Last Updated: January 6, 2020
https://www.mtb.com/help-center/policies/internet-privacy, which covers our collection and use of information when you visit the M&T Bank Corporation website.
Section 1: Categories of Personal Information Collected in the last 12 months
|A. Identifiers||A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.||Yes|
|B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))||A name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, employment, bank account number, credit card number, debit card number, or any other financial information.||Yes|
|C. Protected classification characteristics under California or Federal law||Age (40 years or older), citizenship, veteran or military status.||Yes|
|D. Biometric information||Identifying information such as voiceprints.||Yes|
|E. Internet or other similar network activity||Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.||Yes|
|F. Professional or employment-related information||Current or past job history or employer(s)||Yes|
M&T Bank Corporation does not collect the following pieces of information on its consumers: commercial information (purchasing of consumer histories or tendencies); geolocation (physical location or movements); sensory data; education information; or inferences drawn from other personal information (person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes).
Personal information does not include:
- publicly available information from government records
- deidentified or aggregated consumer information
- information excluded from the CCPA's scope, such as:
- health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data
- personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994
We obtain the categories of Personal Information listed above from:
- our clients or their agents directly at account opening;
- documents that our clients provide to us;
- third parties that interact with us in connection with the services we perform; and
- during account maintenance from you or your authorized agent on forms as required by law.
Failure to provide this information will prevent us from conducting business with you. This information may be combined with other personal data, including criminal convictions and offences, that we obtain from third party or publicly-accessible sources for the purposes of compliance with a legal obligation.
We retain your Personal Information for the life of your client relationship with us. Once your client relationship is terminated we will continue to retain your Personal Information only for as long as it is needed for the purposes set forth in this Privacy Notice and for no longer than the maximum time period allowable under applicable law and regulation.
Section 2: Disclosure of Personal Information
In accordance with applicable law, we may disclose your Personal Information to:
Affiliates which include our related companies by common ownership or control
Governmental and Judicial Bodies which include national and local government agencies, regulatory bodies, law enforcement agencies and courts
Third Parties which include service providers, auditors, attorneys, and other professional advisors. Third Parties are subject to contractual obligations to only process the Personal Information in accordance with our instruction, and to use measures to protect the confidentiality and security of your Personal Information.
Reasons we can share your Personal Information||
Does M&T Bank Corporation share?||
Can you limit this sharing?|
For our everyday business purposes – such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus||Yes||No|
For our marketing purposes – to offer our products and services to you||Yes||No|
For joint marketing with other financial companies||Yes||No|
For our affiliates’ everyday business purposes - information about your transactions and experiences||Yes||No|
For our affiliates’ everyday business purposes - information about your creditworthiness||Yes||Yes|
For our affiliates to market to you||Yes||Yes|
|For nonaffiliates to market to you||No||We don't share|
Section 3: Your Legal Rights
Subject to applicable law, you may have the right to exercise the following:
- The right to request access to, or copies of, your Personal Information that we process
- The right to request deletion of your Personal Information that we process
Household Requests - We currently do not collect household data. If multiple members of the household make a right to access or right to deletion request, we will respond as if the requests are individual requests.
To exercise the access or deletion rights described herein, please submit a verifiable consumer request to us:
For customers of M&T Bank Corporation, call toll-free 1-800-724-2440, or go to
https://www.mtb.com. From the Help Center section, click on Contact Us, then choose Submit feedback or questions.
For customers of the Wilmington Trust entities, contact your relationship manager, call toll-free 1-866-771-7777 or email firstname.lastname@example.org.
Note: M&T Bank Corporation does not sell your Personal Information, therefore any rights that may be afforded to you under CCPA related to the sale of your Personal Information do not apply.
Section 4: Defined Terms
Personal Information||Any information that can be used to identify an individual, directly or indirectly|
|Processing||Operations, whether or not by automated means; such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction|
|California Resident||An individual that resides in the State of California and whose personal income is taxed by the State of California|
Verifiable Consumer Request||A request that is made by a consumer, by a consumer on behalf of the consumer’s minor child, or by a natural person or a person registered with the California Secretary of State|