Privacy Policy
Data protection is a high priority for us. This policy explains what personal data ibanworld.de processes, for what purpose, and what rights you have. Using ibanworld.de to validate an IBAN or look up a BIC does not require creating an account and is possible without providing any personal data.
1. Controller
Digi Soft UG (haftungsbeschränkt) Welserstr. 7590489 Nürnberg
Germany
Tel.: +49 (0) 176 4361 3808
E-mail: info@digi-soft.tech
2. IBAN, BIC and bank-search validation (the core tool)
When you validate an IBAN, look up a BIC, or search for a bank on ibanworld.de or via the /api/* endpoints, the value you submit is processed in server memory only to compute the result (checksum, country, formatted output, matching bank record). It is not written to a database and not written to log files. It is discarded once the response has been sent to your browser. Legal basis: Art. 6(1)(b) GDPR / Art. 6(1)(f) GDPR (providing the service you requested).
3. Rate limiting
To keep the free API fair for all users, requests to /api/* and the contact form are limited per IP address per day. To enforce this, your IP address is combined with the requested path and the current calendar day and passed through a one-way SHA-256 hash; only this hash and a request counter are stored temporarily in a local cache file, which becomes inactive the next day. The hash cannot be reversed to reveal your IP address. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in preventing abuse of the free service).
4. Local storage (no tracking cookies)
ibanworld.de does not use analytics, advertising, or third-party tracking cookies. Two small values are kept in your browser's localStorage (not sent to our server on every request the way a cookie would be):
- iban-theme — your chosen light/dark display mode.
- iban_cookie_consent — whether you accepted or dismissed the cookie/consent notice, so it is not shown again.
You can clear both at any time via your browser's site-data settings.
5. Server log files
Like most websites, our web server automatically records technical access data for every request (IP address, requested URL, browser/user agent, timestamp, HTTP status) to detect and investigate abuse or attacks and to keep the service running reliably. Application-level logs are rotated and kept for a maximum of 7 days. Legal basis: Art. 6(1)(f) GDPR.
6. Contact form
When you submit the contact form at /kontakt (or /contact), the data you enter — name, e-mail address, company (optional), subject, and message — is transmitted over an encrypted (HTTPS) connection, stored in a database on our server, and used solely to process and reply to your enquiry. We also send you an automatic confirmation e-mail. Data is deleted once it is no longer needed to handle your enquiry, unless we are legally required to retain it for longer. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).
The contact form includes a hidden honeypot field used only to filter automated spam submissions; it is not shown to human visitors and collects no data from them.
7. Your rights
- Right of access (Art. 15 GDPR) — confirmation and a copy of data we hold about you.
- Right to rectification (Art. 16 GDPR) — correction of inaccurate data.
- Right to erasure (Art. 17 GDPR) — deletion where a legal ground applies.
- Right to restriction of processing (Art. 18 GDPR).
- Right to data portability (Art. 20 GDPR).
- Right to object (Art. 21 GDPR) to processing based on Art. 6(1)(f) GDPR.
- Right to lodge a complaint (Art. 77 GDPR) with a supervisory authority — for Bavaria: Bayerischer Landesbeauftragter für den Datenschutz (BayLfD), Wagmüllerstraße 18, 80538 München, www.datenschutz-bayern.de.
To exercise these rights, contact info@digi-soft.tech.
8. Data security
ibanworld.de is served exclusively over HTTPS with modern TLS encryption. We apply technical and organisational measures (hashed rate-limit identifiers, restrictive HTTP security headers, no unnecessary data retention) to protect data against unauthorised access, loss, or manipulation.
9. Changes to this policy
This policy may be updated to reflect changes to the service or to legal requirements. The current version is always available at ibanworld.de/datenschutz.