Privacy and Cookie Statement

Privacy statement

During the course of the day-to-day operations of NWB Bank, personal data is processed by and on behalf of the bank. It is important to the bank that your privacy is respected. The bank processes your personal data in accordance with the General Data Protection Regulation (GDPR). As well as these general regulations, specific regulations, such as the Dutch Money Laundering and Terrorist Financing (Prevention) Act, may apply to certain personal data processing operations. This privacy statement tells you what personal data the bank collects and how it is dealt with.

Processing of your personal data

Personal data includes any information that relates to an identified or identifiable individual, such as first name and surname, email address and bank account number. Personal data processing means any operations that NWB Bank or a third party on the bank’s behalf may perform on personal data, e.g. storage, consultation or erasure of personal data. NWB Bank mainly processes personal data of its employees, clients, counterparties, visitors (to our website) and suppliers.

NWB Bank is committed to processing your personal data in accordance with the law. The bank will not process more personal data than is necessary, and your data will not be kept for longer than is necessary for the purposes for which it was collected or is being processed. NWB Bank has determined appropriate retention periods for the various personal data processing operations. On expiry of this deadline, your personal data will be erased. NWB Bank will also ensure that your personal data is correct and updated where necessary. The bank will take suitable technical and organisational measures to protect your personal data and will ensure that your data is treated as confidential.

Purposes of processing

NWB Bank processes your personal data, amongst others, for the purposes below. If your personal data has been provided for a specific purpose, it will not be used for a different purpose.

1. Compliance with statutory obligations

Sometimes NWB Bank is under a statutory obligation to supply your personal data to the government. For example, the bank supplies your first name, surname and IBAN number to the Tax and Customs Administration (Belastingdienst) as part of its annual declaration of the balance of your accounts. NWB Bank erases this data after the statutory seven-year retention requirement.

2. Delivery of products or services to clients

Since all of NWB Bank’s clients are commercial clients, the bank processes personal data of their representatives or contacts on a small scale. For its payment and lending services, the bank processes your first name and surname, and your identity card and IBAN number, where appropriate. NWB Bank also processes Chamber of Commerce extracts, minutes of meetings and, where appropriate, annual reports. These documents may contain personal data relating to you. Your personal data is processed for the purposes of performance of the relevant agreement(s). In principle, NWB Bank will erase this data seven years after the end of the loan or current account agreement or, if you have concluded multiple loan or current account agreements with the bank, after such longer period as is required.

3. Gathering of evidence

If you contact NWB Bank by telephone, the conversation may be recorded and retained for the purpose of gathering evidence for business transactions and identifying suspected fraud. The bank has drawn up regulations for this and the internal audit department checks that these regulations are effective. Your telephone conversation with NWB Bank may be played back under strict conditions. The files containing recorded telephone conversations will be destroyed five years after the calendar month in which they were recorded.

4. Sending of press releases and news reports

NWB Bank uses your email address to send you press releases and news reports. Amongst other things, these keep you up to date with developments within the public sector and the bank, and may include communications relating to payments. The bank will only send you commercial press releases and news reports with your express consent. You can withdraw your consent at any time by using the opt-out facility in the press release or news report concerned. As soon as you indicate that you no longer wish to receive press releases or news reports from NWB Bank, your email address will be removed from the distribution list.

5. Collection of website statistics

NWB Bank uses Google Analytics to collect statistics about the bank’s website, e.g. the most visited pages. We use tracking cookies for this. We also use the information that these cookies collect to find out how we can improve the website. These statistics are anonymous and cannot be traced back to a specific individual or user. We also use this data to provide more targeted information on the website. This allows the bank to further optimise its website services.

6. Recruitment and selection

It is important for NWB Bank to employ honest and reliable people. Screening affects the privacy of the applicant or employee and is therefore only permitted in certain circumstances. The key requirements are that the bank has a legitimate interest and that screening is therefore necessary. The legitimate interest of NWB Bank in pre-employment screening is that the bank must be able to have confidence that the employee is honest and reliable.

The applicant’s personal data is erased within four weeks of the end of the application process. The applicant is notified in advance that screening will take place. More information on the procedures may be found at “Working at NWB Bank”

7. Logging of your visit

If you visit NWB Bank’s offices, your first name and surname will be stored in a third-party digital records system and in the bank’s own system so that the bank has a list of the people who are on site, in case the building has to be evacuated. Your personal data will be erased six months after your visit.

Recipients of your data

The following individuals and/or bodies may receive your personal data:

1. Employees of NWB Bank

Employees of NWB Bank may process your personal data for the purposes described above, amongst others. NWB Bank will ensure that your personal data is treated confidentially and with due care at all times.

2. (Sub)processors

In the case of certain personal data processing operations, other organisations process personal data on behalf of NWB Bank. The bank concludes a processor agreement with these organisations which contains agreements relating, amongst others, to the security and confidential treatment of your personal data.

3. Government

In some situations NWB Bank is under a statutory obligation to supply your personal data to the government.

Transfer of your data to third countries and international organisations

In order to provide our services, NWB Bank might need to transfer your personal data to a recipient in a country outside the European Economic Area with a lower degree of protection of personal data than the European law offers. In that case, NWB Bank will ensure that such a transfer of personal data is in accordance with the applicable laws and regulations, for example by concluding a model contract prepared and approved for that purpose by the European Commission and will assess whether any additional measures are necessary to guarantee an appropriate level of protection of your personal data. Please do not hesitate to reach out to NWB Bank if you wish to receive more information about the appropriate or suitable safeguards in place for data transfers outside of the European Economic Area or if you would like to obtain a copy of them.

Your rights

You have the following rights in respect of the processing of your personal data by NWB Bank:

- the right to request whether NWB Bank processes your personal data and if so, the right to access your personal data and to receive information about the processing of your personal data;

- the right to rectification of your personal data if these are incorrect or incomplete;

- the right to have your personal data deleted (‘right to be forgotten’);

- the right to object to the processing of your personal data or to limit the processing of your personal data;

- the right to withdraw your consent for the processing of your personal data, if the processing is based on your consent;

- the right to receive or surrender your personal data to a third party appointed by you in a structured, customary and machine-readable form (‘right to data portability’).

NWB Bank does use automated decision-making within the meaning of Article 22 GDPR.

To exercise your rights, please contact our privacy officer by email using the contact details adjacent to this or by post at:

De NWB Bank
T.a.v. de heer J.W. Dek
Postbus 580
2501 CN Den Haag

In order to prevent that NWB Bank discloses information to the wrong person, NWB Bank can ask you for additional information to verify your identity. In principle, NWB Bank will inform you of whether it can comply with your request, within one month after receipt thereof. In specific cases, for example when it concerns a complex request, this term may be extended by two months. NWB Bank will inform you of such an extension within one month after receiving your request. On the basis of the applicable privacy legislation, NWB Bank can refuse your request under certain circumstances. If this is the case, NWB Bank will explain to you why. You can find more information about your privacy rights on the website of the Dutch Data Protection Authority.

Security of your personal data

NWB Bank must protect the personal data processed within the bank by taking appropriate and organisational measures. NWB Bank has implemented the ISO 27002 standards for information security. Employees of the bank and external employees can only access the information that they need to carry out their duties. Additional measures have been taken in respect of certain personal data processing operations in view of the sensitive nature of the data concerned.

Record of processing activities

NWB Bank maintains a record of processing activities that contains the bank’s key business processes.

Third-party websites

This Privacy Statement does not apply to third-party websites that are linked to our website through hyperlinks or references.

Changes to the Privacy Statement

NWB Bank reserves the right to make changes to this Privacy Statement from time to time. If updated, the applicable Privacy Statement will be published on this website. If substantial amendments are made that could have a significant impact on one or more of the data subjects involved, NWB Bank will try to inform these data subjects of this directly.

Complaints

If you have a complaint about the processing of your personal data by or on behalf of NWB Bank, please contact your account manager or the privacy officer. You may also submit a complaint to one of the following bodies:

• your local legal advice centre (juridisch loket);
• your legal aid insurer (rechtsbijstandsverzekeraar);
• the courts.

You can also submit a complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). For more information on this matter, please see the Dutch DPA’s website.

Contact details of the privacy officer

NWB Bank has appointed a privacy officer. The privacy officer oversees the application of and compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws and regulations within the bank. If you have any questions about the privacy statement, please contact the privacy officer. The contact details can be found adjacent to this.

 

Cookie statement

Cookies

NWB Bank’s website uses cookies. These are small files that are sent to the visitor’s browser and stored on the visitor’s PC. Cookies enable you to use this website more quickly and more easily. Using cookies also prevents you from unexpectedly accessing the session of another user, and vice versa, because a cookie gives you a temporary unique identity for the duration of your visit to the website. You can permit or prevent the use of cookies through your browser if so desired. You can also set your browser in such a way that you are notified each time you receive a cookie. If you do not accept cookies, you may not be able to fully access and use all parts of the website.

Direct cookies

This website contains direct cookies only. These are cookies that are created by the website that is actually being visited. There are also indirect cookies; these are placed on your hard disk by websites other than the website that you are currently accessing – banners ads on webpages, for example.

Temporary and permanent cookies

Cookies that are stored during each session are known as temporary cookies. They are removed from your computer as soon as you end your visit to the website and close your browser. Permanent cookies have an expiry date and will remain on your computer until that date. This website uses both types of cookies.