{"id":3513,"date":"2025-07-31T09:04:48","date_gmt":"2025-07-31T09:04:48","guid":{"rendered":"https:\/\/bpb-new.rrota.com\/privacy-policy\/"},"modified":"2026-07-29T09:09:22","modified_gmt":"2026-07-29T09:09:22","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/bpb-new.rrota.com\/en\/privacy-policy\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">To fulfil this commitment, Banka p\u00ebr Biznes has appointed a Data Protection Officer responsible for overseeing this notice and the Bank\u2019s privacy practices.<\/p>\n\n<p class=\"wp-block-paragraph\"><br\/>We process your personal data in accordance with the applicable legal framework, including the Constitution of the Republic of Kosovo, Law No. 06\/L-082 on the Protection of Personal Data, and all other relevant laws and regulations applicable to us.<\/p>\n\n<p class=\"wp-block-paragraph\"><br\/><br\/>As your privacy is important to you, we encourage you to read this Privacy Notice carefully to understand how we process and use your personal data, the purposes for which it is processed, and your privacy rights when using the services we provide.<br\/>To help you understand our Privacy Policy, please find below several important definitions:<br\/>Banka p\u00ebr Biznes \u2013 A bank licensed by the Central Bank of the Republic of Kosovo, with its head office at Ukshin Hoti Street, No. 128, 10000 Prishtina, Republic of Kosovo, hereinafter referred to as the \u201cBank\u201d, \u201cBPB\u201d, \u201cwe\u201d, \u201cus\u201d, or \u201cour\u201d. In relation to our activities, BPB acts as the data controller responsible for the collection and processing of your personal data.<br\/>Personal data \u2013 Any information relating to an identified or identifiable natural person, referred to as the \u201cdata subject\u201d. An identifiable natural person is someone who can be identified directly or indirectly, particularly by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to that person\u2019s physical, physiological, genetic, mental, economic, cultural, or social identity.<br\/>Processing \u2013 Any operation or set of operations performed on personal data, whether by automated means or otherwise, including collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making the data available, alignment or combination, restriction, erasure, or destruction.<br\/>Data controller \u2013 Any natural or legal person from the public or private sector who, individually or jointly with others, determines the purposes and means of processing personal data.<br\/>Data processor \u2013 Any natural or legal person from the public or private sector who processes personal data for and on behalf of the data controller.<br\/>Consent of the data subject \u2013 Any freely given, specific, informed, and unambiguous indication of the data subject\u2019s wishes through which they, by a statement or clear affirmative action, agree to the processing of personal data relating to them.<br\/>As part of its daily operations, the Bank is committed to developing a strong culture of privacy and fully respecting the personal data processing principles set out in the Law on the Protection of Personal Data. Accordingly:<br\/>We process personal data fairly, lawfully, and transparently.<br\/>Personal data processed by the Bank is limited to what is necessary for the purposes for which it was collected and is not further processed in a manner incompatible with those purposes.<br\/>We process personal data subject to strict and appropriate technical, organisational, and confidentiality measures.<br\/>Personal data must be accurate and, where applicable, kept up to date. Where personal data is found to be inaccurate, appropriate measures are taken without delay, considering the purpose of processing, to correct or erase it.<br\/>Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or further processed. Once this period has ended, the data is securely erased, destroyed, blocked, or anonymised.<br\/>In its capacity as data controller, the Bank applies all the principles outlined above throughout its banking activities.<\/p>\n\n<p class=\"wp-block-paragraph\"><br\/><strong>PURPOSE AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA<\/strong><\/p>\n\n<p class=\"wp-block-paragraph\"><strong><br\/><\/strong>When collecting and processing personal data, we ensure that a valid legal basis is always in place. Without a lawful basis for processing, as defined by the Law on the Protection of Personal Data, such processing is considered unlawful and unfair and may adversely affect the data subjects concerned.<br\/><br\/>We process your personal data when:<br\/>You have clearly given your consent to the processing of your personal data for one or more specific purposes.<br\/>We may process your personal data on the basis of the consent you have provided. This type of processing depends on the consent given in specific circumstances, for example, when you allow us to take your photograph for identification purposes.<br\/>You may withdraw your consent at any time. However, the withdrawal of consent will not affect the lawfulness of any processing carried out before the consent was withdrawn.<br\/>The processing is necessary for entering into or performing a contract to which you are a party, or for taking steps at your request before entering into a contract.<br\/>We may process certain personal data when preparing or performing a contractual agreement with you in order to provide our services, or when you act as a service provider, supplier, or contractor.<br\/> <br\/>The type of personal data we require depends on the services we provide and the nature of our relationship with you. The manner in which such data is processed will be set out in the relevant contractual documents and\/or the General Terms and Conditions.<br\/>The processing is necessary for compliance with a legal obligation to which the Bank is subject, whether under the applicable banking regulatory framework or other legislation.<br\/>We process your personal data in accordance with our legal and regulatory obligations. Where laws, regulations, or supervisory authorities require us to record or use your personal data, we are legally required to carry out such processing.<br\/>For example:<br\/>Risk management, particularly credit, liquidity, and operational risk;<br\/>Managing, handling, and analysing complaints;<br\/>Accounting matters and compliance with applicable accounting standards;<br\/>Audit and internal control matters;<br\/>Preventing money laundering and terrorist financing;<br\/>Verifying identity, monitoring transactions, reporting suspicious activity, and ensuring regulatory compliance;<br\/>Reporting to the bank account registry or other similar systems;<br\/>Providing various payment services;<br\/>Taking action in response to official requests from supervisory and public authorities, including the Central Bank of the Republic of Kosovo, tax authorities, and judicial or investigative authorities such as the Police, Prosecution, and Courts, where required by law.<br\/>The processing is necessary for the purposes of the legitimate interests pursued by the Bank or a third party, provided that these interests do not override the fundamental rights and freedoms of the data subject, particularly where the data subject is a child.<\/p>\n\n<p class=\"wp-block-paragraph\"><br\/>In addition to the lawful bases outlined above, we may also process your personal data where we have a legitimate interest in doing so, provided that such interest does not override your right to privacy. We will rely on legitimate interests where no other lawful basis applies.<br\/>Our legitimate interests include, but are not limited to:<br\/>Taking measures to protect the Bank\u2019s employees, customers, and property;<br\/>Improving data quality;<br\/>Ensuring the security of the Bank\u2019s IT systems and operations;<br\/>Supporting cooperation between the Bank and other institutions, such as correspondent banks, ATM management companies, and other service providers;<br\/>Improving our business processes, implementing measures related to the Bank\u2019s management, and conducting audits of our internal processes;<br\/>Recording telephone calls for quality control purposes or to comply with legal obligations;<br\/>Improving the products and services we provide and sending you information through direct marketing about new products, service changes, market developments, technical matters, and other news that may be relevant to you.  <br\/> <br\/><strong>Other purposes<\/strong><\/p>\n\n<p class=\"wp-block-paragraph\"><strong><br\/><\/strong>We may use your personal data for purposes other than those for which it was originally provided. In such cases, the new purpose must be lawful and compatible with the purpose for which you or your business initially provided the personal data. <\/p>\n\n<p class=\"wp-block-paragraph\"><br\/><strong>PERSONAL DATA WE PROCESS<\/strong><\/p>\n\n<p class=\"wp-block-paragraph\"><strong><br\/><\/strong>Depending on the type of products or services we provide, we may process the following categories of personal data:<br\/>Identification and contact data, such as your first and last name, date and place of birth, residential address, personal identification number, a copy of your identification document, signature, photograph, email address, mobile phone number, and other contact details.<br\/>Socio-demographic, family, and employment data, such as marital status, age, gender where indicated in an identification document, level of education, professional qualifications and experience, employment or self-employment status, place of employment, monthly income, and source of income.<br\/>Financial data, such as your credit history and other information obtained from the Kosovo Credit Registry, bank account number and other account details, information obtained from public registries, collateral valuation reports, credit assessments, money transfer information, transaction records, credit and debit card data, and information relating to the use of M\/E Banking and BPB Instapay.<br\/>When you register to use our services by creating an account within an application, we will collect the personal data required to provide and fulfil the services you request. Depending on the services selected, we may ask you to provide information such as your name, telephone number, and account number in order to create an account within the application.<br\/>Other personal data relating to our relationship with you, including information obtained through your interactions with the Bank on social media platforms such as Facebook, Instagram, and LinkedIn, where we publish information about our products and services; complaints submitted by you; telephone call recordings where necessary; visitor records; and information relating to persons connected with the Bank for the purpose of complying with applicable legal requirements.<br\/>Data relating to your use of the Bank\u2019s website and applications, such as cookies, IP addresses, and information about the device used to access our online services or website.<\/p>\n\n<p class=\"wp-block-paragraph\"><br\/>We do not process sensitive personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, or similar categories, except for health-related data and information concerning criminal convictions where required for recruitment purposes in accordance with applicable legal requirements.<br\/>Please note that you are not required to provide the personal data we request. However, refusing to do so may limit or prevent your access to and use of our services.<\/p>\n\n<p class=\"wp-block-paragraph\"><br\/><strong>SOURCE OF DATA<\/strong><\/p>\n\n<p class=\"wp-block-paragraph\"><strong><br\/><\/strong>We collect your personal data from various sources, including directly from you when you open an account and throughout your ongoing relationship with us. We may also collect data indirectly through your use of our services or during the preparation of reports and other related activities.<br\/>Personal data may also be obtained from publicly available sources, including government institutions, financial institutions, and public registry agencies. <\/p>\n\n<p class=\"wp-block-paragraph\"><br\/><strong>RETENTION OF PERSONAL DATA <\/strong><\/p>\n\n<p class=\"wp-block-paragraph\"><strong><br\/><\/strong>Based on the principle of storage limitation, we retain your personal data only for as long as necessary for the purposes for which it was collected or as required by applicable law.<br\/>When determining how long your personal data should be retained, and in accordance with applicable professional standards, we consider factors such as:<br\/>Legal obligations under applicable legislation requiring data to be retained for a specified period;<br\/>Actual or potential legal disputes; and<br\/>Guidelines issued by the relevant data protection authorities.<br\/>When your personal data is no longer required, we erase, destroy, block, or anonymise it. Where this cannot be done immediately, we ensure that the data is no longer used until it can be permanently deleted.<\/p>\n\n<p class=\"wp-block-paragraph\"><br\/><strong>SAFETY OF PERSONAL DATA<\/strong><\/p>\n\n<p class=\"wp-block-paragraph\"><strong><br\/><\/strong>The security and confidentiality of your personal data are extremely important to us. We have implemented strict technical, administrative, and physical security measures to:<br\/>Protect your personal data from unauthorised access and improper use;<br\/>Secure our IT systems and information storage; and<br\/>Ensure that your information can be restored if data is corrupted or lost as part of a disaster recovery process. <br\/>Where appropriate, we use encryption, anonymisation, access controls, and other security measures that we consider suitable for protecting your personal data.<br\/>To strengthen awareness among the Bank\u2019s employees regarding information security, we provide periodic information security training in accordance with applicable legal and internal requirements.<br\/>We also review our security procedures regularly to account for relevant technological developments and updated information security practices.  <\/p>\n\n<p class=\"wp-block-paragraph\"><br\/><strong>YOUR RIGHTS REGARDING PERSONAL DATA<\/strong><\/p>\n\n<p class=\"wp-block-paragraph\"><strong><br\/><\/strong>Depending on the data protection laws applicable to your circumstances, you may have the following rights regarding your personal data:<br\/>Right of access by the data subject: As a data subject, you have the right to obtain confirmation from the Bank as to whether your personal data is being processed and, where this is the case, to access that data. You or a person authorised by you may also request a copy of your personal data. The Bank will cover the cost of the first copy provided. For any additional copies requested, we may charge a reasonable fee based on the related administrative costs.<br\/>Right to rectification: In addition to the legal requirement to keep your personal data up to date under the Law on the Prevention of Money Laundering and Terrorist Financing, you have the right to request that the Bank correct inaccurate or incomplete personal data without undue delay whenever you consider that such correction or completion is necessary.<br\/>Right to erasure, or the \u201cright to be forgotten\u201d: Where we no longer need to retain your personal data, you may request that we erase it. We will comply with your request unless there are legal, regulatory, or compelling business reasons requiring us to retain the data.<br\/>Right to restriction of processing: You have the right to request that we restrict the processing of your personal data where the conditions and criteria established by law are met.<br\/>Right to object: You have the right to object at any time to the processing of your personal data on grounds relating to your particular situation, including processing for profiling or direct marketing purposes. The Bank will cease processing the personal data unless it demonstrates compelling legitimate grounds that override the interests, rights, and freedoms of the data subject, or where processing is required for the establishment, exercise, or defence of legal claims.<br\/>Right to withdraw your consent: You have the right to withdraw your consent at any time. Please note that the withdrawal of consent applies only to future processing and does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. Consent may be withdrawn in the same manner in which it was originally provided.<br\/>Right to data portability: Where we hold and process your personal data on the basis of your consent or for the performance of a contractual obligation, you may request that we transfer your personal data to a third party.<br\/>Right to lodge a complaint with the supervisory authority: For further information about your rights, you may contact the Bank\u2019s Data Protection Officer. You also have the right to lodge a complaint with the Information and Privacy Agency in accordance with Article 52 of the Law on the Protection of Personal Data.<br\/>We do not use automated decision-making, as defined by the Law on the Protection of Personal Data, for the establishment or performance of contractual, business, or employment relationships. Should we use such methods in the future, we will inform you separately as required by law.<\/p>\n\n<p class=\"wp-block-paragraph\"><br\/><strong>THIRD PARTY DATA TRANSFER<\/strong><\/p>\n\n<p class=\"wp-block-paragraph\"><strong><br\/><\/strong>The Bank will share your personal data only where there is a lawful basis for doing so. We will treat all your personal data as private and confidential and process it in accordance with the Law on the Protection of Personal Data, including after you are no longer a customer.<br\/>The information we hold about you will not be disclosed to any person or entity unless:<br\/>  <\/p>\n\n<p class=\"wp-block-paragraph\">We are legally required to disclose the information. This may include sharing your personal data with public authorities or institutions, credit institutions, banking supervisory authorities, public registry agencies, tax authorities, law enforcement bodies such as the Police, Prosecution, and Courts, the Financial Intelligence Unit, or your authorised representatives. <\/p>\n\n<p class=\"wp-block-paragraph\">Disclosure is necessary to protect our legitimate interests or fulfil contractual obligations related to providing services or processing data on behalf of the Bank. This may include sharing data with marketing service providers, lawyers, notaries, contractors engaged for various developments and services required by the Bank, and external auditors.<br\/>Where applicable, we will ensure that any transfer is carried out in accordance with the provisions of the Law on the Protection of Personal Data and that the third party provides an appropriate level of protection for your personal data.<\/p>\n\n<p class=\"wp-block-paragraph\"><br\/><strong>DIRECT MARKETING<\/strong><\/p>\n\n<p class=\"wp-block-paragraph\"><strong><br\/><\/strong>Where you have provided your consent, we may contact you through communication channels such as telephone, email, and other electronic means regarding products and services that we believe may be of interest to you.<br\/>You have the right to withdraw your consent at any time by contacting the Bank. We will not contact you for these purposes unless you have given us your consent.  <\/p>\n\n<p class=\"wp-block-paragraph\"><br\/><strong>COOKIES<\/strong><\/p>\n\n<p class=\"wp-block-paragraph\"><strong><br\/><\/strong>Cookies are small text files containing letters and numbers that are stored on your computer, mobile phone, or tablet when you visit a website that uses cookies. They may be used to track website activity, store information, or remember your preferences, such as language settings.<br\/>Some cookies remain on your device only for the duration of your visit, while others may be stored for a limited period.<br\/>Cookies help us provide you with a more personalised experience when visiting our website, understand how visitors use the site, and improve the services we offer.<\/p>\n\n<p class=\"wp-block-paragraph\"><br\/>In some cases, the use of cookies involves the processing of your personal data. All such processing is carried out in accordance with this Privacy Notice.<br\/>You consent to the use of cookies by accepting them through the cookie banner displayed when you visit our website. You may delete cookies through your browser settings; however, please note that certain website features may not function properly if you block or remove all cookies.<\/p>\n\n<p class=\"wp-block-paragraph\"><br\/><strong>PRIVACY POLICY CHANGES<\/strong><\/p>\n\n<p class=\"wp-block-paragraph\"><strong><br\/><\/strong>We reserve the right to amend this Privacy Notice at any time to reflect changes in our business practices or applicable legal requirements.<br\/>The date shown at the top of this Privacy Notice indicates when it was last updated. If we make changes to how we collect or use your personal data, we will provide appropriate notice, including, but not limited to, publishing the updated Privacy Notice on our website and\/or providing notice as required by law.<\/p>\n\n<p class=\"wp-block-paragraph\"><br\/>Any changes to this Privacy Notice will take effect upon publication of the revised Privacy Notice.<br\/>Data Controller:<br\/>Banka p\u00ebr Biznes (BPB)<br\/>Ukshin Hoti Street, No. 128<br\/>10000 Prishtina, Kosovo<br\/>Telephone: +383 38 620 620 \/ 0800 50 000<br\/>Data Protection Officer:<br\/>Fatbardha Ruhani<br\/>Email: dataprotection@bpbbank.com<\/p>\n","protected":false},"excerpt":{"rendered":"<p>At Banka p\u00ebr Biznes, we recognize the importance of the trust you place in us when sharing your personal information. Protecting this information is therefore an integral part of our commitment to service excellence.<\/p>\n","protected":false},"author":1,"featured_media":3512,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-3513","page","type-page","status-publish","has-post-thumbnail","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/bpb-new.rrota.com\/en\/wp-json\/wp\/v2\/pages\/3513","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bpb-new.rrota.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/bpb-new.rrota.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/bpb-new.rrota.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bpb-new.rrota.com\/en\/wp-json\/wp\/v2\/comments?post=3513"}],"version-history":[{"count":4,"href":"https:\/\/bpb-new.rrota.com\/en\/wp-json\/wp\/v2\/pages\/3513\/revisions"}],"predecessor-version":[{"id":3579,"href":"https:\/\/bpb-new.rrota.com\/en\/wp-json\/wp\/v2\/pages\/3513\/revisions\/3579"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bpb-new.rrota.com\/en\/wp-json\/wp\/v2\/media\/3512"}],"wp:attachment":[{"href":"https:\/\/bpb-new.rrota.com\/en\/wp-json\/wp\/v2\/media?parent=3513"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}