Postbank

1. I get a message “The user has active session".
Active session occurs, when the user has not used for logout button “Logout" on the application and has closed the browser directly. In this case, the user has to wait 10-15 min., to restart the browser and to load the page again.

2. What should I do if I have forgotten my password?

You have two options here.The first one is to recall your password taking due care of the correctly typing of the lower case and upper case letters, and the digits. Check whether you have switched to Cyrillic. The second option is to reset the password online from Forgotten password option or to request a new Access code in office of the Bank and to receive new username and password. The Bank’s rules requires, the request to be made by the e-banking user, personally in office of the Bank.

3. Signature – How to sign and send a payment?
In menu “Transfers", tab. Current/ tab.pending you can to see the orders waiting signing and sending for execution.

Signing – Click on an icon  
Depending on the browser and the certificates installed on the computer, select a certificate wherewith you will sign. Confirm with “Yes" the messages upon using of the certificate.

Sending - Click on an icon

4. Transfers – What is a Transfer status and what is the meaning of it?
Description of the transfer statuses:

• Successfully sent – Final status. The transfer has been processed and recorded in the banking system. Generally, flow has been generated under your account. The exceptions are some foreign currency transfers, which require extra documents, and the Mass Payments, which are subject to extra processing.
• Signature collection – The initial transfer status. Such transfer will not be executed and processed until it is signed and sent by the customer for processing by the banking system. In order to sign and send, click on the respective icons.
• Awaiting execution – The transfer waits processing by the banking system. The transfer can remain in this status throughout the business day set as the execution date at most. If the banking system has not processed it in the meantime, it will be formally rejected. Check your account funds for the transfer execution date.
• Rejected – Final status (such transfer will not generate movement under your account). The banking system has processed and rejected this transfer. Check the reasons for the rejection in the menu Transfers – Report section. Create a similar transfer and correct the erroneous data.
• Unsuccessfully sent - Final status (such transfer has not been sent to the banking system for technical reasons and will not be resent). Create a similar transfer and resend it.
• Locked (in queue) – Temporary status – currently processed – check the status a little later.
• Expired validity period - Final status (such transfer will not generate movement under your account). If you wish, create a similar one and send it.
• Cancelled by client - Final status. No effective impact on the account balance and available funds in your account. 

You can request a new password in a branch of the Bank or online at www.e-postbank.bg by selecting the Forgotten password option.

In order to successfully reset the password, it is necessary the entered data (an email address and a number of mobile phone) to be the same like provided upon the registration for internet banking service. You must know your username as well as have access to the e-mail and the mobile number on which you will receive a one-time code to confirm the newly chosen password.

Please make sure you have provided to the bank a correct personal data and mobile phone number. You can check if your phone number is correct by contacting your servicing branch or our Customer support center at +359 2 81 66 000.

What is One Time Password (OTP) confirmation?
OTP is an additional security measure used for online payments executed via internet banking system of Postbank e-Postbank. The additional code is generated automatically and can be used only once. The code is being sent to a specified by the client mobile phone number via SMS or via Automatic phone call (Voice OTP).

Does the OTP need an additional registration?
In order to confirm payments with OTP no additional registration is needed.

Which customers will use the OTP?
Both - the existing and new customers who have active rights at e-Postbank.

Does every payment need to be confirmed with an OTP?
The additional code will be needed only for those transactions that match the predefined criteria defined by the bank.

How will be executed payments that need OTP?
In order to be confirmed a payment that needs additional confirmation, the customer should enter the OTP in the appropriate field that appears on the Internet banking page.

How will be executed payments that need additional confirmation but the customer cannot receive the OTP for some reason?
In case the additional code cannot be received neither via SMS nor via Automatic call (Voice OTP), the payment still can be confirmed. For that purpose the customer should contact Customer support center of Postbank at +359 2 81 66 000.

What could be the reasons for not receiving the SMS?
The SMS OTP could be received by subscribers of all mobile network operators in Bulgaria.
If the client is abroad (roaming mode) delays are possible to occur or even not receiving the message. In this case still could be used the option Automatic call (Voice OTP).
In general – for successfully using of the new security measure the client personal data and mobile phone number should be correct.

Does each created payment required confirmation with a new password?
The password received by SMS or automatic call from the bank can be used only once within the validity period that the customer will see on the screen of his mobile device.

What is the price of the OTP?
The OTP service is free of charge.

If the customer is in roaming mode, additional fees could be charged by the respective mobile network operator. 

We are Postbank, legally named Eurobank Bulgaria AD (hereinafter referred to as “We” and “The Bank”), registered with the Trade Register of the Registry Agency with UIN 000694749. You can contact us at 1766 Sofia, 260 Okolovrasten pat Str., Tel: 0700 18 555; e-mail: klienti@postbank.bg; www.postbank.bg.

Our major priority is to work ethically and responsibly, in order to comply with the legislation, including in the field of personal data protection, and to meet your expectations with regard to processing your personal data. We are constantly improving our internal procedures and workflows. Our employees are trained and obliged to protect the privacy of customers’ personal data

The Bank has appointed a special employee who is responsible for complying with the legal requirements for personal data processing and for the application of best international practices. This is our data protection officer and you can contact him by e-mail to dpo@postbank.bg or by mail to address 1766 Sofia, 260 Okolovrasten pat Str., Data Protection Department.

The law allows us to process personal data if one or more of the following conditions are present:

• If we perform a contract to which you are a party or if you have taken action to conclude a contract with us;
• When we have an obligation stipulated by law;
• When there is a legitimate interest;
• When we have your consent.

A legitimate interest is deemed to be the processing of personal data carried out due to economic, commercial or other interest of the Bank or of a third party that is superior to the interest of the person and the processing does not violate their rights including in the event of legal merger, acquisition, etc. Even if there is such interest, our actions in relation to you will always be fair and transparent and in any case they will be subject to a preliminary assessment of the Bank's or the third-party’s interest and the rights of the individuals.

When we process your personal data based on a particular consent you gave to any entity within the group we belong to or the entity which Postbank has become legal successor of, you can always withdraw your consent which would not affect the legally processed data prior to an eventual withdrawal.

We use your personal information to process and assess any customer application for a product of the Bank, to maintain your accounts, to develop and improve our services, and to ensure that we comply with the laws that regulate our business.

We have compiled this detailed list to inform you of the purposes for which we use personal data and what our reasons are. Here you will find out which our legitimate interests are.

We believe your personal data is confidential and we value its privacy. Therefore, we pay close attention to processing which is related to disclosing or providing your personal data to third parties. Whenever we disclose your personal data, this is imperative to meet the above goals.

Depending on our relations, we may disclose your personal information to the following categories of recipients:

• Companies from the financial group the Bank belongs to;
• Companies and individuals who provide us with services for the implementation and maintenance of information systems, technical services, legal advice, archival, administrative or other similar services which are required directly in the course of your service or for the overall functioning of the Bank;
• State authorities, institutions and establishments (National Social Security Institute, National Revenue Agency, Central Credit Register, the National Population Database with the MRDPW, Ministry of Interior, etc.) should we need to perform checks in their registers at the time we commence our business relationship, to assess your creditworthiness or for other information needed for signing of contract or its execution
• Companies that we may assign to collect on our behalf Bank’s receivables on your credit products;
• Companies that assist us in improving our products and services and that may contact you on our behalf to make you an offer or invite you to participate in a survey;
• If you use a debit or credit card, we will share information with our partner companies and organisations in order to offer this product;
• Individuals that we assign to produce, print, collate, deliver (including by SMS or electronically) written correspondence and / or information materials of the Bank;
• System operators servicing payments;
• Payment service providers in relation to the Bank’s obligations under Regulation (EU) 2015/847;
• In case we decide to transfer rights and obligations under a contract we have concluded with you, your personal information will also be provided to the recipient;
• In case of legal merger or other legal transformation of the Bank or part of its business operations, your personal data will be shared with the respective successor of legal rights or newly incorporated entities;
• If our relations stipulate the provision of collateral, personal data will be disclosed to notaries, the Registry Agency and/or other registrar authorities that legally require the entry of the collateral;
• The National Revenue Agency, concerning the automatic exchange of financial information under Art. 142b, para 1 of the Tax and Social Insurance Procedure Code, which requires the provision of information about clients of the Bank, including actual company owners. The information provided includes name, address, tax number, date and place of birth, account number, account balance, and income earned on the account;
• Other recipients who have legal powers to demand your personal data of the Bank. Such are the Bulgarian National Bank, ministries, commissions, agencies, judicial authorities, law enforcement authorities and others. In some cases, it is the Bank's legal obligation to initiate the provision of your personal data (for example, in the performance of obligations under the Law on Measures against Money Laundering) or due to a legitimate interest, including the legitimate interest of a third party.

The period for storing your personal data depends on the relations you have with the Bank. When you apply for any of our products or services but you are not approved or you decide to withdraw your application, your personal data will be stored for a limited period of time (1 year).

If you are our client and use the Bank’s products and services, we are legally obliged to store your personal data not only for the period of completion of our contractual relations but for a period of 5 years after their completion. In some cases this period may be extended to 7 years if this is required by a competent state authority. If storing your personal data is necessary for pending procedures in which the Bank is a party (for example, court proceedings, administrative proceedings, handling your complaint against the Bank, etc.), then we will keep them until these proceedings are closed.

Moreover, if you have been granted a loan that was not duly repaid, either fully or partially, or we transfer rights and obligations under the contract we have concluded with you (e.g. contract for cession) we will keep your data for a period of 10 years after the completion of our contractual relations.

If you take advantage of your right to limit data processing, the Bank will store your personal data until you specify otherwise.

RIGHT TO ACCESS
You can always ask us whether we process your personal data and if so, to be informed about what information we store, why we store it and how we process it. You are also entitled to a copy of this information.

RIGHT TO CORRECT
We would like your personal data to be accurate and up-to-date. If any piece of your personal data is inaccurate or out-of-date, please inform us and we will correct it.

RIGHT TO DELETION
You may ask the Bank to delete your personal data, but the relevant legal grounds should apply in order to fulfil the request. We will not delete any information about you that we are legally required to keep as well as if we have grounds not to delete this information. We will have one month to answer your request. If we refuse to delete the information, we will provide the basis for our decision and the legal grounds for it.

RIGHT TO RESTRICT DATA PROCESSING
In certain cases you may request the Bank not to process your personal data, including deleting them, in order to protect your legal claims.

RIGHT TO OBJECTION
As we have already stated in this Notice, in certain cases we process your personal data due to the Bank’s legitimate interest. You have the right to object to this processing, including when it is profiling. We will discontinue processing your personal data only if we are convinced that the Bank’s interest has no advantage in the specific situation.

We remind you that at any time you can easily express your will not to receive advertising content. In such case, we will immediately discontinue processing your personal data for the purposes for sending advertising content.

RIGHT TO DATA PORTABILITY
You may request the Bank to put your data in an electronic file and give it to you or to a third party. The data you can request may only be data we have received in connection with a contractual relation or with your consent and is automatically (electronically) processed.

You can exercise any of the abovementioned rights in person or via an explicitly authorised person in any of the Bank’s offices as well as electronically in accordance with the Electronic Document and Electronic Certification Services Act. We have created a special form to make it easier for you to exercise your rights.

Under certain conditions, we may charge you a fee for responding to a request. The fee is specified in our Tariff.

You have the right to withdraw your consent at any time if such was necessary to process your personal data. This withdrawal does not affect the legality of the processing until the withdrawal of the consent. In case you withdraw your consent, this does not affect the processing of your personal data, which is carried out on another basis and for which your consent was not required.

As part of your approval in the credit application process, your personal data may be subject to automated processing and automated decision-making. This means that the Bank’s specialised software will automatically process (without human intervention) the data you have provided and analyse them in terms of the criteria specified in the algorithm of the software. As a result, your application will be evaluated with a certain number of points according to which you may receive an automatic approval or automatic denial. When applying automated decision-making, you have the right to express your opinion, to challenge the decision, and to ask for human intervention.

If for any reason you are not satisfied with the Bank's actions in relation to your personal data, we would like you to tell us first in order to understand what the problem is and try to resolve it.

Our Data Protection Officer will look carefully at your complaint and will answer all of your questions. Nevertheless, if you believe that you have not received adequate assistance from the Bank or that there is a violation of your rights, you have the right to complain to a supervisory authority. In the Republic of Bulgaria this authority is the Commission for Personal Data Protection.

As explained above in this Notice, we collect personal data primarily due to legal obligations or for the needs of concluding and executing contracts as well as for servicing you. If you do not provide us with the necessary personal data when this is compulsory for the intended purpose, it would not be possible for you be a client of the Bank, including you may be denied continuing to use the Bank’s products and services if we have already established relations.

We shall regularly update this Notice so that you can be duly informed about how we process your personal data. If we make any amendments which are essential to the purposes and grounds for processing, we will publish a notification on our website www.postbank.bg.

This Notice on the processing of personal data was last updated on 01.06.2023