Data protection information authorised representative

• 0. Controller / Data protection officer

  Controller
  ABS GROUP HOLDINGS PLC, Städtle 44, Luxembourg City Luxembourg,
  phone: +1 (548) 826-2146

  Contact data of the data protection officer
  ABS GROUP HOLDINGS PLC, Datenschutzbeauftragter, Städtle 44, 9490 Luxembourg City
  phone: +1 (548) 826-2146
  e-mail: contact@absgroupholdings.org

• 1. Which data is processed (data categories) and from which sources does it come from?

  We collect and process personal data, e.g. received in the course of the banking relationship with the owner of the business relationship (e.g. power of attorney) or for other purposes for the necessary exchange with the person responsible. 

  By personal data we mean in particular the following data categories:

  • Personal identification data (e.g. name, ID details, addresses, telephone number, power of attorney information)
  • Personal characteristics (e.g. further regulatory information required for opening and maintaining the business relationship or power of attorney)
  • Media, means of communication (e.g. e-mail correspondence, business correspondence)

• 2. For what purposes and on what legal basis is your data processed?

  We process personal data in accordance with the provisions of the GDPR for the following purposes:

  • Fulfillment of contractual obligations towards the client
  • Fulfillment of legal or contractual obligations

  
  

  Fulfillment of the contract and compliance with legal requirements is the legal basis for the processing of your data (Art. 6(1)(b), (c) GDPR).

• 3. Who has access to the personal data?

  Both positions inside and outside the bank can have access to your data. Within the bank, only departments or employees are allowed to process your data if they need it to protect legitimate interests. Subject to data confidentiality, other service providers or vicarious agents may also receive personal data for these purposes. Processors can be companies in the categories of IT services, logistics, printing services, advice and consulting as well as sales and marketing. 

  Data will only be transferred to countries outside the EU or the EEA (so-called third countries) if

  • this is necessary to carry out pre-contractual measures or to fulfill a contract, to provide services or to process orders (e.g. executing payment orders and securities transactions or issuing a credit card) (Art. 6(1)(b), (c) GDPR),
  • you have given us your consent (Art. 6(1)(a) GDPR).

• 4. How long is the data stored?

  We process and store the personal data until the statutory retention obligation expires.

• 5.  Is automated decision making in use, including profiling?

  No automated decision-making, including profiling, takes place as part of this data processing.

• 6. What data protection rights do you have?

  Every data subject has the right to information in accordance with Art. 15 GDPR, the right to rectification in accordance with Art. 16 GDPR, the right to erasure ("right to be forgotten") in accordance with Art. 17 GDPR, the right to restriction of processing (blocking) in accordance with Art. 18 GDPR as well as the right to object in accordance with Art. 21 GDPR (see below for details). In addition, there is a right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 GDPR.

  Right to object: You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Art. 6(1)(f) GDPR (data processing on the basis of a legitimate interest). The objection always applies only to a specific individual case. It can be made informally using the contact details listed above. If you object, we will not or will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

• 7. Updates

  In particular due to technical developments, changed legal or official requirements or due to organisational changes, we will adapt or update this data protection information and publish it on our website https://absgroupholdings.org/privacy. Upon request, we will also provide the current data protection information as a file (PDF) or in written form. However, we recommend that you always check our website for the current status. In the event of changes, we will check whether there is an obligation to actively notify you of the changes and, in these cases, fulfill our obligations accordingly. Otherwise, we will only replace files or printouts distributed by us with current versions upon further request.