Security Policy & Secure Browsing

1 Data encryption

Internet encryption protects your information as it is transmitted between your device and our systems. This encryption ensures that the data cannot be read or modified. Our platform uses the TLS (Transport Layer Security) protocol with strong encryption, ensuring the confidentiality and integrity of exchanges via a secure connection.

Because email is not a secure means of communication, we strongly recommend that you never transmit your confidential information via email. We are not responsible for any losses arising from transaction requests made by email.

2 Controlled Access to Your Accounts and Telephone Verification

To ensure that you are the only person with access to your personal financial information, we limit access to the Online Services section by requiring the entry of your Customer ID and Personal Access Code (PAC). Our employees are never aware of your CAP and will never ask you to communicate it to us.

Security questions provide an extra layer of protection to confirm your identity when signing in from a new device.

3 "Remember Me" Feature and Cookies

We use a persistent cookie to make it easier for you to log in by remembering your ID (“Register this device”). We never store your CAP code in a cookie. The use of these cookies complies with the GDPR and the European ePrivacy Directive.

4 Enhanced Secure Login Process and Lockout

For security reasons, we record the number of attempts to log into your account. After several unsuccessful attempts, your access will be temporarily disabled. If you have forgotten your password, please contact us directly through our official contact details to guide your reset procedure.

5 Help Us Protect Your Information

To fully benefit from the protection of your finances, you must comply with the following guidelines:

• Carefully choose your passwords and security question answers without sharing them;
• Remember your passwords and avoid reusing them on other platforms;
• Avoid keeping copies of your passwords on internet-connected devices;
• Examine your statements carefully and promptly report any suspicious transactions to us;
• Set an access code to lock your mobile device;
• Keep your login credentials strictly confidential;
• Notify us immediately of any loss, theft, or compromise of your account.

6 Your Operating System (OS)

The operating system of your computer or device should be regularly updated to protect against viruses and malware. Systematically download the latest security patches provided by the publishers and make regular backups of your important data on external media.

7 Creation of your CAP and password management

The strong password feature is available on our online services. Never reuse your password on other sites.

• Optimal Length: Use a minimum length of 12 to 16 characters combining letters, numbers, and symbols.
• Frequent Changes: Ideally change your CAP code every 90 days.
• Password Manager: Use a secure manager to generate complex passwords without memory effort.
• Two-step verification (2FA): Enable double authentication (Zwei-Faktor-Authentifizierung) to create an effective second line of defense, in accordance with the recommendations of the BSI (Bundesamt für Sicherheit in der Informationstechnik).

8 Clearing Your Browser's Cookies and Cache

Your browser stores temporary files (the cache) that can be accessed after your session. Regularly clear your history:

9 Public Wi-Fi, Networks, and Firewalls

Avoid carrying out financial transactions on free public Wi-Fi networks (cafes, airports, hotels). Use secure home connections protected by a strong password (WPA3 recommended) and ensure that your operating system's firewall is active. Using a VPN is strongly recommended when connecting from public networks.

10 Protecting Your Smartphone

• Passcode Lock: Enable a passcode or biometrics (fingerprint, facial recognition) to unlock your phone's screen.
• Beware of SMiShing: Never click on links or attachments in text messages from unknown or suspicious senders.
• Remote Wipe: Activate your device's remote location and wipe functions (Find My Device on Android, Find My iPhone on iOS) in the event of loss or theft.