The Data Subject has the right to request information regarding the processing of its data, as well as request deleting or modifying its data, if such data have changed or are inaccurate due to other reason, request restricting their processing, or object against the processing of its data. In such case, a written request shall be submitted (via Internet Banking or at the Bank’s office). For the purposes of requesting information, it is recommended using the Bank’s form “Data Subject’s Information Request” (IX.241) available at the Bank’s home page.
The request shall precisely specify the specific Data Subject Categories by which the Data Subject is related to the Bank (potential customer, customer, potential employee, employee, or other category – if cooperation has taken place, but it cannot be included in other categories).
The Bank has the right to clarify the Data Subject’s request, for example, by requesting specifying the period.
The Bank shall consider the Data Subject’s request and carry out the said actions without undue delay, and in all cases, within 1 (one) month following the receipt of the request, inform the Data Subject about the actions carried out. The Bank may extend the request execution period for 2 (two) more months, taking into account the volume and complexity of the request. The Bank shall inform the Data Subject about the extension of the period within 1 (one) month following the receipt of the request.
A reply to the request of the Data Subject may be provided to the Data Subject in one of the following ways:
sent via Internet Banking if the Data Subject has access to Internet Banking and it is technically possible;
issued in person in the Bank or the Bank’s representative office;
via other means of communication, where the Bank and the Data Subject have separately agreed thereon or the Data Subject has specified it in its request and the Bank, taking into account the sensitivity and volume of the information to be provided, considers that the specified means are suitable.
