Login

Persons making or receiving a payment from a BNG bank account

Below, you will find an overview of the personal data that we may process, including the associated purposes and legal bases.

Processing transaction data
Processing
Transaction data 
Description/purposes
  • Enabling financial transactions between clients and third parties
  • Recording and processing transaction data
  • Execution of payments and direct debits
 
Categories of personal data
  • Initials and surname
  • Account number/IBAN
  • Transaction details (amount, date, description)
  • Details of the bank of origin/destination
Special category personal data and criminal offence data
Not applicable – unless the transaction description shows special category personal data
Basis
Legal obligation (Article 6 (1)(c) GDPR) – title 7B, Book 7 of the Dutch Civil Code; Dutch Financial Supervision Act (Wet op het financieel toezicht)
Processing
IBAN Name Check
Description/purposes
  • Performing an IBAN name check when a client initiates a payment order
  • Verifying whether the name provided by the customer corresponds to the IBAN number
  • Preventing errors and fraud in payments
  • Informing clients of possible deviations
Categories of personal data
  • Name (as specified in the payment order)
  • Account number/IBAN
  • Result of the check (match, no match, suggestion)
Special category personal data and criminal offence data
Not applicable
Basis
Legal obligation (Article 6 (1)(c) GDPR) – Instant Payments Regulation
 
Money laundering and terrorist financing, sanctions
Processing
Transaction monitoring
Description/purposes
  • Detecting money laundering and the financing of terrorism
  • Protecting the integrity of the financial system
  • Complying with legal obligations (Dutch Anti-Money Laundering and Anti-Terrorist Financing Act, Dutch Sanctions Act)
Categories of personal data
  • Initials and surname
  • Account number/IBAN
  • Transaction details (amount, date, description)
  • Details of the bank of origin/destination
  • Risk profile
  • Result of the transaction monitoring
Special category personal data and criminal offence
  • The transaction description may reveal special category personal data.
  • Information on possible criminal acts (the Sanctions list, suspicions of fraud or terrorist financing).
 
Basis
Legal obligation (Article 6 (1)(c) GDPR) – Dutch Anti-Money Laundering and Anti-Terrorist Financing Act (Wwft), Dutch Sanctions Act 1977 (Sanctiewet 1977)