11.3.3 In order to provide you with the BT24 service contracted from BT and because we have a legitimate interest in sending messages in connection with that service, we use:
11.3.3.1 Account, card and transaction data
When you will use the different functionalities of BT24 we will process data related to: bank accounts (of the BT24 contracting customer and of the payees), cards attached to the accounts opened with BT, transactions ordered by accounts (payments/collections), as well as information in the nature of personal data of the BT24 contracting customer, of the user who uses the service and/or of other persons (such as payees, persons whose data is entered in BT24 fields for specific payments, e.g. data entered in transaction explanation fields, data entered in fields used to define predefined payees, data entered in messages sent via BT24 secure messaging.
11.3.3.2 Contact dates
If the SMS-OTP log-in method is used, we will use the telephone number to send messages about transactions initiated via BT24, including codes on the basis of which the user approves the transactions (where applicable). We may use the telephone number or e-mail address to inform/request further information from the customer or user about transactions initiated from BT24 or to prevent fraud attempts (e.g. phishing). We will also use the secure messaging inbox to send various informational messages related to BT and/or the bank's products and services (e.g. messages about changes to the GIP, Privacy Policy, bank unit opening hours or possible malfunctions of some of the bank's systems, non-banking working days, etc.). In case of sending documents such as account statements, proof of payment or rovinettes, we will process the e-mail address entered in the dedicated field. The e-mail address may belong to the user/customer or to third parties. BT is not responsible for the provision of incorrect addresses which may lead to the disclosure of the data contained in the banking documents to unauthorized persons, nor for the fact that the persons to whom the user has chosen to send these documents are annoyed by the receipt of the message (they believe they should not have received it).
11.3.3.3. Camera, geolocation and other permissions
The use of certain functionalities of the BT24 mobile application is allowed only after the user has accepted the permissions: Camera (access to the camera being requested only when using the option to scan the barcodes of the invoices), Location (accurately checked in the "Locations of units and ATMs" section to display the nearest Banca Transilvania units and ATMs), Contacts (their list is opened only when accessing the Email/SMS Payments to automatically fill in the beneficiaries' details), Status and Phone ID (device ID or, where applicable, IMEI is required to activate the mobile application). To use BT24 mobile functionality that requires access to the device's camera (e.g. barcode scanning for bill payments) the user will be asked if they agree to allow that access. If they do not agree, they will not be able to use that functionality.
11.3.3.4. Beneficiary Name Display Service (BNDS)
For the provision of the Payee Name Display Service (SANB) in order to prevent fraud in the case of interbank payments initiated from payment/internet banking applications, your personal data is processed as detailed in the Information Notice on the processing of personal data within the Payee Name Display Service (SANB).
In order to prevent fraud in the case of intra-bank payments initiated from its own payment/internet banking applications, BT processes - as an independent controller - the same categories of personal data that are also used within SANB, but without the involvement of other participating banks and without the involvement of Transfond. The basis for the processing of your data is BT's legitimate interest in preventing fraud in intra-bank payments (BT-BT). Your first name (one or more, as appropriate) in full and the initial of your surname registered with BT will be displayed to other BT customers who initiate from a BT application a payment to your account. BT, whether the payment is completed or not.