The following data protection declaration applies to the website “volksbank-digital.solutions”.

Volksbank Digital Solutions GmbH

represented by the managing directors Stefan Spohrer and Andreas Lorenz

info@volksbank.solutions

II. Purpose of processing personal data, legal basis and storage period

Below we inform you about the data processing taking place on our website (a), its purposes (b), legal basis (c) as well as the respective storage period and, if applicable, concrete objection and removal options (d).

1. Log files:

a) When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted:

IP address of the requesting computer
Date and time of the access
Name and URL of the accessed website
Website from which access is made (referrer URL)
Browser used, browser version
Operating system and version of the operating system of your computer and the name of your access provider
Amount of data transferred and access status (file transferred, file not found, etc.)
Language and version of the browser software

b) We process the above data for the following purposes:

Ensuring a smooth connection to the website,
ensuring comfortable use of our website,
evaluating system security and stability as well as
for other administrative purposes.

c) The legal basis for data processing is Art. 6 Paragraph 1 Clause 1 Letter f of GDPR. Our legitimate interest follows from the purposes of data processing listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally.

d) The data in the log files will be deleted after 7 days at the latest.

2. Cookies:

a) We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your device and do not contain any viruses, Trojans or other malware.

The cookie stores information that is related to the specific device used. However, this does not mean that we receive direct knowledge of your identity.

We use the following cookies:

Session cookies

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a warning always appears before a new cookie is created. However, completely disabling cookies may mean that you cannot use all the functions of our website.

b) The use of cookies serves, on the one hand, to make the use of our offer more pleasant for you.

We use so-called session cookies to recognize that you have already visited individual pages of our website.

In addition, we also use other temporary cookies to optimize user-friendliness, which are stored on your device for a specific period of time. If you visit our site again to use our services, it will automatically recognize that you have already visited us and which entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to record and evaluate the use of our website in a pseudonymized and purely statistical manner in order to further optimize our offer for you. These cookies enable us to automatically recognize that you have already visited us when you visit our site again. The third-party providers of the associated analysis tools use corresponding cookies for this purpose (the details can be found in the following descriptions of the associated third-party services).

c) Cookies that are required to carry out electronic communication (necessary cookies) or to provide certain functions you require (functional cookies) are stored on the basis of Section 25 II No. 2 TDDDG, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies to ensure technically error-free and optimized provision of its services. If consent to store cookies has been requested, the cookies in question will be stored exclusively on the basis of this consent (Section 25 I TDDDG); consent can be revoked at any time.

d) Session cookies are automatically deleted after you leave our site. Temporary cookies are automatically deleted after a defined period of time, in this case 24 hours. Cookies for analysis purposes or third-party cookies are automatically deleted after the times specified by the respective provider.

You can prevent cookies from being saved by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can delete cookies that have already been saved at any time using the security settings on your browser.

3. Registration of the user account:

a) and b)

On our homepage you will also find the login area for our VDS portal. In order to use this you will need your own access data. You will receive this from the administrators of your organization if you are designated as a user for the portal. Independent registration is not possible.

To use the portal, you need an email address and a password of your choice. To set this, you will receive an email with a link.

c) If you use our portal, we will store your data required to fulfill the contract, even until you permanently delete your access. The legal basis is Art. 6 Para. 1 Clause 1 Letter b of GDPR.

d) The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected.

If the registration serves to fulfill a contract or to carry out pre-contractual measures, the data will be deleted when it is no longer required for the execution of the contract. Even after the contract has been concluded, it may be necessary to store the contractual partner’s personal data in order to comply with contractual or legal obligations. The statutory retention periods are 6 years after the end of the year in which the contract was terminated, unless we are obliged to store the data for a longer period due to tax and commercial law retention and documentation obligations (from the German Commercial Code, the German Criminal Code or the German Fiscal Code) or you have consented to longer storage in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR.

4. Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). reCAPTCHA is designed to check whether the data entered on our websites (e.g. in a contact form) is carried out by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, length of time the website visitor spends on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.

The data processing is carried out on the basis of Art. 6 Paragraph 1 Letter f of GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and from SPAM. For more information about Google reCAPTCHA and Google’s privacy policy, please see the following

Links:  Privacy Policy – Privacy Policy & Terms of Use – Google  and  reCAPTCHA .

III. Cooperation with processors and third parties:

We sometimes use external service providers (contract processors) to process your data. These have been carefully selected and commissioned by us, are bound by instructions and are regularly monitored. These are external service providers who support us in technical matters (web hosts, programmers). This is done on the basis of contract processing agreements in accordance with Art. 28 GDPR.

We sometimes use external service providers (contract processors) to process your data. These have been carefully selected and commissioned by us, are bound by instructions and are regularly monitored. These are external service providers who support us in technical matters (web hosts, programmers). This is done on the basis of contract processing agreements in accordance with Art. 28 GDPR.

You have given your express consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR,

the disclosure is necessary to assert, exercise or defend legal claims pursuant to Art. 6 (1) sentence 1 lit. f GDPR and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,

there is a legal obligation to disclose the data pursuant to Art. 6 (1) sentence 1 lit. c GDPR, or

there is a legal obligation to disclose the data pursuant to Art. 6 (1) sentence 1 lit. c GDPR, or

Service providers in a third country will only be commissioned if the special requirements of Art. 44 ff. GDPR are met.

IV. Rights of data subjects:

You have the right:

pursuant to Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected from us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details;

to request the immediate correction of inaccurate or incomplete personal data stored by us in accordance with Art. 16 GDPR;

to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

to request the restriction of the processing of your personal data pursuant to Art. 18 GDPR if you contest the accuracy of the data, the processing is unlawful but you refuse to delete it and we no longer need the data, but you require it to assert, exercise or defend legal claims or you have objected to the processing pursuant to Art. 21 GDPR;

pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another controller;

pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another controller;

V. Right of objection:

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons for doing so that arise from your particular situation; this also applies to profiling based on these provisions. We will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. This also applies to profiling insofar as it is related to such direct advertising.

VI. Right to withdraw consent to data protection:

According to Art. 7 Para. 3 GDPR, you have the right to revoke your consent to us at any time. This means that we may no longer continue the data processing based on this consent in the future. The legality of the processing carried out on the basis of the consent until the revocation is not affected by this.

VII. Current status and changes to this privacy policy:

This privacy policy is dated December 2022.

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration.