Information note on the processing of personal data within the BT Visual Help platform

1. General provisions

Banca Transilvania S.A. (hereinafter also referred to as "the bank" or "BT") is a credit institution, legal person Romanian, registered with the Trade Register Office in Cluj under number J12/4155/1993, having the unique registration code no. RO5022670 and the following contact details: registered office address Str. Calea Dorobanților Nr. 30-36, postal code 400117, Cluj-Napoca, Cluj County, Romania Tel: 0801 01 0128 (BT) - callable from Romtelecom network, 0264 30 8028 (BT) - callable from any network, including international, *8028 (BT) - callable from Vodafone and Orange networks, e-mail address: contact@bancatransilvania.ro, Banca Transilvania website.

With this specific information note, BT will inform you how it intends to process BT Clients' data in the context of their use of the BT Visual Help platform ('the Platform').

This information note is completed with the provisions of the General Information Note on the processing and protection of personal data belonging to BT Clients, which we recommend you to consult.

BT Visual Help is a platform offered to BT clients (natural or legal persons) who have at least one current account opened in their name at BT and a card attached to it, under the conditions set out in the BT Visual Help Terms and Conditions of Use, which we recommend that you consult.

This information note may be reviewed by BT from time to time, but it will not create any less favourable conditions for platform users in terms of processing and protection of personal data.

If, at any time, you consider that the manner in which BT intends to process and/ or protect personal data does not comply with the legal provisions and/or your requirements, you can notify us of these issues at the contact address of the Data Protection Officer - dpo@btrl.ro and/or stop using BT Visual Help.

2. Personal data we process for the purpose of identifying and using BT Visual Help

In order to be able to use the platform, it is first necessary to identify you in the bank's records as a BT client, an individual account holder, and in the case of legal entities as its legal representative. For this purpose, we will check your phone number from which you are calling to make sure that this is the one you have declared to the bank and we will ask you to enter your CNP. In the case of legal entities* it is collected in addition and the unique registration code is checked (respectively the CUI in the case of the legal person, including in the case of authorized natural persons, or the tax registration code - CIF - in the case of persons exercising liberal professions).

* Although information about legal persons is not usually considered personal data, please note that the information required in BT Visual Help for identification and, as well as those provided about the accounts of legal entities such as P.F.A., I.I., individual forms of exercise of liberal professions (e.g. individual law firms, notaries, bailiffs' offices, doctors, etc.) have the regime of personal data and it is necessary that they be processed by the bank in order to provide identity verification and the provision of services within this platform.

After identifying you as a BT customer based on the information presented above, through the platform you will be able to perform the operations provided under the terms and conditions of this platform.

The refusal to provide the personal identification number or, as the case may be, the unique registration code, will make it impossible for us to verify your status as a natural person customer or as a representative of a legal person client holding a BT card, so that you will be able to request the services of blocking the card and, respectively, of modifying the trading limits only by getting in touch with a Call Center agent or in a bank unit.

In order for the bank to offer you the services on the platform, you will be shown the following information that is personal data when it belongs to individuals or legal entities of the type mentioned above:

• card/ card details: card type (Visa / Mastercard), product name, cardholder / user name, card number (first 4 and last 4 digits), card status, expiration date;
• information about daily trading limits: number of transactions, cash withdrawal from ATMs, card payments in stores, online payments with CVV, online payments without CVV;
• account details: Account name, currency, IBAN, balance, number of Star points for credit card accounts included in the STAR BT loyalty program;
• transaction details, as provided for in the BT Visual Help Terms and Conditions of Use;
• the email address declared in relation to the bank on which you are sent the statement of current account or credit card account, for the requested period;
• the list of IBANs of current accounts opened with the bank.

3. Retention period of personal data processed within the BT Visual Help platform

Your data, as a BT client, as well as the data on the operations carried out through BT Visual Help will be kept for a period of 5 years from the termination of the business relationship of the client, natural or legal person, with the bank, according to the applicable legal provisions in the field of customer knowledge, unless other legal provisions require the continued retention of data.

Any other data entered in the platform or to which BT had access will be kept by the bank for a reasonable period of time, respectively during the use of the platform, as well as for a maximum of 3 years from the date of cessation of its use, unless the law provides for another term, in which case the term provided by law will apply.

4. Recipients of personal data processed within the BT Visual Help platform

Only bank employees who need to know them have access to the personal data processed within the platform, in accordance with the duties of the job description.

Please note that the BT Visual Help platform may contain links to websites/platforms/applications provided by third parties, whose privacy policy is different from that of BT. Persons who enter personal data into these websites/platforms/applications must be aware that they fall under the privacy policy of those websites/platforms/applications, that we recommend that it be read. This information note and the BT Privacy Policy do not apply to information entered by you. on the respective websites / platforms / applications, BT has no control over the processing of personal data that the providers of these websites / platforms / applications perform for their own purposes and does not assume any liability for these processing.

5. Security of personal data processed within the BT Visual Help platform

Banca Transilvania takes all necessary measures to protect personal data using appropriate security methods. Despite these precautions, the Bank cannot guarantee that unauthorized persons will not gain access to personal data.

You are solely responsible for maintaining the confidentiality and safekeeping of your phone and in particular the password to unlock the phone (password, fingerprint or another security method provided by the phone). Moreover, you are responsible for activities of any kind that take place in your account.

You must notify us immediately of security breaches or unauthorized use of your mobile phone. We will not be liable for your losses caused by the unauthorized use of the platform on your behalf, but you may be liable for losses incurred by us or others due to such unauthorized use.

6. Rights of the data subject

In accordance with the provisions of the General Data Protection Regulation ("GDPR"), as well as other applicable normative acts in the field of processing and protection of personal data, as a data subject (BT client) for the processing of personal data in the context of using the BT Visual Help platform, you benefit from the rights set out in detail in the framework of the The general information note on the processing and protection of personal data belonging to BT Clients, an integral part of the BT Privacy Policy,can be found on banca Transilvania's website or, upon request, in any bank's unit.

In the general note mentioned you can also find details about how you can exercise these rights or how you can contact the data protection officer designated by BT (BT DPO).