Please be informed that SWIFT banking operations (Society for Worldwide Interbank Financial Telecommunication) involve a transfer of personal data (of the payment's issuer and beneficiary) from the Romania's territory to the SWIFT operations centers in USA and Belgium.
Based on the agreement concluded between USA Trade Department and EU Commission, the SWIFT Company joint the Safe Harbor Principles, meaning that the personal data transfers to USA are performed according these principles, pledging a proper protection level for the personal data transferred in the USA Operational Center.
SWIFT Operational Center in USA (the main center - owner of a centralized database) is subjected to the American legislation and the US State Department has specific and restricted access to the personal data of the financial institutions' customers, filed in the SWIFT Operational Center, only for prevention of money laundering and combating of terrorism financing.
We inform you that the personal data, processed and transferred when the SWIFT banking operations are performed, are: (i) name and address of the issuer and beneficiary; (ii) issuer/beneficiary's bank; (iii) issuer/beneficiary's account numbers (iv) details regarding the payment's object.
We also inform you that, at present, the bank files the messages related to SWIFT operations for 5 years from the ordering date.
The persons' rights, involved in international transfers implying SWIFT operations, according the Law 677/2001 for persons' protection concerning the processing and free circulation of the personal data, are: (i) The right of access to data: the right to obtain, upon request, free of charge for one yearly request, the confirmation that his data are or not processed by a controller. (ii) The right of intervention upon the data: the right to obtain, upon request and free of charge, the modification, updating, obstruction or elimination of data whose processing does not comply with the provisions of the present law, notably, incomplete or inaccurate data. (iii) The right to object: the data subject has the right to object upon the processing of his data, in any moment, based on justified and legitimate reasons related to his particular situation, excepting the cases when contrary legal provisions are prevailing.
These rights can be exercised, under the provisions of the law, by submitting a request to the Bank, together with a copy of the solicitor's ID; the written answer of the bank following to be sent in compliance with the provisions of the Law 677/2001. The address will be sent to "Quality and Support" Department, contact info (contact person, phone, fax): 021 305 9331, opinii@brom.ro.
