Data Protection

Data Protection Statement (Privacy Policy)Non-binding translation

Thank you for visiting our website and for your interest in Rentenbank, our products and services. We want you to feel safe while visiting our website. Protecting your privacy while processing your personal data is an important concern for Rentenbank. The following is intended to inform you about how Rentenbank guarantees this protection and what data is collected for what purpose.

1. Name and contact details of the data controller

Responsible entity:

Landwirtschaftliche Rentenbank
Theodor-Heuss-Allee 80
60486 Frankfurt am Main

telephone: +49(0)69/2107-0
telefax: +49(0)69/2107-6444
E-mail: office@rentenbank.de

You can reach our company data protection officer at:

Landwirtschaftliche Rentenbank
Datenschutzbeauftragter
Theodor-Heuss-Allee 80
60486 Frankfurt am Main
E-Mail: datenschutzbeauftragter@rentenbank.de

2. Collection and storage of personal data and manner and purpose of use

a) when you visit our website

When you visit the www.rentenbank.de website, the browser used on your device automatically sends information to the server of our website. This information is stored in log files. The following information, among others, is collected without your intervention and stored until it is automatically deleted:

IP address of the requesting computer,
date and time of access,
port,
destination IP,
source IP.

The data named is processed by us for the following purposes:

ensuring a smooth connection to the website,
ensuring comfortable use of the website,
detecting and preventing attacks on the IT infrastructure.

The legal basis for processing this data is Art. 6 (1) f) General Data Protection Regulation (GDPR). Rentenbank’s legitimate interest follows from the purposes of data collection listed above. The data is not collected in order to draw conclusions about an individual person. Neither does Landwirtschaftliche Rentenbank carry out any statistical evaluation of the data. The data collected is automatically deleted from our server. Moreover, cookies (see Section 4) and analysis services (see Section 5) are used when you visit our website.

b) If you use the contact form

If you have any questions, you can send us an email or a message using the contact form. Your first name, last name, telephone number, and email address are needed so that we know who sent the enquiry, and so that we can reply to it. Further information can be provided voluntarily. The data collected will be used exclusively for contacting and communicating with you. By ticking the appropriate box when using the contact form, you consent to the processing of your data so that we can deal with your request. The collection of data for the purpose of contacting us and our processing thereof for the purpose of dealing with your request is carried out pursuant to Art. 6 (1) a) GDPR on the basis of your freely given consent.

The data collected by us when using the contact form will be deleted from the Content Management System (CMS) at the latest six months after your request has been processed.

c) when using our chatbots ‘Lara’ and ‘Hagen’

We offer so-called ‘chatbots’ from the provider Cognigy GmbH, Speditionstraße 1, 40221 Düsseldorf (‘Cognigy’) as a communication option on our website.

The chatbots ‘Lara’ and ‘Hagen’ provided by Landwirtschaftliche Rentenbank serve as communication and navigation support for non-binding initial information and do not replace the independent collection of information. They merely provide information that is found or generated by the underlying algorithm based on user input.

The chats are statistically recorded by Landwirtschaftliche Rentenbank and used for the further technical development of the chatbots. Furthermore, your IP address, log files, location information and other metadata can be recorded via the chatbots. However, no user-related analysis takes place. The aforementioned data is stored on Cognigy's servers for 90 days and then deleted. We have concluded an order processing contract with Cognigy so that Cognigy processes the data exclusively on behalf of and on the instructions of Landwirtschaftliche Rentenbank.

No other user data is processed either. The entry of personal data, such as your name, address or similar, is not required for the use of ‘Lara’ or ‘Hagen’ and should therefore be avoided.

If you contact us and are interested in an offer, your personal data will be processed for the purpose of initiating a contract in accordance with Art. 6 para. 1 sentence 1 lit. b) GDPR. Otherwise, your enquiry will be processed to protect our legitimate interest in the proper processing and answering of your request on the basis of Art. 6 para. 1 sentence 1 lit. f) GDPR. Your data will be forwarded to us via Cognigy. If it is not provided, we will unfortunately not be able to contact you and process your request. Automated decision-making is not carried out.

Further information on Cognigy and the handling of personal data by the chatbots can be found in the Cognigy Trust Centre at https://www.cognigy.com/de/trust-center and in Cognigy's privacy policy at https://www.cognigy.com/privacy-policy.

d) If you use our order form

You can use our order form to order annual reports, half-yearly financial reports, and/or series of publications. Your first name, last name, street, postcode, city, country, and email address are needed here in order to send you the documents ordered by post and to be able to contact you by email in the event of any queries. Further information can be provided voluntarily. Data collection and processing for the purpose of ordering and delivering documents are carried out pursuant to Art. 6 (1) b) GDPR for the fulfilment of the contract concluded with you for the delivery of the documents ordered. If you have voluntarily provided us with additional information in connection with your order, this data will be collected and processed on the basis of your freely given consent pursuant to Art. 6 (1) a) GDPR.

The data collected by us when you use the order form will be deleted from the CMS after a maximum of six months following the complete processing of your order.

e) when using our online application system for a scholarship from the Edmund Rehwinkel Foundation

You have the opportunity to apply online for funding for the Master's programme. To do so, please complete the relevant application form. Personal details such as first name, surname and e-mail address are mandatory. Further information can be provided voluntarily. The information is required in order to process your application and decide on the possibility of study funding. The data collection and processing in the context of the application for a scholarship from the Edmund Rehwinkel Foundation is carried out in accordance with Art. 6 para. 1 sentence 1 lit. b) GDPR for the processing of your application and the possible initiation of a contractual relationship regarding the granting of a scholarship. If you have voluntarily provided us with additional information as part of your application, this data will be collected and processed on the basis of your voluntary consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR.

The data collected will generally be kept for approx. six months after the end of the scholarship selection process and then deleted. The names of applicants from the previous year are kept for the duration of the respective scholarship selection in the following year of application in order to be able to check whether someone has applied before. The purpose of this is to be able to check at short notice whether the reasons for rejection still exist in the event of a rejection in the context of a previous application. The legal basis for this processing is Art. 6 para. 1 lit. f) GDPR. At the end of the scholarship selection process, the names of applicants from the previous year will also be deleted.

Applicant data will be passed on to third parties if the jury that decides on the scholarship selection is made up of external jury members. The external jury members receive the applicant data of those applicants who have made it to the final selection. The legal basis results from Art. 6 para. 1 sentence 1 lit. b) GDPR.

f) When using our online application system

If you use the ‘Apply now’ button when applying for a vacant position with us, you will be asked to enter various personal details such as your first name, surname and email address. Before you submit your binding application, you will be informed that your data will be processed for a maximum period of six months after the vacancy has been filled and that your data will be anonymised after this time. One of the reasons for processing your data for six months is that we may contact you again at a later date. You also have the option of requesting the deletion of your personal data at any time. Data collection and processing in the context of an application for a vacant position is carried out in accordance with Art. 88 GDPR in conjunction with Section 26 (1) sentence 1 BDSG.

g) when using various other registration forms

The data collection and processing in the context of the use of various other registration masks is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR on the basis of your voluntarily given consent. The various registration forms are briefly described below.

You have the option of using our banking portal by registering and logging in (login) and, for example, subscribing to the newsletter. The following data is mandatory for initial registration: First name, surname, company, street, postcode, city, telephone, e-mail. Further details can be provided voluntarily. The information is required in order to be able to decide on authorisation for use and, in the event of authorisation, to enable coordination / contact to be made. Furthermore, the data stored during the login process, such as IP address, user name, time of login, are stored in the CMS. The data collected when you register to use the banking portal will be stored in our CMS for as long as you remain registered for the banking portal. If you terminate your use of the banking portal and delete your account, your data will be deleted immediately.

We also offer you the opportunity to use our funding portal. The following information is required for you to register and authenticate yourself in the portal: title, surname, first name, e-mail address, telephone number. You have the option of deleting your user account at any time before your application is approved. The contact function in the funding portal is available for this purpose. In this case, your data will be deleted immediately. Further information on the terms and conditions of the funding portal and information on data protection can be found here.

In some cases, we use additional registration forms that allow you to register for Rentenbank events. The entry of your required data varies depending on the event. The respective data will be deleted from the CMS a maximum of six months after registration.

There may be (temporary) surveys on our website which serve to continuously improve our Internet offering. The respective users who have the opportunity to take part in the survey are usually selected at random. Participation in the survey and the information provided are voluntary. Further information can be found in the respective data protection declaration, which is displayed to you if you have been selected and wish to participate in the survey. We accept no responsibility for the information provided in this declaration.

You also have the option of using our funding advisor. By entering keywords or answering questions about your project, the advisor will show you the programmes that are generally suitable for it. It is not necessary to enter any personal data and you will not be asked to do so.

Our loan calculator offers you the opportunity to create sample calculations for your loan, including an interest and amortisation schedule and the value of the subsidy. Information on the loan amount, funding programme, term etc. is required. All information is voluntary. No personal data is requested or collected. The data collected when using the online version of the loan calculator is only stored on our server for the duration of the use of applications.

As a manufacturer of environmentally friendly and resource-saving machines, devices and digital solutions for agriculture, you have the opportunity to have your products included in the positive list. To do this, you can use the form for the inclusion of a new funding object. In addition to information about your company and the funding object, personal details in connection with contact persons for queries as well as a telephone number and e-mail address are required. You also have the option of using the form to amend a funding object in the positive list. If the contact persons or contact information you have provided changes, you have the option of informing us via positivliste@rentenbank.de.

Finally, you have the opportunity to apply for the Gerd Sonnleitner Prize (‘About us - Rentenbank - Gerd Sonnleitner Prize’). For this purpose, an application form is available as a pdf, which you can fill in and submit to us by e-mail. The personal data collected includes your first name, surname, date of birth and contact details. The data collected will be stored for approx. six months after the end of the applicant selection process and then deleted.

h) Place of data processing

The processing of your personal data takes place exclusively in Germany. Rentenbank does not plan to transfer personal data to countries outside the EU or the EEA (so-called third countries).

3. Transfer of personal data

Your personal data will not be transferred to third parties. If the data is to be transferred, you will be informed of this at a suitable point.

4. Cookies

We use cookies on our website. These are small text files that are stored on your device if you visit our website, and your device’s browser settings allow it. Information that emerges in each case in connection with the actual device used is stored in the cookie. We distinguish between cookies, which are absolutely necessary for the technical functionality of our online offering and such cookies as are required for the statistical analysis toward improving the functionality of our website and how it is adapted to user behavior.

a) Cookies are necessary for technical functionality

We perceive ‘cookies are necessary for technical functionality’ as those without which the technical provision of our online offering cannot be guaranteed. These cookies serve to control the connection during an online session (so-called session cookies). These cookies are deleted as soon as the browser session is over.

The data processed by the cookies is required for the above-mentioned purposes in order to safeguard the legitimate interests of Landwirtschaftliche Rentenbank pursuant to Art. 6 (1) f) GDPR.

b) Cookies are used for statistical analysis

We only set various cookies with your consent, which you give via the cookie banner when you visit our website and which you can change again at any time. The functions are only activated with your consent and are used in particular to analyse and improve visits to our website (see section 5) and to recognise you when you visit again (‘remember settings’). The legal basis for the use of cookies or similar technologies on your end device is Section 25 (1) TTDSG. The legal basis for the subsequent data processing is Art. 6 para. 1 sentence 1 lit. a) GDPR. You can revoke your consent at any time via the cookie banner without affecting the permissibility of the processing until revocation.

c) If you do not wish cookies to be stored on your device or if you always want a message to appear before a new cookie is created, you can configure your browser accordingly. However, the complete deactivation of cookies can result in you not being able to use all functions on our website.

5. Analysis tools

For the purpose of analyzing and optimizing we use technology provided by JustRelate Deutschland GmbH based in Berlin. Cookies (clause 4) are used when you visit our website, and they facilitate a statistical analysis of the use of this website. The use of these cookies only happens when you give your consent by clicking on the corresponding button and not before. If you click on ‘Not now’, your session cannot be analyzed using statistics, but you will be asked again every time you revisit our website. If you click on ‘No, I do not agree’, no statistical analysis will be made and a cookie will be used to record the fact that, in future, your session is not to be used for statistical analysis. The data produced are only processed and stored by JustRelate Deutschland GmbH in Germany.

During the statistical analysis, the following information is collated and stored:

type of device used (desktop pc, tablet and mobile etc.)
operating system and version used
browser-type and version
location analysis (federal state (Land)/region, country and browser language)
new visitors or returning visitors

JustRelate Deutschland GmbH shortens IP address submitted as soon as possible achieving an effective anonymization of this record and ensuring a clear allocation to a specific user is no longer possible. This shortening of the IP address follows a standard automated process, without the customer having to undertake any special adjustments or configurations. We do not use or combine your data for any other purpose, nor do we disclose it to third parties.

Specific information from JustRelate Deutschland GmbH relating to data protection may be found at https://www.etracker.com/en/data-privacy/

An overview of the cookies used by JustRelate Deutschland GmbH and the respective storage period may be found at https://help.etracker.com/en/article/cookies-used/

We do not take any responsibility for the information in the declarations received by JustRelate etracker.

Landwirtschaftliche Rentenbank does not have an automated decision-making process which includes profiling in accordance with Art. 22 (1) and (4) GDPR.

6. YouTube Videos

Content (such as videos) from the YouTube platform may also be integrated into our website. This service is operated by YouTube, a subsidiary of Google. Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland (‘Google’) is responsible for data processing in Europe.

We use embedded YouTube videos in extended data protection mode. This means that YouTube does not store cookies for a user who is shown a website with an embedded YouTube video player without clicking on the video to start playback.

The videos are only loaded and played if you expressly consent to the use of YouTube. In this case, Google sets various cookies and may also receive your IP address together with information about the respective video and your use of the playback functions. If you have a YouTube account and are logged into your YouTube account at the same time, this information can also be assigned directly to your personal profile. You can prevent this by logging out of your YouTube account beforehand.

YouTube also analyses the views of the videos statistically and provides us with reports on these analyses, which, however, only contain general information on the views, such as the total number of views. In this respect, we do not receive any more detailed information about the individual users. We therefore assume that no more precise analysis of individual users can be carried out as part of YouTube's analyses of video views. YouTube also analyses the data automatically and independently, without us being able to deactivate or influence this or gain further insight into the analyses.

In connection with the above-mentioned functions, YouTube may also transfer the processed data to servers outside the EU, in particular in the USA, insofar as this is necessary for the provision of these services.
The EU Commission adopted the adequacy decision for the EU-U.S. Data Privacy Framework on 10 July 2023.If the organisation in the USA to which personal data is transferred is certified under the EU-U.S. Data Privacy Framework, an adequate level of data protection can be assumed.Such certification exists for Google LLC, which is based in the USA. In addition, we have concluded the EU standard data protection clauses with YouTube and Google and have also stipulated the implementation of appropriate protective measures, which, depending on the need for protection of the data, may also include their encryption and are improved in accordance with the legal and technical conditions for adequate data protection. If the data is transferred to the USA or another third country, such a third country transfer is based on your consent in accordance with Art. 49 para. 1 sentence 1 lit. a) GDPR, which you give via the consent in the cookie banner. Further information on this can be found at https://policies.google.com/privacy/frameworks

You can find an overview of the cookies used by Google at

https://policies.google.com/technologies/cookies?hl=de

Further information on how YouTube and Google handle user data and how this data is processed can be found in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy

If you consent to the use of cookies and data processing by YouTube, the legal basis for this is § 25 para. 1 TTDSG and Art. 6 para. 1 sentence 1 lit. a) DS-GVO. You can revoke your consent at any time via the cookie banner without affecting the permissibility of the processing until revocation.

7. Social media link

We do not use any social media plugins on our website. If our website contains symbols from social media providers (e.g. Xing, LinkedIn, Instagram or YouTube), we only use these to passively link to the pages of the respective providers. No data is transmitted to the social media providers. A direct connection to their servers is not established when you visit our website, but only takes place when you click on the link.

We have various presences on social media platforms. We have a presence with the following providers: Xing, LinkedIn, Instagram and YouTube.

We use the technical platform and services of the providers for these information services. We would like to point out that you use our social media platforms and their functions at your own risk. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). When you visit our social media channels, the providers of the social media platforms collect, among other things, your IP address and other information that is stored on your end device in the form of cookies. This information is used to provide us, as the operator of the accounts, with statistical information about the interaction with us.

The data collected about you in this context will be processed by the platforms and may be transferred to countries outside the European Union, in particular the USA. The EU Commission adopted the adequacy decision for the EU-U.S. Data Privacy Framework on 10 July 2023. If the organisation in the USA to which personal data is transferred is certified under the EU-U.S. Data Privacy Framework, an adequate level of data protection can be assumed.

We do not know how the social media platforms use the data from your visit to our account and interaction with our posts for their own purposes, how long this data is stored and whether data is passed on to third parties. Data processing may differ depending on whether you are registered and logged in to the social network or whether you visit the site as a non-registered and/or non-logged-in user. When you access a post or the account, the IP address assigned to your end device is transmitted to the provider of the social media platform. If you are currently logged in to the respective platform as a user, a cookie on your end device can be used to track how you have moved around the network and assign this to your respective profile. This data can be used to offer you customised content or advertising. If you want to avoid this, you should log out or deactivate the ‘stay logged in’ function, delete the cookies on your device and restart your browser.

Which information the respective social media platform receives and how it is used is described by the providers in their privacy policies. There you will also find information about contact options and the settings options for adverts:

Xing: Privacy policy

LinkedIn: Privacy policy and cookie policy

Instagram: Data policy and cookie policy

YouTube: Privacy Policy

Our separate data protection information for our social media presences can be found at the following link: https://www.rentenbank.de/impressum-social-media

8. Rights of persons concerned

You have the right:

a) under Art. 7 (3) GDPR, to withdraw your previously granted consent to us at any time (in writing, by telephone, by fax, by email). As a result, we are no longer allowed in the future to continue the data processing based on this consent;

b) under Art. 15 GDPR to obtain information about your personal data processed by us. You may, for example, access information about the purposes of processing, the categories of personal data concerned, the categories of recipients to whom your data has been or will be disclosed, the planned storage period;

c) under Art. 16 GDPR to immediately obtain the rectification of inaccurate personal data stored by us or to request the completion of such data;

d) under Art. 17 GDPR to obtain the erasure of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;

e) under Art. 18 GDPR to demand the restriction of the processing of your personal data in accordance with Art. 21 GDPR, e.g. if you dispute the accuracy of the data, if the processing is unlawful but you refuse to delete it or if you have lodged an objection to the processing (see Section 7);

f) under Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly and machine-readable format or to request its transmit to another responsible person, and

g) under Art. 77 GDPR to lodge a complaint with the supervisory authority if you believe that data processing by Rentenbank is unlawful. If you have any complaints, please contact the Federal Commissioner for Data Protection and Freedom of Information.

9. Right to object

If the basis for data processing is Art. 6 (1) f) GDPR (necessary for the purposes of the legitimate interests), you have the right to object to the processing of your personal data at any time in accordance with Art. 21 GDPR, provided that there are grounds relating to your particular situation or if the objection is directed against data processing for direct advertising purposes. In the latter case, you have a general right to object, which we implement without giving reasons arising from your particular situation (Art. 21 (2) GDPR).

If you object on grounds relating to your particular situation, we will no longer process your personal data, unless we can prove compelling legitimate grounds for processing them which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims (Art. 21 (1) GDPR).

If you would like to make use of your right to withdraw your consent (cf. Section 5a) or your right to object, an e-mail to datenschutzbeauftragter@rentenbank.de suffices. Alternatively, you can also contact us by telephone, fax or mail.

10. Security measures for the processing of your personal data

We use the SSL procedure (Secure Socket Layer). The website is basically accessed via "https". We moreover make use of technical and organizational security measures to protect the data we process against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. Our security measures are continuously improved and adapted in line with technological developments.

11. Topicality and amendment of the data protection declaration, further information

This Data Protection Statement is current and valid (version dated January 2022). Due to the further development of the website and the offers or due to legal or regulatory requirements, it may become necessary to adapt this data protection declaration. You can access the current version at any time from the website at https://www.rentenbank.de/en/data-protection and print it out.

General data protection information

Further information can also be found in the General Data Protection Information of Landwirtschaftliche Rentenbank.