The data controller as defined by the General Data Protection Regulation (GDPR) is:

Sparkasse Prignitz
Rostocker Straße 4
16928
Pritzwalk
Germany
E-Mail: info@sparkasse-prignitz.de
Telephone: 03395 746-0
Fax: 03395 746-460

(hereinafter also referred to as "Sparkasse", "we", "our" or "us")

If you have any questions regarding this privacy policy or about how we protect your personal data, please contact Sparkasse's data protection officer.

Data protection officer
Annette Schmuck
Simrockstr. 4
53113
Bonn
Germany
datenschutz@sparkasse-prignitz.de

Any action that your Sparkasse performs on personal data, such as collecting, storing, sharing, erasing or using it in another form, is referred to as data processing. Personal data is any information that relates to an individual visiting this website to find out about Sparkasse products and services.

If you are already a Sparkasse customer, then your personal data will also be processed as part of your business relationship with Sparkasse. For more information on this, please refer to your Sparkasse's privacy policy. This privacy policy also covers other services and products that can be accessed through this website (such on the data processed as part of online banking).

The following details which data your Sparkasse processes for what purposes when visiting this website. If you would like to find out about the data we process on social media, please read the privacy policy for social media.

1. Data that is necessary to display this website and ensure its stability and security
 

When visiting this website solely for the purpose of obtaining information, we process the following technically necessary data:

• IP address of the end device you are using
  
• Name of the retrieved file
  
• Date and time of retrieval
  
• Amount of data transferred
  
• Retrieval status (successful / not successful)
  
• Browser type, version and operating system
  
• URLs of the pages previously viewed (i.e. referrer URLS)
  

This data is processed for the purpose of taking steps prior to performing a contract or for performing a contract in accordance with Art. 6(1) S.1(b) DSGVO. We may also process this data for the purpose of protecting your Sparkasse’s legitimate interests based on a balancing of interest in accordance with Art. 6(1) S.1(f) DSGVO. In the event this website is used for unlawful purposes, this data will also be used to identify potential violations.

Your Sparkasse also analyses this data for statistical purposes and for improving this website without creating any personality or user profiles.

2. Sparkassen marketing campaign analyses and measurements

The Sparkassen Finanzgruppe uses analytics and measurement platforms to deliver, analyse and measure the success of national and regional digital advertising campaigns.

After obtaining your consent on a landing page  (sparkasse.de), these analyses are performed with the help of the following platforms

• intelliAd
  If you click on a Sparkasse advertisement on a third-party website, you will be taken to a landing page with more information on the advertised product. The landing page for all Sparkassen adverts is sparkasse.de, from which users are then forwarded to their local Sparkassen website. sparkasse.de uses the web analytics service from intelliAd Media GmbH, Sendlinger Str. 7, 80331 Munich, Germany, to measure advertising campaigns’ success. You will be asked to consent to the use of the campaign measurement system before you will be able to access the contents pertaining to the advertised product on sparkasse.de. Once you have given your consent, the cookies set by intelliAd can be read out and assigned to specific interactions on sparkasse.de. This data then helps us to manage and optimise our marketing measures. This data cannot be used to identify any persons, because it is only collected on the basis of a cookie ID. The cookie ID, in turn, cannot be linked to an IP address because the IP address will have been anonymised immediately before the intelliAd cookie is set.
  
  The cookie is deleted after 100 days.
  
  The legal basis for this application is Art. 25(1) TDDDG. You can withdraw your consent at any time at http://login.intelliad.de/optout.php. In this case, the cookie “intelliadNoTrack” will be set, which will block user interactions up until the cookie expires. This cookie is deleted after one year.
  

• Adform
  If you click on a Sparkasse advertisement on a third-party website, you will be taken to a landing page with more information on the advertised product. The landing page for all Sparkassen adverts is sparkasse.de, from which users are then forwarded to their local Sparkassen website. sparkasse.de uses the web analytics service from Adform A/S Wildersgade 10B, sal. 1 DK-1408 Copenhagen, Denmark, for both advertising delivery as well as campaign measurement. You will be asked to consent to the use of the campaign measurement system before you will be able to access the contents pertaining to the advertised product on sparkasse.de. Once you have given your consent, the cookies set by Adform can be read out and assigned to specific interactions on sparkasse.de. This data then helps us to manage and optimise our marketing measures. This data cannot be used to identify any persons, because it is only collected on the basis of a cookie ID. The cookie ID, in turn, cannot be linked to an IP address because the IP address will have been anonymised immediately before the Adform cookie is set.
  
  The cookie is deleted after 60 days.
  
  The legal basis for this application is Art. 25(1) TDDDG. You can withdraw your consent at any time at  https://site.adform.com/de/privacy-center/platform/widerrufsrecht/. In this case, the opt-out cookie “C” will be set with a value of “3”, which will block user interactions up until the cookie expires. The cookie is deleted after 3650 days.
  

• Count server
  In order to establish whether an advertisement on a third-party website has led to a purchase from Sparkasse, sparkasse.de uses a so-called “count server”.
  
  If you click on a Sparkasse advertisement on a third-party website, you will be taken to a landing page with more information on the advertised product. The landing page for all Sparkassen adverts is sparkasse.de, from which users are then forwarded to their local Sparkassen website. You will be asked to consent to the use of the campaign measurement system before you will be able to access the contents pertaining to the advertised product on sparkasse.de. Once you have given your consent, a “zs_aff” cookie with a random ID will be set that allows us to manage and optimise our marketing measures. This data cannot be used to identify any persons, because it is only collected on the basis of a random ID.
  
  The cookie is deleted after 30 days.
  
  The legal basis for this application is Art. 25(1) TDDDG. You can withdraw your consent for this cookie at any time under “Update cookie settings” on sparkasse.de.
  

3. Third-party applications

• YellowMap
  This website uses SmartMaps, a service provided by YellowMap AG, CAS-Weg 1-5, 76131 Karlsruhe, Germany, for displaying maps. This service makes it possible to display interactive maps directly on the website and for users to use these maps. In order to be able to provide the maps, YellowMap will be processing your IP address as well as range of other technical data. The data YellowMap collects will only be used for creating the map and deleted after 10 minutes. YellowMap does not use any cookies.
  
  For more information on the purpose and scope of the data collected and its processing by YellowMap can be found at https://www.smartmaps.net/datenschutz/.
  
  This page also contains more information on your rights concerning the above.
  
  The legal basis for processing your data is Art. 6(1) S.1(b) DSGVO.
  
  
  

• Newsletter
  On this website, you can also subscribe to your Sparkasse's newsletter, through which it will provide you with information on its latest promotions and news. Your Sparkasse will only send you the newsletter with your consent or where legally permitted. The technical service provider appointed by your Sparkasse to provide this service is S-Communication Services GmbH, Friedrichstraße 50, 10117 Berlin, Germany.
  
  Subscribing to the newsletter involves a double-opt-in procedure. The first opt-in comprises your confirmation of an activation email sent to the email address you provided after registering. If you fail to confirm your activation email within the period of time set out in the email, your information will be automatically deleted. Your email address will only be saved for the purpose of sending you the newsletter if you confirm the activation email within the specified period of time.
  
  Your Sparkasse will furthermore store your IP address and the time of registration and confirmation respectively. The reason for this is to retain evidence of your registration and to be able to clarify any potential misuse of your personal data.
  
  You can opt-out of your email address being used for the distribution of the newsletter, i.e. unsubscribe at any time. The link for unsubscribing can be found at the end of every newsletter.
  
  The legal basis for processing this data is Art. 6(1)(1)(a)(b) DSGVO.
  
  Sparkasse is constantly working on improving its newsletter service. As part of this, Sparkasse measures and analyses newsletter open and click rates. Open rates provide information on the percentage of newsletter recipients who have actually opened and hence read the newsletter. Click tracking makes it possible to track which and how often the links included in the newsletter are clicked. These analyses can be used to create targeted newsletters with contents that are of actual interest to their recipients.
  
  The legal basis for processing this data is your consent in accordance with Art. 25(1) TDDDG.
  
  You can withdraw your consent at any time under the “Manage” tab in the newsletter login section on the website, or the “Edit details” link in the newsletter.
  

• Bot/spam protection
  We use the ‘Friendly Captcha’ service (https://friendlycaptcha.com/) for this website. This service is offered by Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany, whom we use as our commissioned data processor. Friendly Captcha is a data protection-friendly solution that hinders improper use of websites by means of automated programs and scripts (so-called ‘bots’).
  
  To this end, we have integrated a program code from Friendly Captcha into a wide range of services that can be taken up by users of this website (e.g. newsletter subscription, calendar competitions, modernisation calculator), through which a connection is made to the servers of Friendly Captcha.
  
  The visitor’s browser receives a calculation problem from Friendly Captcha to be solved by the visitor’s end device and sends the result of the calculation to our web server. The web server makes contact with the Friendly Captcha server via an interface and receives a response confirming whether the calculation problem has been solved correctly by the end device. In addition, the visitor’s browser sends connection data, environment data, interaction data and functional data. Friendly Captcha evaluates this data, determines how likely it is that the user is either human or a bot and sends the results to us. All the data is used exclusively for detection and handling of potential bots and risks as described above. The purpose of processing is therefore to guarantee the security and functionality of websites. In particular, the data is not used to identify any natural person or for marketing purposes. Friendly Captcha does not store any personal user data. Data that could identify the visitor (such as their IP address) is anonymised by means of one-way hashing. Decryption is not possible because of the size of the code. No HTTP cookies are used, and no data is stored in the persistent browser storage. The hashed IP address and solution string are stored for 30 days to improve and increase the functionality and security level. Repeated attacks by the same bots can thus be recognised within this period and averted even more quickly. You will find further information about data protection when using Friendly Captcha at https://friendlycaptcha.com/de/privacy.
  
  The legal basis for processing is our legitimate interest in protecting our website against harmful attacks by bots; in other words spam, protection and protection against attacks (e.g. batch requests), Art. 6(1)(1)(f) GDPR.

We only share your data with third parities if you have consented to the same or if we have a legal obligation to do so.

In this context, your personal data may, in particular, be shared with:

• Law enforcement authorities
  
• Other companies of the Savings Bank Finance Group (Sparkassen-Finanzgruppe).
  

Data may also be shared with authorised service providers if they meet your Sparkasse’s special confidentiality requirements. These service providers could, in particular, constitute IT, consulting and sales and marketing companies. In these cases, your Sparkasse will enter into corresponding data protection agreements with these service providers.

If the data described in this privacy policy is no longer needed, it will be deleted. This always applies unless the data needs to be processed - for a limited time - for other purposes.

If your Sparkasse has defined a different storage period for certain services, this period will be stated in the description of the relevant service.

Data that your Sparkasse collects when you visit this website are never transferred to any international organisations or third countries (countries outside the EEA). If your Sparkasse uses any analytics services, you will be able to find more information about them under “Cookies” at the top.

You have the following rights concerning the personal data collected by your Sparkasse:

• Right to information
  
• Right to rectification and erasure
  
• Right to restrict processing
  
• Right to data portability
  
• Right to withdraw consent
  

Information about your right to object in accordance with Art. 21 DSGVO

1. Right to object on personal grounds

You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data that is based on point (e) (public interest) or (f) (legitimate interests) of Article 6(1) DSGVO, including to profiling based on those provisions in terms of Art. 4(4) DSGVO.

If you object, your Sparkasse will no longer process your personal data, unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the data is processed for the establishment, exercise or defence of legal claims.

2. Right to object to the processing of your data by your Sparkasse for the purpose of direct advertising

In some cases, your Sparkasse will process your personal data for direct advertising purposes. You have the right to object at any time to the processing of your personal data for the purpose of such advertising; as well as to any profiling associated with such advertising.

If you object to the processing of your data for the purpose of direct advertising, your Sparkasse will stop processing your personal data for this purpose.

The objection does not have to be provided in any particular form, but should be addressed to:

Sparkasse Prignitz
Rostocker Straße 4
16928 Pritzwalk
Germany
info@sparkasse-prignitz.de

You also have the right to complain to the following supervisory authority, which is responsible for your Sparkasse regarding the protection of personal data, with respect to the processing of your personal data:

P.O. Box: ??????
Postcode and town: ??????
Telephone: ??????
FAX: ??????
e-mail: ??????

The data collected when visiting this website will not be used for automated decision-making in terms of Art. 22 DSGVO.