Privacy Policy

General Information

In the following, we inform you about the collection of personal data when using our website.

The term “personal data”, with reference to the definition in Art. 4 No. 1 of Regulation (EU) 2016/679 (hereinafter referred to as the “General Data Protection Regulation” or “GDPR” for short), refers to all data that can be related to you personally. This includes, for example, name, address, email address and user behaviour. With regard to the other terms, in particular the terms “processing”, “responsible party”, “order processor” and “consent”, we refer to the statutory data protection definitions of Art. 4 GDPR.

As a matter of principle, we process personal data only to the extent necessary to provide a functional website and the contents and services we offer. The processing of personal data is regularly only carried out if you have given us your consent within the meaning of Art. 6 paragraph 1 sub-paragraph a) GDPR or if the processing is permitted by legal regulations, especially by one of the legal bases mentioned in Art. 6 paragraph 1 sub-paragraphs b) to f) GDPR.

Your personal data will be deleted or blocked as soon as the purpose for which it was stored ceases to apply. Furthermore, data may be stored if this has been provided for by national or European regulations to which we are subject. In this case, the data will be blocked or deleted when the storage period stipulated in the respective regulations has expired. The latter does not apply if further storage of the data is necessary for the conclusion or fulfilment of a contract.

If we use contracted service providers for individual functions on our website or wish to use your data for advertising purposes, we will inform you in detail about the respective processes below.

Competent Body

Responsible in the sense of Art. 4 No. 7 GDPR, the other data protection laws and other regulations applicable in the member states of the European Union as well as provisions of a data protection nature:

TEN31 Bank AG legally represented by Bernd Bonacker / Nico Kühner Alte Landstraße 21a D-85521 Ottobrunn Germany Email: info@ten31.com Telephone: +49 (0) 89 809 1346-0 Fax: +49 (0) 89 809 1346-99

You can find further details on the responsible body in our legal notice above.

Your Rights

You have the following rights towards us regarding the personal data concerning you:

  • the right to information,
  • the right of correction and deletion,
  • the right to restrict processing,
  • the right to object to the processing,
  • the right to data transferability.


You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

Processing of personal data for informational use of our website

If you visit our website without registering or otherwise providing us with information (“Informational Use”), we only collect the personal data that your web browser transfers to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to enable you to view our website and to ensure its stability and security:

  • IP address
  • Date and time of the request
  • Time zone difference to GMT
  • Content of the website
  • Access status (HTTP status)
  • Data volume transferred
  • Website from which you have reached our website
  • Web browser
  • Operating system
  • Browser language and version

The aforementioned data is also stored in so-called log files on our servers. These data are not stored together with other personal data of yours.

The collection and temporary storage of the IP address is necessary to enable the delivery of our website to your terminal device. For this purpose, your IP address must be stored for the duration of your visit to our website. The storage of the above-mentioned data in log files serves to ensure the functionality and optimisation of our website and to guarantee the security of our information technology systems. This data is not evaluated for marketing purposes. The above-mentioned purposes are our legitimate interest in data processing. The legal basis for the collection and temporary storage of the aforementioned data is Art. 6 paragraph 1 sentence 1 sub-paragraph f) GDPR.

In the above-mentioned purposes lies our legitimate interest in data processing. The legal basis for the collection and temporary storage of the aforementioned data and log files is Art. 6 paragraph 1 sentence 1 sub-paragraph f) GDPR.

The aforementioned data for the provision of our website will be deleted when the respective session has ended. The collection of the above-mentioned data for the provision of our website and the storage of these data in log files is absolutely necessary for the operation of our website. There is no possibility of objection.

External hosting

This website is hosted by an external service provider on servers in Germany (hoster). The hoster is Raidboxes GmbH, Friedrich-Ebert-Straße 7, DE – 48153 Münster (https://raidboxes.io/).

Personal data that is collected on our website is stored on the hoster’s servers. This can primarily include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data that is generated via a website.

The hoster is used on the basis of a contract processing agreement and serves the purpose of initiating or fulfilling contracts with our potential and existing customers (Art. 6 Para. 1 lit. b GDPR) and is carried out in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 Para. 1 lit. f GDPR).

Our host will only process your data to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.

Processing of personal data by cookies

We use so-called cookies on our website. Cookies are small text files which are stored on the storage medium of your terminal device, for example on a hard disk, and which provide us, as the site that sets the cookie, with certain information. Cookies cannot execute programmes or transfer viruses to your terminal device. This website uses the following types of cookies, the scope and function of which are explained below.

Cookies that are stored with your web browser:

Transient cookies: These cookies are automatically deleted when you close your web browser. These include in particular session cookies. These store a so-called session ID, which can be used to assign various requests from your web browser to the shared session. This enables us to recognise your terminal device when you return to our website. Session cookies are deleted as soon as you log out or close your web browser.


Persistent cookies: These cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete these cookies at any time in the settings of your web browser.


The processing of personal data by the above-mentioned cookies serves to make our website more user-friendly and effective for you. Some functions of our website cannot be offered without the use of these cookies. In particular, some functions of our website require that your web browser can still be identified after a site change. The data processed by cookies, which are required for the provision of the functions of our website, are not used to create user profiles. If cookies are used for analysis purposes, they serve to improve the quality and user-friendliness of our website, its contents and functions. They enable us to understand how the website is used, which functions are used and how often they are used. This enables us to optimise our offer continuously.

In the above-mentioned purposes lies our legitimate interest in data processing. The legal basis is Art. 6 paragraph 1 sub-paragraph f) GDPR.

The aforementioned cookies are stored on your terminal device and transmitted from there to our server. You can therefore configure the processing of data and information by cookies yourself. You can make appropriate configurations in the settings of your web browser, which allow you to reject third-party cookies or cookies altogether, for example. In this context, we would like to point out that you may then not be able to use all functions of our website properly. In addition, we recommend that you delete cookies and your browser history manually on a regular basis.

Further functions and offers of our website

In addition to the aforementioned informational use of our website, we offer various services that you can use if you are interested. For this purpose, it is usually necessary to provide further personal data. We need these data to provide the respective service. The above principles for data processing apply.

In some cases, we use external service providers who we carefully selected and commissioned to process this data. These service providers are bound by our instructions and we regularly check them. Insofar as personal data is passed on to third parties in the course of services that we offer together with partners, you can find information that is more detailed in the following descriptions of the individual services. If these third parties are based in a country outside the European Economic Area, you can find more detailed information about the consequences of this circumstance in the following descriptions of the individual services.

Contact

If you contact us by email, the personal data you send us with your email will be stored. We also have a contact form on our website, which you can use to contact us. The data you enter in the input mask will be transmitted to us and stored.

  • Name
  • First name
  • Email address
  • Call-back number


The data will be used exclusively to answer your questions. As far as we do not use a third party provider mentioned below to provide the contact function, the data will not be passed on to third parties. We also record your IP address and the time of sending.

The processing of the aforementioned personal data serves solely to process your enquiries. The processing of further personal data, which is collected through the use of the contact form provided on our website, serves to prevent misuse and to ensure the security of our information technology systems.

This is also our legitimate interest in processing your personal data. If you have given us your consent to do so, the legal basis for the processing of this data is Art. 6 paragraph 1 sub-paragraph a) GDPR. Otherwise, the legal basis for the processing of this data is Art. 6 paragraph 1 sub-paragraph f) GDPR, especially in the event that you transmit the data to us by sending an email. Insofar as you wish to work towards the conclusion of a contract through your email, Art. 6 paragraph 1 sub-paragraph b) GDPR constitutes an additional legal basis.

Subject to statutory retention periods, the data will be deleted as soon as we have finally processed your request. If you contact us by email, you can object to the storage of your personal data at any time. We would like to point out that in this case your request cannot be processed further. You can declare the revocation or the objection by sending an email to our email address given in the legal notice.

Privacy Policy Social Networks

TEN31 Bank AG is the responsible body in terms of data protection law.

The contact details of the responsible party are: TEN31 Bank AG, Alte Landstraße 27, D-85521 Ottobrunn, email: info@ten31.com, telephone: +49 (0) 89 809 1346 0

The data protection officer is: Antonia von Sluyterman, Alte Landstraße 27, D-85521 Ottobrunn, email: info@ten31.com, telephone: +49 (0) 89 809 1346 0

Changes to this data protection declaration

We reserve the right to change this data protection declaration at any time with effect for the future. The current version is available on our website. Please visit our website regularly and inform yourself about the applicable data protection regulations.

The following information concerns the information offered in the social web of TEN31 Bank AG.

The operation of the Facebook page and the other social networks serves to provide sustainable and transparent information and communication with customers and interested citizens. No further administrative tasks are performed. The legal basis for the operation of the fan page and the other social networks is Section 4 of the State Data Protection Act; the fan page and the TEN31 Bank AG presence on social networks serve to perform tasks within the framework of public relations work.

This is an additional offer to the existing information and communication offers of TEN31 Bank AG. The aforementioned alternatives as well as information on alternative contact options can be found on our website and the contact details listed there as well as via the contact form on our website.

If you have any questions about our information offer on the social web, you can reach us at info@ten31.com.

Your rights

You have the following rights with regard to the personal data concerning you:

Right to information

Right to rectification or erasure

Right to restriction of processing

Right to withdraw consent: You can withdraw your consent to the processing of your data at any time and free of charge. Such withdrawal only affects the admissibility of the processing for the period after you have expressed it to us.

Right to object to processing: If we base the processing of your personal data on a balance of interests, you can object to the processing at any time and free of charge. Please explain your reasons why we should not process your personal data as we intended. In the event of a justified objection, we will stop or adapt the data processing or show you our overriding reasons for continuing the data processing. You can object to the processing of your personal data for direct marketing purposes at any time without giving reasons, with the result that we will no longer use your personal data for advertising purposes.

Right to data portability

You also have the right to complain to a data protection supervisory authority about our processing of your personal data. The supervisory authority responsible for us is the Bavarian State Commissioner for Data Protection (BayLfD), PO Box 221219, 80502 Munich. You can complain using the following link: https://www.datenschutz-bayern.de/service/complaint.html.

To exercise your rights, you can contact us at any time using the contact details provided or via a contact form on our website.

Our social media presence

We maintain publicly accessible profiles on social networks. The social networks we use in detail can be found below.

Social networks such as Facebook, YouTube, etc. can generally analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presences triggers numerous data protection-relevant processing operations.

In detail: If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your device or by recording your IP address.

Using the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you both inside and outside of the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are or were logged in.

Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals.

Legal basis

Our social media presence is intended to ensure the most comprehensive possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 Para. 1 lit. a GDPR).

Person responsible and assertion of rights

If you visit one of our social media sites (e.g. Facebook or LinkedIn), we and the operator of the social media platform are jointly responsible for the data processing operations triggered during this visit. You can generally assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal (e.g. against Facebook).

Please note that despite the joint responsibility under Art. 26 GDPR with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are largely based on the company policy of the respective provider. In the event of the assertion of data subject rights, we could only forward these requests to the operator of the social network.

Storage period

The data we collect directly via the social media presence is deleted from our systems as soon as the purpose for storing it no longer applies, you ask us to delete it, revoke your consent to storage or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected.

We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Data protection declaration for the TEN31 Bank AG presence on Facebook

TEN31 Bank AG uses the technical platform and services of Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland for the information service offered.

We would like to point out that you use the Facebook page and its functions at your own risk. This applies in particular to the interactive functions (e.g. commenting, sharing, rating). Facebook processes personal data about your account, your IP address and the devices you use. Cookies are used to collect data. These are small files that are stored on your devices. Facebook’s data usage guidelines describe in general terms what information Facebook receives and how it is used. There you will also find information about Facebook, the options for objecting and the options for setting up advertisements. The data usage guidelines can be accessed at the following link: http://de-de.facebook.com/about/privacy. Facebook’s complete data guidelines can be found here: https://de-de.facebook.com/full_data_use_policy.

Facebook may use the information to provide us, as the operator of the Facebook pages, with statistical information such as gender and age distribution on the use of the Facebook page. In addition, Facebook may show you preferences, additional information or advertisements based on your preferences. Facebook provides more information on this at the following link: http://de-de.facebook.com/help/pages/insights.

The data collected about you in this context will be processed by Facebook Ltd. and may be transferred to countries outside the European Union.

If you visit one of our social media sites (e.g. Facebook) and thereby trigger the processing of your personal data, we are jointly responsible with the operator of the respective social network for the data processing operations within the meaning of Art. 26 GDPR, provided that we actually make a joint decision with the operator of the social network regarding data processing and we also have an influence on the data processing. As far as possible, we have concluded agreements with the operators of the social networks on joint responsibility in accordance with Art. 26 GDPR, in particular the Page Controller Addendum of Facebook Ireland Ltd.. You can generally assert your rights (right to information in accordance with Art. 15 GDPR, right to rectification in accordance with Art. 16 GDPR, right to erasure in accordance with Art. 17 GDPR, right to restriction of processing in accordance with Art. 18 GDPR, right to data portability in accordance with Art. 20 GDPR and right to complain in accordance with Art. 77 GDPR) both against us and against the operator of the respective social network (e.g. Facebook).

How Facebook uses the data from visits to Facebook pages for its own purposes, to what extent activities on the Facebook page are assigned to individual users, how long Facebook stores this data and whether data from a visit to the Facebook page is passed on to third parties is not conclusively and clearly stated by Facebook and is not known to us.

When you access a Facebook page, the IP address assigned by your device is transmitted to Facebook. According to Facebook, this IP address is anonymized (for “German” IP addresses) and deleted after 90 days. Facebook also stores information about its users’ devices (for example as part of the “login notification” function) – this may enable Facebook to assign IP addresses to individual users.

If you are currently logged in to Facebook as a user, there is a cookie with your Facebook ID on your device. This enables Facebook to track that you have visited the page and how you have used it. This also applies to all other Facebook pages. Facebook can use Facebook buttons integrated into websites to record your visits to these websites and assign them to your Facebook profile. This data can be used to tailor content or advertising to you and then offer it.

If you want to avoid this, you should log out of Facebook or deactivate the “stay logged in” function, delete the cookies on your device and close and restart your browser. This will delete Facebook information that can be used to identify you directly. This allows you to use our Facebook page without revealing your Facebook ID. When you access interactive functions on the page (like, comment, share, messages, etc.), a Facebook login screen appears. After logging in, you will be recognizable to Facebook as a specific user. Alternatively, you can use a different browser than usual to visit our Facebook page.

Information on how to manage or delete existing information can be found on the following Facebook support page: https://de-de.facebook.com/about/privacy#.

As the provider of the information service, we do not collect or process any other data from your use of our service. The link to this data protection declaration can be found in the currently valid version under the “Data Policy” section on our Facebook page.

Data protection declaration for the TEN31 Bank AG presence on LINKEDIN

TEN31 Bank AG is represented in the social network of the company LinkedIn Ireland Unlimited Company (hereinafter “LinkedIn”) through an official company profile as well as through profiles of employees who use it for professional purposes. LinkedIn offers a social network specializing in professional networking that enables registered members to publish texts and media and communicate with each other. Because LinkedIn primarily decides on the means and purposes of data processing in its network, LinkedIn is the controller for data protection. You can therefore address data protection inquiries and the assertion of your rights set out in Section 6 in relation to the LinkedIn network to: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; contact form: https://www.linkedin.com/help/linkedin/ask/TSO-DPO (for use from Europe).

LinkedIn processes personal and other data for the purposes of, among other things, commercial placement and personalization of advertising, for research purposes, including regarding labor market trends and to share statistical data. If personal data is actively posted on the LinkedIn network (e.g. login data, profile data including photos, address books, calendar data via synchronization, contacts, event participation, ratings such as “likes”, data in posts, groups and messages), it will be disclosed to LinkedIn in any case. Profile data is fully visible to registered members of LinkedIn and – if set by the member – also to non-registered users. Depending on the settings for groups, posts, ratings, messages, etc., the other actively posted data is visible to members and non-registered users of LinkedIn. If the account is allowed to be linked to services from external providers, these also access profile data and contacts. With a company profile, the employer can also view and manage certain employee activities. LinkedIn uses scanning technologies to analyze chat messages. LinkedIn also collects non-actively posted data about members and other people: When visiting the network, websites or using the LinkedIn app, access data such as IP address, device and browser information and location are stored. With the help of cookies and other tracking technologies, LinkedIn also collects data about usage behavior, e.g. information about searches for other members, videos viewed and ads clicked on. Data is also collected about the behavior of members outside the LinkedIn network, e.g. information about websites viewed, searches performed and whether and when an advertising email was opened. In addition, LinkedIn collects data about people disclosed by members, e.g. together with contacts or synchronized calendars, which may also affect non-members. The data collected is analyzed by LinkedIn and combined into profiles. This enables LinkedIn to, among other things, personalize advertising content that it displays within and outside its network or sends by email, possibly also to non-members. LinkedIn also creates summarized statistics, which it passes on to members and other customers. LinkedIn members receive free, anonymized “analyses” of published posts, videos and articles, which show the number of views, “likes”, re-shared posts and the demographics of the audience, including company affiliation, job title and locations.

Some of LinkedIn’s data processing is carried out in the USA and other countries outside the European Economic Area. Data transfers to these countries may therefore take place as soon as you visit the TEN31 Bank AG company page on LinkedIn. Guarantees exist for these data transfers within the meaning of Art. 46 GDPR in the form of EU standard data protection clauses, which you can access at https://www.datenschutz.rlp.de/de/themenfelder-themen/standarddatenschutzklauseln-der-eu-kommission-oder-einer-aufsichtsbehoerde (as of 12/2020).

TEN31 Bank AG uses LinkedIn as an advertising platform by using our above-mentioned advertising platform to advertise on our website. Profiles publish, share or rate (“likes”) texts and media in connection with our offers and events via all conceivable channels of the network (e.g. posts, groups, events), whereby TEN31 Bank AG does not restrict the public nature or visibility of the activities.

Personal data of customers and freelance employees are only entered after prior information and with the consent of the person concerned. Names, personal network handles and photos are possible. TEN31 Bank AG does not use any additional, paid services from LinkedIn or carry out so-called advertising targeting. TEN31 Bank AG only receives anonymized statistics from LinkedIn, namely the “analyses” described above. These are not systematically evaluated. TEN31 Bank AG does not gain sufficient knowledge of the reach and impact of your activities, in particular your advertising, in order to target them to specific groups. However, it may happen that employees contact individual contacts suggested by LinkedIn for specific reasons.

The legal basis for uploading and publishing personal content concerning you on LinkedIn is your consent in accordance with Art. 6 (1) (a) GDPR. The legal basis for the collection and transmission of your data to LinkedIn when accessing, viewing and using the TEN31 Bank AG company page and for the use of the “analyses” is a balancing of interests in accordance with Art. 6 (1) (f) GDPR. The legitimate interest lies in advertising and customer information.

Privacy policy for the TEN31 Bank AG presence on Twitter

TEN31 Bank AG uses the short message service of Twitter Inc. (hereinafter “Twitter”) for information and advertising purposes by sending short texts and media in connection with its offers and events via several company accounts (“tweeting” of “tweets”). TEN31 Bank AG also uses personal content from customers and freelance employees for tweets, but only after prior information and with the consent of those affected. This includes names, email addresses, personal Twitter handles, photos, videos and web links to other personal content. The bank also rates third-party contributions (“likes”) and forwards them (“re-tweets”). The visibility or publicity of the contributions and ratings is not restricted by TEN31 through settings or any special functions of Twitter. The above-mentioned personal data is therefore disclosed to Twitter as well as to an undetermined number of Twitter members and non-members on the Internet. Data processing by Twitter is partly carried out in the USA and other countries outside the European Economic Area. Data transfers to these countries can therefore take place as soon as you access our company accounts on Twitter. Guarantees exist for these data transfers within the meaning of Art. 46 GDPR in the form of EU standard data protection clauses, which you can access at https://www.datenschutz.rlp.de/de/themenfelder-themen/standarddatenschutzklauseln-der-eu-kommission-oder-einer-aufsichtsbehoerde (as of 12/2020). The legal basis for uploading and publishing personal data on Twitter is your consent in accordance with Art. 6 Paragraph 1 Letter a) GDPR.

Twitter itself carries out further data processing. Since TEN31 Bank AG does not limit the reach of its posts on Twitter and only uses Twitter’s free service, whereby no analysis data or other functions (e.g. advertising tracking) are made available by Twitter that would allow the bank to target its activities, it has no influence on further data processing by Twitter. Twitter therefore decides alone on further data processing and is therefore solely responsible for data protection. You should therefore direct data protection inquiries and the assertion of your rights set out in Section 6 with regard to such further data processing by Twitter directly to Twitter at: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 IRELAND, contact form: https://twitter.ethicspointvp.com/custom/twitter/forms/data/form_data.asp (for use from Europe).

Privacy policy for the TEN31 Bank AG presence on YouTube

TEN31 Bank AG has integrated YouTube videos into its online offering, which are stored on http://www.YouTube.com. As a general rule, when you visit a page with embedded videos, your IP address is sent to YouTube/Google and cookies are installed on your computer. The following data is transferred to YouTube:

  • IP ​​address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Website from which the request comes
  • Browser
  • Operating system and its interface
  • Language and version of the browser software
  • Hardware used (PC, smartphone, etc.)
  • Location (if Google Maps is activated)
  • TEN31 Bank AG has no influence on this data transfer.

Information from the third-party provider: YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA,: https://policies.google.com/technologies/product-privacy?hl=de and https://www.google.de/intl/de/policies/privacy.

The information collected by this provider through cookies is usually sent to a server in the USA and stored there. If the data is transferred to the USA, the data transfer is based on the existence of standard contractual clauses.

TEN31 Bank AG does not collect or process any personal data via YouTube. The transfer of personal data by Google, in particular to third countries, is outside the area of ​​responsibility of TEN31 Bank AG. It cannot be held liable in this regard.