Data protection

Internationales Bankhaus Bodensee AG (IBB AG) welcomes you to its website. We are delighted about your interest and we would like your browsing experience on our website to be as pleasant as possible. This involves handling your data responsibly and in compliance with legal requirements.

In case we refer to the provisions of the General Data Protection Regulation (GDPR) you can call them up here. 

We are the “controller” for processing your personal data within the meaning of Art. 4 No. 7 GDPR.

You can get in touch with us as follows:

Internationales Bankhaus Bodensee AG
Otto-Lilienthal-Str. 8
88046 Friedrichshafen
Phone: +49 7541 304-0
Fax: +49 7541 304-199

You can contact our data protection officer at:

Internationales Bankhaus Bodensee AG
Aron Mildemann
data protection officer
Otto-Lilienthal-Str. 8
88046 Friedrichshafen
E-mail address:

This privacy statement is valid for the website of IBB AG. In case you can reach content provided by third-party suppliers (“third-party offers”) through our website our privacy statement does not apply to this third-party content. In such cases, we are not responsible for processing your personal data within the meaning of Art. 4 No. 7 GDPR.

Privacy Statement

1. Processing of personal and non-personal data

1.1 Surfing on our website

You can basically visit our website without letting us know who you are. All we learn about you is

  • your IP address,
  • the name of the website and/or file called up and the time of the call or download,
  • the data quantity transmitted and
  • if the call or download were successful.

The data is exclusively used to administer and optimize the website.

The IP address can be a personal datum because, by requesting information from the internet provider under certain circumstances, it allows you to determine the identity of the person owning the internet access.

We only analyze the IP address if our internet infrastructure is attacked. In this case we have a lawful interest in analyzing the IP addresses within the meaning of Art. 6 sect. 1 f) GDPR. This lawful interest is based on the need to ward off the attack on the internet infrastructure and determine the origin of the attack to prosecute the persons in charge and effectively prevent further attacks.

The IP address is deleted if we can be certain that no attack on our internet infrastructure originated from it. This is regularly done after 7 days.

1.2 Applications of other providers
Furthermore, information applications (e.g. financing calculators, stock market information, real-estate database) of third parties (“partners”) are integrated in our website. These applications are hosted on our partners’ servers and are operated by them. Personal data is processed to the extent to which it is necessary for the service provided by the individual information applications. Please take into account that the use of such applications is subject to the data privacy rules of the individual partner who is responsible for processing the data within the meaning of Art. 4 No. 7 GDPR. When we transmit your personal data to a partner in this context, we do it only with your approval, and according to Art. 6 sect. 1 a) GDPR it is therefore lawful to do so.

1.3 Google Maps
This website uses Google Maps to show maps and to create route maps. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you use further functions of Google by clicking on the shown map, for instance, you will use a Google service outside our sphere of influence. In this case, the regulations and notes made by Google apply.

On the website you will find further information regarding

  • The Google terms of use ("General Terms and Conditions"),
  • Additional terms of use for Google Maps/Google Earth ("Additional terms of use for Google Maps/Google Earth"),
  • Legal notes for Google Maps/Google Earth ("Legal notes") as well as
  • The Google privacy statement ("Privacy statement"). In Google’s privacy statement [] you will find information about what data is collected for what purpose and what Google does with this data.

1.4 Consent
We will only process your personal data beyond this point if you have given us your consent so that we are entitled to process your personal data in compliance with Art. 6 sect. 1 a) GDPR. In some areas of our website you have the possibility of explicitly expressing your consent. We will inform you about the purpose of the data processing, in case you express your consent, and how long we are going to save your personal data.

1.5 Other kinds of processing due to a lawful interest
If required, we are processing your data beyond the actual fulfillment of the contract concluded with you or beyond a consent expressed by you to reserve lawful interests of our own or of third parties, unless a consideration in an individual case indicates that your lawful basic rights and freedoms, which require the protection of your personal data, are prevalent (cf. Art 6 sect. 1f GDPR). This might cover the following:

  • Analysis and optimization of procedures to analyze the demand and directly approach customers
  • Advertising, market research or opinion polling, if you have not objected to the use of your data
  • Assertion of legal claims and defense in case of legal disputes
  • Guaranteeing IT security and IT operations at the bank
  • Prevention and detection of crimes
  • Measures to control the business and develop further services and products

2. Your rights as user of our website

2.1 Any data subject has the right to information according to Art. 15 GDPR, the right to rectification in compliance with Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to limitation of processing according to Art. 18 GDPR and the right to data portability in compliance with Art. 20 GDPR. Regarding the right to information and the right to erasure, the limitations of Articles 34 and 35 of the Federal Data Protection Law apply. Furthermore, you have a right to complain to a data protection supervisory authority (Art. 77 GDPR in connection with Art. 19 Federal Data Protection Law).

2.1.1 Withdrawal of consent given
You can withdraw any consent granted explicitly or implicitly at any time to become effective in the future.

2.1.2 Information about your right to object in compliance with Art. 21 General Data Protection Regulation (GDPR)
a)  For reasons based on your specific situation you have the right to object anytime to the processing of your personal data, which is conducted on the grounds of Art. 6 sect. 1 letter e GDPR (data processing in the public interest) and Art. 6 sect. 1 letter f of the General Data Protection Regulation (data processing on the grounds of weighing of interests). This also applies to profiling within the meaning of Art. 4 No. 4 GDPR, which we use for credit evaluation or for advertising purposes.

If you object, your personal data will no longer be processed unless we can prove cogent reasons worthy of protection, which outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.

b) In individual cases we process your personal data to do direct marketing. You have the right to object to the processing of your personal data for the purpose of such marketing at any time, this also applies to profiling if it is connected to such direct marketing. In case you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

The objection can be expressed informally and can be sent to:

Internationales Bankhaus Bodensee AG
Otto-Lilienthal-Str. 8
88046 Friedrichshafen
E-mail address: kontakt(at)

2.2 Claiming any of the rights laid down in item 2.1 is principally free of charge for you. Yet, in obviously unfounded or – in case of frequent repetition – excessive requests we can, pursuant to Art. 12 sect. 5 GDPR, either

a) Request an adequate fee covering the administrative costs for providing information or carrying out the requested measure, or

b) Refuse to act on the request.

2.3 Please contact our data protection officer to exercise your rights. Here you can also request further information about data protection.

3. Update of this privacy statement 
From time to time, it might be necessary to update this privacy statement, for instance in case of new legal or regulatory requirements or new information on our website. We will inform you about this update here. We generally recommend that you call up the privacy statement regularly to check if changes have been made. Among other things, you can find out if changes have been made if the date of the last changes at the bottom of the document has been updated.

4. Printing and saving this privacy statement
This privacy statement can directly be printed and saved, for instance by using the printing and/or saving function in your browser.

Last updated: May 2018

General Data Protection Regulation (GDPR)

Apart from a website-specific privacy statement you can also call up further information about the processing of your personal data using the following link: Privacy statement