The Association of German Banks (Bundesverband deutscher Banken e.V., BdB) processes your personal data when hosting events. In light of this, we are providing information on the processing of your personal data in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR).

We kindly request that, as part of your registration for the event, you consent to processing of the personal data named below. Consent is given by checking the box at the end of this declaration.

Please read the following information carefully before consenting. Consent is entirely voluntary. However, if you do not consent, we are unfortunately unable to host you at the event for legal reasons.

1. Controller

The controller for the purposes of the GDPR, other data protection legislation in force in the member states of the European Union and other provisions of a data protection nature is:

2. Processing personal data

Personal data refers to all information relating to a data subject. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means (i.e. supported by technology). This includes, in particular, the collection (i.e. acquisition), recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction, as well as changes to the original underlying purpose or intended purpose for processing the data.

The Association of German Banks is a leading trade association representing the interests of its participating banks. The Association processes information on natural persons participating in events hosted by the Association. The Association may collect and process the following personal data during our events or in advance of these events as part of the registration process:

2.1. Registration data

If you register for an event, the Association will process the registration data you transfer in order to grant you access to the event.

2.2. Survey tools

In addition, the Association regularly makes use of tools for surveys during its events. When conducting a survey, the service provider engaged by the Association will process your personal data (your IP address) in order to facilitate participation in online surveys. Furthermore, any free text you enter will be processed and may potentially be able to be matched to your person. No other personal data is entered in such surveys.

2.3. Use of photos and audio/video recordings

Associations carry out high-profile work. As such, media representatives, who record or digitalise the event in whole or in part, are regularly present at events hosted by the Association. The Association itself also takes photos and/or records video at its events. Both images and sound (speech) are recorded. You may be clearly visible, audible and identifiable in these photos and video recordings. These photos and recordings are also published on a regular basis (non-commercial publishing of photos or video recordings either digitally or in print, e.g. via video platforms, on social media or in the Association’s print publications).

3. Purpose

The respective purpose is:

3.1. Registration data

The Association processes your registration data in order to send you an invitation that grants you access to the event and which can be used to identify you. This is part of planning for the event. The Association uses this data to ensure effective management of both invitations and events.

3.2. Survey tools

The Association uses survey tools during its events in order to enter into an interactive dialogue with event participants via live polls.

3.3. Use of photos, audio and video recordings

Photos, as well as audio or video recordings of people attending an Association event, may be published both online and in print. This serves to strengthen the Association’s media presence.

4. Data recipients

Recipients of the personal data could be:

4.1. Registration data

The Association is the recipient of your registration data.

4.2. Survey tools

The recipient of personal data for survey tools is the service provider currently engaged by the Association of German Banks, that is Mentimeter AB, Tulegatan 11, 113 86 Stockholm, Sweden (processor), Website: https://www.mentimeter.com/privacy. Data is transmitted to countries outside of the EU and/or outside of the EEA (third countries). An appropriate level of data protection is guaranteed in the event that the processor is located in a third country.

4.3. Use of photos, audio and video recordings

The recipients of photos, as well as audio and video recordings, are the Association and other media. Recordings of events may be published for non-commercial purposes, both digitally and in print.

5. Personal data categories

5.1. Registration data

The personal data collected during events may include your contact data.These may be: Title, form of address, initial name, surname, institution, job title(s), street, house number, postal code, location, telephone, fax, e-mail.

5.2. Survey tools

Your IP-address will be processed when taking part in surveys during events. Furthermore, any free text you enter will be processed and may potentially be able to be matched to your person.

5.3. Use of photos, audio and video recordings

The data processed may also include photos as well as audio and video recordings of you. These data may be used in conjunction with your name. It is also possible that metadata will be collected (date, time, GPS data). It is possible that the photos and audio or video recordings may contain indications as to your ethnic origin, religion or health (special categories, e.g. indications as to ethnic origin, religion, health).

6. Legal basis

The data is processed based on consent from the data subject pursuant to Article 6(1) point a of the GDPR. There is no need for consent if the proposed processing of the data can, alternatively, be carried out under another legal basis.

7. Declaration

You hereby declare, by checking the box below, that you consent to the processing of your personal data (free of charge) by the Association for the purposes named above. If you do not consent, we are unfortunately unable to host you at the event for legal reasons..

7.1.Registration data

By checking the box at the end of this declaration, you consent to the processing of your registration data for the purposes named above

7.2. Survey tools

By checking the box at the end of this declaration, you consent to your personal data being processed when you participate in a survey (IP address or free text entered into a survey). You are not obliged to take part in any surveys conducted by the Association during the event, however, should you choose to do so, you must consent here and in advance to processing of your personal data.

7.3. Use of photos and audio/video recordings

By checking the box at the end of this declaration, you consent to your personal data being processed in the event that photos or audio/video recordings of you are taken or made.

In the event that the photos provide indications as to your ethnic origins, religion or health (e.g. skin colour, head coverings, glasses), your consent also applies to this fact. You are aware, in this context, that information uploaded to the internet, including photos, can be easily copied and disseminated, and that there are specialised archiving services that have the goal of permanently documenting the state of specific websites at specific times. In addition, this type of information is available all over the world via the internet and can be found using search engines and linked to other information. This could potentially allow for the creation of a personality profile with you as the subject. As such, information published on the internet may continue to be available even after it has been deleted from the site that originally published it. We hereby explicitly inform you that due to the high-profile nature of the Association’s work, media representatives are regularly present at events hosted by the Association and may film or digitalise the event in question.

8. Voluntary consent

Consent is voluntary. However, if you do not consent, we are unfortunately unable to host you at the event for legal reasons.

9. Withdrawal of consent

In the event that your data is processed based on consent, you have the right to withdraw your consent with effect for the future by contacting the Association in writing (e.g. e-mail or letter) at any time. This does not affect the legality of any processing of your data based on your consent to the point at which your consent was withdrawn. If you withdraw your consent with effect for the future, the Association will promptly remove photos of you from their website and, in the future, refrain from publishing any photos of you on their website or giving any such photos to the press.

10. Additional information pursuant to Articles 13 and 14 of the GDPR

10.1. Data protection officer

The Association’s data protection officer can be contacted by e-mail at datenschutzbeauftragter@bdb.de or by post at the address listed above. Any data subject can address enquiries and concerns relating to data protection directly to our data protection officer at any time.

10.2. Duration of processing

The data will be deleted as soon as they are no longer needed to achieve the purpose for which they were collected.

10.3. Rights of the data subject

Every data subject has

the right of access pursuant to Article 15 of the GDPR

the right to rectification without undue delay pursuant to Article 16 of the GDPR

the right to erasure pursuant to Article 17 of the GDPR

the right to restriction of processing pursuant to Article 18 of the GDPR

the right to data portability pursuant to Article 20 of the GDPR

the right to object pursuant to Article 21 of the GDPR

The right of access and the right to erasure are subject to limitations pursuant to Sections 34 and 35 of the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) You may exercise these rights against the Association. In addition, you have the right make a complaint to the competent data protection supervisory authority (Article 77 of the GDPR in conjunction with Section 19 of the BDSG). The competent data protection supervisory authority for the Association is:

Note for employees of the Association of German Banks

Employees of the Association of German Banks also have to check the box in order to take part in the event. However, the declaration of consent regarding photos and audio/video recordings (under 7.3) does not apply in this case. The contents of a separate declaration of consent for employees applies instead.