Data Protection

At Quintet Private Bank, our first priority is safeguarding your personal data :

We are committed to maintaining the highest standards of data protection to ensure that your information remains secure at all times.
We understand the importance of your privacy and the trust you place in us when providing your personal information. Therefore, we adhere strictly to any national applicable data protection laws and regulations*, including the General Data Protection Regulation (GDPR & UK GDPR for our subsidiary in UK), to ensure that your data is handled with the utmost care and diligence.
We also apply the E-privacy Directive (EU) and UK Privacy and Electronic Communications Regulations (PECR), related to electronic communication.

What is personal data?

Personal data is information that relates to an identified or identifiable natural person. This personal data Personal data is information that relates to an identified or identifiable individual.

What identifies an individual could be as simple as a name or a number or could include other identifiers such as an IP address or a cookie identifier.

Who does GDPR apply to?

It applies to any organisation that uses or collects information about individuals.

These organisations are acting either as a controller or as a processor, depending on what their business activities are.

Quintet Private Bank is a controller for the following data subjects:

Clients, Prospects
Board members, employees or candidates
Suppliers including IT providers, contractors, business contacts and other people the bank has a relationship with or may need to contact.

Quintet Private Bank acts as a processor when offering depositary or asset servicing for individuals or professional Clients, such as:

Fund administrators and Financial Intermediaries (FIM), ManCo, Insurance

What is the role and responsibility of a controller?

Quintet Private Bank holds personal data and determines how and why this personal data is processed. For example, client contact details ( what) is personal data collected in our core banking systems ( how) to enable us to communicate with the client in line with the contract ( for what to do).

We ensure our commitment by deploying measures to meet the requirements of the 7 Data Protection principles:

Transparency & Lawfulness:

Transparency : When we collect your personal data, we provide you with the information ( = privacy notices) telling you how we use your personal data :

Privacy notices:

Private Client

Professional Client

Candidate

Website users

Quintet Privacy Notice:

B2B Privacy Notice:

Funds Management Privacy notice:

Candidate Privacy Notice:

Cookies Policy:

Lawfulness : When we collect your information, the legal bases we rely on are the performance of a contact, including any prior requisite, legal obligation, legitimate interest and consent.

Specific purpose: we collect your information based on the needs and requirements related to the services we provide to you.
Minimisation: we only collect the minimum necessary information in relation to the purposes for which they are processed.
Accuracy: we check that your personal data are up to date during our client file review process.
Retention: we do not keep your information for longer than necessary.
Security: we have put in place the most appropriate technical and organisational measures to prevent any security incidents. Such measures are regularly tested and reviewed.
Accountability: we are responsible for the processing of personal data , and are able to demonstrate compliance (e.g. we have a record of processing activities that we regularly review.).

What are your rights?

Be aware that you have control of your information collected by us. You have the right to:

Access the personal data that Quintet Private Bank has concerning you;
Request us to rectify inaccurate personal data concerning you;
Request us to erase your personal data, unless there is legal / legitimate obligation to retain the information;
Request us to restrict or object to the processing regarding personal data concerning you.
Require data portability from Quintet Private Bank by providing you with a copy of your data in a format that allows for easy use with another controller;
Appeal a decision, that has a legal effect or significantly affects you, that was based solely on an automated decision-making process, including profiling.

You also have the right to lodge a complaint relating to our processing of your personal data and we will attempt to resolve all complaints in due time.

Please use the following details to contact our Group Data Protection Office:

EU affiliates	UK subsidiary
Group Data Protection Officer, Quintet Private Bank (Europe) S.A. 43, Boulevard Royal - L- 2955 Luxembourg Email: DPOGROUP@QUINTET.COM Supervisory Authority : Commission Nationale pour la Protection des données (CNPD) DPO designated to CNPD : Maria-Dolores Perez	Brown Shipley Data Protection Officer, No. 1 Spinningfields 1 Hardman Square Manchester M3 3EB Email: DPO@brownshipley.co.uk Supervisory Authority : Information Commissioner's Office (ICO) DPO UK: Margaret Hyde

* Please note some national laws might be subject to a review by the national legislator and consequently update the scope or framework in the relevant country

Data Protection - Quintet Group and affiliates