1. Identification data of the controllers
Banca Transilvania S.A. and Societatea Biroul de Credit S.A., a Romanian legal entity based in Bucharest, str. Sfânta Vineri, nr. 29, 4th floor, sector 3, as associated operators, process your personal data in good faith, fairly and transparently, for specified and legitimate purposes, in accordance with the provisions of Regulation (EU) No 679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC ("Regulation" or "GDPR").
Credit Bureau SA is the private law entity that manages the Credit Bureau System, in which personal data are processed in connection with the lending activity carried out by the Participants.
The participants in the Credit Bureau System are credit institutions, non-banking financial institutions, insurance companies and debt collection companies, which have signed a Participation Agreement with the Credit Bureau.
2. Legal basis and purpose of the processing
Banca Transilvania S.A. and the Credit Bureau process your personal data on the basis of the legitimate interest of the Participants and the Credit Bureau to carry out a responsible lending activity, under the conditions of protecting, facilitating access to credit and preventing excessive indebtedness of the data subjects, complying with the legal framework regarding the assessment of creditworthiness and credit risk reduction, as well as preventing the use of the financial-banking system for activities against the law.
Banca Transilvania S.A. has the obligation, according to the legal regulations in force, to assess your ability to repay the loan, before concluding a credit agreement and during its performance. For this purpose, Banca Transilvania S.A. processes the information indicated in point (4), registered on your name in its own records and transmits them to the Credit Bureau for processing by this institution and consulting them by any Participant, in order to initiate or carry out a credit relationship, as well as to ensure credit products.
3. Obligation to provide data and consequences of non-compliance
The provision of your personal data is necessary for the purpose mentioned in point (2). The refusal to provide your personal data, necessary to achieve the purpose mentioned above, will lead to the impossibility of Banca Transilvania S.A. to fulfill its legal obligations in connection with the granting of the loan.
4. Categories of personal data processed in the Credit Bureau System
- identification data of the data subject: name, surname, personal identification number or CUI for authorized natural persons or CIF for natural persons carrying out liberal professions or country code and passport series / number for non-resident persons, home address / residence, telephone number, date of birth;
- employer data:employer address, date of registration of this information, CUI;
- data regarding the credit products requested/granted:the type and name of the Participant, the type of product, the status of the product/account, the date of granting, the duration of the account, the amounts granted, the amounts due, the date of update, currency, the frequency of payments, the amount paid, the monthly installment, the outstanding amounts, the number of days of delay, the date of the outstanding premium, the category of delay, the date of the last payment;
- data on events occurring during the period of the credit product,such as those relating to restructuring/refinancing, giving into payment, assignment of the credit agreement, assignment of the claim;
- data regarding the relations with other accounts:information regarding credit products in which the data subject has the capacity of co-debtor and /or guarantor;
- insolvency data:information relating to data subjects against whom insolvency proceedings have been opened;
- Number of queries: indicates the number of Credit Reports issued by the Credit Bureau at the request of one or more Participants;
In the process of analyzing your credit application, Banca Transilvania S.A. will ask the Credit Bureau to issue a Credit Report, without FICO® Score, in order to verify whether you fall within the debt ratio established by law and whether you have the ability to repay the loan. In order to obtain the Credit Report, Banca Transilvania S.A. will send to the Credit Bureau your name, surname and personal identification number.
After granting the loan, Banca Transilvania S.A. will send to the Credit Bureau your personal data provided for in points a)-f). This information shall be shared with the other Participants within the Credit Bureau System and shall be used for the purpose referred to in point 2.
Your ability to repay your debts when they fall due can be checked periodically after the credit has been granted, including by obtaining Credit Reports or by using the Alert Service*.
If, during the loan period, you will delay the payment of the installments more than 30 calendar days from the due date, Banca Transilvania S.A. will send to the Credit Bureau information on the outstanding amounts, the category of delay, given to the first arrears and/or, as the case may be, information regarding the opening of the procedure of giving in payment, only after your notification, at least 15 calendar days before, made in writing, by phone, SMS, e-mail or other means of electronic communication.
*TheAlert Serviceis used by Participants to identify and/or mitigate credit risk in a timely manner, by generating an alert to a Participant when an event (opening/closing account, entering/closing arrears, account correction, registering/deleting guarantor/co-debtor status, account inquiry, change of employer name/ telephone number) is registered for one of its own debtors at another Participant.
5. FICO® Score from credit bureau
The personal data referred to in point (4) may be processed by the Credit Bureau, including to calculate, at the request of the Participants, fico® score from the Credit Bureau.
Participants can use FICO® Score from the Credit Bureau in order to reduce the credit risk associated with a debtor/potential borrower.
The FICO® Score from the Credit Bureau is a number between 300 and 850, obtained from the statistical process that processes the information recorded by the Participants in the Credit Bureau System and indicates the probability that the data subject will pay his installments in the future on time. The main causes that caused the decrease of fico® score from the Credit Bureau are displayed in the form of reason codes.
FICO® Score from the Credit Bureau takes into account the following elements that confer predictability: payment history, current debt, duration of the credit account(s) (average number of months since the loans were granted), the application for new loans (the number of queries and loans granted in the last 6 months), the credit mix (types of loans granted), the age of the person concerned. The influence of these items on the value of fico® score from the Credit Bureau may vary depending on the information recorded with the Credit Bureau for each person concerned.
FICO® Score from the Credit Bureau is a highly predictable analysis tool that, in line with the data from the Credit Report and the information obtained by the Participants from other sources, competes in the correct assessment of the creditworthiness of the data subject in order to conclude / carry out the credit agreement.
6. Recipients of the data
Personal data recorded in the Credit Bureau System shall be disclosed to Participants, upon request, for the purpose referred to in point (2).
The personal data processed in the Credit Bureau System will not be disclosed to third parties, except for public authorities and institutions, according to their competences and applicable legislation, such as the National Supervisory Authority for Personal Data Processing, the National Bank of Romania, the National Integrity Authority, the courts, notaries public, bailiffs, criminal investigation bodies.
7. Storage period
Personal Data is stored at the Credit Bureau and disclosed to Participants for 4 years from the date of update, except for the data of credit seekers who have waived their credit application or who have not been granted credit, which are protected and disclosed to Participants for a period of 6 months.
8. Rights of data subjects regarding the processing of personal data
As a data subject, you can exercise the rights provided by the Regulation, as follows:
a) the right of access to data may be exercised:
- by a written request, signed, sent by post to the Credit Bureau, or
- by securely accessing the Credit Bureau's website, or
- personally or electronically, to the Participant who holds the status of creditor/potential creditor of you.
At the same time, you have the right to obtain, upon request, at the time of communication of the credit decision, a copy of the Credit Report issued by the Credit Bureau, which was used by Banca Transilvania S.A. in the analysis of the loan application.
b) the right to rectify the data,
c) the right to delete the data,
d) the right to restriction of data,
e) the right to oppose the processing,including the individual automated decision-making process,
may be exercised:
- by securely accessing the Credit Bureau's website, or
- personally or electronically, to the Participant who holds the capacity of creditor/potential creditor of the data subject.
f) the right to address the National Supervisory Authority for Personal Data Processing and Justice.
9. The contact details of the Data Protection Officers are: