Privacy note on the processing by Banca Transilvania S.A. of personal data belonging to the signatories/contact persons of the BT contractual partners

Banca Transilvania, S.A., (hereinafter also referred to as "the bank", "BT", "we", "us"), hereby informs you of how it intends to process your data when you are a signatory and/or contact person on behalf of a BT contractual partner.

This information note is supplemented by the provisions of BT Privacy Policy (the "Policy"), which we encourage you to review. The Policy includes a definition of signatories and contact persons and details of the processing of your data, in particular in section C of the Policy, which can be found on the BT website www.bancatransilvania.ro.

We usually process the following categories of personal data about you, as appropriate:

For signatories:

• identity details - name and surname;
• position held within the BT contractual partner;
• signature.

For the contact persons:

• identity details - name and surname;
• contact details - telephone number (work number) and/or e-mail address (work e-mail address);
• position held within the BT contractual partner.

These data concerning you have been brought to our attention by our contractual partner.

The bank processes your personal data, as appropriate, for:

• the proper conclusion and performance of the contract with the contractual partner (usually your employer) and for other purposes closely connected with the conclusion and performance of the contract:
• the preparation and submission of reports to the competent authorities, authorized to receive them in accordance with the legal provisions governing BT’s activity;
• conducting analyzes and the keeping of records for the Bank’s economic, financial and/or administrative management;
• defending the bank's rights and interests, the resolution of disputes, investigations or any other petitions/complaints/requests in which the bank is involved;
• performance or risk controls regarding the bank’s processes and procedures, as well as the performance of audit activities or investigations;
• taking measures/providing information or answers to the requests/claims/complaints of any nature addressed to the bank by any person or by legal authorities or institutions, including electronic communication and internet requests;
• performance of internal analysis (including statistics);
• archiving of documents both in physical and electronic format and security back-up;
• the performance of registration and secretary services regarding the correspondence addressed to the bank and/or sent by it, as well as for carrying out courier activities;
• ensuring the security of the IT systems used by BT and of the premises in which the bank operates its activity;
• fraud prevention;

The basis for processing your personal data is, as the case may be: the bank's legal obligation, the conclusion/performance of the contract and BT's legitimate interest.

Personal data are disclosed, as appropriate: to BT employees/representatives who have a need to know them, to the contractual partner who provided them to us, to entities of Banca Transilvania Financial Group, to other contractual partners of the bank who have a need to know them, to public authorities and institutions entitled to request and receive them.

The data will be processed at BT during the period of the contract concluded between us and our contractual partner and afterwards, until the expiry of the contractual documentation archiving period and, if applicable, until the expiry of the legal retention period.

In the BT Privacy Policy you will also find details of your rights in relation to the processing of your data for the purposes indicated, how you can exercise these rights or how you can contact the BT Data Protection Officer (BT DPO).