Data protection information digital services

• 0. Controller / Data protection officer

  Controller
  ABS GROUP HOLDINGS PLC, Städtle 44, Luxembourg City Luxembourg,
  phone: +1 (548) 826-2146

  Contact data of the data protection officer
  ABS GROUP HOLDINGS PLC, Datenschutzbeauftragter, Städtle 44, 9490 Luxembourg City
  phone: +1 (548) 826-2146
  e-mail: contact@absgroupholdings.org

• 1. Which data is processed (data categories) and from which sources does it come from?

  We collect and process personal data that we receive in connection with the use of ABS's digital services.

  • Personal information data (e.g. names, addresses, telephone number)
  • Personal characteristics (e.g. information about the request)
  • Electronic data (e.g. records of access or changes, browser data, IP addresses, application version, device identifiers, device model and manufacturer, operating system)

  In addition, when our digital services are used by registered users (e.g. clients in online banking, interested parties in the registration process, etc.), additional data and information is generated that is necessary to provide the services and process the orders are. 

  To better understand the usage behavior of users of our digital offerings, we collect analysis and tracking data within our digital services.

  We declare the different types of data and their use and ask the users of our digital services for active consent before processing. To do this, we display options for data protection settings. If permission is not granted, analysis data will be evaluated anonymously for the individual session and no tracking data will be processed.

  Consent can be revoked at any time in the (data protection) settings of the digital services.

  Newsletter

  When you register for our newsletter, we will immediately send an e-mail containing a hyperlink to the e-mail address provided. By clicking on this link, your newsletter registration is confirmed (double opt-in procedure). If this registration confirmation is not received within ten days, we will delete the e-mail address from our temporary list and registration will not take place.

  If the newsletter registration is confirmed, this gives consent to the storage of the e-mail address, including the date of entry, IP address and the list name of the desired newsletter. We use the e-mail address and the personal data collected at the same time, such as name and e-mail address, only for administration and sending the desired newsletter at the frequency specified when registering.

  Our newsletters do not contain any obvious or hidden counters, third-party advertising or links to external sites that are not directly related to the content of our newsletter.

  ABS Quotes

  If you register on our "ABS Quotes" platform, we collect and process the following categories of data:

  • Personal information data (e.g. username, email)
  • Personal characteristics (e.g. investor type, virtual portfolio, price list, information from the limit minder and favorites set)
  • Electronic data (e.g. log information)

• 2. For what purposes and on what legal basis is your data processed?

  We process personal data in accordance with the provisions of the GDPR for the following purposes:

  • Fulfillment of legal or contractual obligations
  • Provision of services
  • Optimisation of digital offers
  • Placement of digital advertising
  • Analysis, tracking, marketing

  
  

  Safeguarding legitimate interests, fulfilling a contract and fulfilling a legal obligation are the legal bases for processing your data. Where necessary, your consent is the legal basis for data processing (Art. 6(1)(a), (b), (c) GDPR).

• 3. Who has access to the personal data?

  Both positions inside and outside the bank can have access to your data. Within the bank, only departments or employees are allowed to process your data if they need it to protect legitimate interests. Subject to data confidentiality, other service providers or vicarious agents may also receive personal data for these purposes. Processors can be companies in the categories of IT services, logistics, printing services, advice and consulting as well as sales and marketing.

  Data will only be transferred to countries outside the EU or the EEA (so-called third countries) if

  • this is necessary to carry out pre-contractual measures or to fulfill a contract, to provide services or to process orders (Art. 6(1)(b) GDPR)
  • you have given us your consent (Art. 6(1)(a) GDPR)

  
  

  Note on digital identification: For identification, we use partners who process the data under their own responsibility (required by regulations). Biometric data is also recorded here. Detailed information can be found in the provider’s privacy policy (e.g. ID Now).

• 4. How long is the data stored?

  We process and store the personal data until the statutory retention obligation expires. Furthermore, personal data will be deleted as soon as it is no longer required to achieve the purpose for which it has been collected.

• 5.  Is automated decision making in use, including profiling?

  No automated decision-making, including profiling, takes place as part of this data processing.

• 6. What data protection rights do you have?

  Every data subject has the right to information in accordance with Art. 15 GDPR, the right to rectification in accordance with Art. 16 GDPR, the right to erasure ("right to be forgotten") in accordance with Art. 17 GDPR, the right to restriction of processing (blocking) in accordance with Art. 18 GDPR as well as the right to object in accordance with Art. 21 GDPR (see below for details). In addition, there is a right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 GDPR.

  Right to object: You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Art. 6(1)(f) GDPR (data processing on the basis of a legitimate interest). The objection always applies only to a specific individual case. It can be made informally using the contact details listed above. If you object, we will not or will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

• 7. Updates

  In particular due to technical developments, changed legal or official requirements or due to organisational changes, we will adapt or update this data protection information and publish it on our website https://absgroupholdings.org/privacy. Upon request, we will also provide the current data protection information as a file (PDF) or in written form. However, we recommend that you always check our website for the current status. In the event of changes, we will check whether there is an obligation to actively notify you of the changes and, in these cases, fulfill our obligations accordingly. Otherwise, we will only replace files or printouts distributed by us with current versions upon further request.