Privacy & Cookie Statement

Transcription

1 Privacy & Ckie Statement Cntent - Persnal data - Ckies

2 Persnal data Intrductin At bunq, we really care abut yur privacy. This means we will never sell r rent yur persnal data t third parties withut yur permissin. In this Privacy & Ckie Statement yu can read what data we cllect and hw we use it. The data cntrller fr the prcessing f yur persnal data is bunq B.V., registered at the Dutch Chamber f Cmmerce with registratin number Our address is Naritaweg , 1043 BS Amsterdam, the Netherlands. T make sure bunq nly prcesses persnal data in line with the relevant laws and regulatins, bunq has appinted a Data Prtectin Officer (DPO). If yu have any questins abut the prcessing f persnal data resulting after reading ur Privacy & Ckie Statement, yu can cntact ur DPO via privacy@bunq.cm. If yu want t cancel yur bunq accunt r any ther questin abut yur bunq accunt, please cntact ur supprt via the bunq app r supprt@bunq.cm. 1. What data des bunq cllect? Opening bunq accunt T assess and pen bunq accunts, we can cllect and use the fllwing persnal data: a. Persnal infrmatin; First- and last name Date, cuntry and place f birth Natinality Gender b. Cntact and address details; Residential address Telephne number address c. Scial security numbers and/r ther tax identificatin numbers; d. Cunter IBAN; e. Device data (such as type f device, perating system, IP-addresses and advertising ID s); f. Ckies and usage data n hw yu use ur prducts and services; g. Crrespndence with bunq and supprt data (telephne, chat cnversatins and ); h. Additinal dcumentatin related t pening an accunt; i. Picture f an identificatin dcument made in the bunq app; j. Vide identificatin data. 2

3 Fr pening a Slice accunt, nly names, cntact, device and usage data is cllected. Use f the app, websites and ther services While using ur app, websites and ther services, we can cllect and use the fllwing persnal data: a. Access t yur cntact list; b. Lcatin data via GPS; c. Upladed images/cntent; d. Device data f added devices and API-keys; e. Added aliases (bunq.me pages, telephne numbers and addresses); f. Financial and banking data, prduct subscriptins and transactin histry; g. Ckies and usage date n hw yu use ur prducts and services; h. Marketing data (statistics related t ur marketing campaigns and data t measure this); i. Crrespndence with bunq and supprt data (telephne, chat cnversatins and ); j. Activity n bunq Tgether. Authenticatin methd based n bimetrical data (like 4F hand recgnitin r fingerprint scans) are nt stred, used r shared in a frmat that allws us t reprduce the bimetrical data. 2. What is the lawful basis fr the prcessing f my persnal data? bunq prcesses yur persnal data in accrdance with the relevant laws and regulatins based n several legal grunds. Legal requirements In many cases, we are legally required t stre certain data abut yu, fr example t verify yur identity, research the use f ur accunts and t be able t share certain data with gvernmental institutins. Cntract perfrmance T keep ur agreement with yu and t prvide ur services in a well and secure manner, we prcess yur persnal data. Fr example, we need yur cntact infrmatin t keep yu infrmed abut relevant develpments, and we stre crrespndence data t imprve ur custmer service. 3

4 Cnsent In certain cnditins, yu are able t prvide us with explicit r implicit cnsent fr prcessing persnal data. Fr example, while using the app yu can chse t prvide access t yur cntact list, t uplad images/cntent r t create a public bunq.me link. Legitimate interests We can als prcess certain data when we have a legitimate interest t d s, fr example t prevent and cmbat misuse, fraud and crimes, t analyse the use f ur prducts and services fr marketing purpses r fr infrmatin and system security. 3. Fr what purpses des bunq use my persnal data? We use yur persnal data t: Cmply with legal bligatins; Execute agreements with ur users, fr example fr prcessing payments, prductin f bunq cards, securing bunq accunts, identificatin purpses and custmer supprt; Learn mre abut the use f ur prducts and services s we can imprve them; Carrying ut and persnalising (targeted) marketing activities thrugh different channels and measure their effectiveness, based n yur persnal circumstances and use f ur prducts and services; Cnduct analyses fr statistical, strategic and scientific purpses; Prevent and cmbat misuse, fraud and crimes; Ensure the safety and integrity f the financial sectr, bunq and ur users; Training and caching purpses. 4. Des bunq share my persnal data with third parties? T be able t prvide ur services, we share certain persnal data with third parties. We keep the sharing t a minimum, and ensure these third parties will handle yur persnal data with the same care as we d. This means, amng ther things, we sign Data Prcessing Agreements and that parties are EU-U.S. Privacy Shield certified r use the standard cntract clauses adpted by the Eurpean Cmmissin fr persnal data prtectin. An verview f the third parties r categries f third parties with whm we share data can be fund belw. Next t this privacy statement, additinal privacy statements r plicies frm these third parties may apply. Onfid Limited T verify yur identificatin dcument and identity, we use the services f third party supplier Onfid Limited (Finsbury Avenue 3, EC2M 2PA Lndn, United Kingdm). 4

5 TransferWise If yu wish t use the services f TransferWise in the bunq app, we share yur persnal data with TransferWise (56 Shreditch High St, E1 6JJ Lndn, United Kingdm). This may include a cpy f yur identificatin dcument fr pening the accunt. adjust GmbH T analyse the use f ur websites, prducts and services, and t measure the effectiveness f ur (persnalised) marketing campaigns, we use technlgy frm adjust GmbH (Saarbrücker Strasse, Berlin, Germany). Segment.i Inc. & Mixpanel Inc. Fr bringing tgether and analysing the persnal usage data frm varius surces, including yur use f ur websites, prducts and services and t carry ut and measure the effectiveness f ur (persnalised) marketing campaigns, we use technlgy frm Segment.i Inc. (100 Califrnia Street, CA 94111, San Francisc, USA) and Mixpanel Inc. (405 Hward Street, CA 94105, San Francisc, USA). Ggle LLC T ffer yu smth translatins (n yur request) and OCR related features (such as invice and attachment scanning), we use the Clud Translatin and Clud Visin API's frm Ggle LLC (600 Amphitheatre Parkway, CA 94043, Muntain View, USA). Cntent will nly be stred by Ggle temprarily (befre being deleted) t prvide the services, and Ggle des nt claim any wnership f the cntent nr d they use it fr any ther purpses except fr prviding the requested services. T verify yur address, assure yur bunq cards arrive at the crrect address and fr fraud preventin, we als use the services f Ggle Places API frm Ggle LLC (600 Amphitheatre Parkway, CA 94043, Muntain View, USA). Fr these purpses, lcatin and usage data is shared t prvide and help imprve the services. Further infrmatin regarding Ggle s data privacy plicy can be fund at Mbile payments T ffer yu Apple Pay and Ggle Pay services, we use the technlgy frm Apple Inc (One Apple Park Way, Cupertin, CA 95014, USA) and Ggle LLC (600 Amphitheatre Parkway, CA 94043, Muntain View, USA). When yu decide t use these services, please take ntice f the separate terms and cnditins with regard t data sharing. MaxMind T verify yur lcatin, assure yur bunq cards arrive at the crrect address and fr fraud preventin, we use the technlgy f MaxMind (14 Spring Street, MA 02451, Waltham, USA). Fr these purpses, lcatin and usage data is shared t prvide and help imprve the services. 5

6 Other suppliers Card suppliers fr prducing and delivering bunq cards; , marketing and ad services fr managing and executing service s, direct marketing s and setting up marketing campaigns; SMS prviders fr sending SMS messages; Payment institutins fr prcessing transactins and safeguarding the safety and integrity f the financial sectr. Gvernmental institutins T cmply with laws and regulatins we can share data with the cncerned institutins. Fr example, the Tax Authrities can request financial data and we can share data with the Dutch Central Bank fr participating in the Depsit Guarantee Scheme. Next t this, bunq can have a statutry r legal bligatin t share persnal data with investigating authrities t prevent and cmbat misuse, fraud and crimes. 5. Hw lng des bunq stre my data? Fr a large amunt f data, we are legally bliged t retain this fr a minimum f 5 t 7 years after ending the custmer relatinship. After this perid, we dn t stre yur persnal data lnger than legally allwed and n lnger than necessary fr the purpses the data was cllected fr. We are able t stre persnal data fr lnger perids with a valid legal grund, r when the data is sufficiently (fr example) pseudnymised r annymised. 6. What are my rights? Yu have the pssibility t access yur persnal data, t receive an verview f yur persnal data and, in case f incrrect data r when we, based n the relevant laws and regulatins, d nt lnger need the data, t crrect r delete the data. Next t this, yu have the pssibility t revke the permissins yu ve prvided us fr the prcessing f sme f yur persnal data r request us t limit the use f yur persnal data. 7. Revking & limiting cnsent When yu have prvided us with permissin t prcess persnal data, r when we prcess yur persnal data based n legitimate interests, yu are able t revke this permissin in an easy manner r ask us t limit the use f yur data. Revking yur permissins des nt mean that stred data is deleted. Direct marketing & usage data 6

7 If yu d nt want yur data t be used fr direct marketing activities and analysis f the usage f ur prducts and services, yu can let us knw via the bunq app anytime. Next t this, ur cmmunicatin via cntains the pssibility t unsubscribe frm these messages. GPS and access t yur cntact list While using the bunq app, yu can prvide permissin t yur cntact list and t prcess lcatin data. If yu n lnger want t use lcatin data, r if yu n lnger want t prvide access t yur cntact list in the bunq app, yu can revke these permissins easily. Yu ll find the settings fr the bunq app at the settings fr installed apps n yur device. Yu can revke prvided permissins at any given mment. Upladed images/cntent Images and cntent that yu use t persnalise yur bunq accunt r imprve yur app experience can be easily changed in the bunq app. Public bunq.me prfile When yu create a public bunq.me prfile, yur nickname and IBAN are visible fr anyne that visites yur public bunq.me prfile fr making payments. Yu can deactivate yur bunq.me page with the accmpanying data at any given time via the bunq app. Phne number and aliases At signup we cnnect yur phne number and address t yur bunq accunt as aliases. This allws ther bunq users t easily transfer mney t yur bank accunt(s), as yur bunq accunt (and IBAN) will shw up in their cntact list. Yu can easily discnnect aliases frm yur bank accunt(s) via the settings f the selected bank accunt. Ckies Fr mre infrmatin n hw t delete ckies, please see ur Ckie Statement. 8. Changes t the Privacy & Ckie Statement We are always imprving and expanding ur prducts and services. This might cause ur data prcessing t change. When we change smething, we will adjust ur Privacy & Ckie Statement accrdingly. Yu can always find the latest versin n ur website and in the app. 9. Cmplaints When yu have a cmplaint abut the data prcessing by bunq, yu can cntact ur Data Prtectin Officer via privacy@bunq.cm. 7

8 In case yu disagree with the handling f yur cmplaint, yu are able t file a cmplaint at the Autriteit Persnsgegevens. 8

9 Ckies 1. What are ckies? Ckies are small (text)files we send t yur device when yu use r visit ur prducts, services, ads and websites. The files are stred n yur device. 2. Why des bunq use ckies? We use ckies t: prvide basic functinalities f ur prducts and services; imprve the usability f ur prducts and services; shw yu persnalised ads acrss the web and analyse their effectiveness; learn mre abut the use f ur prducts and services by cnducting analyses fr statistical, strategic and scientific purpses; and manage custmer relatinships. We can cmbine the data gathered frm ckies with ther data we have abut yu, t learn mre abut yur persnal custmer jurney, yur use f ur prducts and services and t imprve ur (persnalised) marketing as described in this Privacy & Ckie Statement. 3. Ggle Analytics Fr bunq.me, bunq.t and tgether.bunq.cm, we have cnfigured Ggle Analytics in accrdance with the guidelines fr privacy friendly use frm the Dutch Data Prtectin Authrity ( Handleiding privacyvriendelijk instellen van Ggle Analytics ). This means we ve signed a data prcessing agreement with Ggle, annymize IP-addresses and have disabled data sharing where pssible. Additinally, Ggle allws yu t pt-ut fr their analytics ckies via 4. Htjar Limited analytics We use Htjar (St Julian s Business Centre 3, Elia Zammit Street 1000, Malta, Eurpe) fr gathering analytics and analysing the use f ur prducts and services. We have cnfigured Htjar fr privacy friendly use, meaning we ve signed a data prcessing agreement with Htjar, annymize IP-addresses and have disabled data sharing where pssible. Htjar hnurs D Nt Track brwser settings and additinally allws yu t pt-ut fr their ckies via 9

10 5. Hw can I blck and delete ckies? In additin t the measures as described in this statement, if yu can easily blck and remve all ckies n yur device via the privacy settings f yur webbrwser. If yu want t prevent new ckies t be placed n yur device, yu can blck the use f ckies via the privacy settings f yur webbrwser. Yu can chse t blck all ckies r nly ckies frm specific websites. Please nte that blcking ckies will nt autmatically remve ckies that are already stred n yur device. Please be aware that by blcking and/r deleting ckies, ur websites (and pssibly ther websites) might nt functin prperly. With every new sessin, new ckies will be placed unless yu have blcked the use f ckies. 10