Imprint for Social Media Networks

This website and any content on our Facebook, Instagram, YouTube, X (Twitter) and LinkedIn profile pages are jointly provided by N26 SE and N26 Bank SE.

Providers pursuant to Sec. 5 (1) German Telemedia Act (Telemediengesetz - TMG):

N26 SEVoltairestraße 8, 10179 BerlinCommercial register number: Amtsgericht Charlottenburg - HRB 271693 BVAT-ID: DE290735643Management board: Marcus W. Mosen (Co-Chair), Maximilian Tayenthal (Co-Chair), Arnd Schwierholz Supervisory board: Peter Kleinschmidt (Chairperson), Jörg Gerbig (Deputy), Déborah Carlson-Burkartimprint@n26.comInternet-ChatFax: +49 (0) 30 364285082

What3Words Address: ///mascot.trap.weep

N26 Bank SEVoltairestraße 8, 10179 BerlinCommercial register number: Amtsgericht Charlottenburg - HRB 271697 BVAT-ID: DE305957096Management board: Maximilian Tayenthal, Arnd SchwierholzSupervisory board: Marcus W. Mosen (Chairperson), Déborah Carlson-Burkart (Deputy), Peter Kleinschmidtimprint@n26.comInternet-ChatFax: +49 (0) 30 364285082

Responsible supervisory authorityBundesanstalt für Finanzdienstleistungsaufsicht (BaFin) (Federal Financial Supervisory Authority)Graurheindorfer Straße 10853117 BonnandMarie-Curie-Str. 24-2860439 Frankfurt am Mainpoststelle@bafin.dewww.bafin.de

Extrajudicial dispute resolutionN26 Bank SE is obligated to participate in a dispute settlement at a Dispute Resolution Body for consumers.

The following Bodies are competent for disputes arising from services offered according to Sec. 14 (1) No. 1-5 German Injunctions Act (Unterlassungsklagengesetz - UKlaG):

Schlichtungsstelle bei der Deutschen Bundesbank (Dispute Resolution Body at German Central Bank)Postfach 10 06 02, 60006 Frankfurt am MainWilhelm-Epstein-Straße 14, 60431 Frankfurt am Main https://www.bundesbank.de/de/service/schlichtungsstelle

The following Bodies are competent for disputes arising from services offered according to Sec. 14 (1) No. 6 and 7 UKlaG:

Schlichtungsstelle bei der Bundesanstalt für Finanzdienstleistungsaufsicht (BaFin) (Dispute Resolution Body at Federal Financial Supervisory Authority)Referat ZR 3Graurheindorfer Straße 108, 53117 Bonnhttps://www.bafin.de/DE/Verbraucher/BeschwerdenStreitschlichtung/BeiBaFinbeschweren/BeiBaFinbeschwer

European online dispute resolution platformThe European commission has set up an European online dispute resolution platform (ODR platform) under the following link:
https://ec.europa.eu/consumers/odr/. A consumer may access the ODR platform for purposes of any extrajudicial settlement of disputes arising from online contracts for services concluded with a business established within the EU.

Information in context of insurance salesN26 Bank SE is registered in the register of intermediaries as an insurance intermediary with a license pursuant to Sec. 34d (1) of the German Trade, Commerce and Industry Regulation Act (Gewerbeordnung - GewO) under the registered number D-EZ32-J43G4-43 at the Berlin Chamber of Commerce and Industry (Industrie- und Handelskammer Berlin).

Information on the intermediary:

N26 Bank SEVoltairestraße 8, 10179 BerlinCommercial register number: Amtsgericht Charlottenburg - HRB 271697 BVAT-ID: DE305957096Imprint@n26.comInternet-ChatFax: +49 (0) 30 364285082

The competent supervisory authority is:

Industrie- und Handelskammer BerlinFasanenstraße 8510623 Berlinservice@berlin.ihk.dewww.ihk-berlin.de/

Joint Supervisory Authority according to Sec. 11a (1) GewO:

Deutscher Industrie- und Handelskammertag (DIHK) e.V.Breite Straße 2910178 BerlinPhone: + 49 (0) 30 - 20 30 80Fax: + 49 (0) 30 - 2 03 08 10 00infocenter@berlin.dihk.deRegister access: www.vermittlerregister.info

Rules of professional conduct:

Sec. 34d GewOSec. 59-68 German Insurance Contract Act (Versicherungsvertragsgesetz - VVG)Sec. 48b German Insurance Supervision Act (Versicherungsaufsichtsgesetz - VAG)German Insurance Intermediary Regulation (Versicherungsvermittlerverordnung - VersVermV)

The rules of professional conduct can be found on the website https://www.gesetze-im-internet.de provided by the German Federal Ministry of Justice.

Extrajudicial customer dispute resolution for insurers:

Versicherungsombudsmann e.V.Postfach 08 06 3210006 BerlinPhone: +49 (0) 30 20 60 58 - 0info@versicherungsombudsmann.dewww.versicherungsombudsmann.de

Ombudsmann Private Kranken- und PflegeversicherungPostfach 06 02 2210052 BerlinPhone: +49 (0) 800 2 55 04 44ombudsmann@pkv-ombudsmann.dewww.pkv-ombudsmann.de

Journalistic-editorial offeringKelly McConville, Voltairestraße 8, 10179 Berlin is responsible for any journalistic-editorial content on our website pursuant to Sec. 18 (2) German Media Treaty on Broadcasting (Medienstaatsvertrag - MStV).

Press inquiriespresse@n26.comYou can find our current press releases here.

Banks and authoritiesofficials.de@n26.com

Privacy Policy for Social Media Pages

(Version 1.3 - Date 09.03.2023)

In this Privacy Policy, N26 Bank SE (hereinafter: “N26”, “we”, “our”) shall inform you about the collection, use and processing of personal data when using our social pages (hereinafter: “social media pages”) on Facebook, Instagram, YouTube, Twitter and LinkedIn (hereinafter “social media networks”).

Insofar as information refers exclusively to one of our social media pages, we shall explicitly point this out to you.

In this context, personal data means all detailed information about personal or factual circumstances of a specific or identifiable natural person, such as e.g. name, telephone number or address. We process your personal data either when you visit our social media profiles or if you get in touch with us over our social media profiles.

I. Controllers and processors

The controller for the collection, processing and use of personal data is:

N26 Bank SEVoltairestraße 810179 Berlin

N26 has appointed a Data Protection Officer, who is accessible via dpo@n26.com.

You will find more detailed information regarding N26 in the imprint.

Some of our data processing activities can be carried out by a third party on behalf of N26. Where processing of personal data is carried out on behalf of N26, we conclude a separate contract with the processor in accordance with Art. 28 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: “GDPR”).

Our list of processors includes pure data processors, meaning technical service providers, which fall under the following categories:

  • IT infrastructure and connection providers

  • Software and software maintenance providers, including for the provision of our App

  • Cloud infrastructure service providers

  • Customer relationship management providers

  • Customer support providers

  • Information/Documentation automation, management & destruction service providers

  • Analytical software/platform providers

For the purposes described in III. we may be joint controllers together with the respective social media network for specific processing activities (please see III. for more details).

N26 can transmit your data to external lawyers, advisors and consultants, who are separate controllers and bound to professional confidentiality, for the purposes described above.

For the technical provision of our services, N26 Bank is supported by N26 SE, Klosterstraße 62, 10179 Berlin which is bound by its instructions.

II. Data processing purposes and legal basis

We process your personal data in accordance with the GDPR and any national legislation including but not limited to the German Federal Data Protection Act (hereinafter: “Data Protection Regulation”). In compliance with such Data Protection Regulation, N26 will only process your personal data if at least one of the following legal bases applies, as detailed in section III. below regarding our specific data processing activities:

  • The processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6 (1) b) GDPR)

Personal data is processed in order to fulfil our pre-contractual and contractual obligations.

  • Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data (Art. 6 (1) f) GDPR)

We process your personal data in order to pursue our legitimate interests or the legitimate interests of a third party, where those legitimate interests override any of your rights and the data processing activities are necessary to satisfy such legitimate interests. In such cases, we have carried out a legitimate interest assessment where those legitimate interests, impact and guarantees have been analyzed. Those cases are the following:

  • To conduct and produce analysis, statistical research and reports, based on the legitimate interest of N26 to conduct research and analysis regarding the use customers make of the social media pages, products and features.

  • Improving our processes and service levels relating to the provision of banking services, based on the legitimate interest of N26 of improving its internal processes and services offered to customers and improving the customer experience.

  • Advertising for N26 products and partnership offers, based on the legitimate interest of N26 to inform customers about updates to existing products, the launch of new products as well as products which are offered together with partners, including market and opinion analysis.

III. Social media networks and N26 Bank

N26 maintains publicly accessible social media pages on the social media networks. When visiting our social media pages on the social media networks, the respective network collects personal data of you as an internet user.

1. FacebookFacebook, a social media network operated by Meta Platforms Ireland Ltd.., 4 Grand Canal Square, Dublin 2, Ireland (hereinafter referred to as “Meta”), provides us with usage statistics (e.g. number of site visitors, demographics of site visitors, use of the individual functionalities). Meta compiles these statistics of personal data, which Meta collects when you visit our Facebook social media page. Such data processing serves our legitimate interest in improving the user experience for our page visitors in a target group-oriented manner. The legal basis for data processing is therefore Art. 6 (1) f) GDPR. We have no access to the personal data that Facebook collects to compile these statistics and cannot link these statistical data to the profiles of our fans or individual users.

In addition, Facebook uses so-called cookies, which are stored on your device when you visit our Facebook social media page. This can apply even if you do not have a Facebook account or are not logged into your account while visiting our Facebook social media page. We don’t have access to personal data that Meta collects while using cookies. You can find details on the collection and storage of your personal data and on the type, scope and purpose of their use by Meta in Meta's privacy policy at: https://www.facebook.com/policy.php. As the operator of the profile, we are joint controllers with Facebook for the processing of your personal data (in terms of Art. 26 GDPR). We have concluded an agreement with Facebook in regards to the joint controllership. You can find it here: https://www.facebook.com/legal/terms/page_controller_addendum. Please find additional information here: https://www.facebook.com/legal/terms/information_about_page_insights_data.

2. InstagramInstagram, a social media network operated by Meta provides us with usage statistics (e.g. user growth, user demography, use of the individual functionalities). Meta compiles these statistics of personal data, which Meta collects when you visit our Instagram social media page. Such data processing serves our legitimate interest in improving the user experience for our page visitors in a target group-oriented manner. The legal basis for data processing is therefore Art. 6 (1) f) GDPR. We have no access to the personal data that Meta collects to compile these statistics and cannot link these statistical data to the profiles of our fans or individual users.

In addition, Instagram uses so-called cookies, which are stored on your device while visiting our Instagram social media page. This can apply even if you do not have an Instagram account or are not logged into your account while you are visiting our Instagram social media page. We don’t have access to personal data that Instagram collects while using cookies. You can find details on the collection and storage of your personal data and on the type, scope and purpose of their use by Instagram in Instagram's privacy policy at: https://help.instagram.com/519522125107875. As the operator of the profile, we are jointly responsible with Meta, as the operator of Instagram for the processing of your personal data (in terms of Art. 26 GDPR). We have concluded an agreement with Meta as the operator of Instagram in regards to the joint controllership. You can find it here: https://www.facebook.com/legal/terms/page_controller_addendum. Please find additional information here: https://www.facebook.com/legal/terms/information_about_page_insights_data.

3. YouTubeYouTube, a video hosting service operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “YouTube”) provides us with usage statistics (e.g. user growth, user demography, use of the individual functionalities). YouTube compiles these statistics of personal data, which YouTube collects when you visit our YouTube page. Such data processing serves our legitimate interest in improving the user experience for our page visitors in a target group-oriented manner. The legal basis for data processing is therefore Art. 6 (1) f) GDPR. We have no access to the personal data that YouTube collects to compile these statistics and cannot link these statistical data to the profiles of our fans or individual users.

In addition, YouTube uses so-called cookies, which are stored on your device when you visit our YouTube social media page. This can apply even if you do not have a YouTube account or are not logged into your account while visiting our profile page. We don’t have access to personal data that YouTube collects while using cookies. You can find details on the collection and storage of your personal data and on the type, scope and purpose of their use by YouTube in YouTube's privacy policy at: https://policies.google.com/privacy?hl=en-US. As the operator of the profile, we are jointly responsible with Google, as the operator of YouTube, for the processing of your personal data (in terms of Art. 26 GDPR).

4. TwitterTwitter, a social media network operated by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (hereinafter referred to as “Twitter”), provides us with usage statistics (e.g. user growth, user demography, use of the individual functionalities). Twitter compiles these statistics of personal data, which Twitter collects when you visit our Twitter page. Such data processing serves our legitimate interest in improving the user experience for our page visitors in a target group-oriented manner. The legal basis for data processing is therefore Art. 6 (1) f) GDPR. We have no access to the personal data that Twitter collects to compile these statistics and cannot link these statistical data to the profiles of our fans or individual users.

In addition, Twitter uses so-called cookies, which are stored on your device when you visit our page. This can apply even if you do not have a Twitter account or are not logged into your account while visiting our profile page. We don’t have access to personal data that Twitter collects while using cookies. You can find details on the collection and storage of your personal data and on the type, scope and purpose of their use by Twitter in Twitter's privacy policy at: https://twitter.com/de/privacy. As the operator of the profile, we are jointly responsible with Twitter for the processing of your personal data (in terms of Art. 26 GDPR).

5. LinkedInLinkedIn, a social media network operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter referred to as “LinkedIn”), provides us with usage statistics (e.g. user growth, user demography, use of the individual functionalities). LinkedIn compiles these statistics of personal data, which LinkedIn collects when you visit our LinkedIn page. Such data processing serves our legitimate interest in improving the user experience for our page visitors in a target group-oriented manner. The legal basis for data processing is therefore Art. 6 (1) f) GDPR. We have no access to the personal data that LinkedIn collects to compile these statistics and cannot link these statistical data to the profiles of our fans or individual users.

In addition, LinkedIn uses so-called cookies, which are stored on your device when you visit our page. This can apply even if you do not have a LinkedIn account or are not logged into your account while visiting our profile page. You can find details on the collection and storage of your personal data and on the type, scope and purpose of their use by LinkedIn in LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy. As the operator of the profile, we are jointly responsible with LinkedIn for the processing of your personal data (in terms of Art. 26 GDPR). We have concluded an agreement with LinkedIn in regards to the joint controllership. You can find it here: https://legal.linkedin.com/pages-joint-controller-addendum.

IV. Data processing by N26 Bank

If you use our social media pages to contact us (e.g. by creating your own posts, responding to one of our posts or by sending us private messages) we collect personal data that you provide to us. We only use such personal data for the purpose of contacting you in order to provide the requested information. When answering your request is necessary for the performance of a contract or if you contact us to conclude a contract the legal basis for the data collection is Art. 6 (1) b) GDPR. Otherwise the legal basis for the data processing is Art. 6 (1) f) GDPR. Such data processing serves our legitimate interest in allowing us to contact you upon your inquiry and answer your request. We delete stored data when they are no longer necessary for this purpose. In the case of statutory retention requirements, we limit the processing of the stored data accordingly.

V. International transfer of personal data

Insofar as N26 transmits data to entities located outside the European Economic Area and in order to ensure an appropriate level of protection similar to the one granted under the GDPR upon the international transfer of data, N26 has implemented one or more of the following transfer tools, in addition to safeguards in accordance with the respective international data transfer impact assessment on the respective data transfer, if applicable:

  • A decision of the European Commission deciding that the third country ensures an adequate level of protection, pursuant to Art. 45 (1) GDPR - the existing adequacy decisions can be found here;

  • Standard data protection clauses for the transfer of personal data to third countries (hereinafter: “SCCs”), as adopted by the Commission, pursuant to Art. 46 (2) c) GDPR - the most recent version of the SCCs can be found here.

You can obtain a detailed copy of the transfer tool and more information in this regard by sending a request to N26 to the addresses indicated in section VI. below.

VI. Your rights as a data subject

1. Your rightsYou have the following rights concerning your personal data:

  • right of access according to Art. 15 GDPR, which means you can request information on whether your personal data is being processed by N26 and information on the particular processing of personal data, at any time, along with a copy of the information processed.

  • right of rectification according to Art. 16 GDPR, which means you can request the rectification of your data when they are incomplete or inaccurate;

  • right to erasure according to Art. 17 GDPR, which means you can request the deletion of your personal data when they are no longer necessary for the purposes they were initially collected for, or when you understand they have been illicitly used. N26 can reject your request, if the data is necessary to comply with a legal obligation, for public interest reasons or for legal actions;

  • right to restriction of the processing according to Art. 18 GDPR, which means you can request the restriction of the processing of your personal data when it is legally permitted and, in particular, (i) while you challenge the accuracy of your data for the period enabling us to verify the accuracy of the personal data, (ii) when you request the restriction of your data because you believe the processing is unlawful, or (iii) when the data is no longer needed for the purposes of processing they are needed for legal actions;

  • right to object to the processing according to Art. 21 GDPR, which is detailed in section VI.2. below;

  • right to data portability according Art. 20 GDPR, which means you can request N26 to provide you personal data, in a structured, commonly used and machine-readable format and to transmit those data to another controller where the data processing is based on the consent, or on a contract and the processing is carried out by automated means;

  • right to lodge a complaint with a supervisory authority according to Art. 77 GDPR, which means that you can complain before any supervisory authority if you consider that the processing of your personal data by N26 infringes the GDPR.

Without prejudice to section VI.2. below, please:

Exercise your right of access, right to erasure and right to object to the processing through our webform;

Please do not address your requests through a third party platform which requires us to get back to you through that same means, since we are not able to clearly identify you as an N26 customer in such cases. Instead, please resort to the aforementioned ways of making use of your rights before N26.

You can exercise your right of objection, as mentioned above, either via the specific means provided in our Web App or App, if applicable. You can exercise your right of objection also through our webform.

2. Specifically, your right of objectionYou can find below more details about your right of objection:

  • Right of objection (in accordance with Art. 21 (1) GDPR)

You have the right to object to the processing of your personal data, which is processed in accordance with Art. 6 (1) e) and Art. 6 (1) f) GDPR, at any time. This does also include profiling according to Art. 4 (4) GDPR. In case you object, your personal data is not processed any longer, except when we have legitimate reasons to continue the processing, which exceed your interests, rights and liberties or when the processing is necessary to enforce, exercise or defend legal claims. The processing of your personal data remains justified until the date of your objection.

VII. Deletion and retention periods

The retention period is the time span the collected personal data is saved for the processing purposes. The personal data is deleted as soon as it is no longer needed for the stated processing purposes. The retention period differs based on the processing purposes.

Open bank account
Open bank account
Open bank account