To provide you with the best possible services, BC Victoriabank SA (“the Bank”), acting as the “Controller,” would like to send you communications about its products and services, offers, promotions, and other commercial communications (“marketing communications”) via email, phone, SMS, the web app, or other similar channels.

We cannot send you such communications without using certain personal data (“personal data,” “data”), and we need your consent to use this data for direct marketing purposes. Your consent is voluntary—you are not required to give it. To help you make an informed decision about whether or not you wish to receive such communications, we briefly explain below what the use of your data for this purpose entails:

To ensure that we send you marketing communications tailored to your interests, as well as to effectively deliver these communications, we will process the following categories of data: first and last name, customer ID, phone number and email address, and other information we collect about you when you are our customer: demographic data, data regarding transactions and other banking operations, as well as data about the products and services you use, etc.

Your data will be processed solely based on your consent for direct marketing purposes, namely to:

• send you communications about our products and services, offers, campaigns, and other commercial communications, including personalized marketing communications, based on automated profiling conducted according to your preferences for the bank’s services and products, your geographic location, and an analysis of your banking behavior, etc.

Your data may be disclosed to specialized service providers, who act as agents of the Bank, for marketing and/or profiling purposes. In this capacity, these providers receive clear processing instructions from the Bank to ensure the protection of your data in accordance with data protection laws.

Your data will be processed for the direct marketing purposes mentioned in this document for the duration of your consent, until you withdraw it, but no later than the date on which your status as a customer ends.

You have the right to withdraw your consent at any time; the withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.

As a data subject, you have the following rights under data protection law:

• the right to information (exercised through this document);

• the right to access your personal data;

• the right to rectification;

• the right to erasure;

• the right to restriction of processing;

• the right to data portability;

• the right not to be subject to an automated individual decision, including profiling;

• the right to object;

• the right to file a complaint with the National Center for the Protection of Personal Data and/or the courts.

You may exercise the rights listed above—with the exception of the right to file a complaint with the National Center for Personal Data Protection or the courts—by:

• submitting a request to any branch of BC Victoriabank SA; or

• sending the request electronically to the email address: dcp@vb.md.