On 25 May 2018 came into force and effect the General Data Protection Regulation (the “Regulation”) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
The purpose of this Data Protection Policy is to inform you on how we ensure that the processing of your personal data is consistent with the provisions of the Regulation and on the rights you have in respect of your personal data.
Praxia Bank is committed to take all necessary steps deriving from the new Regulation for the protection and safety of your personal data. We protect, process, use and store your personal data with a sense of responsibility and with safe and transparent procedures.
Praxia Bank is the former Credicom Consumer Finance Bank S.A. and is based on 14 Agamemnonos Str. & Eth. Antistaseos, 152 31 Chalandri -Athens, Greece.
If you would like to get in touch with us on any matter relating to the Data Protection Policy of the Bank, you may contact us at firstname.lastname@example.org or send a letter to the following post address:
Praxia Bank, Data Protection Officer, 24B Kifissias Avenue, 15125 Maroussi.
The Regulation protects you in providing that the Bank can process your personal data only if this is necessary:
The table below features a description of the purposes for which the Bank processes your personal data with reference to the legal grounds justifying such processing:
The Bank processes your personal data which is necessary for:
The Bank processes your personal data which are necessary for the Bank to operate in the most efficient manner and in accordance with the rules of good operations applicable to credit institutions. The above include in particular:
Your personal data that the Bank processes fall within the following categories:
In principle, the Bank does not collect or process sensitive personal data relating to its clients. However, this can be the case by way of exception if necessary for the achievement of a specific legitimate purpose or obligation of the Bank or if you have given us such data on your own will in any appropriate means in the context of our trade relationship. In such cases, the Bank will take all reasonable steps to process your personal data in accordance with the Regulation.
A. The Bank collects the personal data which you notify to us by virtue of:
B. The Bank may collect your personal data when you are making use of its services. This concerns primarily data relating to your transactions and payments (frequency, amounts, location, recipients).
As a general rule, the Bank will keep your personal data for twenty (20) years after the end of the term of the agreement that We have concluded with you and for five (5) years in case there is no agreement. We do this:
Specifically with respect to recorded phone calls with Bank’s representatives, the Bank keeps the data for one (1) year from any such phone call, unless you or the General Secretariat for Consumer Affaires request that the data be stored or if their storage is necessary for our defence in the event of controversy, in which case the above data will be kept for a maximum of five (5) years.
In the context of serving the processing purposes of the Bank as well as in the context of its institutional operation, the Bank may, as the case may be, transmit your personal data to third parties and cooperating companies acting for the account of the Bank:
You have the right to access your personal data that the Bank processes:
You may seek confirmation whether your data are being processed and, if this is the case, request information on the purpose of such processing, the relevant categories of personal data, their recipients, the envisaged period for which personal data will be stored, the right to lodge a complaint with the supervisory authority, where the relevant data are not collected by you any available information on their source and the logic involved in any automated processing, if any.
You have the right to rectify your personal data:
If you believe that your personal data which are being processed by the Bank are inaccurate or incomplete, you may request the Bank to complete or rectify them. The Bank has the right to dispute your claim that your data are inaccurate, but is obligated to review your claim.
You have the right to data portability:
You may request from the Bank a copy of the data that you have provided to Us in a structured, commonly used and machine-readable format ("digital file”). You can also transfer the data you receive to third parties, provided that the data is processed by the Bank by automated means.
You have the right to withdraw your consent at any time:
If the processing of your data by the Bank is based on your consent, you are entitled to object to such processing at any time by withdrawing your consent. In this case, it may not be possible for you to receive certain of the Bank's services any more. If this is the case, We will let you know. In any case, your withdrawal of consent shall not affect the lawfulness of processing based on your consent before its withdrawal.
You have the right to request from the Bank to stop processing your personal data:
If you wish the Bank to stop using and processing your personal data, you have the three options:
If you wish to exercise any of your rights or if you are dissatisfied with the terms of processing of your personal data by the Bank, you may contact Us via email at email@example.com or send a letter to Praxia Bank, Data Protection Officer, 14 Agamemnonos Str. & Eth. Antistaseos 152 31 Chalandri - Athens, Greece.
At any time, you may file a complaint with the Independent Personal Data Protection Authority (Kifissias 1-3, 11523 Athens) if you believe that processing of your personal data by the Bank infringes the Regulation.
The Bank will take all reasonable steps to satisfy your claim within one month of its receipt and will inform you in writing of its satisfaction, otherwise of any impediments to its satisfaction. This one-month period may be extended by the Bank, subject to notification, for an additional two months, in case the Bank receives a large number of, or complex, requests. The requested information is provided by the Bank without charge to you, unless the requests are reiterated, in which case you may be charged with a reasonable fee for the Bank’s response.