1. Identification data of the controllers
Banca Transilvania and Societatea Biroul de Credit S.A., a legal person Romanian based in Bucharest, str. Sfânta Vineri, nr. 29, 4th floor, sector 3, as joint controllers, processes your personal data, in good faith, in a fair and transparent manner, for specified and legitimate purposes, according to the provisions of Regulation (EU) No. 679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the Regulation).
Credit Bureau SA is the private law entity that manages the Credit Bureau System, in which personal data are processed in connection with the lending activity carried out by the Participants.
The participants in the Credit Bureau System are credit institutions, non-banking financial institutions, insurance companies and debt collection companies, which have signed a Participation Agreement with the Credit Bureau.
2. Legal basis and purpose of the processing
Banca Transilvania S.A. and the Credit Bureau processes your personal data based on the legitimate interest of the Participants and the Credit Bureau for carrying out a responsible crediting activity, under the conditions of protecting, facilitating access to credit and preventing excessive indebtedness of the data subjects, observing the legal framework regarding the creditworthiness assessment and credit risk reduction, as well as preventing the use of the financial-banking system to carry out activities contrary to the law.
Banca Transilvania S.A. has the obligation, according to the legal regulations in force, to assess your ability to repay the loan, before concluding a credit agreement and during its performance. For this purpose, Banca Transilvania S.A. processes the information indicated in point (4), registered on your name in its own records and transmits them to the Credit Bureau for processing by this institution and consulting them by any Participant, in order to initiate or carry out a credit relationship, as well as to ensure credit products.
3. Obligation to provide data and consequences of non-compliance
The provision of your personal data is necessary for the purpose mentioned in point (2). The refusal to provide your personal data, necessary to achieve the purpose mentioned above, will lead to the impossibility of Banca Transilvania S.A. to fulfill its legal obligations in connection with the granting of the loan.
4. Categories of personal data processed in the Credit Bureau System
- identification data of the data subject: name, surname, personal identification number or CUI for authorized natural persons or CIF for natural persons carrying out liberal professions or country code and passport series / number for non-resident persons, home address / residence, telephone number, date of birth;
- data relating to the employer: address of the employer, date of registration of this information, CUI;
- data regarding the requested/granted credit products: type and name of the Participant, type of product, product/account status, date of granting, account duration, amounts granted, amounts due, update date, currency, frequency of payments, amount paid, monthly installment, outstanding amounts, number of days of delay, date of the first outstanding, category of delay, date of last payment;
- data regarding events that occur during the development of the credit product, such as those related to the restructuring / refinancing, payment, assignment of the credit agreement, assignment of the claim;
- data relating to relations with other accounts: information relating to credit products to which the data subject is a co-debtor and/or guarantor;
- insolvency data: information on data subjects against whom insolvency proceedings have been opened;
- number of queries: indicates the number of Credit Reports issued by the Credit Bureau, at the request of one or more Participants.
In the process of analyzing your loan application, Banca Transilvania S.A. will request the Credit Bureau to issue a Credit Report, with or without FICO® Score, in order to verify whether you are within the degree of indebtedness established by law and if you have the ability to repay the loan. In order to obtain the Credit Report, Banca Transilvania S.A.va sent to the Credit Bureau the name, surname and personal identification number.
After granting the loan, Banca Transilvania S.A. will send to the Credit Bureau your personal data provided for in points a)-f). This information shall be shared with the other Participants within the Credit Bureau System and shall be used for the purpose referred to in point 2.
Your ability to repay your debts as they fall due can be checked periodically after the credit has been granted, including by obtaining Credit Reports or by using the *Alerts service.
If, during the period of the loan granted, you are late in the payment of the installments for more than 30 calendar days from the due date, Banca Transilvania S.A. will send to the Credit Bureau information on the outstanding amounts, the category of delay, the date of the first arrears and/or, as the case may be, information regarding the opening of the procedure of giving in payment, only after your notification, at least 15 calendar days in advance, made in writing, by phone, SMS, e-mail or other means of electronic communication.
*TheAlert Serviceis used by Participants to identify and/or mitigate credit risk in a timely manner, by generating an alert to a Participant when an event (opening/closing account, entering/closing arrears, account correction, registering/deleting guarantor/co-debtor status, account inquiry, change of employer name/phone number) is registered for one of its own debtors at another Participant.
5. FICO® Score from credit bureau
The personal data referred to in point (4) may be processed by the Credit Bureau, including to calculate, at the request of the Participants, fico® score from the Credit Bureau.
Participants can use FICO® Score from the Credit Bureau in order to reduce the credit risk associated with a debtor/potential borrower.
The FICO® Score from the Credit Bureau is a number between 300 and 850, obtained from the statistical process that processes the information recorded by the Participants in the Credit Bureau System and indicates the probability that the data subject will pay his/her installments on time in the future. The main causes that caused the decrease of fico® score from the Credit Bureau are displayed in the form of reason codes.
FICO® Score from the Credit Bureau takes into account the following elements that confer predictability: payment history, current debt, duration of the credit account(s) (average number of months after granting the loans), the application for new loans (number of queries and credits granted in the last 6 months), the credit mix (types of loans granted), the age of the data subject. The influence of these elements on the value of the FICO® Score from the Credit Bureau may vary depending on the information recorded with the Credit Bureau for each data subject.
Fico® Score from the Credit Bureau is a tool of analysis with a high degree of predictability that, in addition to the data from the Credit Report and the information obtained by the Participants from other sources, competes to correctly assess the creditworthiness of the data subject in order to conclude / carry out the credit agreement.
6. Recipients of the data
Personal data recorded in the Credit Bureau System shall be disclosed to Participants, upon request, for the purpose referred to in point (2).
The personal data processed in the Credit Bureau System will not be disclosed to third parties, except for public authorities and institutions, according to their competences and applicable legislation, such as the National Supervisory Authority for Personal Data Processing, the National Bank of Romania, the National Integrity Authority, the courts, notaries public, bailiffs, criminal investigation bodies.
7. Storage period
Personal data is stored at the Credit Bureau and disclosed to Participants for 4 years from the date of update, except for the data of credit applicants who have waived the credit application or who have not been granted credit, which are stored and disclosed to the Participants for a period of 6 months.
8. Rights of data subjects regarding the processing of personal data
As a data subject, you can exercise the rights provided by the Regulation, as follows:
a) the right of access to data may be exercised:
- by a signed written request sent by mail to the Credit Bureau, or
- by securely accessing the Credit Bureau's website(www.birouldecredit.ro),or
- personally or electronically, to the Participant who holds the status of creditor/potential creditor of you.
At the same time, you have the right to obtain, upon request, at the time of communication of the credit decision, a copy of the Credit Report issued by the Credit Bureau, which was used by Banca Transilvania S.A. in the analysis of the loan application.
b) the right to rectify the data,
c) the right to delete the data,
d) the right to restriction of data,
e) the right to oppose the processing,including the individual automated decision-making process,
may be exercised:
- by securely accessing the Credit Bureau's website(www.birouldecredit.ro),or
- personally or electronically, to the Participant who holds the capacity of creditor/potential creditor of the data subject.
f) the right to address to the National Authority for the Supervision of Personal Data Processing and Justice.
9. The contact details of the Data Protection Officers are: