Deutsche Bank Data Privacy Statement 2026

Deutsche Bank Data Privacy Statement

Deutsche Bank (DB) is committed to protecting your personal information. This privacy statement explains how we collect, use and protect your data, and outlines your rights under applicable data protection laws such as the EU and UK GDPR. The statement is designed to inform you about the ways in which DB uses your personal data and to explain your legal rights relating to this information, as provided under relevant data protection laws.

1. Why is your data collected?

The purposes for collecting your data include registering your attendance at events organised and hosted by DB or its partners, ensuring smooth business operations which also encompass regulatory compliance and risk management, and supporting marketing and analysis activities. All data collection is undertaken in accordance with applicable data protection laws and only the necessary and relevant information is gathered for these specified purposes.

2. What types of data do we collect?

DB is committed to collecting only the personal information that is necessary and relevant, in strict compliance with applicable data protection laws. The specific details collected may vary in accordance with the nature of the DB event you are attending. However, the categories of information typically gathered include:

  • Full name – to accurately identify attendees.
  • Company name – to record your organisational affiliation for event administration.
  • Job title – to understand your professional role and tailor event experiences where appropriate.
  • Country of residence – to support logistical arrangements and fulfil regulatory requirements.
  • Dietary requirements – to accommodate your needs during event catering.
  • Photography and Video Recording – for promotional and marketing purposes.

Please note that photographs and video recordings may be taken during Deutsche Bank events for internal and external communications, promotional activities, and event-related purposes. If you do not wish to be photographed or filmed, please speak with a Deutsche Bank event host or organiser at the event, and we will make reasonable efforts to respect your preferences. Any personal data contained in such images or recordings will be processed in accordance with this Privacy Statement and applicable data protection laws.

DB ensures that only information pertinent to the event and its administration is collected, adhering to the principle of data minimisation as set out by data protection regulations.

3. Who do we share your personal information with and where is it stored?

When you register to attend one of DB’s events, the personal information you provide during the registration process will be shared with our third-party service provider, Eventogy. Eventogy is responsible for hosting the event registration page and associated website. As part of the registration, you will need to submit your personal data and provide your agreement to Eventogy’s use of this information.

All personal data you provide for event registration purposes will be processed and securely stored by Eventogy within the United Kingdom. For detailed information on how Eventogy manages and protects your data, please refer to Eventogy’s privacy policy, which is available on their website.

4. How long do we keep your personal information?

DB retains your personal information in accordance with its retention policy. This means that your data will be stored for a period of one year following your registration or participation in the event.

Regarding our third-party service provider, Eventogy, your personal data will be kept for twelve months after the event. At the conclusion of this period, your information will be deleted from Eventogy’s systems.

5. Legal grounds for processing your data

DB processes your personal information on the basis that it is required for the legitimate interests of DB as the administrator and organiser of the event. This means that DB will only use your personal data in ways that are necessary for the effective management and delivery of the event, and only where these legitimate business interests are not overridden by your own rights and interests concerning privacy.

In situations where DB is unable to process your personal information lawfully on the basis of legitimate interests, or on any other permitted grounds as established under data protection laws, DB may need to obtain your explicit consent. In such cases, your consent will serve as the legal basis for collecting, using, or disclosing your personal data in relation to the event.

6. Will Deutsche Bank transfer your personal data overseas?

Owing to the international scope of DB’s business activities, there may be circumstances where your personal data is transferred to locations outside your home country. Such transfers will only occur when permitted by applicable laws and where appropriate safeguards are in place to protect your information.

Your personal data may be shared across international borders with other DB entities, or with third-party service providers, including software providers such as Eventogy. These transfers are conducted to facilitate business operations and the administration of events, ensuring that your information is managed in accordance with relevant legal and organisational requirements.

7. Your rights regarding personal information

Subject to particular exceptions and limitations, you have various legal rights relating to the personal data that DB holds about you. The following rights are available to you:

  1. Access to Your Personal Data: You have the right to request a copy of the personal data held about you. This is provided subject to the privacy rights of other individuals. Additionally, you may request details about the types of information included within this Privacy Notice.
  2. Correction of Inaccuracies: If you believe any personal data held about you is incorrect or incomplete, you may ask DB to correct these inaccuracies or add any missing information.
    This may include supplying a supplementary statement to rectify or complete your data.
  3. Modification or Withdrawal of Consent: You retain the right to modify or withdraw your consent regarding the collection, use, and disclosure of your personal data. For further details, please refer to section 5 above.
  4. Deletion of Personal Data: You may request the deletion of your personal data where there is no lawful basis for DB to retain it.
  5. Restriction of Processing: You have the right to request that DB temporarily restricts the processing of your data. This applies while DB is addressing a claim that your data is inaccurate, or where you believe that DB’s legitimate interests in processing your information are outweighed by your own interests in the data not being processed.
  6. Data Portability: You can request that your personal data be transferred to yourself or to another company in a commonly used electronic format. This is referred to as the right to data portability.

8. Responsibility for your personal data and contact information

DB Group has overall responsibility for the management and protection of your personal data. Under data protection legislation, DB Group is designated as the “data controller” for your personal information, meaning it determines how and why your data is processed.

If you wish to make a complaint or would like to exercise any of your data privacy rights, you are encouraged to contact the Group Data Privacy team. You can reach them via email at:
data.privacy@db.com.

As a data subject, you also have the option to send a message to the Group Data Privacy Office if you have any questions or concerns regarding data privacy matters, including how DB processes your personal information. For further information on how we process your personal data, please review our privacy notice on our website.