Privacy Notices of the NORD/LB homepage

Principles/Accountability 

We are pleased to welcome you to our website and thank you for your interest in our company. The protection of your personal data and the preservation of your privacy are of the utmost importance to NORD/LB as the responsible body. That's why we take data protection very seriously.

Due to the rapid technical developments, it may be necessary to adapt our privacy policy for the NORD/LB homepage from time to time. The current version of the privacy policy can always be found on this page. Please note that all changes will only apply to future applications. A retroactive change to the data protection notice will only take place if this is required by law.

The content of the platform www.nordlb.com is operated by:

Norddeutsche Landesbank - Girozentrale -
Friedrichswall 10
30159 Hanover
Germany

E-mail: kundenservice@nordlb.de

Collection and processing of your personal data 

When you visit our websites, we collect certain information about the browser and operating system you use. This includes the date and time of your visit, the access status (e.g. whether access to a website was successful or whether an error message was displayed), the use of website functions, any search terms entered, the frequency of your visits to individual pages, the name of the files retrieved, and the amount of data transferred. We also store the web page from which you came to our sites and the web page you visit from our sites, whether by clicking on links or by entering a domain directly into the input field of the same tab or window of your browser. For security reasons, to prevent and detect attacks on our websites or fraud attempts, we store your IP address and the name of your Internet Service Provider for a period of seven days.

For information on the cookies used, please refer to the relevant information that we provide to you.

We only store other personal data if you provide it to us as part of a registration, a contact form, a survey, a competition or for the execution of a contract. In these cases, we will only store your personal data if you have given us your consent or if this is permitted by applicable legislation.

You are not legally or contractually obliged to provide us with your personal data. However, certain features of our websites may depend on the provision of personal data. In these cases, failure to provide your information may result in these features not being available or being available to a limited extent.

Purposes of use 

We use the personal data that we collect when you visit our websites to offer you the most pleasant experience possible and to protect our IT systems from cyber-attacks and other illegal activities.

If you also provide us with further personal data as part of a registration, a contact form, a survey, a competition or for the execution of a contract, we will use this information for the purposes mentioned, to administer our customers and, if necessary, to process and settle business transactions, in each case to the extent necessary.

Transfer of personal data to third parties, social plugins, YouTube 

For links to social networks such as Facebook, Instagram, LinkedIn, Xing, YouTube and X, we use so-called social plugins that facilitate the sharing or retrieval of content on these networks. We implement technical solutions that ensure that no connection to the servers of the social network operators is established without your activation of the social plugin. Only when you activate the deactivated social plugin do you give your consent to the transfer of data to the respective social network. With the activation, data is passed on to third parties.

Without your activation, no data will be transferred to the operators of the social networks.

Information on the privacy policies of social networks can be found as follows:

https://about.fb.com/de/news/2022/05/aktualisierung-datenrichtlinie/

https://de.linkedin.com/legal/privacy-policy 

https://privacy.xing.com/de/datenschutzerklaerung/druckversion

https://x.com/de/privacy

https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect

https://policies.google.com/privacy?hl=de

Evaluation of usage data and use of analysis tools 

We strive to continuously optimize the content of our website and to better tailor it to your interests. For this purpose, we use https://trackboxx.com/, an open-source software for the statistical analysis of visitor access. Your IP address is anonymised immediately after processing before it is stored. The information resulting from your use of this website is stored on servers in Germany. Trackboxx is based in Germany and thus in the European Economic Area (EEA). This means that no data is transmitted to a third country that is unsafe in terms of data protection. 

Usage-Based Information 

  • As part of the network, NORD/LB is currently working with several cooperation partners. If you have given your consent, your data will be transmitted to and stored by these partners:
  • Öffentliche Versicherung Braunschweig, Theodor-Heuss-Str. 10, 38122 Braunschweig, Germany
  • Öffentliche Versicherung Bremen, Martinistraße 30, 28195 Bremen, Germany
  • VGH (Versicherungsgruppe Hannover), Schiffgraben 4, 30159 Hanover, Germany
  • LBS Landesbausparkasse NordWest, 48130 Münster
  • LBS Immobilien GmbH Berlin-Hannover, Kattenbrookstrift 33, 30539 Hanover, Germany
  • DekaBank GmbH, P.O. Box 110523, 60040 Frankfurt, Germany
  • Deutsche Leasing AG and its operating companies, Fröhlingstr. 15 - 31, 61352 Bad Homburg, Germany*
  • Deutsche Factoring Bank GmbH & Co. KG, Langenstraße 15 - 21, 28195 Bremen, Germany*
  • Euler Hermes Kreditversicherungs AG, Friedensallee 254, 22746 Hamburg, Germany*
  • S-Kreditpartner GmbH, Prinzregentenstraße 25, 10715 Berlin, Germany
  • KfW Kreditanstalt für Wiederaufbau, Palmengartenstr. 5-9, 60325 Frankfurt, Germany
  • Landesbank Baden-Württemberg, Am Hauptbahnhof 2, 70173 Stuttgart, Germany
  • NORD/LB Leasing GmbH, P.O. Box 107945, 28079 Bremen, Germany

* Use only for commercial customers

 

Security 

We attach great importance to a high level of security in the collection and processing of your data. NORD/LB implements effective technical and organizational measures to protect your data from manipulation, loss, destruction and unauthorised access. Our security measures are continuously improved and adapted to the latest technological developments.

Legal basis for processing 

The processing of your personal data is carried out on various legal bases:

  1. Consent: If you have given us your consent (Art. 6 (1) (a) GDPR).
  2. Performance of a contract: When initiating or performing a contract with you (Art. 6 (1) (b) GDPR).
  3. Legal obligations: If the processing is necessary to comply with legal requirements (Art. 6 (1) (c) GDPR).
  4. Legitimate interests: To safeguard our or third parties' legitimate interests, such as ensuring IT functionality and marketing products (Art. 6 (1) (f) GDPR).

When weighing up the interests, we take into account the type of data, the purpose of processing, the circumstances and your interest in data protection.

Deletion of your personal data 

We process and store your personal data for the duration of our business relationship, including the initiation and execution of contracts. This business relationship is usually long-term.

In addition, we are bound by statutory retention and documentation obligations, which provide for periods of two to ten years, depending on the respective laws (e.g. HGB, AO, KWG, GwG, WpHG).

The storage period is also based on the statutory limitation periods, which are usually three years, but can last up to thirty years in certain cases. Telephone recordings in the context of telephone banking are deleted after 13 months, while recordings related to investment services are kept for five to seven years. Other telephone recordings are deleted after six months at the latest.

Rights of data subjects 

Rights of data subjects according to Art. 15 – 20 GDPR

You have the following rights under the GDPR:

  1. Right of access (Art. 15 GDPR): You can request information about the processing of your personal data.
  2. Right to rectification (Art. 16 GDPR): You have the right to have incorrect or incomplete data corrected.
  3. Right to erasure (Art. 17 GDPR): You can request the deletion of your data, if there are no statutory retention obligations.
  4. Right to restriction (Art. 18 GDPR): You can request the restriction of the processing of your data under certain conditions.
  5. Right to data portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used format.
  6. Right of revocation (Art. 7 (3) GDPR): You can revoke your consent to the processing of your personal data at any time without affecting the lawfulness of the previous processing.
  7. Right to object (Art. 21 GDPR): You have the right to object to the processing of your data at any time if it is carried out in the public interest or based on a balancing of interests. In this case, we will only continue to process your data if there are compelling legitimate reasons that outweigh your interests.

The objection can be made in any form and should be addressed to: 

Norddeutsche Landesbank - Girozentrale -
Friedrichswall 10 
30159 Hanover 
Germany

Phone: +49 (0) 511 361-0              
Fax: +49 (0) 511 361-2502 
E-mail: kundenservice@nordlb.de / kundenservice@blsk.de  

Please note that the restrictions under § 34 and § 35 BDSG apply to the right to information and deletion. In addition, you have the right to complain to a data protection supervisory authority, whereby the competent authority for NORD/LB is the State Commissioner for Data Protection and Freedom of Information of Lower Saxony.

Data transfer to recipients outside the European Economic Area 

If you activate social plugins, play YouTube videos or use Google Maps (e.g. in the directions on our homepage), personal data may be transferred to recipients in countries outside the EU as well as in the USA and India.

The EU recognizes an adequate level of protection for the processing of personal data in certain countries, including Andorra, Argentina, Canada (to a limited extent), Israel and Japan. For other countries, we agree on EU standard contractual clauses or binding corporate rules to ensure an adequate level of protection.