Let's
Talk

Privacy Notice

General information

Banking Circle as data controller
Controller’s contact details
How do we get information?
Your data protection rights
Sharing your information
Links to other websites
Your right to complain
Changes to this privacy notice

Reason for contacting us

Make an enquiry about our services
Make a complaint
You are the ultimate beneficial owner and /or legal representative of one of our clients
You are the payer or beneficiary of a payment executed via Banking Circle’s infrastructure or their ultimate beneficial owner
You are the borrower under a loan agreement entered into with Banking Circle or an ultimate beneficial owner of the borrower
Apply for a job
You are or represent a third-party contractor of Banking Circle
You are the person of contact of an employee of Banking Circle
Respond to our consultation requests and surveys
Attend an event, seminar or workshop
Subscribe to our newsletters
Request our white papers or other publications
You are a visitor to our offices
You are an investor in Banking Circle


1. General information

Banking Circle SA and its affiliated companies and subsidiaries (“BCSA”, “us”), are committed to protecting your privacy. This privacy notice tells you what to expect us to do with your personal information.  As a global company, BCSA has head office, branches and subsidiaries in different jurisdictions which are responsible for the personal information which they collect independently, and which may be processed on their behalf by BCSA.

Importance of personal data protection

BCSA appreciates that the use of your personal data has important implications for us and we take our responsibilities extremely seriously.  Our head office, branches and subsidiaries operate in countries which regulate the use of personal data. To ensure that we handle personal data properly, we have adopted a global approach to privacy protection.

Purpose of this notice

This privacy notice tells you what can expect from BCSA in relation to the collection and processing of your personal data. It is important that you read this notice together with any other communication we may provide to you on specific occasions when we are collecting or processing your personal data, so that you are fully aware of how and why we are using your personal data.

This notice is layered. So, if you wish, you can easily select the reason you may have been in contact with us and why we process your personal information and see what we do with it.

We’ll tell you:

  • why we are able to process your information;
  • what purpose we are processing it for;
  • whether you have to provide it to us;
  • how long we store it for;
  • whether there are other recipients of your personal information;
  • whether we intend to transfer it to another country; and
  • whether we do automated decision-making or profiling.

The first part of the notice is information we need to tell everybody.

Banking Circle as data controller under GDPR

GDPR, which regulates the use of personal data in the European Union and the European Economic Area and of European citizens defines two types of entities – Data Controllers and Data Processors. Banking Circle might be a Controller for some activities and a Processor for others but cannot be both for the same processing activity.

Data Controllers have ultimate control of the processing in question and full responsibility for Data Protection compliance. A Processor by contrast processes on behalf of a Controller, e.g. outsourced payroll providers, and has more restricted liability. The existence of a Data Processor, therefore, implies a Data Controller. The relationship between Controllers and Processors is always a matter of fact but by law must also be documented in a written contract.

The accepted industry position is that banks are controllers not processors in relation to financial services, irrespective of whether the client is a person or an institution and irrespective of the volume of transactions. Banking Circle is fully liable for these processing activities whether done in-house or outsourced.

The basis for this is that as a regulated entity much of Banking Circle’s processing is to meet its statutory obligations and Banking Circle determines the purpose and means of any other processing it carries out in providing financial services, e.g. Banking Circle, not the client, will decide what personal data to collect and apply its own judgement to it when processing payments such as beneficiary name and account information.

Despite the overlap between data protection and payment operations terminology, Banking Circle is not a data processor when processing payment instructions from its clients.

We may also process information on employees of our clients and of any company interested in knowing more about our services as well as of any of our contractors.

Controller’s contact details

You can contact us by sending us an email to our Data Protection Officer, at privacy@bankingcircle.com

The postal address of our head office is:

Banking Circle S.A.

Attn: Data Protection Officer
2 boulevard de la Foire
L-1528 Luxembourg

You can also reach us at the following address:

Banking Circle Denmark, Filial af Banking Circle S.A., Luxembourg

Attn: Data Protection Officer
Lautrupsgade 13-15
2100 Copenhagen
Denmark

Banking Circle S.A. UK Branch

Attn: Data Protection Officer
24 King William Street,
London, EC4R 9AT
UK, England

Banking Circle S.A. – German Branch

Attn: Data Protection Officer
Maximilianstrasse 54, D-80538
Munich,
Germany

For general contact please use this page of our website.
https://staging-bankingcircle.kinsta.cloud/contact-us

How do we get information?

Most of the personal information we process is provided to us directly by you for one of the following reasons:

  • You have entered into a loan agreement with us.
  • You have made a complaint or enquiry to us.
  • You have made an information request to us.
  • You wish to attend, or have attended, an event or a webinar.
  • You have answered a survey on our products & services on behalf of one of our clients.
  • You subscribe to our e-newsletter.
  • You have applied for a job with us.

We also receive personal information indirectly, in the following scenarios:

  • One of our clients has shared your contact details to us.
  • You are the ultimate beneficial owner of your organisation that has shared your data with us.
  • You are representing your organisation that has shared your data with us.
  • You have made a payment to our clients or their customers.
  • You have been sent a payment by our clients or their customers.

If it is not disproportionate or prejudicial to Banking Circle, we’ll contact you to let you know we are processing your personal information. ​

As part of Banking Circle’s regulatory and corporate functions, we also process criminal conviction data on certain individuals.

Your data protection rights

Under data protection law, you have certain rights we need to make you aware of. The rights available to you depend on our reason for processing your information.

Your right of access

You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process.

Your right to rectification

You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.

Your right to erasure

You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing

You have the right to ask us to restrict the processing of your information in certain circumstances.

Your right to object to processing

You have the right to object to processing if we process your information because the process is in our legitimate interests or for direct marketing purposes.

Your right to data portability

This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the processing is automated.

If we are processing your information for criminal law enforcement purposes, your rights are slightly different. Please see the relevant section of the notice.

You are not required to pay any charge for exercising your rights. We have one month to respond to you.

Please contact us at privacy@bankingcircle.com if you wish to make a request.

Right not to be subject to automated decisions

You have a right not to be subject to a decision which is based on automated processing where the decision will produce a legal effect or a similarly significant effect on you.

We will use your personal data provided as part of your request to exercise your data protection rights to help respond to your request. With one exception (listed below) we will keep your request, any personal data (often referred to as an appendix or appendices) and any complaint or correspondence related to the request for 3 years after the completion for monitoring purposes.

If you wish to exercise your right to erasure, in complying with your request, we will not retain any information pertaining to your request once that request has been completed unless we have a legal or regulatory duty to do so.

Sharing your information

We will not share your information with any third parties for the purposes of direct marketing.

We use data processors who are third parties who provide elements of services for us. We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct.

In some instances, we may share your information with organisations outside the EU/EEA.  In this scenario, we’ll satisfy ourselves that there is an adequacy decision made by the EU Commission recognising that the laws of this country provide an adequate level of protection for your information. Should this not be the case, we will implement appropriate safeguards for your information to be held securely by our data processors such as including standard data protection clauses adopted by the EU Commission in our contract.

In some circumstances we are legally obliged to share information. For example under a court order or where we cooperate with our regulatory supervisory authorities or other public bodies in handling complaints or investigations. In any scenario, we’ll satisfy ourselves that we have a lawful basis on which to share the information and document our decision making and satisfy ourselves we have a legal basis on which to share the information.

For a list of our main data processors see our data and outsourcing addendum available at https://staging-bankingcircle.kinsta.cloud/terms-of-use

Where we provide links to websites of other organisations, this privacy notice does not cover how that organisation processes personal information. We encourage you to read the privacy notices on the other websites you visit.

Your right to complain

We work to high standards when it comes to processing your personal information. If you have queries or concerns, please contact us at privacy@bankingcircle.com and we’ll respond.

If you remain dissatisfied, you can make a complaint about the way we process your personal information to the following authorities:

If you are resident in Denmark:

Datatilsynet
Borgergade 28, 5
1300 København K
Denmark
Telefon +4533193200
Fax +45 3319 3218
Email: dt@datatilsynet.dk

If you are resident in the UK:

Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow
SK9 5AF Cheshire
The UK
Tel: +44 303 123 1113 (local rate)
or +441625 545 745
Fax: 01625 524 510
Email: casework@ico.org.uk

If you are resident in Germany:

Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
Germany
Tel: +49 (0) 981 180093-0
Fax : +49 (0) 981 180093-800
Email:poststelle@lda.bayern.de

If you are resident in Singapore:

Personal Data Protection Commission (PDPC) Singapore
10 Pasir Panjang Rd, MBC,
Singapore 117438
Contact Link:
https://www.pdpc.gov.sg/

If you are resident in Australia:

Office of the Australian Information Commissioner
GPO Box 5288
Sydney NSW 2001
Contact Link:
https://www.oaic.gov.au/

If you are resident in Luxembourg or anywhere else:

National Commission for Data Protection (CNPD)
1, avenue du Rock’n’Roll
L-4361 Esch-sur-Alzette
Luxembourg
Tel.: (+352) 26 10 60-1
Contact Link: https://cnpd.public.lu/en/support/contact.html

Changes to this privacy notice

We keep our privacy notice under regular review to make sure it is up to date and accurate.

July 2020

We have published this privacy notice for the first time.

July 2021

Main changes are update to the candidate section, change of address of the UK and German branch, details of our Data Protection Officer.

July 2022

Changes to the payer and beneficiary section and new section for third party contractor and for borrowers.

June 2023

Addition and changes to approach to incorporate additional jurisdictions.  Alterations to recruitment sections following change of supplier and approach.

2. Reason for contacting us

Make an enquiry about our services

Purpose and lawful basis for processing

When you contact us to make an enquiry, we collect information, including your personal data, so that we can respond to it.

The lawful basis we rely on for processing your personal data is your consent.

What we need and why we need it

We need enough information from you to answer your enquiry. If you contact us via email, we’ll need a return address for response. We also merge this information with engagement touchpoints you have had with us, to help us measure and optimise the marketing information that you consent to receive.

What we do with it

We’ll set up a file on our system to record your enquiry and so we can get it to the correct area of the business to be dealt with. We’ll also keep a record of our response. We use the information supplied to us to deal with the enquiry.

How long we keep it

We will keep the information for a reasonable period and then delete it. Normally we will not keep this information for more than 12 months after its deletion.

What are your rights?

You have the right to object to our processing of your personal data. There are legitimate reasons why we may refuse your objection, which depend on why we are processing it.

For more information on your rights, please see ‘Your data protection rights in the list on the left under the ‘General information’ header.

Do we use any data processors?

Yes. For a list of our main data processors that may process your personal data as part of the services they provide to us see our data and outsourcing addendum available at https://staging-bankingcircle.kinsta.cloud/terms-of-use

Make a complaint

Purpose and lawful basis for processing

When you contact us to make a complaint, we collect information, including your personal data, so that we can respond to it and fulfil our regulatory responsibilities.

What we need and why we need it

We need information from you to investigate your complaint properly such as name, address, issue you have experienced with our services.

When we receive a complaint from you, we’ll set up a case file. This normally includes your contact details and any other information you have given us about the other parties in your complaint such as the beneficiaries of your payments.

We need to know the details of your complaint so we can investigate it and fulfil our regulatory obligations.

What we do with it

We will use your personal information to investigate your complaint. We compile and share statistics showing information like the number of complaints we receive with our regulatory supervisory authorities, but not in a form that identifies anyone.

No third parties have access to your personal information unless the law allows them to do so.

However, if you have made a complaint related to the provisions of services by one of our clients or their customers, we usually have to disclose your identity to them. This is so we can clearly explain to them what you think has gone wrong and they can handle your complaint directly. This also means we may receive information about you from them.

If you are acting on behalf of someone making a complaint, we’ll ask for information to satisfy us of your identity and if relevant, ask for information to show you have authority to act on someone else’s behalf.

How long we keep it

We keep the personal information relating to you for as long as is necessary in order to enable us to provide the relevant services to our clients, after which we will delete it or anonymised it. Normally, We will not keep this information for more than 10 years following termination of the relationship with our clients.

What are your rights?

You have the right to object to our processing of your personal data. There are legitimate reasons why we may refuse your objection, which depend on why we are processing it.

For more information on your rights, please see ‘Your data protection rights in the list on the left under the ‘General information’ header.

Do we use any data processors?

Yes. For a list of our data processors see our outsourcing addendum available at https://staging-bankingcircle.kinsta.cloud/terms-of-use

You are the ultimate beneficial owner and /or legal representative of one of our clients or prospects

Purpose and lawful basis for processing

When we enter into a business relationship with our clients, we collect information, including your personal data, so that we can comply with our AML/CFT due diligence obligations on them.

We also ensure that the person deciding to enter into business relationship with us on behalf of our clients and signing the contractual arrangement we have with our clients are duly authorised as legal representative to make such decision on behalf of our clients.

The lawful basis we rely on to process your personal data is legal obligation, which allows us to process personal data when this is necessary to comply with any applicable anti money-laundering and counter terrorism financing (AML/CTF) laws we are subject to as regulated credit institution.

What we need 

  • Full name
  • Address
  • Salutation (If applicable)
  • Maiden Name (If applicable
  • Date of birth
  • Place of birth
  • Nationality
  • Proof of residency
  • Proof of Identity
  • Proof of ID number i.e. (passport number)
  • Job position
  • TIN
  • Tax residency
  • Criminal convictions and offences

Why we need it

For the purpose of identifying the true beneficial owners and legal representatives of our clients and comply with our Know your Clients obligations under any applicable anti money-laundering and counter terrorism financing (AML/CTF) laws we are subject to as regulated credit institution.

To satisfy our reporting obligation to the tax authorities under tax cooperation treaty with the United States or other countries of the OECD.

To monitor any adverse media information associated with our clients.

What we do with it

We collect and retain your personal data in our client relationship management system to document the compliance with our legal obligations under any applicable anti money-laundering and counter terrorism financing laws we are subject to as regulated credit institution.

We process your data through our adverse media screening tool.

We may be obliged to share your personal data as part of a report regarding any suspicious activity or transactions on clients’ activity to our regulatory supervisory authorities in countries where we operate our activities. We may also share your personal data with our correspondent institutions involved in the payment chain upon request.

No other third parties may however have access to your personal data unless the law allows them to do so.

How long we keep it

We keep the personal information relating to you for as long as is necessary in order to enable us to provide the relevant services to our clients, after which we will delete it or anonymised it. Laws and regulations applicable in the various jurisdictions may set a minimum period for which Banking Circle has to retain such personal information.  Normally, we will not keep this information for more than 10 years following termination of the relationship with our clients.

What are your rights?

As a regulated credit institution, we are acting in our regulatory capacity to process your personal data, so you have the right to object to our processing of your personal data in certain circumstances only. There are legitimate reasons why we may refuse your objection, which depend on why we are processing it.

For more information on your rights, please see ‘Your data protection rights in the list on the left under the ‘General information’ header.

Do we use any data processors?

Yes. For a list of our main data processors that may process your personal data as part of the services they provide to us see our data and outsourcing addendum available at https://staging-bankingcircle.kinsta.cloud/terms-of-use

We also use Deloitte Solutions for CRS/FATCA reporting services. For more information, please see Deloitte’s privacy notice.

You are the payer or beneficiary of a payment executed via Banking Circle’s infrastructure or their ultimate beneficial owner

Purpose and lawful basis for processing

When we receive or make a payment from or to you for our clients and their customers, we collect information, including your personal data, so that we can fulfil our regulatory obligations.

When you contact us to make an enquiry regarding a payment you have sent to or receive from us, we collect information, including your personal data, so that we can respond to it.

The lawful basis we rely on to process your personal data is a legal obligation which allows us to process personal data when this is necessary to comply with a legal obligation under any applicable anti money-laundering and counter terrorism financing (AML/CTF) laws we are subject to as regulated credit institution. and your consent.

What we need and why we need it

Your name and address, bank account as well as transaction details.

For the purpose of detecting financial crimes patterns or criminal behaviour in payment transactions;

For the purpose of screening the same transactions against sanction lists published by governmental organisations in the countries where we operate our activities as regulated credit institution.

For the purpose of passing on information to our correspondent institutions involved in the payment chain.

For reporting to local supervisory authorities where applicable the true identity of the ultimate beneficial owner of a payment.

If you have made a query related to a payment sent by our clients or their customers, we’ll keep a record of your enquiry and so we can get it to the correct area of the business to be dealt with. We’ll also keep a record of our response. We use the information supplied to us to deal with the enquiry.

We usually have to disclose your identity to our clients. This is so we can clearly explain to them what you think has gone wrong and they can handle your query directly. This also means we may receive information about you from them.

What we do with it

We collect and retain your personal data in our transaction platforms to document the transactions performed for our clients and their customers.  We compile and share statistics showing information like the number of payments we receive with our regulatory supervisory authorities, but not in a form that identifies anyone.

We use your personal data as well as any other information identifying you as payer or as beneficiary of a payment and any information related to the transactions underlying the payment we receive to feed, evaluate and further develop our transaction monitoring and sanction screening tool or applications to provide assurance that we have effective processes to identify, manage, monitor and report money laundering and terrorism financing risks we are or might be exposed to.

How long we keep it

We keep the personal information relating to you for as long as is necessary in order to enable us to provide the relevant services to our client and comply with our regulatory obligations, after which we will delete it or anonymised it. Laws and regulations applicable in the various jurisdictions may set a minimum period for which Banking Circle has to retain such personal information.  Normally, we will not keep this information for more than 10 years following its collection.

What are your rights?

We are acting in our regulatory capacity to monitor your transactions, so you have the right to object to our processing of your personal data in certain circumstances only. There are legitimate reasons why we may refuse your objection, which depend on why we are processing it.

For more information on your rights, please see ‘Your data protection rights in the list on the left under the ‘General information’ header.

Do we use any data processors?

Yes. For a list of our main data processors that may process your personal data as part of the services they provide to us see our data and outsourcing addendum available at https://staging-bankingcircle.kinsta.cloud/terms-of-use

You are the borrower under a loan agreement entered into with Banking Circle or an ultimate beneficial owner of the borrower

Purpose and lawful basis for processing

When we enter into a business relationship with our clients, we collect information, including your personal data, so that we can comply with our AML/CFT due diligence obligations.

In order to pay out the loan to you, we collect information, including your personal data, so that we can fulfil our contractual obligations.

The lawful basis we rely on to process your personal data article (1)(b) of the GDPR, which relates to processing necessary to perform a contract and 6(1)(c) of the GDPR, which allows us to process personal data when this is necessary to comply with a legal obligation under any applicable anti money-laundering and counter terrorism financing (AML/CTF) laws we are subject to as regulated credit institution.

What we need and why we need it

  • Full name
  • Address
  • Salutation (If applicable)
  • Maiden Name (If applicable)
  • Date of birth
  • Place of birth
  • Nationality
  • Proof of residency
  • Proof of Identity
  • Proof of ID number i.e. (passport number)
  • Job position
  • TIN
  • Tax residency
  • Criminal convictions and offences

For the purpose of detecting financial crimes patterns or criminal behaviour in payment.

For the purpose of identifying the true beneficial owners and legal representatives of our clients and comply with our Know your Clients obligations under any applicable anti money-laundering and counter terrorism financing (AML/CFT) laws we are subject to as regulated credit institution.

To monitor any adverse media information associated with our clients.

To disburse the loan amount to your bank account.

What we do with it

We collect and retain your personal data in our client relationship management system to document the compliance with our legal obligations under any applicable anti money-laundering and counter terrorism financing laws we are subject to as regulated credit institution.

We process your data through our adverse media screening tool.

We may be obliged to share your personal data as part of a report regarding any suspicious activity or transactions on clients’ activity to our regulatory supervisory authorities in countries where we operate our activities. We may also share your personal data with our correspondent institutions involved in the payment chain upon request.

No other third parties may however have access to your personal data unless the law allows them to do so.

How long we keep it

We keep the personal information relating to you for as long as is necessary in order to enable us to provide the relevant services to our clients, after which we will delete it or anonymised it. Laws and regulations applicable in the various jurisdictions may set a minimum period for which Banking Circle has to retain such personal information.  Normally, we will not keep this information for more than 10 years following termination of the relationship with our clients.

What are your rights?

As a regulated credit institution, we are acting in our regulatory capacity to process your personal data, so you have the right to object to our processing of your personal data in certain circumstances only. There are legitimate reasons why we may refuse your objection, which depend on why we are processing it.

For more information on your rights, please see ‘Your data protection rights in the list on the left under the ‘General information’ header.

Do we use any data processors?

Yes. For a list of our main data processors that may process your personal data as part of the services they provide to us see our data and outsourcing addendum available at https://staging-bankingcircle.kinsta.cloud/terms-of-use

Apply for a job

Purpose and lawful basis for processing

Our purpose for processing this information is to assess your suitability for a role you have applied for and to help us develop and improve our recruitment process thereby enhancing your experience and journey as well as to protect the interests of Banking Circle and its clients.

We only process information that is necessary to perform a contract or to take steps at your request, before entering a contract.

We process information about applicants’ criminal convictions and offences.  This is for the purpose of complying with a legal obligation we are subject to as a regulated institution.

What do we need at the application stage?

  • Full Name
  • Address
  • CV
  • Contact information

What we do with it

If you use our online application system, your details will be collected by our data processor Talentech (which runs the platform,Talent Recruiter) on our behalf.We ask you for your personal details including name and contact details. We’ll also ask you about previous experience, education, referees and for answers to questions relevant to the role. Our recruitment team will have access to all this information.

Why we need it

The information we ask for is used to assess your suitability for employment. You don’t have to provide what we ask for but it may affect your application if you don’t. We will keep your data on file for 12 months to evaluate your candidacy for our other open roles. You can at any time exercise your rights to see what information we hold and request its erasure by sending an email to privacy@bankingcircle.com.

We will use any feedback you provide about our recruitment process to develop and improve our future recruitment campaigns.

Shortlisting

Our hiring managers and recruitment partners shortlist applications for interview.

Assessments

We may ask you to participate in assessment days to complete tests or occupational personality profile questionnaires; attend an interview; or a combination of these. Information will be generated by you and by us. For example, you might complete a written test or we might take interview notes. This information is held by us.

If you are unsuccessful after assessment for the role, we would like to keep you on file in our talent pool for up to 12 months, in case other suitable roles arise. If you do not wish to stay in the talent pool you can at any time exercise your rights to see what information we hold and request its erasure by sending an email to privacy@bankingcircle.com.

Conditional offer

If we make a conditional offer of employment, we’ll ask you for information so that we can carry out pre-employment checks. You must successfully complete pre-employment checks to progress to a final offer. We must confirm the identity of our staff and their right to work, and seek assurance as to their trustworthiness, integrity and reliability.

You must therefore provide:

  • proof of your identity – you will be asked to send us copies of identification documentation
  • proof of your qualifications – you will be asked to send us copies of diplomas or other relevant documentation
  • proof of right to work (if applicable) – you will be asked to send us copies of work permit(s) and visa documentation
  • a criminal records declaration to declare any unspent convictions and/or to provide a copy of an up-to-date criminal record, as applicable
  • a declaration on no outside business interest (we will provide you with a template)
  • proof of residence – in certain jurisdictions we may ask you to send us evidence of your current address.

Further to the above, we may carry out certain background checks to further assess your character and fitness for the job offered. We will not carry out any background checks without your prior consent. The background checks we carry out depend on the job position offered, but may involve credit checks, litigation checks including past or pending civil or criminal proceedings against candidates, sanctions screenings and adverse media checks.

We will ask you to provide us with references as part of the background check. Once you have sent us their contact information we will reach out to directly and obtain the reference.  Depending on the location of the job position we’ll also ask you to complete a questionnaire about your health to establish your fitness to work.

Any documents that you share with us electronically will be shared on a secure connection via a link that we provide to you.

Do we use any data processors?

Yes we use Talentech to assist in the recuitement process.  We also use PeopleHR (People Apps Limited) for our HR Management process. For more information, please see People HR’s privacy notice.

We also use Experian Ltd to run background checks. For more information, please see Experian’s privacy notice.

How long is your personal information kept?

If you are employed by us, for the duration of your employment and then for a further period of up to 5 years, after which the information will normally be deleted.

If you are an unsuccessful applicant, for up to 12 months after your application, after which we will delete it unless we have agreed otherwise with you or we have a legal obligation to store such data longer.

How we make decisions about recruitment

Final recruitment decisions are made by hiring managers and members of our recruitment team. We take account of all the information gathered during the application process.

You can ask about decisions on your application by speaking to your contact in our recruitment team.

Your rights

You have the right to object to our processing of your personal data. There are legitimate reasons why we may refuse your objection, which depend on why we are processing it.

For more information on your rights, please see ‘Your data protection rights in the list on the left under the ‘General information’ header.

You are or represent a third-party contractor of Banking Circle

Purpose and lawful basis for processing

We collect information to assess your suitability for the services you or your company will provide as well as to protect Banking Circle and its clients against any fraud.

The lawful basis we rely on for processing your personal data relates to processing necessary to perform a contract or to take steps at your request, before entering a contract.

We process information about you as representative of a third-party contractor or you as third party contractor’s criminal convictions and offences and other background checks. The lawful basis we rely on to process this data pertains to complying with a legal obligation we are subject to as regulated institution and of the legitimate interests of Banking Circle and its clients.

What do we need?

  1. Full Name,
  2. Title,
  3. Address,
  4. CV,
  5. VAT number,
  6. Contact information.
  7. Bank account holding statement

Further to the above, we may carry out certain background checks to further assess your character and fitness for the service to be provided. The background checks we carry out depend on the required service, but may involve the following:

  1. Fitness and Propriety declaration (including credit issues, directorships and convictions)
  2. Credit/financial information
  3. Information pertaining to a sanctions screening
  4. Publicly available adverse news articles and information
  5. Current and previous director appointments and information on disqualifications
  6. Information on civil litigation and bankruptcy

What we do with it

We’ll use all the information you provide during the supplier selection process to progress yours and/or your company engagement with a view to enter into an engagement letter/ consultancy agreement with you or your company, or to fulfil legal or regulatory requirements if necessary.

We will not share any of the information you provide with any third parties for marketing purposes.

We’ll use the contact details you give us to contact you to progress yours and/or your company’s engagement. We may also contact you to request your feedback about our supplier selection process. We’ll use the other information you provide to assess your suitability for the provisions of the services.

Why we need it

The information we ask for is used to assess your suitability for the provision of the services. You don’t have to provide what we ask for but it may affect yours and your company’s engagement if you don’t.

We will use any feedback you provide about our supplier selection process to develop and improve our process.

Do we use any data processors?

We use Experian Ltd to run background https://www.peoplehr.com/privacy.html checks. For more information, please see Experian’s privacy notice.

For a list of our main data processors that may process your personal data as part of the services they provide to us see our data and outsourcing addendum available at https://staging-bankingcircle.kinsta.cloud/terms-of-use

Your rights

You have the right to object to our processing of your personal data. There are legitimate reasons why we may refuse your objection, which depend on why we are processing it. Your objection to us processing the necessary personal data may affect your application and any job offer we make to you.

For more information on your rights, please see ‘Your data protection rights in the list on the left under the ‘General information’ header.

You are the person of contact of an employee of Banking Circle

Purpose and lawful basis for processing

We request every employee to provide us with the contact details of a person of contract that we can reach should anything happen to the employee during their time at work.

The lawful basis we are relying on to process your personal data is legitimate interest which allows us to process personal data for the legitimate interests of Banking Circle or of its employees.

What we need and why we need it

  • Full name
  • Phone number

To contact the family’s employee, should anything happen to the employee during their time at work.

What we do with it

We collect and retain your personal data in our employee management system to document.

No third parties may however have access to your personal data unless the law allows them to do so.

How long we keep it

As long as the employee remains employed by Banking Circle.

What are your rights?

As an employer, we are acting in our regulatory capacity to process your personal data, so you have the right to object to our processing of your personal data. There are legitimate reasons why we may refuse your objection, which depend on why we are processing it.

For more information on your rights, please see ‘Your data protection rights in the list on the left under the ‘General information’ header.

Do we use any data processors?

Yes. For a list of our main data processors that may process your personal data as part of the services they provide to us see our data and outsourcing addendum available at https://staging-bankingcircle.kinsta.cloud/terms-of-use

Respond to our consultation requests and surveys

Purpose and lawful basis for processing

With your consent, we might contact you from time to time to obtain user experience and client satisfaction about Banking Circle user interface or other applications and we might process your contact details to get in touch with you.

As a participant in user tests and research about Banking Circle’s user interface, applications and platforms we will ask you to provide certain personal data to be able to contact you, and to verify your profile in the user tests.

The lawful basis we are relying on to process your personal data is legitimate interest, which allows us to process personal data to pursue a legitimate interest of Banking Circle as credit institution and infrastructure provider.

What we need and why we need it

  • Full name
  • Job title
  • Work-email
  • Work phone-number
  • Behaviour on and thoughts about the user experience.

We will process all data provided as part of your participation with the purpose of developing our offerings. As a rule, we will not share any personal data unless agreed upon. We will only publish results or direct quotes including your job role, company and/or name on our website, social media accounts and other externally accessible sources, if agreement with you has been made and consent has been granted.

What we do with it

We process the information internally for the above stated purpose. We don’t intend to share your personal data with any third party. Any specific requests from a third party for us to share your personal data with them will be dealt with in accordance the provisions of the data protection laws.

How long we keep it

We will retain consultation and survey response information until our work on the subject matter of the consultation is complete and then normally for a period of 2 years after which we will delete it (or anonymise it if it is required for further research after that point).

What are your rights?

You have the right to object to our processing of your personal data. There are legitimate reasons why we may refuse your objection, which depend on why we are processing it.

For more information on your rights, please see ‘Your data protection rights in the list on the left under the ‘General information’ header.

Do we use any data processors?

Yes. For a list of our main data processors that may process your personal data as part of the services they provide to us see our data and outsourcing addendum available at https://staging-bankingcircle.kinsta.cloud/terms-of-use

We do often use Surveymonkey to gather information on our behalf – it will be clear if we are using Surveymonkey. For more information please consult Surveymonkey privacy policy.

Any data collected by Surveymonkey for Banking Circle is stored on servers in the United States.

Attend an event, seminar or workshop

Purpose and lawful basis for processing

Our purpose for collecting this information is so we can facilitate the event.

The lawful basis we rely on for processing your personal data is your consent. When we collect any information about dietary or access requirements, we also need your consent (under article 9(2)(a)) as this type of information is classed as special category data.

What we need and why we need it

If you wish to attend one of our events, you will be asked to provide your contact information including your organisation’s name and, if offered a place, information about any dietary requirements or access provisions you may need. We may also ask for payment details if there is a charge to attend.

We use this information to facilitate the event. We also need this information so we can contact you.

What we do with it

If you are not successful in securing a place, we’ll let you know and hold your details on a reserve list in case a place becomes available.

If you are allocated places at an event, we’ll ask for information about any dietary/access requirements. We don’t share this information in any identifiable way with the venue, and we delete it after the event.

We don’t publish delegate lists for events.

How long we keep it

As long as reasonably necessary for the purposes of organising the event and then for up to 10 years afterwards, after which we will delete it.

What are your rights?

We rely on your consent to process the personal data you give us to facilitate the event. This means you have the right to withdraw your consent at any time. If at any point you want to withdraw your consent please email marketing@bankingcircle.com.  If you do that, we’ll update our records immediately to reflect your wishes.

For more information on your rights, please see ‘Your data protection rights in the list on the left under the ‘General information’ header.

Do we use any data processors?

Yes. For a list of our main data processors that may process your personal data as part of the services they provide to us see our data and outsourcing addendum available at https://staging-bankingcircle.kinsta.cloud/terms-of-use

We also use data processors to help facilitate the events.

We may sometimes charge a fee to attend an event. If this happens, our communications about the event will provide details of the data processor we use to collect payments.

Subscribe to our newsletters

Purpose and lawful basis for processing

Our purpose for collecting the information is so we can provide you with a service and let you know about upcoming events.

The lawful basis we rely on for processing your personal data is your consent.

What we need and why we need it

Your name and email address.

We use your email address to send you our E-newsletter.

What we do with it

We only use your details to provide the service.

We gather statistics around email opening and clicks using industry standard technologies including clear gifs to help us monitor and improve our e-newsletter.

You will receive a confirmation email once you have submitted your details and then the newsletters monthly.

How long we keep it

We will keep the personal information for a reasonable period consistent with sending you marketing communications, after which we will either confirm that you are happy for us to continue to do so, or delete it (except to the extent we need to retain it for the sole purpose of supressing further marketing communications to you).

What are your rights?

We rely on your consent to process the personal data you provide to us for marketing purposes. This means you have the right to withdraw your consent, or to object to the processing of your personal data for this purpose at any time. If at any point you want to withdraw your consent please email us at info@bankingcircle.com. If you do that, we’ll update our records immediately to reflect your wishes.

For more information on your rights, please see ‘Your data protection rights’.

Do we use any data processors?

Yes. For a list of our main data processors that may process your personal data as part of the services they provide to us see our data and outsourcing addendum available at https://staging-bankingcircle.kinsta.cloud/terms-of-use

We also use MailChimp to deliver the e-newsletter. For more information, please see MailChimp privacy notice.

Any data collected by MailChimp for Banking Circle is stored on servers in the United States.

Request our white papers or other publications

Purpose and lawful basis for processing

Our purpose for collecting this information is to carry marketing activities and business development.

The lawful basis we rely on for processing your personal data is your consent.

What we need and why we need it

Your name, job position and address details.

So that we can send you the publications you have requested. We also merge this information with engagement touchpoints you have had with us, to help us measure and optimise the marketing information that you consent to receive.

What we do with it

We only use the contact details to provide this service. We run statistical reports on the types and quantities of publications requested for monitoring purposes, but this does not contain any personally identifiable information.

How long we keep it

We will keep the personal information for a reasonable period consistent with sending you marketing communications, after which we will either confirm that you are happy for us to continue to do so, or delete it (except to the extent we need to retain it for the sole purpose of supressing further marketing communications to you).

What are your rights?

We rely on your consent to process the personal data you provide to us for marketing purposes. This means you have the right to withdraw your consent, or to object to the processing of your personal data for this purpose at any time. If at any point you want to withdraw your consent, please email us at marketing@bankingcircle.com. If you do that, we’ll update our records immediately to reflect your wishes.

For more information on your rights, please see ‘Your data protection rights in the list on the left under the ‘General information’ header.

Do we use any data processors?

Yes. For a list of our main data processors that may process your personal data as part of the services they provide to us see our data and outsourcing addendum available at https://staging-bankingcircle.kinsta.cloud/terms-of-use

We use Worldpress as content management system to deal with some publication requests, but Worldpress is only allowed to use the information to send out the publications. For more information please see Worldpress privacy notice.

We also use MailChimp to deliver the publication but MaiChimp is only allowed to use the information to send out the publications. For more information, please see MailChimp privacy notice.

You are a visitor to our offices

We meet visitors at our head office, including:

  • Consultants, advisors and external auditors;
  • external training providers;
  • job applicants;
  • suppliers and tradespeople;
  • board members and representatives of our shareholders; and
  • Representatives of our regulatory supervisory authorities.

If your visit is planned, we’ll send your name, position and purpose of visit to the reception before your visit.

We ask all visitors to sign in and out at reception and show a form of ID. The ID is for verification purposes only, we don’t record this information.

The purpose for processing this information is for security and safety reasons.

Closed-circuit television (CCTV) might operate outside the building for security purposes. Any CCTV used in our Luxembourg office or our offices in Germany, the UK or Denmark is not operated by us, so we are not the controller. It will be under the control of the relevant building landlord.

We have Wi-Fi on site for the use of visitors. We’ll provide you with the address and password.

We record the device address and will automatically allocate you an IP address whilst on site. We also log traffic information in the form of sites visited, duration and date sent/received.

We don’t ask you to agree to terms, just to the fact that we have no responsibility or control over your use of the internet while you are on site, and we don’t ask you to provide any of your information to get this service.

The purpose for processing this information is to provide you with access to the internet whilst visiting our site.

We keep the personal information relating to you for as long as is necessary in order to enable us to provide the relevant services to our client, after which we will delete it. Normally, we will not keep this information for more than 12 months following its collection.

For more information on your rights, please see ‘Your data protection rights in the list on the left under the ‘General information’ header.

You are an investor in Banking Circle

Purpose and lawful basis for processing

We will only collect and process personal data about you, which is considered necessary for Banking Circle to comply with its regulatory compliance and corporate governance obligations.

The lawful basis we rely on to process with respect to the majority of your personal data is legal obligation.  This allows us to process personal data when this is necessary to comply with a legal obligation. We may also process your personal data on the basis of legitimate interests of Banking Circle as regulated institution.

What we need and why we need it

  • Full name
  • Address
  • Salutation (If applicable)
  • Maiden Name (If applicable)
  • Date of birth
  • Place of birth
  • Phone number
  • e-mail address
  • Nationality
  • Proof of residency
  • Proof of Identity
  • Proof of ID number i.e. (passport number)
  • Social security
  • Job position and title
  • CV
  • Job location
  • Work e-mail address
  • Work phone number
  • TIN
  • Tax residency and taxes
  • Criminal convictions and offences
  • Salary and other compensation
  • Bonus
  • Bank account number

To satisfy its regulatory compliance and corporate governance obligations.

What we do with it

We may make available your personal data to supervisory entities, correspondent institutions, or other financial institutions but also legal advisors, corporate service providers or external auditors.

Certain personal data will also be reported to government authorities where required by law and for tax or other purposes.

How long we keep it

We keep the personal information relating to you for as long as is necessary in order to comply with our regulatory obligations, after which we will delete it or anonymise it. Laws and regulations applicable in the various jurisdictions may set a minimum period for which Banking Circle has to retain such personal information. Normally, we will not keep this information for more than 5 years following termination of your investor relationship with Banking Circle.

Copies of Criminal records and background checks will be deleted when the request for which it was collected has been answered.

What are your rights?

As a regulated credit institution, we are acting in our regulatory capacity to process your personal data, so you have the right to object to our processing of your personal data. There are legitimate reasons why we may refuse your objection, which depend on why we are processing it.

For more information on your rights, please see ‘Your data protection rights in the list on the left under the ‘General information’ header.

Do we use any data processors?

Yes. For a list of our main data processors that may process your personal data as part of the services they provide to us see our data and outsourcing addendum available at https://staging-bankingcircle.kinsta.cloud/terms-of-use

Scroll to Top