Data Protection

Please note our Landesbank Baden-Württemberg data protection declaration. You will also find the information on visiting and using our Internet pages and our current data protection information for individual business areas. We have compiled this information for you below and on other pages.

Responsible office

The lbbw.de platform is operated under the content responsibility of:

Landesbank Baden-Württemberg
Am Hauptbahnhof 2
70173 Stuttgart

Postfach 10 60 49
70049 Stuttgart

Phone +49 711 127 0
Fax +49 711 127 43544
kontakt@lbbw.de

Further details can be found in the Publishing Information.

Data Protection Principles

Landesbank Baden-Württemberg
Am Hauptbahnhof 2
70173 Stuttgart

Postfach 10 60 49
70049 Stuttgart

Phone +49 711 127 0
Fax +49 711 127 43544
kontakt@lbbw.de

Further details can be found in the Publishing Information.

Data Protection Officer of
Landesbank Baden-Württemberg
Am Hauptbahnhof 2
70173 Stuttgart

Phone +49 711 127 0
Fax +49 711 127 76752
datenschutz@lbbw.de

As the controller for the processing of your personal data, protecting your personal data and your privacy are matters of the utmost concern to LBBW in processing your data. We therefore take the protection of your personal data very seriously.

Personal data means all (personal and factual) information that relates to a known or identifiable natural person (= data subject). For example, such data include your name, address, e-mail address and telephone number.

We only process your personal data if we have a legal basis as referred to in Article 6 of the General Data Protection Regulation (GDPR) for the processing of personal data. The data protection requirements are checked internally, e.g. by the internal audit department, and externally, e.g. by supervisory authorities.

The further data protection declarations below provide more information on the processing of your personal data in conjunction with individual processing activities.

LBBW processes and stores your personal data for as long as you maintain a business relationship with us, are in (business) contact with us or are authorized to represent us. If the data is no longer required for the fulfillment of contractual or legal obligations or if there is no other data protection-compliant reason for processing, it will be deleted regularly, unless its temporary further processing is required for the following purposes:

• Fulfillment of commercial and tax law deadlines to which LBBW is subject. These result, among other things, from the German Commercial Code (HGB), the German Fiscal Code (AO), the German Banking Act (KWG), the German Money Laundering Act (GwG) and foreign trade regulations. The retention and documentation periods specified there are two to ten years.

• Preservation of evidence within the framework of the statute of limitations. According to §§ 195 ff. of the German Civil Code (BGB), these limitation periods can be up to 30 years, whereby the regular limitation period is 3 years. If you have previously objected to the processing for the purpose of maintaining contact or have revoked the processing, we will no longer store your data, unless the aforementioned statutory retention or documentation obligations take precedence.

As a fundamental cornerstone for strengthening governance for data protection risks, the “Data Protection Mandate” became part of the “Compliance Mandate” which is approved by the Board of Managing Directors. This mandate forms the basis for the alignment of the data protection function. It defines the roles and responsibilities of Data Protection and formulates the risk policy principles, which are based on the strategic orientation and objectives of LBBW.

Guidelines and guiding principles of the data protection organization

1. Protection of rights to privacy and freedom

The protection of personal data and the safeguarding of rights to privacy and freedom of our clients, employees and other persons related to LBBW and the LBBW Group are the main objectives of all companies in the LBBW Group. These is taken into account for all workflows, products, business areas and innovative services.

2. Confidential and secure handling of data

The entire Group adheres to the principles of the GDPR for the purposeful and transparent handling of personal data, which also ensures the availability, integrity and confidentiality of personal data for all workflows and business processes. Active protection of data ensures the trust of our clients, employees and business partners, which is the basis for successful, long-term, values-oriented business relationships.

3. Protection of business interests

The business interests of LBBW are harmonized with the interests of our employees and clients. To ensure that this includes personal data, the Data Protection organization of LBBW provides assistance as mandated by law and advises the data controllers.

4. Central provider management

LBBW uses numerous providers for its business operations. To protect our clients’ and employees’ rights to privacy, we select only those providers who respect the requirements and values of LBBW. Our providers must have the same high standard for data protection that LBBW upholds. Therefore, we also perform provider audits (under the law).

5. Uniform data protection in the Group

The LBBW Group maintains a uniform level of data protection. This allows for central Group risk management of the data protection risk, thereby reducing legal risks that could arise from different interpretations of regulatory requirements within LBBW, for instance. This also ensures equal treatment of personal client and employee data as well as data transfer within the LBBW Group, taking account of country-specific regulations.

In light of the harmonized requirements of the GDPR within the EU, Group entities that are located in the EU’s jurisdiction already ensure the same data protection framework. The central requirements from the LBBW Data Protection organization must be observed by all Group entities within the EU. There may be differences in national legislation if the law provides flexibility under the GDPR.

Furthermore, the LBBW Group must ensure a uniform level of data protection that adheres to the requirements of Art. 46 (2) GDPR. Standard EU contractual clauses are agreed with subsidiaries outside the EU. For the branches and representative offices, these EU standard contractual clauses are a binding set of rules. Data is transferred on this basis to branches and representative offices.

6. Central risk management

The LBBW Data Protection function is therefore in charge of monitoring, assessing and managing the relevant data protection risks above and beyond its legal obligations. With this in mind, it will ensure that the responsible subject owners make the appropriate decisions.

a. Rights of data subjects according to Art. 15 - 20 GDPR

You have the right to receive information in accordance with Article 15 GDPR, the right to rectification in accordance with Article 16 GDPR, the right to erasure in accordance with Article 17 GDPR, the right to restrict processing in accordance with Article 18 GDPR and the right to data portability in accordance with Article 20 GDPR. The restrictions contained in section 34 and section 35 of the Bundesdatenschutzgesetz (BDSG – German Federal Data Protection Act) apply to the right to receive information and the right to request erasure. Furthermore, you have the right to lodge a complaint with a supervisory authority in accordance with Article 77 GDPR in conjunction with section 19 BDSG. The data protection supervisory authority responsible for LBBW is „Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg“.

b. Right of withdrawal pursuant to Art. 7 para. 3 GDPR

If you have consented to us processing your personal data, you have the right to revoke your consent at any time. Revoking your consent does not affect the legality of the processing of your personal data prior to your consent being revoked. It also does not affect further processing of these data on another legal basis, for instance for compliance with a legal obligation (cf. “Legal basis for processing”).

c. Right to object pursuant to Art. 21 GDPR

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Article 6(1) (e) GDPR (data processing in the public interest) or Article 6(1) (f) GDPR (data processing based on the consideration of interests). If you object, we will only continue to process your personal data to the extent that we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or that the processing is used for the establishment, exercise or defense of legal claims.

We always ensure a high level of security when we collect or process your data. LBBW uses effective technical and organizational measures to ensure the security of your data. This enables us to protect your data against manipulation, loss, destruction or access by unauthorized persons. We are constantly improving our security measures and adapting them to the latest technological developments. We have a functioning and reliable internal incident process for security incidents.

We also use service providers to process your personal data. These are carefully selected and must meet LBBW's strict minimum requirements. The necessary data protection agreements are concluded with them, e.g. by means of an order processing agreement, in order to ensure that processing complies with data protection regulations throughout. We only receive personal data from third parties or transfer it to third parties if there is a legal basis for the processing. We do not sell personal data to third parties for advertising purposes.

The security and integrity of your personal data is important to us, which is why our employees are regularly sensitised and trained on the subject of data protection.

a. We typically process your personal data within the European Economic Area (EEA). Data are only transferred to third countries (outside the EEA) to the extent necessary to carry out your customer orders, for the purposes of our service relationship or for the purposes of potential/current/former employment, if prescribed by law or if you have given us your consent. If service providers in a third country are used, they are obliged to comply with the data protection level by the agreement of EU standard contractual clauses, in addition to written instructions, or this is a safe third country recognized by the EU.

If required by law, we will inform you of the details separately.

b. The following countries are considered by the EU to have an appropriate level of protection for the processing of personal data in line with EU standards (adequacy decision): Andorra, Argentina, Canada (limited), Faeroe Islands, Guernsey, Israel, Isle of Man, Japan, Jersey, New Zealand, Switzerland, Uruguay. In order to establish an appropriate level of protection in line with statutory requirements, we agree the application of EU standard contractual clauses or binding corporate regulations with recipients in other countries.

Do you have any questions about the processing of your personal data or data protection in general? Do you have any suggestions or a concern? If so, please feel free to contact our Data Protection Officer. You should also contact him if you wish to exercise your rights to information, erasure or data portability.

The contact details can be found under 2. above (Data Protection Officer).

Data protection declaration on the LBBW homepage

We are delighted by your visit to our website and your interest in our services. As the controller for the processing of your personal data, protecting your personal data and your privacy are matters of the utmost concern to LBBW in processing your data. We therefore take the protection of your personal data very seriously.

Given the rapid pace of technological development, we will have to make adjustments to our data protection declaration on the LBBW homepage from time to time. The current version of the data protection declaration will always be available on this page. All changes to the data protection declaration have future effect only. We will not amend these policies retroactively, unless this is required by law.

The lbbw.de platform is operated under the content responsibility of:

Landesbank Baden-Württemberg
Am Hauptbahnhof 2
70173 Stuttgart

Postfach 10 60 49
70049 Stuttgart

Phone +49 711 127 0
Fax +49 711 127 43544
kontakt@lbbw.de

Further details can be found in the Publishing Information.

a. When you visit our websites, we save certain information on the browser and operating system you use, the date and time of your visit, the access status (e.g. whether you were able to access a website or were shown an error message), the use of the website’s functions, the search terms you may have entered, the frequency with which you access individual websites, the names of files retrieved, the data volume transferred, the website from which you came to our websites and the website you go to after leaving our websites, whether by clicking on the links on our websites or by entering a domain directly in the input field of the same tab (or the same window) of the browser with which you opened our websites. Also, for security reasons, in particular to prevent and detect attacks on our websites or attempts at fraud, we save your IP address and the name of your Internet service provider for a duration of seven days.

Please read the information provided below to learn more about the cookies used.

b. We only store other personal data if you provide us with these data, e.g. when registering, using a contact form, completing a survey, entering a contest or to carry out a contract, and – even in these cases – only to the extent that we are allowed to do so because you have given your consent or in accordance with the applicable legal provisions (further information on this can be found under “Legal basis for processing”).

c. You have no statutory or contractual obligation to provide your personal data. However, it is possible that certain functions of our websites are dependent on you providing personal data. If, in these cases, you do not provide your personal data, this can result in functions being limited or unavailable.

a. We use the personal data collected when you visit our websites to make them as convenient as possible for you and to protect our IT systems against attacks and other illegal activities.

b. If you provide us with further personal data, e.g. when registering, using a contact form, completing a survey, entering a contest or to carry out a contract, we use these data for the stated purposes, for customer management purposes and – if necessary – for the purposes of processing and billing any business transactions, to the necessary extent in each case.

a. When linking to social networks (Facebook, Twitter, Google Plus), we use social plugins to make it easier to share or access content on the social networks. We use technical solutions that ensure that contact is not established with the servers of social network operators unless the social plugin is activated. You do not grant permission to transfer data to the social network until you activate the deactivated social plugin. Data are transferred to third parties when it is activated.

No data are transferred to social network operators without your activation.

Information on the data protection provisions of the social networks can be found as follows

b. Videos saved on YouTube are embedded on some of our websites. YouTube is a service provided by the US company Google Inc. “Advanced data protection mode” has been activated for all YouTube videos on our websites. Advanced data protection mode is provided by YouTube and ensures that YouTube does not store any cookies with personal data on your computer as long as a video is not clicked on and played via the YouTube video player. The IP address is transferred to access websites and to embed videos. This cannot be associated with you unless you are signed in to YouTube or another Google service before viewing the page or unless you are permanently signed in.

As soon as you start playing the embedded YouTube video by clicking on it, advanced data protection mode means that YouTube can only install cookies on your computer that do not contain any personally identifiable data. These cookies can be prevented by the appropriate browser settings and extensions.

Further information on the use of YouTube videos can be found in YouTube’s data protection notices.

We wish to continuously improve the content of our website in line with your interests. In order to identify usage procedures, we use Matomo, an open source software for the statistical analysis of visitor access. Matomo uses cookies, i.e. text files stored on your computer that allow the analysis of how you use the website. The information generated by cookies about your use of this website is stored on our web servers in Germany. The IP address is anonymized immediately after processing and before being stored. You can prevent the installation of cookies with the appropriate settings in your browser software or deactivate data collection by Matomo here.

Please note that the deactivation cookie of this website will also be deleted if you remove the cookies placed in your browser. Also, you will have to do the deactivation again if you use a different computer or a different web browser.

Thank you for your support.

Web analytics is now disabled.

We work with several advertising partners to use retargeting technology. This technology also saves cookies for these partners (third-party cookies) on your hard drive when you visit our website. These are permanent or temporary cookies that are automatically deleted after a defined period. Our partners’ cookies also do not save personal data and do not serve to identify individual visitors. In the context of the delivery of advertising content, the following technical measurement criteria are saved using an anonymous ID:

advertising contacts

  • frequency cap (number of advertising contacts)
  • browser (e.g. Firefox, Safari, Internet Explorer)
  • operating system (e.g. Windows, Macintosh, etc.)
  • date and time of ad delivery
  • number of ad impressions
  • number of clicks
  • post tracking data

Facebook users should be aware that this website uses the communication tool Website Custom Audiences by Facebook. This means that Facebook pixels are integrated on our websites, which mark you as a visitor to our website in an anonymous form, i.e. without identifying you as a person. If you subsequently log in to Facebook, a non-reversible and thus non-personal checksum (profile) from your usage data is sent to Facebook for analysis and marketing purposes. Further information on the purpose and scope of data collection, further processing and the use of data by Facebook and your setting options to protect your privacy can be found in Facebook’s data protection policies, which you can find at https://www.facebook.com/privacy/explanation. If you wish to object to the use of Facebook Website Custom Audiences, you can do so at https://www.facebook.com/ads/website_custom_audiences.

You can object to the storing of cookies at any time by refusing to accept cookies in your browser settings. This is normally done by selecting “Do not accept cookies” in your browser settings. For further details, please use your browser’s help function. You can delete the cookies saved on your computer at any time without this having any negative effect on the use or functions of our website.

In accordance with section 15 of the current version of the Telemediengesetz (German Telemedia Act), as a visitor to website, you have the right to object to the storage of your (anonymously collected) visitor data for future effect as well. To do so, use the following link: Opt Out bei Adition

We always ensure a high level of security when we record or process your data. LBBW uses effective technical and organizational measures for the security of your data. We thereby protect your data against manipulation, loss, destruction or access by unauthorized parties. We are continuously improving our measures for your security, and always adapting them in line with the latest technological developments.

Please also refer to our security information.

a. If you subscribe to the newsletter offered on our website, that data you enter to sign up for the newsletter will only be used to send the newsletter, unless you agree to further use. You can cancel your subscription at any time using the option provided in the newsletter.

b. If you send us an e-mail or a message on a contact form, we will store and use your data. Such data include your name, date of birth, address, e-mail address and telephone number. However, we only use your data for our services and to communicate with you. The contact forms available on our website transfer your data to us securely.

Please note: If you send us personal data in an e-mail, it may be that your e-mail does not have transport encryption, which means that unauthorized parties could theoretically read or falsify your data. Please contact your e-mail provider for further information.

The BW-Bank branch finder uses the Google Maps API service from Google Inc. to find BW-Bank branches and Sparkasse ATMs and display them on an interactive map. When using Google Maps, information about the use of our website, including your IP address, is sent to Google servers in the US and stored there. In its own data protection declaration, Google undertakes not to share information with third parties, but makes exceptions to this. The data thus collected can therefore be transferred to third parties if this is required by law in the US or if third parties process the data on behalf of Google. A link to Google Inc.’s data protection declaration can be found here: https://www.google.com/policies/privacy

The fact that we cannot influence the fate of your data and that data are transmitted to the US is not unproblematic from a data protection law perspective. Given the risks this entails to your data, you have the option of deactivating the Maps service and stopping data from being sent to Google. To do so, disable JavaScript in your browser. If you do so, you will no longer be able to use the branch finder.

a. If you have given us your consent to process your personal data, this constitutes a legal basis for processing (Article 6(1) (a) GDPR).

b. Article 6(1) (b) GDPR provides a legal basis for the processing of your personal data for the purposes of initiation or discharge of a contract with you.

c. If the processing of your personal data is necessary for compliance with a legal obligation (e.g. to retain data), we are authorized to do so in accordance with Article 6(1) (c) GDPR.

d. We also process personal data for the purposes of our legitimate interests or the legitimate interests of third parties in accordance with Article 6(1) (f) GDPR. Maintaining the functionality of our IT systems, the marketing of our own and third-party products and services and the legally required documentation of business contacts are such legitimate interests. When weighing interests as necessary, in particular we consider the nature of the personal data, the purpose and circumstances of processing and your interest in the confidentiality of your personal data.

For security reasons, we delete your IP address after 100 days. We store the name of your internet service provider without reference to your IP address. Moreover, we erase your personal data as soon as the purpose for which we gathered and processed your data no longer applies. Data are only stored after this time to the extent required by the laws, regulations or other legal provisions to which we are subject in the EU or legal provisions in third countries that have an appropriate data protection level. If erasure is not possible in an individual case, the corresponding personal data are marked with the aim of restricting their future processing.

a. Rights of data subjects according to Art. 15 - 20 GDPR

You have the right to receive information in accordance with Article 15 GDPR, the right to rectification in accordance with Article 16 GDPR, the right to erasure in accordance with Article 17 GDPR, the right to restrict processing in accordance with Article 18 GDPR and the right to data portability in accordance with Article 20 GDPR. The restrictions contained in section 34 and section 35 of the Bundesdatenschutzgesetz (BDSG – German Federal Data Protection Act) apply to the right to receive information and the right to request erasure. Furthermore, you have the right to lodge a complaint with a supervisory authority in accordance with Article 77 GDPR in conjunction with section 19 BDSG. The data protection supervisory authority responsible for LBBW is „Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg“.

b. Right of withdrawal pursuant to Art. 7 para. 3 GDPR

If you have consented to us processing your personal data, you have the right to revoke your consent at any time. Revoking your consent does not affect the legality of the processing of your personal data prior to your consent being revoked. It also does not affect further processing of these data on another legal basis, for instance for compliance with a legal obligation (cf. “Legal basis for processing”).

c. Right to object pursuant to Art. 21 GDPR

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Article 6(1) (e) GDPR (data processing in the public interest) or Article 6(1) (f) GDPR (data processing based on the consideration of interests). If you object, we will only continue to process your personal data to the extent that we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or that the processing is used for the establishment, exercise or defense of legal claims.

a. If you activate social plugins or play YouTube videos (section 4) or use Google Maps in conjunction with the BW-Bank finder (section 8) in our system, personal data can be sent to recipients in countries outside the European Union (EU), Iceland, Liechtenstein and Norway (= European Economic Area) and processed there, including in the US or India in particular.

b. The following countries are considered by the EU to have an appropriate level of protection for the processing of personal data in line with EU standards (adequacy decision): Andorra, Argentina, Canada (limited), Faeroe Islands, Guernsey, Israel, Isle of Man, Japan, Jersey, New Zealand, Switzerland, Uruguay. In order to establish an appropriate level of protection in line with statutory requirements, we agree the application of EU standard contractual clauses or binding corporate regulations with recipients in other countries.

Data protection and cookies

a. Necessary
These cookies are essential for the operation of our website, and enable functionalities relevant to security, for example. The website cannot function properly without these cookies.

b. Statistics
We record anonymized data for statistics and analysis in order to continuously improve our service offering and our website. For example, these cookies enable us to track user numbers and behaviors for our website to optimize our content and service offering.

c. Marketing
Cookies for marketing purposes are used to selectively play ads relevant to users and adapted to their interests. They are also used to limit the number of times an ad appears and to measure the effectiveness of advertising campaigns.

a. Cookies are small files created on your desktop, notebook or mobile device by a website that you visit. They allow us to see, for example, whether there was a connection between your device and our websites before, or which language or other settings you prefer. Cookies can also contain personal data.

b. When you use our website, we only use the cookies necessary to guarantee the functionality of our website. In all other cases we ask for your consent.

In the following you will find an overview of the cookies used:

Necessary

Technical name Provider Purpose Stored data Expiry date Domain
data-consent LBBW Consent Cookie Saves the consents given by the user in relation to cookies Consent given 4 weeks www.lbbw.de
piwik_ignore LBBW Tracking Ignore Cookie Saves whether a user does not want tracking Value 1 year www.lbbw.de
X-LBBW-PERSIST-TC LBBW Session Cookie Load balancer: Controls the Tomcat on which a session is active ID Session www.lbbw.de
JSESSIONIDLBBW LBBW Session Cookie Session handling Tomcat web container ID Session www.lbbw.de
lbbwWebPush LBBW Webpush Cookie Saves the condition of the display for the registration process for the web push service as per user input Value Session www.lbbw.de

Statistics

Technical name Provider Purpose Stored data Expiry date Domain
_pk_id.[...] LBBW statistics cookie Saves an ID that enables the identification of a recurring user ID 1 week www.lbbw.de
_pk_ses.[...] LBBW statistics cookie Enables the identification of a user’s session Value 1 day www.lbbw.de
_pk_ref.[...] LBBW statistics cookie Saves the user’s referrer Referrer url 1 day www.lbbw.de

Marketing

Technical name Provider Purpose Stored data Expiry date Domain
_pmclid Adition First-party cookie that saves the campaign identifier ID 30 days adition.com
_pm3pc Adition Checks whether third-party cookies function in the browser   1 day adition.com
pm_counter_{campaign_id}   Auxiliary cookie for measuring time spent; counts seconds in five-second intervals   End of current month  
pm_spots_{campaign_id}   Auxiliary cookie for measuring time spent; documents measurement point   End of current month  
UserID1 Adition Unique user ID. Used to provide ads related to your interests, among other things ID 180 days adition.com
lc_${campaign_id} Adition Unique user ID. Used to provide ads related to your interests, among other things ID 30 min adfarm1.adition.com
lv_${campaign_id} Adition Used to allocate post tracking and to filter the underlying container tag ID 30 min adfarm1.adition.com
LogID1_${content_unid_id} Adition Purpose Serves to forward a click (image banner only)   Session adfarm1.adition.com
fc${farm_id} Adition Frequency-Capping Wert 180 days adfarm1.adition.com
oo Adition Opt-Out   Wed, 01-Jan-2025 00:00:00 GMT adfarm1.adition.com
_fbq Adition Performance measurement ID, Timestamp 31 days ad4.adfarm1.adition.com
_fbq Facebook Targeting/re-marketing cookies fb.com/about/privacy Session facebook.com

We do not use third-party cookies. The LBBW location finder uses the Google Maps service via a Google API, though this does not require the use of cookies. Your consent to transmit data to Google is obtained before Google Maps can be used.

The website contains videos on many pages. Cookies are not created when a page with an integrated YouTube video is accessed, as we integrate videos using the youtube-nocookies.com domain offered by YouTube.

The job market and the applicant cockpit use Flash technology. The application is only used on the domain karriere.lbbw.de. The job market is incorporated into the www.lbbw.de website using Iframe technology. The karriere.lbbw.de domain installs cookies when the page is accessed and if the user has activated a Flash plugin in his or her browser. The cookies created are listed above. The session cookies are necessary to display and use this application.

The web analysis tool Matomo is used exclusively. Further information can be found in the data protection declaration on the LBBW homepage.

Data protection on LBBW’s social media channels

Data protection information for the use of our social media channels in the European Economic Area:

Landesbank Baden-Württemberg
Am Hauptbahnhof 2
70173 Stuttgart

Postfach 10 60 49
70049 Stuttgart

Phone +49 711 127 0
Fax +49 711 127 43544
kontakt@lbbw.de

Further details can be found in the Publishing Information.

Facebook Ireland Limited (Facebook), is responsible for the collection and further processing of personal user data on Facebook’s websites. Please note that Facebook also collects and processes certain information about your visit to our Facebook page even if you do not have a Facebook user account or are not logged in to Facebook. Information on the processing of personal data by Facebook can be found in Facebook’s privacy policy.

As the operator of this Facebook page, we can only view your public profile on Facebook. The information that can be seen here is dependent on the settings in your profile. Furthermore, we process your personal data (such as your name, the content of your messages, questions or other posts to us) if you contact us via our Facebook page. We then process these data for the purpose of processing, and possibly replying to, your posts correctly.

Facebook also provides us with Page Insights data. These data are anonymous statistics that we can use to rate the quality of our Facebook page and our content. These statistics are produced on the basis of usage data that Facebook gathers on your interaction with our Facebook page; we cannot access these usage data. For the processing of Page Insights data, Facebook has pledged to us to primarily assume responsibility and the fulfillment of your rights in accordance with the EU General Data Protection Regulation (GDPR; see below for further information), and to provide you with the essential content of the applicable agreement.

This processing is based on our legitimate interests in accordance with Article 6(1) (f) GDPR, in particular in order to contact you regarding your questions or posts, and to detect usage preferences (e.g. number of followers, number of hits on individual page areas, user statistics by age, geography and language), allowing us to adapt and improve our Facebook page as far as possible for our target groups.

We store your personal data on our systems, i.e. outside Facebook, if and to the extent that they are necessary for the purposes of collection or that statutory retention periods apply.

You have no statutory or contractual obligation to provide your personal data. However, it is possible that certain functions of our websites are dependent on you providing personal data. If, in these cases, you do not provide your personal data, this can result in functions being limited or unavailable.

We can also use qualified service providers as processors (e.g. dialog marketing agencies) to design and run this Facebook page. The processors we use have a contractual obligation in accordance with Article 28 GDPR, and only process personal data according to our instructions for the processes stated above (e.g. to answer questions), to pursue our legitimate interests or if you have given your consent.

In order to exercise your rights in relation to data processing by Facebook, please contact Facebook directly if possible using the channels provided by Facebook on its websites. In other cases or if necessary, please send an e-mail to datenschutz@lbbw.de.

Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland, is responsible for the collection and further processing of personal user data on Instagram’s websites. Please note that Instagram also collects and processes certain information about your visit to our Instagram page even if you do not have an Instagram user account or are not logged in to Instagram. Information on the processing of personal data by Instagram can be found in Instagram’s privacy policy at https://help.instagram.com/519522125107875.

As the operator of this Instagram page, we can only view your public profile on Instagram. The information that can be seen here is dependent on the settings in your profile. Furthermore, we process your personal data (such as your name, the content of your messages, questions or other posts to us) if you contact us via our Instagram page. We then process these data for the purpose of processing, and possibly replying to, your posts correctly.

Instagram also provides us with Page Insights data. These data are anonymous statistics that we can use to rate the quality of our Instagram page and our content. These statistics are produced on the basis of usage data that Instagram gathers on your interaction with our Instagram page; we cannot access these usage data.

This processing is based on our legitimate interests in accordance with Article 6(1) (f) GDPR, in particular in order to contact you regarding your questions or posts, and to detect usage preferences (e.g. number of followers, number of hits on individual page areas, user statistics by age, geography and language), allowing us to adapt and improve our Instagram page as far as possible for our target groups.

We store your personal data on our systems, i.e. outside Instagram, if and to the extent that they are necessary for the purposes of collection or that statutory retention periods apply.

You have no statutory or contractual obligation to provide your personal data. However, it is possible that certain functions of our websites are dependent on you providing personal data. If, in these cases, you do not provide your personal data, this can result in functions being limited or unavailable.

It is conceivable that some of the information recorded is also processed outside the European Union by Facebook Inc., based in the United States.

We can also use qualified service providers as processors (e.g. dialog marketing agencies) to design and run this Instagram page. The processors we use have a contractual obligation in accordance with Article 28 GDPR, and only process personal data according to our instructions for the processes stated above (e.g. to answer questions), to pursue our legitimate interests or if you have given your consent.

LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, is responsible for the collection and further processing of personal user data on LinkedIn’s websites. Please note that LinkedIn also collects and processes certain information about your visit to our LinkedIn page even if you do not have a LinkedIn user account or are not logged in to LinkedIn. Information on the processing of personal data by LinkedIn can be found in LinkedIn’s privacy policy at https://www.linkedin.com/legal/privacy-policy?trk=d_org.

As the operator of this LinkedIn page, we can only view your public profile on LinkedIn. The information that can be seen here is dependent on the settings in your profile. Furthermore, we process your personal data (such as your name, the content of your messages, questions or other posts to us) if you contact us via our LinkedIn page. We then process these data for the purpose of processing, and possibly replying to, your posts correctly.

LinkedIn also provides us with Page Analytics data. These data are anonymous statistics that we can use to rate the quality of our LinkedIn page and our content. These statistics are produced on the basis of usage data that LinkedIn gathers on your interaction with our LinkedIn page; we cannot access these usage data.

This processing is based on our legitimate interests in accordance with Article 6(1) (f) GDPR, in particular in order to contact you regarding your questions or posts, and to detect usage preferences (e.g. number of followers, number of hits on individual page areas, user statistics by age, geography and language), allowing us to adapt and improve our LinkedIn page as far as possible for our target groups.

We store your personal data on our systems, i.e. outside LinkedIn, if and to the extent that they are necessary for the purposes of collection or that statutory retention periods apply.

You have no statutory or contractual obligation to provide your personal data. However, it is possible that certain functions of our websites are dependent on you providing personal data. If, in these cases, you do not provide your personal data, this can result in functions being limited or unavailable.

It is conceivable that some of the information recorded is also processed outside the European Union by the LinkedIn Corporation and its US subsidiaries (LinkedIn), based in the United States.

We can also use qualified service providers as processors (e.g. dialog marketing agencies) to design and run this LinkedIn page. The processors we use have a contractual obligation in accordance with Article 28 GDPR, and only process personal data according to our instructions for the processes stated above (e.g. to answer questions), to pursue our legitimate interests or if you have given your consent.

New Work SE, Dammtorstrasse 30, 20354 Hamburg, Germany, is responsible for the collection and further processing of personal user data on Xing’s websites. Please note that Xing also collects and processes certain information about your visit to our Xing page even if you do not have a Xing user account or are not logged in to Xing. Information on the processing of personal data by Xing can be found in Xing’s privacy policy at https://privacy.xing.com/de/datenschutzerklaerung.

As the operator of this Xing page, we can only view your public profile on Xing. The information that can be seen here is dependent on the settings in your profile. Furthermore, we process your personal data (such as your name, the content of your messages, questions or other posts to us) if you contact us via our Xing page. We then process these data for the purpose of processing, and possibly replying to, your posts correctly.

Xing also provides us with Page Insights data. These data are anonymous statistics that we can use to rate the quality of our Xing page and our content. These statistics are produced on the basis of usage data that Xing gathers on your interaction with our Xing page; we cannot access these usage data.

This processing is based on our legitimate interests in accordance with Article 6(1) (f) GDPR, in particular in order to contact you regarding your questions or posts, and to detect usage preferences (e.g. number of followers, number of hits on individual page areas, user statistics by age, geography and language), allowing us to adapt and improve our Xing page as far as possible for our target groups.

We store your personal data on our systems, i.e. outside Xing, if and to the extent that they are necessary for the purposes of collection or that statutory retention periods apply.

You have no statutory or contractual obligation to provide your personal data. However, it is possible that certain functions of our websites are dependent on you providing personal data. If, in these cases, you do not provide your personal data, this can result in functions being limited or unavailable.

We can also use qualified service providers as processors (e.g. dialog marketing agencies) to design and run this Xing page. The processors we use have a contractual obligation in accordance with Article 28 GDPR, and only process personal data according to our instructions for the processes stated above (e.g. to answer questions), to pursue our legitimate interests or if you have given your consent.

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for the collection and further processing of personal user data on YouTube’s websites. Please note that YouTube also collects and processes certain information about your visit to our YouTube page even if you do not have a YouTube user account or are not logged in to YouTube. Information on the processing of personal data by YouTube can be found in YouTube’s privacy policy at https://policies.google.com/privacy?hl=de&gl=de.

As the operator of this YouTube page, we can only view your public profile on YouTube. The information that can be seen here is dependent on the settings in your profile. Furthermore, we process your personal data (such as your name, the content of your messages, questions or other posts to us) if you contact us via our YouTube page. We then process these data for the purpose of processing, and possibly replying to, your posts correctly.

YouTube also provides us with Analytics data. These data are anonymous statistics that we can use to rate the quality of our YouTube page and our content. These statistics are produced on the basis of usage data that YouTube gathers on your interaction with our YouTube page; we cannot access these usage data.

This processing is based on our legitimate interests in accordance with Article 6(1) (f) GDPR, in particular in order to contact you regarding your questions or posts, and to detect usage preferences (e.g. number of followers, number of hits on individual page areas, user statistics by age, geography and language), allowing us to adapt and improve our YouTube page as far as possible for our target groups.

We store your personal data on our systems, i.e. outside YouTube, if and to the extent that they are necessary for the purposes of collection or that statutory retention periods apply.

You have no statutory or contractual obligation to provide your personal data. However, it is possible that certain functions of our websites are dependent on you providing personal data. If, in these cases, you do not provide your personal data, this can result in functions being limited or unavailable.

It is conceivable that some of the information recorded is also processed outside the European Union by Google LLC and its wholly owned subsidiaries in the United States.

We can also use qualified service providers as processors (e.g. dialog marketing agencies) to design and run this YouTube page. The processors we use have a contractual obligation in accordance with Article 28 GDPR, and only process personal data according to our instructions for the processes stated above (e.g. to answer questions), to pursue our legitimate interests or if you have given your consent.

TikTok Technology Limited ("TikTok") is responsible for the collection and further processing of personal user data on TikTok websites. Please note that TikTok collects and processes certain information about your visit to our TikTok site even if you do not have a TikTok user account or are not logged in to TikTok. For information on the processing of personal data by TikTok, please refer to TikTok's privacy policy at https://www.tiktok.com/legal/privacy-policy

As the operator of this TikTok page, we can only view your public profile on TikTok. The information that can be viewed here depends on your profile settings. In addition, we process your personal data (such as your name and the content of your messages, enquiries or other contributions to us) when you contact us via our TikTok page. We then process this data for the purpose of responding to your posts and answering them if necessary.

TikTok also provides us with analysis data. This data is anonymous statistics that we use to evaluate the quality of our TikTok page and our content. These statistics are compiled on the basis of usage data that TikTok collects about your interaction with our TikTok page. We do not have access to this usage data.

This processing is based on our legitimate interest in accordance with Art. 6 (1) (f) GDPR, in particular to be able to contact you in response to your enquiries or contributions and to recognise usage preferences (e.g. number of followers, number of views of individual page areas, user statistics by age, geography and language) and to be able to adapt and improve the offer on our TikTok page to suit the target group as far as possible.

We store your personal data on our systems, i.e. outside TikTok, for as long as it is required for the purposes for which it was collected or for as long as statutory retention obligations apply.

You are neither legally nor contractually obliged to provide us with your personal data. However, it is possible that certain functions of our websites depend on the provision of personal data. If you do not provide us with personal data in these cases, this may result in functions not being available or only being available to a limited extent.

It is conceivable that some of the information collected may also be processed by TikTok outside the European Union. To ensure an adequate level of data protection, TikTok bases such data transfers on the standard contractual clauses of the European Commission, unless a corresponding adequacy decision of the EU Commission exists for the third country concerned.

We may also use qualified service providers as processors (e.g. dialogue marketing agencies) for the design and support of this TikTok page. The processors we use are contractually bound in accordance with Art. 28 GDPR and only process personal data on our instructions for the aforementioned purposes (e.g. responding to your enquiries), to pursue our legitimate interests or if you have consented to this.

To exercise these rights with regard to data processing by TikTok, please contact TikTok directly if possible using the contact details provided by TikTok on its websites. In other cases or otherwise if required, please send us an e-mail to datenschutz@lbbw.de .

a. Rights of data subjects according to Art. 15 - 20 GDPR

You have the right to receive information in accordance with Article 15 GDPR, the right to rectification in accordance with Article 16 GDPR, the right to erasure in accordance with Article 17 GDPR, the right to restrict processing in accordance with Article 18 GDPR and the right to data portability in accordance with Article 20 GDPR. The restrictions contained in section 34 and section 35 of the Bundesdatenschutzgesetz (BDSG – German Federal Data Protection Act) apply to the right to receive information and the right to request erasure. Furthermore, you have the right to lodge a complaint with a supervisory authority in accordance with Article 77 GDPR in conjunction with section 19 BDSG. The data protection supervisory authority responsible for LBBW is „Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg“.

b. Right of withdrawal pursuant to Art. 7 para. 3 GDPR

If you have consented to us processing your personal data, you have the right to revoke your consent at any time. Revoking your consent does not affect the legality of the processing of your personal data prior to your consent being revoked. It also does not affect further processing of these data on another legal basis, for instance for compliance with a legal obligation (cf. “Legal basis for processing”).

c. Right to object pursuant to Art. 21 GDPR

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Article 6(1) (e) GDPR (data processing in the public interest) or Article 6(1) (f) GDPR (data processing based on the consideration of interests). If you object, we will only continue to process your personal data to the extent that we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or that the processing is used for the establishment, exercise or defense of legal claims.

Privacy Policy

Here we would like to provide you with the opportunity to view our current data protection information at any time. If our data protection information changes, we will inform you about this separately.

In our general data protection information, we provide information on which personal data we process in the context of our business relationship with you.

Many savings banks and banks process payment orders in Germany and abroad with our access to settlement systems and our correspondent banking network. To do this we receive personal data from the savings banks and banks which we need for processing and the resulting legal requirements for implementation.

Receivables are sold or assigned as security to LBBW. To do this LBBW processes personal data for administration.

To send newsletters, we process personal data.

LBBW processes your personal data for processing, maintaining or establishing a customer, business or association relationship and for maintaining (other) business contacts.

To protect our domiciliary rights, to prevent and investigate damage from vandalism and to detect and provide evidence of crime, we save your personal data by implementing video surveillance of relevant sites.

Information on data collection by Landesbank Baden-Württemberg (LBBW) in accordance with Article 13 of the General Data Protection Regulation for the use of web conference tools with which LBBW processes personal data.

This information applies to all applicants who apply to LBBW on their own initiative or for an advertised position.

The data you enter on this website will be stored in our application system for 6 months after your last activity. This period is necessary to comply with documentation requirements. Four weeks before this period expires, you will receive an e-mail informing you that your data will soon be deleted. You can then stop the deletion by logging in again or submitting another application.

During the application process, your data will be accessible to employees of the Human Resources department, the departments advertising the vacancy and representatives of the employee representatives and, if applicable, the representative body for severely disabled employees. Once the application process has been completed, only employees from the Human Resources department will have access. When we receive your application, we will also check whether any other current vacancies might match your qualifications and expectations.

In addition, if your profile is approved, your applicant data will be made available to all companies in the LBBW Group for the purpose of an alternative job search.

Some of the companies affiliated with LBBW are based in countries outside the EU or the EEA that do not have personal data protection comparable to that in Germany. The group of persons who can view your data is analogous to that of LBBW for the companies concerned.

We use technical and organisational security measures to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. We use SSL encryption for secure transmission.