Complaint procedure in the event of misuse of your personal data

In this context, you may send a complaint by post, email or secure messaging via the access "My ING" to the Complaints department of ING Luxembourg at the following address: ING Luxembourg, Complaints, L-2965 Luxembourg, 26 Place de la Gare, email: complaints@ing.lu.

In order to correctly identify your complaint and to be able to answer you as soon as possible, we kindly ask you to provide us with the following information:

- Your identity;

- The personal data for which you are making the request;

- The circumstances in which ING obtained your personal data.

In the specific case of a request to correct, delete or block your personal data, we kindly ask you to specify the reasons why your data is inaccurate or incomplete, or the reasons why you believe your data has not been processed in compliance with regulations relating to the protection of personal data.

Once the complaint has been recorded, ING must reply to you in writing within four weeks and specify:

- What actions have been/will be taken,

- and the period during which it will be informed of the actions taken, which nevertheless shall not exceed a total of eight weeks.

This four-week deadline may be extended in certain circumstances.

You may submit a second complaint directly to the Management of ING if:

- The answer you received remains unsatisfactory;

- You have not received an answer within the above-mentioned eight-week timeframe.

You may submit your complaint to the supervisory authority, the National Commission for Data Protection (CNPD; L-4361 Esch-sur-Alzette, 1, avenue du Rock'n Roll) or seek a judicial remedy before the courts.

You may also lodge a complaint with ING's Data Protection Officer (DPO) when:

- You believe the measures decided by ING have remained unsatisfactory;

- You have not received an answer within the above-mentioned timeframe.