Data protection

Aareal Bank AG welcomes you to our website and thanks you for your interest in our company. The protection of your personal data is a serious matter for us and we want you to feel safe during the visit on our websites. Personal Data collected while visiting our website will be processed in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the data protection rules of the Federal Republic of Germany.

We will treat any personal data you may transmit to us with reasonable care and in compliance with data protection rules. Your data will not be used for any other purpose and will not be forwarded to third parties. For confidential messages, please use the regular mail service for your own safety.

Collection and processing of personal data

In most cases, you can visit the website of Aareal Bank AG without providing any personal data to us. We only get to know the name of your internet provider and the so-called IP address he has allocated to you, the websites from which you accessed our site and the websites you visit within our internet presence. This information is evaluated for statistical purposes only, the individual user identity remains anonymous. Evaluation takes places on the basis of Article 6 (1)(f) GDPR.

Further personal data will only be collected and processed when you submit it to us (i.e. to order information material), and will be processed solely for the purpose of dealing with your inquiry. The provision of personal data by you, e. g. by using the contact form or e-mail, constitutes your consent to the processing of your personal data according to Article 6 (1) (b) GDPR.

If you have given your consent to the processing of personal data, you have the right to revoke your consent to the processing at any time. This also applies to the revocation of declarations of consent that were given to us before the GDPR was valid, i.e. before 25 May 2018. Please note that the revocation takes effect for the future only. The revocation does not affect the legality of the data processed until the revocation.

Use and transfer of personal data and predetermination for specific purposes

All personal data handled within the scope of Aareal Bank AG’s services will be collected, processed and used according to the pertinent laws and regulations concerning the protection of personal data solely for the purpose of contract execution and to preserve qualified business interest with regards to advising and supporting our customers and interested parties and to meet the demands of product design. Within the Bank, only those departments that need your data to deal with your inquiry have access to your personal data unless we are required by law to disclose it to public bodies and institutions. We will process and store your personal data as long as required to deal with your inquiry, unless their further processing is required by law.

Web analytics cookies

This website uses the “Piwik/Matomo” web analytics tool. Analysing how visitors use the site is important, as it enables us to examine demand for content and to improve our service as a result.

Piwik/Matomo collects the following data: date, number of actions on the website, time spent on the website, country of origin, browser version, operating system, number of new and returning visitors, referring URL, conversion rate.

In the version of the Piwik/Matomo analytics tool we use, IP addresses are anonymised so that they cannot be linked to an individual. The Piwik/Matomo analytics tool works by placing a small text file called a cookie on your device. Piwik/Matomo uses “persistent cookies”, which remain saved on your device after your visit. The cookie is sent from the domain “” and is named as follows: _pk_id.12345 (each cookie has a unique number). The cookie expires after a week. It enables us to:

  • recognise visitors who have already visited our site and create user profiles under pseudonyms in order to improve the website's user-friendliness
  • identify visitors' approximate location
  • rectify any errors on the website and improve our service.

Right to opt out:

If you have given your consent to the use of cookies, you can disable the analysis of your use by blocking cookies from the suitable domains (;; in your browser. Please see your browser instructions for how to do this.

You may also disable any form of user analytics by Piwik/Matomo for future visits on the website Use the following check box to do so. By activating the checkbox a cookie will be placed. Provided you do not delete this cookie in your browser, your use of the website will not be analyzed by Piwik/Matomo.

Embedding of YouTube videos

(1) We have embedded YouTube videos in our online services. They are uploaded to and embedded on our website in "Privacy-Enhanced Mode", i.e. YouTube does not place any cookies on your computer and no data are transmitted about you as user to YouTube unless you play the videos. Only when you play the videos cookies are placed and the data named in paragraph 3 is transmitted. We have no influence over this data transfer. You can find details of YouTube's use of cookies in the cookie policy of Google at

(2) If cookies are stored by YouTube on your computer, it will transmit them to our website. So you as user have complete control over the use of cookies. You have the option of stopping the use of cookies. To do this, you have to change the settings in your Internet browser (e.g. Internet Explorer, Mozilla Firefox, Opera, Safari). Cookies that have already been stored can be deleted at any time. That can also be done automatically. But if cookies are deactivated for our website, it may be that not all functions of the website can be used in their entirety.

(3) Playing the YouTube videos transmits the following data to YouTube:

  • IP address
  • Date and time of the request
  • Address of the website accessed
  • Access status/HTTP status code
  • Data volume transmitted, in Bytes
  • Length of the video
  • Website from which the request comes (link)
  • Browser used
  • Operating system and its user interface
  • Language and version of the browser software

This occurs irrespective of whether you use a user account to log in to YouTube or whether you do not have such an account. If you are logged in at Google, your data are allocated directly to your account. If you do not want allocation with your profile on YouTube, you have to log-out before activating the button. YouTube stores your data as usage profiles and uses them for purposes of advertising, market research and/or personalised website appearance. That storage occurs, even for users who are not logged in, to produce personalised, relevant advertising and to inform other users of the social network about your activities on our website. You have the right to stop the collection of these user profiles. To exercise it, you have to contact YouTube.

(4) You can find further information on the purpose and scope of data collection and processing by YouTube in the data protection declaration by YouTube. You can find there further information about your rights and setting options for protecting your privacy: Google processes your personal data also in the USA and is certified under the EU-US-Privacy-Shield,

Besonderheiten bei der Nutzung von Produktseiten mit Registrierungsangeboten

Auf bestimmten Webseiten bewerben wir konkrete Produkte und geben Ihnen die Möglichkeit, sich mittels Registrierung weitere Informationsangebote zu erschließen. Dies sind aktuell die Seiten und Mit Ihrer Einwilligung können Sie dort beispielsweise einen Rückruf veranlassen oder sich zur Nutzung von Produkt-Testsystemen und zur Teilnahme an Webinaren anmelden.

Im Rahmen gezielter Werbeaktionen sprechen wir uns bekannte Unternehmensadressen mit personalisierter postalischer Werbung an. Über die entsprechenden Werbemittel können Nutzer mittels eines Codes personalisierte Angebotsseiten aufrufen. Das Aufrufen des Angebots wird festgehalten, und diese Information wird zu den bestehenden Daten hinzugefügt.

Im Rahmen Ihrer Registrierung verwenden wir das sog. Double-opt-in-Verfahren. Das heißt, dass wir Ihnen nach Ihrer Anmeldung eine E-Mail an die angegebene E-Mail-Adresse senden, in welcher wir Sie um Bestätigung bitten, dass Sie im Rahmen der gewünschten Kommunikationsmittel und weiterer Produktinformationen ansprechen dürfen. Wenn Sie Ihre Anmeldung nicht bestätigen, behalten wir uns vor, Sie gegebenenfalls erneut per E-Mail zu kontaktieren. Darüber hinaus speichern wir jeweils Ihre eingesetzten IP-Adressen und Zeitpunkte der Anmeldung und Bestätigung. Zweck des Verfahrens ist, Ihre Anmeldung nachweisen und ggf. einen möglichen Missbrauch Ihrer persönlichen Daten aufklären zu können.

Pflichtangaben für die Anmeldung zu den oben genannten Services sind Ihr Name, Ihre E-Mail-Adresse und – im Falle eines Rückrufwunsches Ihrerseits – eine Telefonnummer. Die Angabe weiterer, gesondert markierter Daten wie Ihren Unternehmensnamen sowie die Größe des Unternehmens ist freiwillig und wird verwendet, um Sie möglichst angemessen über das zu Ihrem Geschäftszweck passende Produkt informieren zu können. Nach Ihrer Bestätigung speichern wir Ihre E-Mail-Adresse zum Zweck der Initiierung der von Ihnen ausgewählten, oben genannten Services. Rechtsgrundlage ist Art. 6 Abs. 1 S. 1 lit. a DS-GVO.

Ihre Einwilligung in das Speichern Ihrer persönlichen Daten können Sie jederzeit widerrufen. Den Widerruf können Sie per E-Mail an oder durch eine Nachricht an die im Impressum angegebenen Kontaktdaten erklären.

Wir weisen Sie darauf hin, dass wir im Rahmen der genannten Services Ihr Nutzerverhalten auswerten. Für diese Auswertung beinhalten die versendeten E-Mails sogenannte Web-Beacons bzw. Tracking-Pixel, die Ein-Pixel-Bilddateien darstellen, die auf unserer Website gespeichert sind. Für die Auswertungen verknüpfen wir die oben genannten Daten und die Web-Beacons mit Ihrer E-Mail-Adresse und einer individuellen ID. Mit den so gewonnen Daten erstellen wir ein Nutzerprofil, um Ihren unser Angebot gemäß Ihren individuellen Interessen erläutern zu können. Dabei erfassen wir, wann Sie unsere Informationen lesen, welche Links Sie in diesen anklicken und leiten daraus weitere Schritte ab wie den Versand eines Zugangscodes zu einem Produkttestsystem oder ein beratendes Telefonat.

Bei dem Aareal Portal ( werden ausschließlich technisch notwendige Cookies verwendet, die zur Bereitstellung des Portals erforderlich sind. Eine Zustimmung zur Nutzung dieser Cookies ist nach § 25 Abs. 2 Nr. 2 TT-DSG nicht erforderlich.

Data security

Aareal Bank AG takes technical and organisational measures in order to protect the data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our safety measures are consistently being improved in accordance with the technological development. In addition, our employees are obliged to respect the data security provisions and are bound by banking confidentiality.

Information with regard your personal data and further rights

Controller of the data processing on this website:

Aareal Bank AG
Paulinenstr. 15
65189 Wiesbaden

In line with the legal provisions, Aareal Bank AG has appointed a Data Protection Officer. Should you have any questions concerning the processing of your personal data, you may contact him directly.

            By E-Mail: 



            (Data Protection Officer)
            c/o Aareal Bank AG
            Paulinenstr. 15
            65189 Wiesbaden

On your request we will provide you with the information in accordance with the data protection regulation, whether and which of your personal data are stored by us. In addition you have the right to rectification, erasure, restriction of processing and the right to data portability.

Right to object

On grounds relating to your particular situation you have the right to object at any time to processing of your personal data which is based on Article 6(1)(e) (processing of data for the performance of a task carried out in the public interest) or (f) (processing of data for the purposes of legitimate interests).

Your revocation can take place form-free and should be directed if possible to:

Aareal Bank AG

Informationssicherheit und Datenschutz
(Information security & data protection)
Paulinenstrasse 15
65189 Wiesbaden

If you object to the processing, we will no longer process your personal data, unless we have compelling and legitimate interests that override your interests, rights and freedoms, or the processing of the data is necessary for the establishment, exercise or defence of legal claims.

If you believe that your data are not being processed properly, you have a right to lodge a complaint with the competent supervisory authority. Please address your complaint to:

The Data Protection Officer of Hesse
PO Box 3163
65021 Wiesbaden