Privacy Notice in Accordance with the EU General Data Protection Regulation
Last updated: January 2019
The purpose of this Privacy Notice is to inform you about the personal data that we may collect about you, how we use it, and what legal rights you have regarding your personal data.
1. Who is legally responsible for handling your personal data and who can you contact about this?
In data protection law terminology, this is the “controller”, namely:
Deutsche Bank AG (“DB”)
Taunusanlage 12
60325 Frankfurt am Main
Phone: +49 (0)69 910-10000
Fax: +49 (0)69 910-10001
Email address: deutsche.bank@db.com
Our internal data protection officer may be contacted at:
Deutsche Bank AG
Data Protection Officer
Taunusanlage 12
60325 Frankfurt am Main
Phone: +49 (0)69 910-10000
Email address: artculturesports.mailbox@db.com
2. What personal data do we collect about you and where do we get it from?
We process personal data that we receive from you in the context of running our exhibitions, events, guided tours and our coaching and training programs (e.g. SportPopulaire), as well as in the context of admission to our exhibitions and events (e.g. annual pass). We may also process personal data that we obtain from publicly available sources (e.g. information published at events or in the media) but only insofar as it is appropriate and lawful to do so. Relevant personal data may include title, first name, surname, company, position, address, and other contact details (such as your phone number and email address).
3. What do we use your personal data for and on what legal basis is this allowed?
We process the personal data described above in compliance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG). The legal bases we rely on to process your personal data are:
a) To fulfill contractual obligations (article 6 (1)(b) GDPR)
Personal data may be processed to deliver coaching and training services, for provision of admission to our exhibitions and events in the context of the implementatin of our contracts with you, or to implement pre-contractual measures on request.
b) For the purpose of our legitimate interests (article 6 (1)f GDPR)
As a bank we process your personal data to fulfill our legitimate interests, namely to promote art, culture, and sports.
c) On the basis of your consent (article 6(1)(a) GDPR)
Where you have given us consent to process your personal data for specific purposes (e.g. so that we can provide you with our newsletter or information about events, tours, and workshops), the lawfulness of such processing is based on your consent. You may withdraw consent at any time after you have given it, including where consent was given prior to the entry into force of the GDPR. This would not affect the lawfulness of DB’s prior use of that information.
4. Who do we disclose your personal data to?
Within DB, only staff who need access to your data for the purposes described above will have access to it. Similarly, DB’s agents and service providers will be given access to your data where necessary for such purposes, e.g. event management companies. We have written contracts in place with such third parties requiring them to comply with our instructions and with data protection obligations.
5. How long will your personal data be stored?
We will retain your personal data for as long as necessary for the fulfillment of our contractual or legal obligations. If the data is no longer needed to fulfill contractual or legal obligations, it will be deleted on a regular basis, unless their – temporary – further processing is necessary for the following purposes:
- Fulfillment of trade and tax retention periods. The periods specified for storage or documentation can be up to ten years.
- Preservation of evidence in the context of the statute of limitations. Pursuant to articles 195 ff. of the German Civil Code (GCC) such periods can last up 30 years, though the regular limitation period is three years.
6. What rights do you have concerning your personal data?
Every person affected has the right to access their personal data in accordance with article 15 of the GDPR, the right to have their personal data erased in accordance with article 17 of the GDPR, the right to restriction of processing of their personal data in accordance with article 18 of the GDPR, the right to object to the processing of their personal data in accordance with article 21 of the GDPR (see section 8(1) below), as well as the right to data portability in accordance with article 20 of the GDPR. You are entitled to modify or withdraw your consent for the collection, use, and disclosure of your personal data (see section 3(c) above) and to lodge a complaint with a data protection regulator about how we handle your personal data (article 77, GDPR, and section 19, BDSG).
7. Do you have an obligation to provide data?
You are required to provide personal data that is needed to prepare and implement a contract.
8. Information on your right to object in accordance with article 21 of the GDPR
1. Right to object in individual cases
You have the right to object to the processing of your personal data where we do this in accordance with article 6(1)(e) GDPR (data processing carried out in the public interest) and article 6(1)(f) GDPR (for purposes of our legitimate interests).
If you lodge an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your rights and interests or else we need to process the information in connection with a legal claim.
There are no formal requirements for lodging an objection; where possible it should be made by telephone to +49 (0)69 910 10000 or by email to artculturesports.mailbox@db.com
2. Right to object to processing of data for marketing purposes
In individual cases we may process your personal data to carry out direct marketing. You have the right to object at any time to the processing of your personal data for the purposes of such marketing.
If you object to the processing of your personal data for purposes of direct marketing, we will no longer process your personal data for these purposes.
There are no formal requirements for lodging an objection; where possible it should be made by telephone to +49 (0)69 910 10000 or by email to artculturesports.mailbox@db.com