should be addressed to:

Sparkasse Krefeld
Ostwall 155
47798 Krefeld
Deutschland
info@sparkasse-krefeld.de

You also have the right to lodge a complaint with the following supervisory authority regarding the processing of your data:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen

Postfach 20 04 44 
40102 Düsseldorf 

Tel.: 0211/38424-0 
Fax: 0211/38424-999 
E-Mail: poststelle@ldi.nrw.de

The data collected from visits to this website is not used for automated decision making as defined by Art. 22 GDPR.