Processing of personal data - natural persons
INFORMATION ON THE PROCESSING OF PERSONAL DATA
Data controllers and data subjects
Banca Transilvania S.A. (hereinafter "BT") and Idea::Bank S.A. (hereinafter "Idea"), entities of the Banca Transilvania Financial Group, jointly process personal data of you - account holder and Idea::Bank products/services holder - as well as of the persons in relation with you at Idea (e.g.: designated persons with operating rights on Idea accounts, beneficial owners, representatives of any kind, co-debtors, guarantors, etc.), as we inform you below.
This processing is carried out by the two banks as joint controllers, in accordance with the provisions of the General Data Protection Regulation (GDPR) and other applicable legislation in this field, in the context of the assignment to BT of certain banking contracts concluded by Idea with its customers. BT and Idea::Bank have entered into an agreement to set out each other's responsibilities and obligations in relation to personal data processed for the purposes and by the means they have jointly agreed.
Asthe processing of processed data and their source, the purposes and grounds of the processing, the retention period
The data processing is carried out for the fulfilment of the common, determined and legitimate purposes established by BT and Idea, related to: the need to verify whether you are a joint customer of the two banks, the preparation and transmission of the BT product/service offer and of this notification, the assignment of contracts related to Idea::Bank products/services to BT, the verification of the application of customer due diligence measures for the prevention of money laundering and terrorist financing.
Personal data strictly necessary for these purposes have been/will be disclosed in the following period by Idea to BT and will be further processed on the following grounds: fulfilling the legal obligations to notify the assignment of the contract, taking steps to conclude a contract between you and BT (as a result of the assignment), fulfilling the legitimate interests of the associated operators to provide you with BT's product/service offer corresponding to the one from Idea in time, so that you do not experience interruptions in the use of banking services and so that you do not have to repeat processes at BT such as those for designating persons with account operating rights or providing/updating data necessary for customer knowledge.
The data is transmitted between the associated operators by means that ensure its adequate security and are part of the following main categories: identification data, contact data, data about the Idea products/services you have contracted and about the transactions carried out through accounts opened with Idea, including data relating to account numbers, customer codes, contract numbers, data necessary for the application of know-your-customer measures for the prevention of money laundering and terrorist financing. At BT you have been reserved bank data and products corresponding to those in Idea (IBAN codes of bank accounts, customer code, BT products/services), as indicated in this notification.
With regard to these purposes and legal grounds, joint processing of data by associated controllers may only cease if you terminate the contractual relationship you have established with Idea or at the end of the joint processing period.
The joint processing of data by Idea and BT as informed to you by this information notice does not affect the processing that Idea Bank's controller carries out, independently of BT, as long as you are a customer of BT and after the termination of your customer status. Details of this processing can be found on the website https://ro.idea-bank.ro/ in the section "processing of personal data". You can find details of the protection provided by Idea to its customers on the same website, in the section "protection of personal data".
If you do not become a BT customer following the transfer of the contract, Banca Transilvania will anonymize your data received from Idea Bank and the corresponding data reserved for you in BT. Instead, Idea will continue to process as a separate controller this data, either in your capacity as an Idea customer or as a former customer, for the periods mentioned in the "processing of personal data" section above.
If you are already or if you become a BT customer as a result of contract assignment or otherwise, Banca Transilvania processes your personal data as a controller, separately from Idea::Bank, as you are informed by the General Information Note on the processing and protection of personal data belonging to BT Customers, which you can find on the website www.bancatransilvania.ro under the Privacy Policy or by directly accessing the following link: https://www.bancatransilvania.ro/Nota-informare-generala-privind-prelucrarea-si-protectia-datelor-cu-caracter-personal-clienti-BT.pdf, as well as upon request at any BT establishment.
Recipients of personal data
The data jointly processed by the associated controllers may be accessed, where appropriate, by their employees who need to know them, IT service providers involved in the assignment of contracts, service providers for the preparation of notifications, courier, audit, archiving services, authorities and institutions entitled to know them, notaries, lawyers, insurance or valuation companies.
Also, if your employer has an agreement with BT for the collection of your salary, the IBAN of the account to be opened at BT - corresponding to the one at Idea - will be provided to your employer for the transfer of the sums in optimal conditions.
At the same time, if you receive in the accounts opened with Idea amounts representing pensions or other types of social benefits (e.g. state child allowances, disability pensions, unemployment benefits, social aid, etc.), Banca Transilvania will communicate to the paying institutions the IBAN of the account that will be opened in BT instead of the one in Idea, so that you can receive the amounts in it as of July 2022, without having to take any further steps. If you do not wish to receive the amounts in the new account opened with BT, you will have to pass the paying institutions the account opened with another bank where you want the amounts to be transferred.
Last but not least, if you have concluded credit contracts with Idea Bank S.A. and these are subject to the assignment of contracts to Banca Transilvania S.A., which has been brought to your attention by means of this notification, we inform you that the assignment of each credit contract concerned will be reported to the Credit Bureau as an event occurring during the credit period. Details about the data processed in the Credit Bureau by Banca Transilvania S.A. during the course of a credit relationship can be found in the General Information Notice on the processing and protection of personal data belonging to BT customers or directly by accessing the following link: https://www.bancatransilvania.ro/Nota-de-informare-privind-prelucrarea-datelor-cu-caracter-personal-in-contextul-incheierii-executarii-unui-contract-de-credit-BT.pdf
We do not foresee the need for jointly processed personal data to be transferred to countries outside the EU/EEA or to international organisations. Should such a need arise, the transfer will only be made in accordance with the rules and based on the safeguards premised by the GDPR.
Your rights
Every data subject is guaranteed the following rights with regard to the processing of his/her personal data carried out by the associated controllers for the common purposes outlined above: the right to information (we provide you with all the information through this information notice), the right of access, the right to rectification, the right to restriction of processing, the right to erasure of data, the right to object to the processing of data, the right to data portability. You can exercise these rights by sending a request to the registered office of any of the associated controllers, to the attention of the DPO or by e-mail, as follows: for BT at dpo@btrl.ro or for Idea at dpo@idea-bank.ro. Also, if you consider that this processing violates your rights, you may lodge a complaint with the National Supervisory Authority for Personal Data Processing or go to court.
All the details about the joint processing of personal data carried out by Idea::Bank and Banca Transilvania S.A. in the context of the contract assignment can be found in the section Processing of personal data on the website https://www.bancatransilvania.ro/ideabank.