The personal data collected here (e.g. surname, first name, bank account details) are used by the Deutsche Bundesbank for the purpose of processing your exchange application on the basis of Article 6(1) point e of the General Data Protection Regulation (GDPR) in conjunction with Section 3 of the German Federal Data Protection Act (Bundesdatenschutzgesetz) and Section 1 sentence 2 of the Act Governing the End of the Deutsche Mark (DM-Beendigungsgesetz). These data will be deleted at the latest upon expiry of the statutory retention periods (five years).

Subject to certain conditions, you have the following rights vis-à-vis the Deutsche Bundesbank regarding your personal data:

• right of access by the data subject (Article 15 of the GDPR);
• right to rectification (Article 16 of the GDPR);
• right to erasure (“right to be forgotten”) (Article 17 of the GDPR);
• right to restriction of processing (Article 18 of the GDPR);
• right to object (Article 21 of the GDPR).

In addition, pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with the competent supervisory authority, the Federal Commissioner for Data Protection and Freedom of Information (Graurheindorfer Straße 153, 53117 Bonn, Germany, tel.: +49 228 997799-0, email: poststelle@bfdi.bund.de), regarding the processing of your personal data.

For further information on your rights as a data subject, please contact the Bundesbank Data Protection Officer. You can contact the Bundesbank Data Protection Officer by email at datenschutz@bundesbank.de, by telephone on +49 69 9566-2369, or by post sent to Deutsche Bundesbank, Postfach 10 06 02, 60006 Frankfurt am Main, Germany.