Data privacy notice

Privacy notice for website users

Privacy Policy of İŞBANK AG, Zeil 123, 60313 Frankfurt am Main

İŞBANK AG appreciates your visit to our website and your interest in our company. We take your privacy seriously and want you to feel secure when visiting our website. We process personal data collected from visits to our website in accordance with the requirements of the EU General Data Protection Regulation (GDPR) and data protection law in the Federal Republic of Germany.

Any personal data which you provide to us are treated with the level of care customary in banking and in accordance with data protection law. They are not used for any other purpose or shared with third parties. For your security, please send us any confidential information by post.

When designing this website, we have undertaken to comply with the aforementioned applicable legal regulations in the interests of privacy and data security. We wish to make you aware below of the circumstances in which we require information from you, how we use this and to whom we may make this available in order to fulfil a particular purpose (intended use). 

This Privacy Policy only applies to the publicly accessible part of the website: www.isbank.de.

1.Which data concerning you do we collect and process?

Personal data: Personal data are information which can be used to identify a person, i.e. information which can be traced back to a particular individual. This website collects and processes personal data as follows:

(a) Logging, access data/server log files (provider):

Your visit to our website is logged. We collect your computer’s current IP address, the web pages visited, your browser type, the date and time and your computer’s operating system. These data are only collected for the purpose of data security and are not used for any other purpose. 

When you visit our website, our web servers store the IP address of your Internet service provider, the website from which you visited us, the pages of our website which you visited and the date and duration of your visit by default. This information is absolutely necessary for technical transmission of the website and secure server operation. There is no personalised analysis of these data. 

(b) Email: If you send us data via email, these are stored/archived on our servers during data backup. We only use your data to deal with your request. We store and collect your data in a database and treat them as strictly confidential in compliance with data protection law and other legal requirements.

(c) Cookies: A cookie is a data element which a website may send to the browser for storage on the user’s system, e.g. for the purpose of connection control during the visit to the website or for statistical analysis. When users access the website, one or more cookies are stored on their computer. A cookie is a small file that contains a particular character string and uniquely identifies your browser. Cookies help the provider improve the convenience and quality of its service, such as by storing user settings. Cookies do not damage a user’s computer or contain viruses. We store a permanent cookie on your computer in order to facilitate access to our website and for statistical analysis. However, no data are stored on the cookie. You can change your browser settings to either prevent cookies being placed or so that you are notified when cookies are received. You can then decide whether to accept or reject the cookie. If you reject the cookie, then you will not be able to make full use of certain features of our website, such as the search and request functions. You should allow the cookie to be set on your system if you wish to use all of the features of our website. After you have left our website again, you may delete the cookie from your system at any time.

(d) Google Analytics: On our website we use the analyze tracking tool Google Analytics (GA) of the American company Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). Google Analytics collects data about your actions on our website. For example, when you click on a link, this action will be stored in a cookie and sent to Google Analytics. The reports we receive from Google Analytics help us to best adapt our web site and service to your needs.

The use is based on Article 6 (1) (1) (f) of the European Union General Data Protection Regulation (DSGVO). Google Analytics uses "Cookies", that are small text files placed on your computer which allow an analysis of your use of the website. The information created by the cookie on your use of the website, such as your

• Browser type / version,

• Operating system in use,

• Referrer URL (the page visited before),

• Host name of the accessing computer (IP address),

• Time of server request,

are usually transferred to and stored on a Google server in the USA. The IP address transmitted by your browser as part of Google Analytics will never be associated with any other Google data. We have also extended Google Analytics on this website with the code "anonymizeIP” This assures the masking of your IP address so that all data is collected anonymously. Only in exceptional cases the full IP address will be transferred to a Google server in the USA and shortened there.

You can prevent the storage of cookies by selecting the appropriate settings in your browser software. However, we would like to point out that deactivation may mean that you cannot use our website or cannot use it to its full extent.

Furthermore, you can prevent the collection of the data created by the cookie and related to your use of the website (incl. your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de. As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by revoking your consent under the item "Privacy settings".

(e)Google Tag Manager: On our website we use Google Tag Manager. Google Tag Manager is a service of the Google Inc. (Google), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Ireland Ltd, Gordon House, Barrow Street Dublin 4, Ireland is responsible for all Google services in Europe. We have the ability to integrate different codes and services systematically and simplified on our website by Google Tag Manager. The Google Tag Manager implements the tags or triggers the embedded tags. Google may process information, possibly including personal data, when a tag is triggered. It is possible that Google also transmits the information to a server in a third country. Read more in the Google Tag Manager Help at https://support.google.com/tagmanager/?hl=de#topic=3441530.

Especially online identifiers including cookie identifiers and IP addresses will be processed by the Google Tag Manager. With regard to the use of the Google Tag Manager, we have concluded a data processing agreement with Google (Art. 28 DSGVO). Google processes the data on our behalf in order to activate the stored tags and to display the services on our website. Google may also transfer this data to third parties if necessary, provided that this is legally mandated or insofar as third parties have been commissioned by Google to process this data.

If you have deactivated single tracking services, e.g. by enabling an opt-out cookie, the deactivation remains effective for all relevant tracking tags that are involved by the Google Tag Manager. By involving the Google Tag Manager, we pursue the goal to integrate various services in a simplified and intelligible manner. Beyond that, the integration of the Google Tag Manager optimizes the loading times of various services.

For the use of the Google Tag Manager, consent is required. You grant this consent in the cookie banner.

The legal basis for the data processing is your consent according toArt. 6 (1) (a) of DSGVO.

For data transfers to the USA, there is no adequacy decision adopted by the EU Commission. Google LLC has assured us of compliance with data protection legislation by means of the European Union's standard contractual clauses. You will find further information on Google's privacy policy at: https://www.google.de/policies/privacy/.

You have the right to object. You have the option to prevent all Google Tag Manager tags from being submitted. You only have to click on this Opt-Out-Link to store the Google Tag Manager deactivation cookie in your browser. However, we would like to point out that deactivation may mean that you cannot use our website or cannot use it to its full extent. The processed information is only stored for as long as necessary for the intended purpose or as legally required.

The provision of personal data is neither legally nor contractually mandatory and is also not even required for the conclusion of a contract. You are also not obliged to provide the personal data. Failure to provide them, however, in some circumstances, would restrict the use all the functions of this website to its full extent.

(f) Google Ads: We use on our website „Google Ads Conversion-Tracking“ of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). This is the subsidiary of the Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 („Google“) in the USA.

We use the Google Ads service to promote our products on external websites. The conversion tracking cookie is set on your browser only when you click on an ad delivered by Google. If you then visit particular pages of our website and the cookie is still active, Google and we can recognize that you have clicked on the ad and have been linked to this page. As the operator of this website, we have the ability to analyze this data quantitatively. Personal data will not be transmitted in the process.

The legal basis for the data processing is your consent according toArt. 6 (1) (a) of DSGVO.

For data transfers to the USA, there is no adequacy decision adopted by the EU Commission. Google LLC has assured us of compliance with data protection requirements through the standard contractual clauses of the European Union. You will find further information on Google's privacy policy at: https://www.google.de/policies/privacy/.

We have obtained your consent for the above processing pursuant to Art. 6 (1) (a) of DSGVO. By clicking on our "Cookie Settings", you can revoke your consent for Google Ads at any time.

2.How do we collect your data and on what basis?

We collect data directly from you. We do not collect data from third parties. This website only collects data from cookies and other data for web tracking with your consent, which you can provide via the pop-up that appears the first time you visit the website.

Change Cookie-Configuration

3.For how long do we store your data?

We only store the personal data you provide to us for as long as we need these to fulfil the purposes for which these data were provided or as long as is required by law (HGB, AO, TKG, TMG, StGB, KWG).

4.With whom do we share your data?

We neither sell nor market your personal data to third parties nor share them with third parties for any other reason. We do not share the information generated through the cookie regarding your use of this website with third parties.

5.How are your data protected?

İŞBANK AG has put technical and organisational security measures in place to protect your personal data against accidental or unlawful erasure, alteration, loss and unauthorised disclosure and access. Our employees sign a written agreement to comply with legal provisions, rules of confidentiality and data protection law. 

6.What are your rights?

As a data subject in respect of our data processing, you have certain rights which we wish to make you aware of below:

(a) Right of access: You have the right to obtain a copy of the personal data concerning you that has been collected.

(b) Right to rectification: You have the right to request that incorrect personal data concerning you be completed or rectified if these are inaccurate or incomplete.

(c) Right to erasure: You have the right to obtain the erasure of data concerning you if certain grounds apply. However, this only applies if we do not require your data any more to perform contracts concluded with you.

(d) Withdrawal of consent: In general, we only process your data in order to perform a contract and do not ask you for consent for any processing beyond this. However, if you have consented to us carrying out further processing on your personal data in a specific instance, you may withdraw this consent and prevent any further data processing provided that no other relevant permission is required to be issued for this. This right to withdraw consent does not cover data we store in order to perform a contract.

(e) Right to restriction of processing: You may obtain the restriction of processing of certain personal data while a complaints procedure is under way or for other specific reasons.

(f) Right to data portability: You may request that we electronically transfer your personal data which you have provided to us and which we still have stored to another controller.

(g) Right to lodge a complaint: You may complain to our data protection officer and the relevant supervisory authority about our data processing. You will find the contact details for these in the next section.

Please note that there are also exceptions with regard to the above rights and you may therefore not be able to fully exercise these rights in every situation.

7.Whom should I contact if I have a complaint or question?

(a) Data protection officer

Contact via email If you have questions or suggestions regarding this Privacy Policy, please contact the appointed data protection officer for İŞBANK AG at Datenschutz@isbank.de. This email address can also be used if you have concerns regarding compliance with our rules of conduct. 

Contact via mail:

İŞBANK AG

attn.: Data Protection Officer

Zeil 123

60313 Frankfurt am Main

Contact via email 

İŞBANK AG

attn.: Data Protection Officer

Datenschutz@isbank.de

(b) Relevant supervisory authority

Der Hessische Datenschutzbeauftragte

Postfach 3163

65021 Wiesbaden

Email: Poststelle@datenschutz.hessen.de

Internet:https://datenschutz.hessen.de

8.Updating the Privacy Policy

Ongoing technical advances in the area of IT technology/security and the Internet may also require this Privacy Policy to be amended. Therefore, we reserve the right to make additions or changes to this Privacy Policy without prior notice. 

Frankfurt, 27.07.2023