Data Protection

Data privacy statement

Personal data are personal details or other information about identified or identifiable individuals, including data about their surfing and communication activities on the Internet. Anonymous data, i.e. information which cannot be linked to the identity of an individual (not even via a specific identification number such as an IP address), are not considered personal data (e.g. information on most frequently visited websites or the number of visitors to a website). The Financial Market Stability Board (FMSB) processes personal data in line with the provisions laid down in the General Data Protection Regulation (GDPR) (EU) and the Austrian Data Protection Act (DSG).

Data security

The FMSB takes all necessary technical and organizational security measures to protect your personal data against loss and misuse. Your data will be processed in a secure, state-of-the-art operating environment by the Oesterreichische Nationalbank (OeNB, Art 13 para 11 Financial Market Authority Act). The OeNB’s IT infrastructure is certified under the international ISO 9001 and 27001 standards.

Access to the FMSB’s websites is secured via HTTPS. This means that communication between your browser and the OeNB’s servers is encrypted. If you wish to contact the FMSB or its staff by e-mail, please note that, given the technical configuration of e-mail protocols, the confidentiality of e-mail information cannot be guaranteed. The content of unencrypted e-mails can be viewed by third parties unless special security measures are taken. To transfer confidential information, we therefore recommend using only the contact form or any other secure mode of Transfer.

Protection of your personal data when visiting the FMSB’s websites

When you visit one of the FMSB’s websites, the respective server records the following personal communication data:

Web server logging
When FMSB websites are accessed, the web server records the following data in a combined log format for the purpose of ensuring appropriate information and system security: IP address, username (if required), date and time the site was accessed as well as technical information about the web object retrieved and the browser and operating system used (combined log format).

Additional personal information, such as your name, address, telephone number or e-mail address, is not recorded unless you have opted to provide this information in the space provided (e.g. when registering for a newsletter or requesting information via a contact form). The personal data you provide will be processed exclusively for the purpose of dealing with your request. These data will not be transferred to third parties. These data will be processed by the operating environment of the OeNB (Art 13 para 11 Financial Market Authority Act). In case improper use is made of the FMSB’s websites, log data will be forwarded to the authorities in charge.

Use of Google Analytics
The FMSB’s websites use Google Analytics, a web analytics service offered by Google LLC. To provide this service, Google Analytics uses cookies. Cookies are small text files that are stored on your computer and allow the terminal you use to be recognized. This way, website use can be analyzed, which in turn serves to improve website usability. It is not possible, as a rule, to trace data stored in cookies back to a specific person.

The information generated by using Google Analytics (including your IP address) is transferred to a Google server. To protect your privacy, Google Analytics has been configured in such a way that your IP address will be anonymized immediately after it has been transferred to Google from within any EU or EEA country and that it will be stored by Google exclusively in its anonymized form (anonymizeIp=true). Only in exceptional cases is the full IP address sent to Google servers in the U.S.A. and shortened there.

On behalf of the FMSB, Google will use the information gathered to analyze visitors’ use of the FMSB’s websites and to compile reports on website activities. Google will not match the IP address transmitted from your browser for the purposes of Google Analytics with any other data held by Google.

By using FMSB websites you agree to the storage of cookies on your computer and the processing of your personal data as described above. You can prevent the storage of cookies by adjusting your browser settings accordingly; however, this could cause some website functions to become unavailable. Additionally, you can disable Google Analytics by downloading and installing the browser plug-in available at More information on Google Analytics and on how it processes personal data can be found at

Usage of cookies

This website uses cookies to provide requested functions and services, to personalize displayed content, to offer links to social media or to analyze the use of our website in an anonymous form in order to improve its usability. For cookies that are not technically absolutely necessary, we need your consent, which you can give, change and revoke via this cookie banner.

Protection of your personal data during e-mail correspondence with the FMSB

For the purpose of ensuring an appropriate degree of information and system security as well as detecting and handling malware, the e-mail server generates log data on e-mail correspondence and stores it for three years. The e-mail server is operated by the OeNB as data processor (Art 13 para 11 Financial Market Authority Act). When you send an e-mail to an FMSB address, the following data are recorded: recipient’s e-mail address, IP address and hostname; number of recipients; sender’s e-mail address, IP address and hostname; subject, date and time when e-mail was received by server; file name of any attachments; size of message; risk classification for spam and delivery status. These data are not transferred to third parties. In case improper use is made of FMSB websites, log data will be forwarded to the authorities in charge.

E-mails are checked for spam and harmful content. Checking e-mails and filtering spam or malware is automated by default; only in suspicious cases or in case of doubt are individual e-mails scrutinized in more detail by dedicated specialists (in consultation with the recipient if necessary). Misappropriated e-mails or e-mails containing illegal content are forwarded to the authorities in charge. The FMSB stores e-mails for up to ten years unless longer-term storage is required by the underlying purpose of the e-mail correspondence. Your data will be processed by the operating environment of the OeNB (Art 13 para 11 Financial Market Authority Act).

Overview of your rights as a data subject

The information provided here refers to Articles 13 and 14 GDPR.

Your rights as a data subject
In fulfillment of its mandate and in safeguarding its interests, the FMSB frequently processes personal data. This page informs data subjects that are not FMSB members or staff on how their personal data are protected when subject to data processing by the FMSB. Information on the purpose(s) and legal basis of processing operations, the type(s) of processed data and your respective rights under the data protection framework is made available below.

To assert your rights as a data subject, send a letter to “Oesterreichische Nationalbank, Abteilung für Finanzmarktstabilität und Makroprudenzielle Aufsicht, Otto-Wagner-Platz 3, 1090 Vienna, AUSTRIA” or use the contact field of the FMSB’s homepage, clearly specifying the details of your request. Moreover, please provide proof of your identity by enclosing a black-and-white copy of an official photo identification (e.g. your passport, driver’s license, identity card) or using a qualified electronic signature within the meaning of Article 3 (12) eIDAS Regulation to prevent improper requests by unauthorized third parties that might endanger the protection of your personal data. For the reasons outlined above, such requests must be made in writing. Should you consider your right to data protection violated by any processing of your personal data by the FMSB, you may file a complaint with the Austrian Data Protection Authority (DSB) or bring an action before the competent civil court.