The Deutsche Bundesbank processes personal data to the extent necessary to fulfil its legal obligations. These data include data that the Deutsche Bundesbank has collected about you. With a view to providing details on data processing, notifying you of your rights and complying with its requirement to provide information pursuant to Articles 13 and 14 of the EU General Data Protection Regulation (GDPR), the Deutsche Bundesbank hereby informs you of the following:

1. Contact address

Deutsche Bundesbank
Wilhelm-Epstein-Straße 14
60431 Frankfurt am Main
Postfach 10 06 02
60006 Frankfurt am Main

Telefon: +49 69 9566-0
Fax: +4969 9566-3077
E-Mail: info@bundesbank.de

2. Purpose of processing

Einblick in die und Analyse der an natürliche Personen gewährten Kredite, die von der Anzeigepflicht des Wirtschaftsprüfers nach § 29 KWG i.V.m. §§ 31, 33, 34 Verordnung über die Prüfung der Jahresabschlüsse der Kreditinstitute und Finanzdienstleistungsinstitute sowie über die darüber zu erstellenden Berichte (PrüfBV) unterliegenden Instituten und Unternehmen der Deutschen Bundesbank zu melden sind.

3. Legal basis for data collection

Article 12 of Council Regulation (EU) No 1024/2013 of 15 October 2013 conferring specific tasks on the European Central Bank concerning policies relating to the prudential supervision of credit institutions (SSM Regulation); Section 44 of the Banking Act (Kreditwesengesetz).

4. Kategorien der verarbeiteten personenbezogenen Daten

The categories of personal data processed are as follows:
Inspection documentation and other internal bank or company documentation containing clients’ personal data, including lending portfolio extracts, particularly names, addresses, loans granted and drawn, information on economic performance and creditworthiness (e.g. rating in a credit assessment procedure) or information on posted loan collateral.

5. Intention to transmit personal data to recipients in a third country or to an international organisation

It is not the intention of the Deutsche Bundesbank to transmit your data to a recipient in a third country (countries outside the European Union and the European Economic Area) or to an international organisation.

6. Data recipients

Your data are processed within the Deutsche Bundesbank by the responsible members of staff. Furthermore, in the context of cooperation in supervisory activities, the data may be transmitted to the Federal Financial Supervisory Authority (BaFin) or the ECB.

7. Duration of data retention

maximum of 30 years

8. Your rights as the data subject

You, as the data subject, have the right of access (Article 15 of the GDPR), the right to rectification (Article 16 of the GDPR), the right to erasure (Article 17 of the GDPR), the right to restriction of processing (Article 18 of the GDPR), the right to data portability (Article 20 of the GDPR) and the right to object (Article 21 of the GDPR). You also have the right to lodge a complaint with the competent supervisory authority, the Federal Commissioner for Data Protection and Freedom of Information.

9. Existence of automated decision-making (including profiling)

No automated decision-making takes place.

10. Source of personal data

The personal data are provided by the inspected institutions as part of on-site supervisory inspections.

11. Basis for the provision of your data and consequences of failure to provide personal data

Article 12 of the SSM Regulation; Section 44 of the Banking Act. Provision of data is mandatory. The culpable breach of the obligation to provide information and to present documentation constitutes an administrative offence. Failure to provide information, or failure to disclose the information correctly, in full or on time may, in the event of an inspection pursuant to Section 44 of the Banking Act, lead to the imposition of a fine of up to €100,000 (Section 56(2) number 15 and Section 56(6) number 4 of the Banking Act).