Bosna Bank International d.d. Sarajevo (hereinafter: the Bank) is obliged to keep data on users of services and products as a bank secret, in accordance with the internal acts of the Bank, the Law on Banks, the Law on the Protection of Personal Data and other positive legal regulations regulating confidentiality data. All employees of the Bank are obliged to keep all information that is considered a bank secret, which they learn during the performance of work and duties within their scope or in any other way.

All persons as well as service providers who, due to the nature of the work they perform with the Bank or for the Bank, in order to ensure adequate operation of the Bank and provide banking services, may have access to data, are equally obliged to keep such data as banking secrets and act in accordance with all positive legal regulations regulating data confidentiality and personal data protection.

The following data are considered bank secrets:

Data related to personal data, financial status and transactions, as well as ownership or business relationships of clients (natural and legal entities).
Data on balance and transactions on individual accounts of individuals and legal entities.
Data on services provided by the Bank to individual clients. By issued orders and concluded transactions
Data from contracts concluded by the Bank with clients.
Data from contracts concluded by the Bank with suppliers or service providers.

The following are not considered bank secrets:

Public data and data that are available to interested parties with a justified interest from other sources.
Aggregate data on the basis of which it is not possible to determine personal or business data about the individual persons to whom these data refer.
Public data from the single register of accounts.

Personal data means any information relating to a natural person who has been identified or whose identity can be determined.

The bank is obliged to provide personal data:

Processes in a fair and legal manner.
It processes only to the extent and scope necessary to fulfill a specific purpose.
It processes only authentic and accurate personal data, and to update them when necessary.

The Bank may not communicate or make available to third parties information that constitutes a banking secret, except in the cases provided for by the Law on Banks and other regulations in this area.

The prohibition of communicating data to third parties includes all forms of communication (oral communication, written communication, meetings, telephone conversations, e-mails…).

An employee of the Bank can communicate personal data, as well as data on the balance and transactions on his client’s account, personally deliver it to the client to whom this data relates, based on previously performed personal identification.

Verbal communication of data from the previous paragraph can only be done in the Bank’s premises, based on a previously completed personal identification.

Electronic databases containing data representing banking secrets are adequately secured against unauthorized access.

As part of the internal protection system and in order to ensure the security of personal data, and in accordance with the relevant regulations and defined obligations, the Bank applies and undertakes adequate organizational and technical measures, i.e. measures against unauthorized access to personal data, alteration, destruction or loss of data, unauthorized transmission and other forms of illegal processing and misuse of personal data.

The Bank processes personal data in accordance with the regulations of Bosnia and Herzegovina and the internal acts of the Bank, which refer to the protection of personal data.

The Bank will process personal data of clients only to the extent necessary for the Bank’s regular operations, and all in accordance with the Personal Data Protection Act.