Privacy policy

General
Renell Wertpapierhandelsbank AG takes its responsibility for data protection and information security very seriously. The careful handling of all personal data is a core part of our business and the basis for our procedures and processes. With this data protection declaration, we inform you within the scope of the European Data Protection Regulation (DSGVO) which personal data we collect on which legal basis within the scope of the use of this website and the associated functions and for which purposes we process this personal data. The use of our site is possible without providing personal data.

Person responsible and contact
Responsible for the web presence of Renell Wertpapierhandelsbank is
Renell Wertpapierhandelsbank AG
Eschersheimer Landstr. 14
60322 Frankfurt am Main
Phone: +49 69 133876-500
Fax: +49 69 133876-555
E-mail: info@renellbank.com
Internet: www.renellbank.com
If you have any questions or suggestions regarding data protection, or if you wish to exercise your rights, please do not hesitate to contact us using the contact details provided here.

Data protection officer
You can reach our data protection officer at datenschutz@renellbank.com.

Subject of data protection
The subject of data protection is personal data. According to Art. 4 No. 1 DSGVO, this is all information relating to an identified or identifiable natural person. Personal data is also referred to as data in the following.

Cookies
We use so-called cookies on our site to recognize multiple use of our offer, by the same user / Internet connection owner. Cookies are small text files that your Internet browser stores on your computer. They serve to optimize our Internet presence and our offers. Most of these are so-called “session cookies”, which are deleted after the end of your visit.
In some cases, however, these cookies provide information to automatically recognize you. This recognition is based on the IP address stored in the cookies. The information obtained in this way is used to optimize our offers and to provide you with easier access to our site.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

Cookie-Einstellungen

Automated data collection on this website of server data.
For technical reasons, the following data, among others, which your Internet browser transmits to us or to our web space provider, is collected (so-called server log files):
– browser type and version
– Operating system used
– Website from which you visit us (referrer URL)
– Website that you visit
– Date and time of your access
– Your Internet Protocol (IP) address.
This anonymous data is stored separately from any personal data you may have provided and thus does not allow any conclusions to be drawn about a specific person. They are evaluated for statistical purposes in order to be able to optimize our Internet presence and our offers.
Since it is not possible for Renell Wertpapierhandelsbank AG to assign your IP address (only your Internet provider can do this) and a pattern recognition over a longer period of time is omitted by a short-cycle deletion, Renell’s interest in the proper operation of the website outweighs any possible interests of visitors that are worthy of protection. The legal basis for the processing of the aforementioned data to ensure proper website operation are our legitimate interests pursuant to Art. 6 (1) lit. f) DSGVO. We point out that the internet-based data transmission has security gaps, a complete protection against access by third parties is therefore impossible.

Contact option
On our website, we offer you the opportunity to contact us by e-mail and/or via a contact form. In this case, the information provided by the user will be stored for the purpose of processing his contact. The data will not be passed on to third parties. A comparison of the data collected in this way with data that may be collected by other components of our site also does not take place.

Matomo (formerly Piwik)
On our website we use the open source software tool Matomo (formerly PIWIK)
to analyze the surfing behavior of our users. The software sets a cookie on the user’s computer. If individual pages of our website are called up, the following data is stored:
(1) Two bytes of the IP address of the calling system.
(2) The website called up
(3) The website from which the user accessed the website (referrer)
(4) The subpages that are called up from the called-up website
(5) The time spent on the website
(6) The frequency with which the web page is accessed

The software runs exclusively on the servers of our website. A storage of the personal data of the users only takes place there. The data is not passed on to third parties.

The software is set in such a way that the IP addresses are not stored completely, but two bytes of the IP address are masked (e.g.: 192.168.xxx.xxx). In this way, an assignment of the shortened IP address to the calling computer is no longer possible.

The legal basis for the processing of the users’ personal data is Art. 6 para. 1 lit. f) DSGVO.
The processing of the users’ personal data enables us to analyze their surfing behavior. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. These purposes are also our legitimate interest in processing the data according to Art. 6 para. 1 lit. f) DSGVO. By anonymizing the IP address, the interest of users in their personal data protection is sufficiently taken into account. The data is deleted as soon as it is no longer required for our recording purposes.

Cookies are stored on the user’s computer and transmitted to our site by the user. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.

Opt-out complete; your visits to this website will not be recorded by the Web Analytics tool. Note that if you clear your cookies, delete the opt-out cookie, or if you change computers or Web browsers, you will need to perform the opt-out procedure again.

You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.

The tracking opt-out feature requires cookies to be enabled.

We offer our users the option of opting out of the analysis process on our website. To do this, you must follow the corresponding link. In this way, another cookie is set on their system, which signals to our system not to store the user’s data. If the user deletes the corresponding cookie from their own system in the meantime, they must set the OptOut cookie again.
More detailed information on the privacy settings of the Matomo software can be found
under the following link: https://matomo.org/docs/privacy/

Social media
We maintain publicly accessible profiles on social networks. The social networks used by us in detail can be found below.

Social networks such as LinkedIn, Facebook, etc. can generally analyze your user behavior extensively when you visit their website or a website with integrated social media content (e.g. Like buttons or advertising banners). By visiting our social media presences, numerous processing operations relevant to data protection are triggered. In detail:

If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your terminal device or by recording your IP address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, you can be shown interest-based advertising inside and outside the respective social media presence. Provided you have an account with the respective social network, the interest-based advertising may be displayed on all devices on which you are or were logged in.

Please also note that we cannot track all processing on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals.

Our social media presences are intended to ensure the most comprehensive presence possible on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) f) DSGVO. The analysis processes initiated by the social networks may be based on different legal bases, which are to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 (1) a) DSGVO).

LinkedIn
We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn has certification in accordance with the EU-US Privacy Shield. LinkedIn uses advertising cookies.

If you wish to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

For details on how LinkedIn handles your personal data, please see their privacy policy: https://www.linkedin.com/legal/privacy-policy

Publication of job advertisements / online job applications
Your application data will be collected and processed electronically by us for the purpose of handling the application process. If your application is followed by the conclusion of an employment contract, your transmitted data may be stored by us in your personnel file for the purpose of the usual organizational and administrative process in compliance with the relevant legal provisions.
If your job application is rejected, the data you have submitted will be deleted automatically two months after notification of the rejection. This does not apply if longer storage is necessary due to legal requirements (for example, the duty of proof under the General Equal Treatment Act) or if you have expressly consented to longer storage in our database of interested parties.

HUBSPOT
We use the service HubSpot on our website for various purposes. HubSpot is a software company from the USA with a branch in Ireland.
Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500.

We use Hubspot for marketing and CRM for email marketing, reporting, contact management, landing pages and contact forms.

The information collected through HubSpot is stored on HubSpot’s servers. It can be used by us to contact website users and find out their interests in connection with our company’s services. All information we collect is subject to this privacy policy and we use it only to optimize our marketing efforts.

More information about HubSpot’s privacy policy: HubSpot Privacy Policy
More information from HubSpot regarding the EU Privacy Policy: HubSpot Security Program
More information on the cookies used by HubSpot can be found here: Cookies set in a visitor’s browser by HubSpot & here: Cookies set on HubSpot’s websites

In addition, we use Hubspot to provide a newsletter sign-up form (see “Newsletter” for more information).

The legal basis of the processing is your consent pursuant to Art. 6 (1) a) DSGVO. If you do not want the aforementioned data to be collected and processed via Hubspot, you can refuse your consent or revoke it at any time with effect for the future.

The personal data will be kept for as long as it is necessary to fulfill the purpose of processing. The data will be deleted as soon as they are no longer required to achieve the purpose. In the context of processing via HubSpot, data may be transferred to the USA. The security of the transfer is secured via so-called standard contractual clauses, which ensure that the processing of personal data is subject to a level of security that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to establish an adequate level of security, your consent pursuant to Art. 49 (1) a) DSGVO serves as the legal basis for the transfer to third countries.

Newsletter
With our newsletter we inform subscribers regularly about our products, our company and the market in general. We store your e-mail address for sending the newsletter. Your e-mail address will not be published or passed on to third parties.

We collect the following data exclusively for sending the requested newsletter:

– Name, first name
– e-mail address
– Preference

Storage period: In principle, the data is only stored for as long as is necessary to achieve the purpose. For the newsletter, the data will be stored as long as a newsletter is to be sent and you have not objected to the use of your data.

The legal basis is your consent in accordance with Art. 6 para. 1lit. a) DSGVO.

Cancellation: You can cancel our newsletter at any time via an unsubscribe link contained in the newsletter. In addition, you can also send an email to info@renellbank.com with the request to unsubscribe.

Disclosure of data to third parties in general
Based on Art. 28 (1) DSGVO, we share personal data with external service providers as our processors. The processors may only use the data for the purposes specified by us. Including the processors already explicitly mentioned in this Privacy Policy, we use the following categories of processors:

– IT service providers
– Cloud service providers
– Hosting service providers
– Marketing service providers

If it is necessary for the clarification of an illegal use of our website or for legal prosecution, personal data will be forwarded to law enforcement authorities and, if necessary, to injured third parties. However, this only happens if there are concrete indications of unlawful or abusive behavior. A transfer may also take place if this serves the enforcement of claims. We are also legally obligated to provide information to certain public authorities upon request. These are law enforcement agencies, authorities that prosecute administrative offenses subject to fines and the tax authorities. The disclosure of this data is based on our overriding legitimate interest according to Art. 6 (1) f) DSGVO or on the basis of a legal obligation according to Art. 6 (1) c) DSGVO.

As part of the organization of our operations, financial accounting and compliance with legal obligations, such as archiving, we disclose or transmit here the same data that we have processed for the purpose of reimbursement of costs or, if applicable, in connection with the assertion, safeguarding or defense of claims from you, if applicable, to the tax authorities, consultants, such as tax advisors or auditors, as well as other fee offices and payment service providers. The transfer of this data is based on our legitimate interest in maintaining our business activities, the performance of our tasks as well as for the implementation of the reimbursement of costs, Art. 6 para. 1 lit. f) DSGVO or on the basis of a legal obligation according to Art. 6 para. 1 lit. c) DSGVO.

Information / Revocation / Deletion
We delete your personal data as soon as they are no longer required for the purposes for which we processed them. We will continue to store your data if we are obliged to do so for legal reasons (Art. 6 para. 1 lit. c) DSGVO) or if the data is required for a longer period of time to secure, assert or enforce legal claims. Insofar as data must be retained for legal reasons, processing will be restricted. The data is then no longer available for further use. Further storage takes place on the basis of our aforementioned legitimate interests in accordance with Art. 6 (1) lit. f) DSGVO.

Your rights as a data subject
You have the following rights vis-à-vis us with regard to the personal data concerning you:

• Right to information:
  You have the right to receive from us at any time, upon request, information about the personal data we process that concerns you within the scope of Art. 15 DSGVO and § 34 BDSG.
• Right to rectification:
  In accordance with Art. 16 DSGVO, you have the right to demand that we immediately correct the personal data concerning you if it should be incorrect.
• Right to erasure:
  You have the right to demand that we delete the personal data concerning you under the conditions described in Art. 17 DSGVO and Section 35 BDSG. In particular, these conditions provide for the right to erasure if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, as well as in cases of unlawful processing, the existence of an objection or the existence of an obligation to erase under Union law or the law of the Member State to which we are subject.
• Right to restriction of processing:
  You have the right to demand that we restrict processing in accordance with Article 18 DSGVO. This right exists in particular if the accuracy of the personal data is disputed between you and us, for the duration that the verification of the accuracy requires, as well as in the event that you request restricted processing instead of erasure in the case of an existing right to erasure; furthermore, in the event that the data is no longer necessary for the purposes pursued by us, but you need it to assert, exercise or defend legal claims, as well as if the successful exercise of an objection is still disputed between you and us.
• Right to data portability:
  You have the right to obtain from us the personal data concerning you that you have provided to us in a structured, commonly used, machine-readable format in accordance with Article 20 DSGVO.
• Right to object to processing:
  You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out, inter alia, on the basis of Art. 6(1)(f) DSGVO, in accordance with Art. 21 DSGVO. We will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.
• Right to lodge a complaint with a data protection supervisory authority:
  You have the right to contact a supervisory authority of your choice in case of complaints. The competent supervisory authority is
  The Hessian Commissioner for Data Protection and Freedom of Information
  Gustav-Stresemann-Ring 1
  65189 Wiesbaden

We will store the personal data provided by you when exercising your rights pursuant to Art. 15 to 22 DSGVO for the purpose of implementing these rights and providing evidence thereof. These processing operations are based on Art. 6 (1) lit. c) DSGVO in conjunction with. Art. 15 to 22 DSGVO and Section 34 (2) BDSG.

As of: May 2023