We are aware of the judgment of the Court of Justice of the European Union from the 16th of July 2020. We are currently investigating the implications of the case for the transfer of personal data to the United States of America. We value your privacy dearly and we will do our utmost to find a suitable solution. When the dust has cleared regarding the judgment and when we have found a suitable solution, we will inform you. In the meantime, if you have any questions, please don’t hesitate and contact us at email@example.com.
At bunq, we really care about your privacy. This means we will never sell or rent your personal data to third parties without your permission. In this Privacy & Cookie Statement you can read what data we collect and how we use it.
The data controller for the processing of your personal data is bunq B.V., registered at the Dutch Chamber of Commerce with registration number 54992060. Our address is Naritaweg 131-133, 1043 BS Amsterdam, the Netherlands.
To make sure bunq only processes personal data in line with the relevant laws and regulations, bunq has appointed a Data Protection Ofﬁcer (DPO). If you have any questions about the processing of personal data after reading our Privacy & Cookie Statement, you can contact our DPO via firstname.lastname@example.org. If you want to cancel your bunq account or have any other questions about your bunq account, please contact our support via the bunq app or email@example.com.
To assess and open bunq accounts, we can collect and process the following personal data:
While using our app, websites and other services, we can collect and use the following personal data:
Authentication methods based on biometrical data, such as ﬁngerprint scans, are not stored, used or shared in a format that allows us to reproduce the biometrical data.
bunq processes your personal data in accordance with the relevant laws and regulations based on several legal grounds.
We process your personal data to comply with our legal obligations, for example to verify your identity and to be able to share certain data with governmental institutions.
To keep our agreement with you and to provide our services in a well and secure manner, we process your personal data. For example, we need your contact information to keep you informed about relevant developments, and we store correspondence data to improve our customer service.
Because we value your privacy and we want you to have a choice, we will ask your explicit consent for various features. For example, while using the app you can choose to provide access to your contact list, to upload images/content or to create a public bunq.me link.
We can also process certain data when we have a legitimate interest to do so, for example, to prevent and combat misuse, fraud and crimes, to analyse the use of our products and services for the purpose of improving them, for information and system security purposes or for offering you a better user experience.
We use your personal data to:
We only keep your data for the time necessary to fulﬁl the purpose of collection. We are legally obliged to retain certain data for a minimum of 5 to 7 years after ending the customer relationship and in othercases up to 10 years, as in the case of accounting obligations.
We are able to store personal data for longer periods with a valid legal ground, or when the data is sufﬁciently (for example) pseudonymised or anonymised.
Below we have outlined the rights the GDPR grants you and what this means for you in the context of your activities with bunq.
Your right: You have the right to be informed (article 13 GDPR).
What it means: We provide you with the necessary information regarding the collection and usage of your personal data. We do this by means of this Privacy Statement.
Your right: You have the right to access the personal data we hold about you (article 15(1) GDPR).
What it means: If you ﬁle a data access request, we will provide you with a copy of all the personal data we have collected about you. You also have the right to receive this information in a way that is structured, commonly used and machine-readable.
Your right: You may request that we delete your personal data (article 17(1) GDPR).
What it means: We will delete the personal data we have collected about you. We will only delete your data if you are no longer an active user with us. Furthermore, Dutch law requires us to keep certain information for up to 10 years.
Your right: You may request that we rectify incorrect or incomplete information about you (article 16(1) GDPR).
What it means: If you spot anything in your personal information that is either incorrect or incomplete, let us know! We will change it as soon as possible.
Your right: You may object to the processing of your personal data by us (article 21(1) GDPR).
What it means: We process certain data on the basis of legitimate interest. In this case, you can object to the processing.
We will consider your request and determine whether we have an overriding reason to process the data you’re objecting to. If this is the case, we will refuse your request.
Your right: You may ask us to restrict the processing of your personal data (article 18 GDPR).
What it means: Restriction of processing means that we will temporarily suspend processing of your personal data. You can ask us to do so if:
You also have the right not to be subject to a decision that was made solely on the base of automated processing, including profiling, which produces legal effects that concern you or that similarly significantly affect you (Article 22 GDPR).
Furthermore, you may lodge a complaint with the data protection supervisory authority responsible for you (in the member state where you commonly reside, where your place of work is located or where the alleged infringement took place) in accordance with Article 77 of the GDPR if you are of the opinion that the processing of your personal data violates the GDPR.
If you do not want your data to be used for direct marketing activities, you can let us know via the bunq app anytime. Our communication via email also contains the possibility to unsubscribe from these messages.
While using the bunq app, you can provide permission to your contact list and to process location data. If you no longer want us to use location data, or if you no longer want to provide access to your contact list in the bunq app, you can easily revoke these permissions. You will ﬁnd the settings for the bunq app at the settings for installed apps on your device. You can revoke provided permissions at any given moment.
Images and content that you use to personalise your bunq account or improve your app experience can be easily changed in the bunq app.
When you create a public bunq.me proﬁle, your nickname and IBAN are visible for anyone that visits your public bunq.me proﬁle for making payments. You can deactivate your bunq.me page with the accompanying data at any given time via the bunq app.
At signup we connect your phone number and email address to your bunq account as aliases. This allows other bunq users to easily transfer money to your bank account(s), as your bunq account (and IBAN) will show up in their contact list. You can easily disconnect aliases from your bank account(s) via the settings of the selected bank account.
We will also show other bunq users on Together that you are on an Easy Green Plan. You can turn this feature off in the settings section of your account.
For more information on how to delete cookies, please see our Cookie Statement.
To offer you bunq Places, we will share certain information with your Inner Circle. Users in your Inner Circle will see where you’ve made a card payment. They will not see when you paid or how much you paid.
Users who have your alias (see above) in their contact list will see that a bunq user has paid at a particular store, but they will not see who exactly made the payment.
Sharing these data under Places will only take place after you’ve given us your consent to do so. You can revoke your consent at any moment via the bunq app.
We are always improving and expanding our products and services. This might cause our data processing to change. When we change something, we will adjust our Privacy & Cookie Statement accordingly. You can always ﬁnd the latest version on our website and in the app.
When you have a complaint about the data processing by bunq, you can contact our Data Protection Ofﬁcer via firstname.lastname@example.org.
In case you disagree with the handling of your complaint, you are able to ﬁle a complaint at the Autoriteit Persoonsgegevens.