Privacy Statement Regarding Processing of Personal Data
by Postbank Apps

This statement will help you understand how and why do we process your personal data when you use our digital solutions – mobile banking, m-Token and digital wallet (referred further as “mobile apps”).

WHO ARE WE?

We are Postbank, legally named Eurobank Bulgaria AD (hereinafter referred to as “We” and “The Bank”), registered with the Trade Register of the Registry Agency with UIN 000694749. You can contact us at 1766 Sofia, 260 Okolovrasten pat Str., Tel: 0700 18 555; e-mail: klienti@postbank.bg; www.postbank.bg.

Our major priority is to work ethically and responsibly, in order to comply with the legislation, including in the field of personal data protection, and to meet your expectations with regard to processing your personal data. We are constantly improving our internal procedures and workflows. Our employees are trained and obliged to protect the privacy of customers’ personal data.

WHAT KIND OF INFORMATION DO WE PROCESS?

The use of the applications is inseparably related with the processing of information about your names, mobile phone number, e-mail, payment accounts and transactions.
When you use our mobile apps we will collect information about the end-device (mobile phone, tablet or smart watch) which is automatically generated during the installation of the applications. That kind of information is brand and model, serial number, type and version of the operation system, video resolution of the device’s screen, etc. Additionally, in order to be able to provide our services, the applications may require access to information about your device like location, media files, internet connection, etc.

WHAT IS THE PURPOSE OF PROCESSING YOUR PERSONAL DATA?

We use your personal data to provide to you our services through our mobile apps. We consider that our basis is an existing contract between you and the Bank.
In addition, we will collect information about how do you use our mobile apps for the following purposes:
• to provide you with customized contents
• to decide what other products and services may be of interest to you
• to improve our digital solutions
These are purposes on the grounds of our legitimate interest.

TO WHOM DO WE DISCLOSE YOUR PERSONAL DATA?

We believe your personal data is confidential and we value its privacy. We will not share your personal data, collected via the mobile apps, with third parties.

FOR HOW LONG WILL WE KEEP YOUR PERSONAL DATA?

Your personal data will be stored as long as we have active relationship and, in addition, for a period of 5 years after the completion of our relations.

YOUR RIGHTS

RIGHT TO ACCESS

You can always ask us whether we process your personal data and if so, to be informed about what information we store, why we store it and how we process it. You are also entitled to a copy of this information.

RIGHT TO CORRECT

We would like your personal data to be accurate and up-to-date. If any piece of your personal data is inaccurate or out-of-date, please inform us and we will correct it.

RIGHT TO DELETION

You may ask the Bank to delete your personal data, but the relevant legal grounds should apply in order to fulfil the request. We will not delete any information about you that we are legally required to keep as well as if we have grounds not to delete this information. We will have one month to answer your request. If we refuse to delete the information, we will provide the basis for our decision and the legal grounds for it.

RIGHT TO RESTRICT DATA PROCESSING

In certain cases you may request the Bank not to process your personal data, including deleting them, in order to protect your legal claims.

RIGHT TO OBJECTION

As we have already stated in this Notice, in certain cases we process your personal data due to the Bank’s legitimate interest. You have the right to object to this processing, including when it is profiling. We will discontinue processing your personal data only if we are convinced that the Bank’s interest has no advantage in the specific situation.
We remind you that at any time you can easily express your will not to receive advertising content. In such case, we will immediately discontinue processing your personal data for the purposes for sending advertising content.

RIGHT TO DATA PORTABILITY

You may request the Bank to put your data in an electronic file and give it to you or to a third party. The data you can request may only be data we have received in connection with a contractual relation or with your consent and is automatically (electronically) processed.

HOW TO EXERCISE YOUR RIGHTS?

You can exercise any of the abovementioned rights in person or via an explicitly authorized person in any of the Bank’s offices as well as electronically in accordance with the Electronic Document and Electronic Certification Services Act. We have created a special form to make it easier for you to exercise your rights.
Under certain conditions, we may charge you a fee for responding to a request. The fee is specified in our Tariff. The Bank has appointed a special employee who is responsible for complying with the legal requirements for personal data processing and for the application of best international practices.

This is our data protection officer and you can contact him by e-mail to dpo@postbank.bg or by mail to address 1766 Sofia, 260 Okolovrasten pat Str., Data Protection Department.

COMPLAINT TO A SUPERVISORY AUTHORITY

If for any reason you are not satisfied with the Bank‘s actions in relation to your personal data, we would like you to tell us first in order to understand what the problem is and try to resolve it. Our Data Protection Officer will look carefully at your complaint and will answer all of your questions. Nevertheless, if you believe that you have not received adequate assistance from the Bank or that there is a violation of your rights, you have the right to complain to a supervisory authority. In the Republic of Bulgaria this authority is the Commission for Personal Data Protection.

WHAT WILL HAPPEN IF YOU REFUSE TO PROVIDE YOUR PERSONAL DATA?

If you do not provide us with the necessary personal data when this is compulsory for the usage of the mobile apps, it would not be possible for you to use them.

UPDATING AND AMENDING THE STATEMENT

This Statement regarding processing of personal data by Postbank apps was last updated on 08.08.2023.