BC Victoriabank SA, as the data controller, informs you that it processes your personal data, in accordance with the provisions of Law No. 195/2024 on the protection of personal data, when you act as a signatory and/or contact person on behalf of one of the bank’s contractual partners. Your personal data is processed exclusively for the following purposes:

• The conclusion, performance, and management of contracts;

• Compliance with legal and tax obligations;

• Communication regarding the performance of the contract, etc.

The Bank processes your personal data if you are:

a contact person designated by contractual partners;

a legal representative of contractual partners;

an associate, employee, or other individual whose data is provided by you personally or by the contractual partner, as applicable.

We generally process the following categories of personal data concerning you, as applicable:

For signatories:

• identification data—first and last name, personal identification number, identification document;

  job title;

  signature, etc.

  For contact persons:

  identification data—first and last name, personal identification number;

  contact information—phone number and/or email address;

  position, etc.

This data is included in the documents submitted to the bank upon the establishment of the contractual relationship or during its course.

The legal basis for processing your personal data is, as applicable: the bank’s legal obligation, the conclusion/performance of the contract, and/or the legitimate interest of BC Victoriabank SA.

• Compliance with a legal obligation: Based on this, personal data is processed to comply with the bank’s legal obligations in the context of contractual relationships, including tax obligations, reporting to authorities, archiving, and other relevant legal obligations, depending on the nature of the contractual relationship and the status of the data subject.

• the bank’s legitimate interest, pursuant to which data is processed for the purposes of: fraud prevention, transaction security, management of business relationships, etc.

In order to fulfill the processing purposes mentioned above, BC Victoriabank SA may disclose your personal data to the following categories of recipients:

• public authorities, to the extent that there is a legal obligation;

• contractual partners, within the limits of legitimate purposes and on a legal basis.

Your personal data will be processed by BC Victoriabank SA for the entire duration of the contract, as well as thereafter, to the extent necessary to fulfill the bank’s legal obligations, including those related to archiving.

After the statutory retention periods have expired, the bank may anonymize this data—removing any identifying information—to use it for statistical or analytical purposes, without further affecting the rights of the data subjects.

To fulfill the purposes mentioned above, BC Victoriabank SA may transfer certain categories of personal data outside the Republic of Moldova, to member states of the European Union/European Economic Area, such as Romania, or to other third countries, as applicable.

As a data subject, you have the following rights under data protection law:

• the right to be informed (exercised through this document);

• the right to access your personal data;

• the right to rectification;

• the right to erasure;

• the right to restriction of processing;

• the right to data portability;

• the right to object;

• the right to lodge a complaint with the National Center for the Protection of Personal Data and/or the courts.

You may exercise the rights mentioned above—with the exception of the right to file a complaint with the National Center for Personal Data Protection or the courts—by:

• submitting a request to any branch of BC Victoriabank SA; or

• sending the request electronically to the following email address: dcp@vb.md.