Gutmann Online: Information on data processing.

Bank Gutmann Aktiengesellschaft
Schwarzenbergplatz 16
1010 Vienna

Phone: +43-1-502 20-0
E-Mail: mail@gutmann.at

Our Data Protection Officer is available at:
E-Mail: datenschutz@gutmann.at
 

We process personal data that we receive from you in the course of our business relations with you or your use of Gutmann Online.

Personal data processed includes the following categories depending on the extent of your use of Gutmann Online:
-    personal details (e.g. customer number, name, user identification, language selection, e-mail address for secure mail)
-    connection data (e.g. IP address, log data, cookies, login data)
-    communication data (e.g. e-mail correspondence when using Secure Mail)
-    authentication data (e.g. device name, model number of device, operating system, authentication result)
-    data resulting from the performance of our contractual obligations (e.g. reports, account and security transactions, account and security account statements) 

When you use Gutmann Online, technically necessary cookies are set for the duration of your visit to the website.

We process your personal data for the purpose of providing you with the services contained in Gutmann Online. Gutmann Online is used to provide online enquiry facilities in relation to accounts, custody accounts and fund information as well as for the secure exchange of messages and documents (online reporting and secure mail).

The processing is based on the following legal bases:
-    Art 6 para 1 lit b GDPR for contract fulfilment and pre-contractual measures 
-    Art 6 para 1 lit f GDPR for the purposes of legitimate interests, namely the up-to-date design of our processes and correspondence by means of electronic communication as well as proper documentation

Within the Gutmann Group, your data will go to those undertakings, entities and employees that require your data for the provision of Gutmann Online.

In addition, processors (especially IT service providers) will receive your data if they need the data to perform their respective services. All processors are contractually bound to treat your data confidentially and to process them only within the scope of the services rendered by them.

We process your personal data in Gutmann Online for the duration required depending on the data category.

-    Your personal details are stored for the entire duration of your use of Gutmann Online.
-    Connection data and authentication data are stored for a period of up to one year, depending on technical necessity.
-    Your communication data in Gutmann Online will be stored for a period of 6 months.
-    The storage period regarding data from the performance of our contractual obligations depends on the respective underlying business relations. Information on this can be found in our general data protection information.

As a matter of principle, you have a right to access (Art 15 GDPR), rectification (Art 16 GDPR), erasure (Art 17 GDPR) or restriction (Art 18 GDPR) of the processing of your stored data, the right to object (Art 21 GDPR) to the processing and a right to data portability (Art 20 GDPR) in accordance with the provisions of data protection law.

You also have the right to lodge a complaint with the data protection authority, Barichgasse 40-42, 1030 Vienna, dsb@dsb.gv.at.

The data received from you is necessary to process your request for the fulfilment of the contract in accordance with Art 6 para 1 lit b GDPR, as otherwise it is not possible to conclude a contract or process the request for Gutmann Online.

Our website uses so-called cookies. These are small text files that are stored on the end device of the website visitor with the help of the browser. We limit ourselves to cookies that are technically absolutely necessary for the provision of Gutmann Online. You can find more information on this under point 2.

Every access to contents of our website is logged. We store these access data for operational purposes, for IT security purposes and for error analyses. In our log files, each visitor’s IP address and port, your browser’s user agent string, date and time of access, name of the file requested, the data volume transmitted, a referrer URL, if available, and (after successful log-in), your log-in name are logged. In addition, Online Reporting records all successful and failed log-in attempts along with all parameters of your visit, such as account numbers and securities account numbers accessed.