Privacy Policy

1. Controller

Capital Insight Ltd, 29A Anna Komnini Street, P.O. Box 22303, 1520 Nicosia, Cyprus.
Represented by Phillip Reichenbach. Registration number HE 552398.
E-mail: privacy[AT]bankingdossier[DOT]com

2. Scope

This policy explains how personal data is processed when you visit bankingdossier.com. Personal data is any information relating to an identified or identifiable natural person.

3. Server log files

When you access this site, our hosting provider automatically collects and stores information transmitted by your browser: browser type and version, operating system, referrer URL, host name of the accessing device, time of the request, and IP address. This data is not merged with other sources. Processing is based on Art. 6 (1) (f) GDPR; our legitimate interest lies in the technically error-free presentation and the security of this website. Log data is deleted after 14 days.

The site is hosted on servers in the United Kingdom. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.

4. Content delivery network

We use Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, to deliver this site and protect it against attacks. Cloudflare processes connection data including your IP address for this purpose. Legal basis is Art. 6 (1) (f) GDPR. Transfers to the USA are based on the EU standard contractual clauses. See Cloudflare’s privacy policy.

5. Cookies and analytics

This site sets no analytics, profiling or advertising cookies. Only cookies that are technically necessary for the site to function are used, on the basis of Art. 6 (1) (f) GDPR. We operate no web analytics and embed no third-party tracking.

6. Contacting us

If you contact us by e-mail, the data you provide — including your e-mail address and the content of your message — is stored in order to process your enquiry and for follow-up questions. Legal basis is Art. 6 (1) (f) GDPR. We delete this data once it is no longer required, unless statutory retention obligations apply.

Confidential contact: where you contact us as a source, we process your message on the basis of Art. 6 (1) (f) GDPR in conjunction with the protection of journalistic sources. Data that could identify a source is not passed on to third parties.

7. Your rights

You have the right to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6 (1) (f) GDPR (Art. 21). Where processing rests on consent, you may withdraw it at any time with effect for the future. To exercise these rights, write to the address in section 1.

Right to lodge a complaint: you may complain to a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement. The authority competent for the controller is the Office of the Commissioner for Personal Data Protection, Iasonos 1, 1082 Nicosia, Cyprus.

8. Media privilege

Where personal data is processed for journalistic purposes, the GDPR is limited by the national rules reconciling data protection with freedom of expression and information (Art. 85 GDPR). Rights of access, rectification and erasure may in particular be restricted where their exercise would impair journalistic activity or reveal a source.

9. Encryption

This site uses TLS encryption. You can recognise an encrypted connection by the “https://” in your browser’s address bar.