Privacy policy

Information about the processing of your data within the framework of the Deutsche Bank Alumni Circle

With the following information, we give you an overview of the processing of your personal data and your rights under data protection law.

Who is responsible for data processing and to whom can I contact?

Responsible is the
       Deutsche Bank AG (hereafter referred to as ‘Company’)
       Taunusanlage 12, D-60325 Frankfurt am Main
       Mail: info@db-alumnicircle.com

You can reach our company data protection officer at

       Deutsche Bank AG Data Protection Officer
       Taunusanlage 12, D-60325 Frankfurt am Main
       Mail: data.privacy@db.com

What data do we use and for what purposes?

We process personal data that we collect directly from you via the registration form for the purpose of establishing and conducting a membership of the Deutsche Bank Alumni Circle.
Relevant categories of personal data collected via the registration form include, in particular: master data (e.g. name, optional date of birth), contact data (such as private address, phone number, email address), and other voluntary details regarding previous employment within the Deutsche Bank Group.
In the registration form, you also have the option to subscribe to the newsletter. If you choose this option, you will be informed about events and news via email.
If you are registered as a member on the alumni platform, we additionally capture data generated through interaction with our system. This includes contact data and images you enter or upload into the system. We store comments you make on the alumni platform, groups you join, your tags, and your participation in events.
All this data is collected to facilitate networking among alumni. At a minimum, we need your name and email address to enable email networking among members. If necessary, further details required for providing these additional services may be collected.
You can view the data stored about you in your profile settings; this allows you to oversee the stored data. You also have the option to request the deletion of your data in the settings section. Based on this, we provide your contact data to other alumni in the network portal. In your profile settings, you can control which data is visible to other members.

What do we process your data for (purpose of processing) and on what legal basis?

We process personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
     a. To fulfill contractual obligations (Article 6 para. 1 b GDPR):

The processing of your personal data takes place primarily for the purpose of establishing, implementing or terminating the membership, which takes place on request. ä We store this data for the execution of this order in accordance with Art. 6 para. 1 S. 1 lit. b GDPR.
     b. Based on your consent (Article 6 para. 1 a GDPR):

If you have given us consent to process personal data for specific purposes (e.g. sending newsletters), this processing is lawful based on your consent. Consent can be withdrawn at any time. This also applies to the withdrawal of consent given before the EU General Data Protection Regulation came into effect, i.e., before May 25, 2018. Please note that withdrawal only applies to future processing.

Who receives your data?

Within the company, only those departments and individuals who require your data to fulfill processing purposes, such as the HR and communications departments, receive access to your data. We have commissioned the service provider Paulbergman GmbH to operate the alumni platform (https://www.alumnii.de) on servers in Germany. This provider is bound by our written data protection instructions and must comply with all legal data protection requirements.

Is your data transferred to a third country?

Data transfer to other subsidiaries of the Deutsche Bank Group or service providers outside the European Union or the European Economic Area (so-called third countries) occurs if it is necessary for the membership. Only HR departments in the relevant geographical region have access to your data.

How long is your data stored?

We delete your personal data as soon as it is no longer required for the aforementioned purposes. After the termination of membership, your personal data is deleted.

What are your data protection rights?

You can request information about the personal data stored concerning you from the entity mentioned under "Responsible entity". Furthermore, you can, under certain conditions, exercise your right to information according to Article 15 GDPR, the right to correction according to Article 16 GDPR, the right to deletion according to Article 17 GDPR, the right to restriction of processing according to Article 18 GDPR, the right to objection according to Article 21 GDPR, and the right to data portability according to Article 20 GDPR. In addition, the restrictions of §§ 34 and 35 BDSG apply to the right to information and the right to deletion. Moreover, you have the right to lodge a complaint with a supervisory data protection authority (Article 77 GDPR i.V.m. § 19 BDSG).
You can withdraw consent to the processing of your data at any time with the responsible entity mentioned above. This also applies to the withdrawal of consent given before the GDPR came into effect, i.e., before May 25, 2018. Please note that withdrawal only applies to future processing and does not affect processing before the withdrawal.

To what extent is automated decision-making used?

We do not use automated decision-making according to Article 22 GDPR for establishing, conducting, and terminating membership.

Information about your right to object under Article 21 GDPR

Individual right to objection

You have the right to object at any time to the processing of your personal data, which occurs based on Article 6 (1) e GDPR (data processing in public interest) and Article 6 (1) f GDPR (data processing based on balancing interests) for reasons arising from your particular situation; this also applies to profiling based on these provisions according to Article 4 No. 4 GDPR.
If you object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.

Recipient of an objection

The objection can be made informally with the subject "Objection according to Article 21 GDPR" including your name, address, and date of birth, and should be directed to:

       Deutsche Bank Alumni Circle
       Taunusanlage 12, D-60325 Frankfurt am Main
       info.db-alumnicircle@db.com