Your Personal Data Is Protected by Us

JSC Terabank is committed to informing you about how and why we process your personal information, as well as how we acquire and safeguard your data.

Personal data encompasses various details, including your name, surname, personal identification number, contact information, and more. It also covers special categories of data, social and demographic information, transaction details, behavioral patterns, technological data, communication records, location data, publicly available information, and data from public records.

We process your data based on:

• Your application;
• Contracts between the bank and yourself;
• Your consent for processing special categories of data for specific purposes;
• Our legitimate interests;
• Legal obligations;
• Instances outlined by law.

 

Sources from which we obtain personal information about you:

• Your use of the Bank's products and services;
• Your registration as a customer of the bank or online services;
• Telephone communication or a visit to a branch;
• Our website, mobile application, and online consultation functionality (online chat) that you use;
• Letters sent by post or e-mail;
• Open banking services;
• Organizations from which information is obtained: National Agency of Public Registry, Revenue Service, State Services Development Agency, payment service providers, credit agencies, credit information bureau, other financial institutions;
• Participation in the informative/educational/seminar/lecture/webinar organized by the bank. 

 

For what purpose we process your data:

• To provide you with banking services (including remote services);
• To analyze your solvency and/or monitor current liabilities;
• To manage our risks and those of our customers;
• To fulfill the rights and obligations under the contract signed with you;
• To protect your and the bank's legitimate interests;
• To process and resolve your claims
• To ensure our and your safety we carry out video monitoring for the purposes of crime prevention, detection, public safety and property protection, and/or protection of confidential information, we also carry out audio monitoring for the purpose of fulfilling the obligation imposed by law, protecting the legitimate interest of the bank and creating evidence with legal force;
• To ensure compliance with banking activity legislation;
• To detect, investigate, report, and prevent financial crimes;
• To update data and ensure compliance of banking processes/activities with legislation;
• To ensure compliance with other requirements established by law.

 

How we process your data:

With us, your data is processed using an automatic, semi-automatic and file system. In predetermined cases, we make a decision with a result of essential importance for you automatically, based on profiling, which means grouping our customers according to certain interests and personal characteristics, which we then use to study the needs of customers in order to create and offer customized products or services to them.

In addition, you have the right to refuse the automatic processing of your data and to request the involvement of a human resource, if this produces a legal, financial or other significant consequence for you.

 

Obligation to provide data and legal consequences of refusal

The data that the Bank requests from you or about you is provided by law and/or is a necessary prerequisite for concluding a contract/establishing a business relationship.
However, in case of refusal to provide data, we will be deprived of the opportunity to provide you with the services requested by you and/or to establish a business relationship. In each individual case, we will offer you an alternative option, if any.

 

Data grouping:

• Documentary - This includes your passport, identity document, birth certificate, driver's license, and other personal identification documents;
• Contractual - Detailed information about banking products and services provided to you by the bank;
• Financial - Information about your income, credit history, analysis of your income for future lending purposes, and details of completed transactions (behavior);
• Socio-demographic - Information about your citizenship, education, and social status/income;
• Transaction-related - Your bank account number, incoming/outgoing payments made to your accounts, payments/transfers made from your accounts, along with details of when and where these transactions occurred;
• Location-related - Data pertaining to your location, which the bank may obtain through your mobile phone, computer's Internet connection address (IP address), or the location of the facility where you carry out banking operations with your card;
• Behavioral data - Details about how you use our products or services;
• Technological - Information about the equipment/devices (phone, computer, etc.) you use when accessing our products or services;
• Open access data and public records - Information about you sourced from public sources, including information in public electoral rolls, as well as other information legally available on the Internet;
• Special categories of data (including biometric) - Genetic and biometric data (such as voice biometric data), information about health status, details of criminal convictions, administrative detentions, application of preventive measures, conclusion of a plea agreement, diversion programs, recognition as a crime victim, or recognition as a victim.

 

"Cookies":

In order to make it easier for you to use the bank's website and to improve its functionality, we use the so-called "Cookies" are small files that are stored on the user's computer, mobile phone or other technical device when visiting a website.

You may opt-out of this technology at any time, however, in this case, you may not be able to fully enjoy the Website.

 

Data transfer:

In case of obtaining consent in accordance with the rule established by law, your personal data may be transferred to persons in contractual relationship with the bank, provided that the confidentiality and security of the transferred personal data will be fully protected.

When transferring data to third parties, the Bank is guided by your best interests, obtains all necessary consents established by law, and is limited to sharing only the amount of data necessary to achieve a specific goal, protect your and the Bank's legal interests, and provide services in an appropriate manner.

Personal data security:

For the protection of data security, the bank has implemented all the technical provisions stipulated by international standards, which are in compliance with the current legislation.

The Bank's informational/technological resource, in accordance with the applicable legislation, ensures the protection of information from accidental or illegal destruction, alteration, disclosure, extraction, any other form of illegal use and accidental or illegal loss.

In addition, the Bank has developed and systematically implemented organizational measures to protect data security.

 

Processing of data concerning minors:

We process data about a minor based on the consent of the minor if he has reached the age of 16, and we process data about a minor under the age of 16 with the consent of his parent or other legal representative, except for cases expressly provided by law.

We process a special category of data about a minor only on the basis of the written consent of his parent or other legal representative, except for cases expressly provided by law.

 

Protection of data concerning deceased individuals:
We process the data of deceased persons only if there is a basis provided by law.

The manner, conditions, term and destruction of personal data storage:

We keep your personal data for the period stipulated by the law or necessary to achieve the purpose for which the said information was obtained. In case it is impossible to determine the term, we are guided by predefined criteria. We destroy the data upon the expiration of the storage period or upon the occurrence of an event provided for by a predetermined criterion.
We have defined the rules and conditions for the storage and destruction of personal data in accordance with the relevant procedure.

 

DIRECT MARKETING
 
Your personal data (including special category data) is processed by us in order to be able to take into account your interests and offer banking products/services tailored to you through various communication channels (including telephone, mail, e-mail or other electronic means). The offer may include information about participation in surveys, incentive sweepstakes.

You have the right to withdraw your consent to the processing of data for direct marketing purposes at any time.

For the mentioned purposes:

• Write us a message through the bank's remote channels (internet banking or mobile banking);
• Visit any of the bank branches.

If you withdraw your consent to the processing of data for direct marketing purposes, we will stop processing the data for this purpose within 7 working days of your request.

If you are still interested in our banking services or any of our products, despite your refusal to process data for direct marketing purposes, you can contact us at any time through the channel of your choice and renew your consent to data processing for direct marketing purposes. We may periodically, but not less than once every 3 months, remind you to exercise this right.

You can find out the policy on personal data in JSC Terabank at www.terabank.ge.

 

We recommend the following measures to safeguard your personal data:

• Enter your personal data exclusively on the bank's official website - https//www.terabank.ge and/or the internet bank page - https://ebanking.ge/login, ensuring access via a secure network (avoid public networks);
• Refrain from disclosing your personal data/confidential information to third parties;
• Avoid storing personal information on unprotected devices accessible to third parties;
• Utilize only personal devices for banking services and avoid saving your username and password in the system;
• Use solely your personal contact information (personal phone number, email, etc.) for verification purposes;
• When conducting remote/online banking operations, ensure usage of a secure browser and equip your device with necessary security software (antivirus, etc.).

 

Know your rights:

You have the right to request to stop processing your personal data, to delete, destroy or supplement the data, to update and correct them if they are incomplete, inaccurate, not updated or if their collection and processing was carried out against the law or to temporarily block data processing.

Blocking entails: 

Restricting the processing of personal data for a certain period of time when you dispute the authenticity or accuracy of the data; Where the processing is unlawful, however, you refuse/oppose the erasure of the personal data and instead request the restriction of the use of the data; The Bank no longer needs the personal data for processing purposes, but it is needed to establish/execute a legal claim by you, or to defend against claims/lawsuits.
Despite data blocking, the processing of this data may continue if it is necessary to protect the vital interests of you or a third party, as well as for the purposes of state security and defense.
You will be notified of the blocking decision no later than 3 working days after the request. In addition, in case of refusal from our side, you have the right to appeal it to the Personal Data Protection Service and/or to the court.

You have the right to receive information about the termination, deletion or destruction of data processing, as well as updating, correction of inaccuracies, immediately after the relevant action is taken by us, but no later than 10 working days. In addition, in case of refusal from our side, you have the right to appeal it to the Personal Data Protection Service and/or to the court.

You have the right to get acquainted with your personal data stored in the bank and to request their copies free of charge, except for cases provided by law.

What information you can request:

• The data we process;
• The purposes for which we process your data;
• The legal basis for processing your personal data;
• How your data is processed;
• The duration for which your personal data is retained by us;
• With whom, for what purpose, and to what extent your data has been shared.

You can request information in any form acceptable to you, and the answer will be returned to you in the same form in which you make the request.
Upon your request, we will provide you with the said information or, in cases provided by law, we will refuse to provide it within 10 working days. In addition, the mentioned term can be extended by no more than 10 working days, about which you will be notified immediately.

You have the right to apply to the Personal Data Protection Service and/or the court in case of violation of the rights and established rules stipulated by the Law of Georgia on Personal Data Protection.

You can address your request/claim to the bank through the following channels:

• Contacting JSC Terabank's Customer Service Center: +995 32 2 255 00 00;
• Completing a written claim form at branches and service centers of JSC Terabank;
• Sending an electronic request to: info@terabank.ge.

Our personal data protection officer, Nino Gaiparashvili, will ensure the protection of your personal data:

• Email: pdp.officer-ng@terabank.ge;
• Tel: (+995 32) 255 00 00 (1249);
• Mob: (+995) 591 93 10 02.

 

This edition of the Personal Data Protection Policy is valid from March 1, 2024 until its subsequent changes.