4 Legal Bases, Purpose of Processing and Source of Personal Data
We process personal data in accordance with the legal bases and for the purposes permitted under the General Data Protection Regulation (examples, by no means exhaustive).
- Article 6(1)(a) - on the basis of your consent: Processing occurs for specific purposes, such as for subscriptions to newsletters or participation in the Baader Investment Conference, if you have granted us your consent to do so. This consent can be revoked at any time and without stating cause. However, consent remains valid until revoked.
- Article 6(1)(b) - in performance of a contract or pre-contractual measures: Processing of personal data occurs, for example, when opening an account or investment account, concluding an employment contract, in applying for a position or other contractual or pre-contractual measures.
- Article 6(1)(c) - on the basis of statutory provisions: Processing can occur as a result of legal obligations placed on the bank by law or regulatory requirements with which we are obliged to comply. These may be due to, for example, the Tax Code, directives from relevant supervisory authorities, tax offices or law enforcement agencies, the Money Laundering Act, the Banking Act, the Securities Trading Act, etc.
- Article 6(1)(f) - on the basis of legitimate interests: Legitimate interests in processing data exist, for example, as regards to credit agencies to determine credit worthiness and default risks, archiving and storage of documents beyond statutory retention periods, where required for asserting or defending legal claims or for video monitoring to ensure compliance with building rules and to preserve evidence of crimes.
We primarily process data that you provide to us. In fulfilling our legal and contractual obligations, it may also be necessary for us to draw on external sources of information. Generally, this involves credit agencies and public registries such as commercial registries, transparency registries, Federal Gazette, Creditreform and other entities. This data serves primarily to clearly identify the affected party and, where applicable, to establish a beneficiary or to check creditworthiness.