Privacy notice for visitors to the website "Wuestenrot.lu"

Privacy

How we handle your data and your rights

- Information in accordance with the EU General Data Protection Regulation (GDPR) -

Importance of data protection

With this privacy notice, we, Wüstenrot Bausparkasse AG, Luxembourg Branch, as the service provider of the website accessible under www.wuestenrot.lu, inform you about the nature, scope and purpose of the collection and use of your personal data, which become relevant when you visit our website or one of our social media pages. We would also like to inform you about the processing activities associated with our online social media.

Information about the processing of your personal data in the context of your business relationship with Wüstenrot Bausparkasse AG, Luxembourg branch, including pre-contractual measures, such as an online enquiry for a loan or a mortgage savings contract via one of the forms on our website or other enquiries about our products and services, can be found in our general data protection notice. The following privacy notice is limited to the personal data that we process via our website outside of an existing or prospective business relationship with you.

Who is responsible for data processing and who can I contact?

The responsible body is:

Wüstenrot Bausparkasse AG, Luxembourg Branch

33, rue Gabriel Lippman
L-5356 Munsbach
Phone: 443-444-1
Fax: 443-444-244
www.wuestenrot.lu
E-mail address: datenschutz@wuestenrot.lu

If your data is processed by other companies of the Wüstenrot & Württembergische Group as controllers for the provision of our services, please contact the respective companies (see also the section "Who receives data about you").

You can contact our company data protection officer at:

Wüstenrot Bausparkasse AG, Luxembourg Branch
Data protection officer: Gerd Büttner
33, rue Gabriel Lippman
L-5356 Munsbach
E-Mail address: datenschutzbeauftragter@wuestenrot.lu

What data do we collect on our webpage?

During your visit, usage data is stored, such as your IP address, the website from which you found us, the webpages you visit on our website, as well as the date and duration of your visit. All this data is evaluated for statistical purposes only.

The analysis is also carried out with the help of cookies (see the section "What are cookies and what are they used for?"),

In addition, we process the personal data that you have provided when filling out one of the forms on our website. If you contact us, we process the personal data that arises from the respective correspondence. We do not create personal user profiles.

Why do we process your data for (purpose of processing) and on what legal basis?

We process the data generated by visiting our website or using the contact options offered in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the data protection regulations in force in Luxembourg.

Information about the processing of your personal data in the context of your business relationship with Wüstenrot Bausparkasse AG, Luxembourg Branch, including pre-contractual measures, such as an online request for a loan or a mortgage savings contract via one of the forms on our website or other enquiries about our products and services, can be found in our general data protection notice.

The specific legal basis for data processing depends on the context and purpose for which we receive your data. We will inform you separately of this in the respective use case, if necessary. As a rule, the legal basis for data processing on our website will result from the possibilities mentioned below.

Art. 6 (1) (a) GDPR serves as our legal basis for processing operations in which we obtain consent for a specific processing purpose. Consent given can be revoked at any time. We rely on your consent for the use of certain cookies, particularly those that are not strictly necessary for the functionality of our website. Detailed information on this can be found in our consent management tool on our website. You can access it by clicking on 'Cookie settings' in the footer of our website.

Processing operations could also be based on Art. 6 (1) (f) GDPR. Processing operations are based on this legal basis if the processing is necessary for the purposes of a legitimate interest pursued by our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not prevail. We rely on our legitimate interest for communication with you when you contact us via one of the interaction points on our website (see the section "How do we communicate with you individually?"), as well as for the establishment, exercise and defence or legal claims.

When the processing of your personal data is essential for the proper functioning of our website, we will invoke Article 6 (1) (b) of the GDPR. This article is applicable when processing is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the request of the data subject prior to entering into a contract. Here, the term "contract" refers to the service you request upon accessing our website

When the processing of your personal data is necessary for compliance with a legal obligation to which we are subject, we rely on Art. 6 (1) (c) of the GDPR. We particularly rely on this legal basis to utilize a cookie that saves your choice regarding the use of cookies that require your consent on our website(see the section “What are cookies and what are they used for?”), as well as to respond to lawful requests for information from public authorities.

How long do we store your data?

When processing personal data, we respect the principle of storage limitation, according to which we only keep your personal data for as long as is necessary for the purposes mentioned above. At the end of the storage period, the personal data will be deleted via an automated process.

The data that is stored on your computer in our technically necessary cookies is generally deleted after your browser session. For the retention period of cookies that we use based on your consent as well as cookies that we use to remember your cookie preferences, please refer to our consent management tool (which you can access by clicking on 'Cookie settings' in the footer of our website). When you contact us, we usually store your personal data for the duration of the applicable limitation periods, which is up to ten years. In addition, personal data may be retained for the period during which claims can be made against us.

For the storage periods of your personal data that we process in the context of an existing or prospective business relationship with you, we refer you to our general data protection notice .

What data do we collect on our social media?

We maintain a web presence on Facebook, Instagram and LinkedIn (our Pages). In this context, we may process your personal data in connection with user interactions and user messages, such as your name, profile picture, likes, comments or sharing content, for the purposes of our legitimate interest in interacting with our audience (Art. 6(1)(f) GDPR) as well as our legitimate interest in establishing, exercising or defending legal claims, for example, in the case of abusive user content (Art. 6(1)(f) GDPR). We may process your personal data for the purpose of complying with our legal obligations, such as responding to lawful requests for information from public authorities (Article 6(1)(c) GDPR).

We share your personal data in connection with our pages with the respective social media provider:

For Facebook and Instagram: Meta Platforms Ireland Limited, Serpentine Avenue, Block J, Dublin 4 Ireland (Meta); and
For LinkedIn: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland (LinkedIn).

In addition, we may share your personal data in connection with our Pages with Moskito S.A., 20, rue des sangliers, L-7344 Steinsel, Grand Duchy of Luxembourg, who provide us with marketing and communication services in relation to our Pages. We retain the private messages we send or receive through our Sites for 10 years, in accordance with our legal retention obligations under Luxembourg law (Article 6(1)(c) GDPR).

Meta and LinkedIn may collect information about your interaction with our Pages in order to provide us with analytics services known as Page Insights. For more information on how Meta and LinkedIn process your personal data as part of Page Insights, and how you can exercise your rights against them, please refer to their respective privacy notices under https://www.facebook.com/privacy/policy or https://www.linkedin.com/legal/privacy-policy.

We have a joint controllership with Meta and Linkedin when they process your personal data to provide us with Page Insights. The details of our joint controllership agreement with Meta can be found at https://www.facebook.com/legal/terms/page_controller_addendum and with LinkedIn at https://legal.linkedin.com/pages-joint-controller-addendum. Where Meta and LinkedIn process your personal data to provide us with Page Insights, we rely on our legitimate interest in understanding how users interact with our Pages and optimizing our content (Article 6(1)(f) GDPR).

Who receives data about you?

Your personal data, which we process via our website outside of an existing or prospective business relationship with you, will only be shared with third parties if this is necessary for the fulfilment of our own business purposes, if you have given your consent to do so, or if we are required to do so by law or by a court or regulatory order.

Accordingly, our hosting provider (W&W Informatik GmbH, W&W-Platz 1, 70806 Kornwestheim, Germany) is the recipient of your personal data, insofar as the data transmission takes place via its server. The data we receive about you through our website may also be shared with the head office of Wüstenrot Bausparkasse AG in Kornwestheim.

The providers who may receive your personal data, which are collected by means of a cookie, can be found at any time in our consent management tool. You can access this tool by clicking on 'Cookie Settings' in the footer of our website.

Will data be transferred to a third country or to an international organisation?

We do not currently intend to transfer your personal data to a third country or to an international organisation. If we intend to do so in the future, we will inform you separately about the details of the transfer, if required by law.

When using cookies on our website, your personal data may be transferred to servers outside the European Economic Area. Detailed information about this transfer, including the corresponding safeguards, can be found at any time in our consent management tool. You can access this tool by clicking on "Cookie Settings" in the footer of our website. If you have any questions, you can also contact us directly using the contact details provided in this privacy notice.

To what extent is there automated decision-making in individual cases?

If, in individual cases, we use purely automated processing processes to reach a decision – including profiling – we will inform you about this at the occasion of the respective use case.

Is there an obligation for me to provide data?

As a rule, you are not obliged to provide your personal data. Otherwise, we will inform you directly on our website. This is generally the case if the provision of certain data is necessary for a requested processing. If you block cookies, you may no longer be able to use certain functionalities of our website.

What data protection rights do I have?

Under certain conditions, you have the following rights regarding the processing of your Personal Data:

the right of access (Article 15 GDPR), as well as the right to rectification if you notice any discrepancies with your personal data (Article 16 GDPR);
the right to erasure of your personal data ("right to be forgotten") if we no longer have a legal basis for processing it or if we are legally obliged to erase it (Article 17 GDPR);
the right to data portability of the personal data you have provided to us, insofar as the processing is based on your consent or on the performance of a contract with you and is carried out by automated means (i.e. electronically). In this case, you have the right to receive the data concerned in a structured, commonly used and machine-readable format and to transmit them to another controller, or to request that we transmit them directly to another controller (as far as this is technically possible) (Article 20 GDPR);
the right to restriction of processing (i) if you contest the accuracy of your personal data, for a period enabling us to verify the accuracy of the personal data, (ii) if the processing is unlawful and you oppose the erasure of the data, (iii) if we intend to erase your personal data but you need your data to establish, exercise or defend legal claims, or (iv) if you have objected to the processing, pending the verification of whether our legitimate grounds prevail over yours (Article 18 GDPR);

Information about your right to object in accordance with Art. 21 of the EU General Data Protection Regulation (GDPR)

You also have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you, which is carried out, inter alia, on the basis of Article 6(1)(f) of the General Data Protection Regulation (data processing on the basis of a balancing of interests) (such as communication with you).

If you lodge an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

Your right to withdraw consent

Consent given can be revoked at any time.

Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected by this.

Your right to lodge a complaint with the competent data protection authority

The data protection supervisory authority responsible for Wüstenrot Bausparkasse AG, Luxembourg Branch is the

Commission nationale pour la protection des données
15, Boulevard du Jazz
L-4370 Belvaux
Grand Duchy of Luxembourg
Tel.: (+352) 26 10 62-1

However, you can also contact any other European data protection authority, for example that of your country of residence.

How do we communicate with you individually?

Our website contains information that enables you to quickly contact our company electronically as well as to communicate directly with us. For example, if you have any questions, we offer you the opportunity to contact us via interaction points provided on the website. We will inform you of the information required to process your request at the respective point of interaction. If you contact us via an interaction point, the personal data you provide will be automatically stored for the purpose of processing your request or contacting you.

The legal basis for the processing of the personal data transmitted with your request is Art. 6 (1)(f) GDPR (legitimate interest). If the aim of the contact is to conclude a contract, we refer you to our https://www.wuestenrot.lu/media/wuestenrot/documents/data_protection_en.pdfgeneral data protection notice .

Contact

If you have any questions, we offer you the opportunity to contact us via the forms provided on the website. We will inform you of the information required to process your request in the respective form. Further information can be provided voluntarily.

Other personal data collected during the submission process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

Email

Alternatively, it is possible to contact us via the e-mail address provided. In this case, your personal data transmitted with the e-mail will be stored. The data will be used exclusively for the processing of communications with you and the compliance with our legal retention obligations.

What are cookies and what are they used for?

We use cookies on our website. Cookies are text files that are stored in the cache of your internet browser (e.g. Internet Explorer or Firefox) when you visit a webpage. We inform you separately about our use of cookies through our consent management tool. In this tool, you have the possibility to manage your cookie preferences at any time. Some cookies are essential for the basic functions of our website and therefore cannot be disabled. You can access this tool by clicking on 'Cookie Settings' in the footer of our website.

You can also set how cookies are handled in your browser: For example, you can normally specify that storage is only accepted if you agree to it in advance. If you only want to accept cookies from our website, but not the cookies of our service providers and partners, you can do so in your browser by selecting the "Block third-party cookies" setting.

Further information can be found in the help function of the Internet browser that you use on your computer to access the Internet.

Latest update and changes to this privacy notice

This privacy notice is currently valid and has the status of 18 October 2024.

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this privacy notice. You can access and print out the current privacy notice at any time on the website under https://www.wuestenrot.lu.

Analysis tools and advertising

Browser plug-in

You can prevent the recording and processing of your data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at:
https://support.google.com/analytics/answer/6004245

Archiving period

Data on the user or incident level stored by Google linked to cookies, user IDs or advertising IDs (e.g., DoubleClick cookies, Android advertising ID) will be anonymized or deleted after 14 month. For details, please click the following link: https://support.google.com/analytics/answer/7667196