Last updated: February 2025
Blisfinanz Bank GmbH (“Blisfinanz Bank,” “we,” “us,” or “our”) is committed to protecting your personal data and complying with the EU General Data Protection Regulation (GDPR) and applicable German data protection laws.
1. Personal Data We Collect
We may collect and process the following categories of personal data:
- Identification data (name, date of birth, ID/passport details)
- Contact details (address, email, phone number)
- Financial information (bank account details, transaction history, credit information)
- Employment and income information
- Online data (IP address, device information, cookies, website usage data)
- Communication records (emails, calls, chat interactions)
2. Purpose of Processing
We process your personal data for the following purposes:
- Opening and managing bank accounts
- Executing transactions and providing banking services
- Compliance with legal and regulatory obligations (e.g., AML/KYC requirements)
- Risk management and fraud prevention
- Customer support and communication
- Improving our services and website
- Marketing communications (where consent is given)
3. Legal Basis for Processing
We process personal data based on:
- Contract performance (Art. 6(1)(b) GDPR)
- Legal obligations (Art. 6(1)(c) GDPR)
- Legitimate interests (Art. 6(1)(f) GDPR)
- Your consent (Art. 6(1)(a) GDPR), where applicable
4. Data Sharing
We may share your personal data with:
- Regulatory authorities and supervisory bodies
- Payment service providers and financial institutions
- IT and cloud service providers
- Credit agencies
- Professional advisors (auditors, legal advisors)
All third parties are contractually bound to protect your data.
5. International Transfers
If personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as EU Standard Contractual Clauses or adequacy decisions.
6. Data Retention
We retain personal data only as long as necessary for the purposes stated above and in accordance with statutory retention periods under German commercial and tax law.
7. Your Rights
Under GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure (“right to be forgotten”)
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority (e.g., the relevant German Data Protection Authority)
8. Security Measures
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration.
10. Cookies and Website Tracking
Our website uses cookies and similar technologies to enhance user experience and analyze website traffic. You can manage your cookie preferences via your browser settings or our cookie banner.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website.