• Use a password that contains 8 to 12 characters or more. The longer the password, the harder it is to figure it out.
• Choose a PIN that you can easily remember, memorize it, keep it secret, and do not write it on your debit or credit card.
• Never disclose your PIN.
• When selecting a personal identification number, code or password, avoid using personal information, birth dates, telephone numbers, consecutive numbers or generic words to create it.
• Do not share your PIN or password with anyone, by any means – written, electronic, via telephone, etc.
• Do not write down your PIN, much less next to your debit or credit card or next to your client number.
• To protect your account, Prival Bank recommends that you change your PIN every six months.
• Make sure that nobody sees your PIN when you enter it.
• Always end your session on any Website after a purchase transaction has been finalized with your debit or credit card. If you cannot end your session, close your browser to prevent unauthorized access to your account information.
• If you forgot your PIN or you would like to select another one, visit Prival Bank’s closest branch location or contact your financial advisor.
• Do not use your card to make purchases on websites that do not offer the appropriate security features.
• Memorize your secret code or PIN; do not write it down or store it next to your card.
• When you go out, store your cards in a separate place in your wallet or purse, for example, inside of a zippered compartment or inside a change purse.
• When you pay for a transaction with your card, do not lose sight of it and take it back as soon as possible. Keep an eye on your card at all times and make sure it is only used at the Point of Sale and that it is always visible.
• Cover the keyboard with your hand when you enter your secret code or PIN at an ATM or when paying at a store.
• Ask for incorrect receipts to be voided.
• Keep sales receipts or invoices in order to compare them to your account summary.
• Use online banking services or telephone banking frequently to check on your account activity.
• Do not place your card near magnets or magnetic fields, since this may erase the information stored in the magnetic strip of your card.
• Notify your bank or financial advisor, in writing, of any suspicious charges.
• Notify your bank in advance of any change of address.
• Do not sign a blank receipt, coupon or invoice. When you sign a receipt, make a line through all the blank spaces found on top of the total.
• Cancel and shred your credit cards and other cards that you don’t use.
• If you receive a replacement card, destroy your old one.
Skimming, also known as credit or debit card cloning, consists of duplicating a credit or debit card without authorization from the card’s owner. This fraud cannot be detected, you will only find out when you review your account statements. 

Follow these tips!

• When you pay at a store with your debit or credit card, pay attention where the employee runs the card and do not lose sight of it. Also, be aware and observe the hands of the employee since some Skimmers are so small that they fit in the palm of a hand. Do not allow the card to be run through more than one machine.
• When you withdraw money from ATMs, make sure that there are no strange devices installed where you insert the card.
• When you enter your PIN at an ATM, cover your entry with the other hand, so that small cameras that are purposefully installed by thieves facing downward cannot capture your actions on the ATM’s keyboard.
• Check your account balances frequently, so that you are able to immediately identify any irregular transactions. If you do not recognize a transaction, report it to our Customer Service telephone number +507 303 1995 or contact your financial advisor.
If you have any doubts or you know someone has taken your email password or “hacked” into your email, follow these steps:

• Change passwords or create a new email account.
• Once you are able to access your account after changing your password and secret question, carefully check your inbox and outbox to make sure that the hacker has not activated an automatic message forwarding action to an external account.
• Report the incident to your contacts.
• Check all of your accounts (social networks, banks, chats, etc.) associated to your email, since the passwords for these accounts are now also compromised.
• Do not hesitate to immediately contact the bank and notify us regarding your email address change.
• Remember that you should act immediately to avoid loss of sensitive information and prevent hackers from sending emails from your address.
• PIN or personal code
• Online Banking security card’s coordinates 
• Confidential information via email

“Ley 81”  of March 26, 2019 On Personal Data Protection, and Decree 285 of May 28, 2021 Regulating “Ley 81” On Personal Data Protection (hereinafter, and together with its successive amendments and related banking agreements, referred to as the "Data Protection Law"), develop the rights, obligations, principles, and procedures regarding personal data.

For the purposes of this Privacy Notice, Prival Bank, S.A. and its Subsidiaries named below (hereinafter jointly referred to as "Prival Bank") establish Prival Bank, S.A. as the Controller of Personal Data, which will ensure the security and quality in the processing of personal data: Prival Securities, Inc.; Prival Trust, S.A.; Prival Leasing, Inc.; Prival Private Equity Fund, S.A.; Prival Investment Management, BVI Ltd.; Acerta Holdings, S.A.; Acerta Compañía de Seguros, S.A.; Prival SM Business Park; Grupo Prival (Costa Rica), S.A.

Under the Data Protection Act, the term "personal data" refers to any information that identifies or enables the identification of our customers and applicants for job vacancies with Prival Bank.

PERSONAL DATA COLLECTED BY PRIVAL BANK:

Prival Bank obtains personal data of cardholders from the following sources: 


Source

Examples

Information we receive from the holder in applications and other forms.

Contact details, demographic data and details of income and financial situation, among others.

Information about transactions made with us.

Details of source and destination accounts, amounts, date and time of the transaction, authorized signatures, among others.

Information about your transactions with nonaffiliated third parties.

Details of source and destination accounts, amounts, date and time of the transaction, authorized signatures, among others.

Information from public institutions and credit reporting agencies, due diligence and tax agencies such as APC and the Electoral Tribunal, among others.

Credit and criminal history, immigration and employment status, among others.


Information about your use of electronic banking.


User, password, email address, IP address, browser identifiers, device and session (date/time/duration), location.

Information to apply for job openings at Prival Bank.


Contact information, demographic data, resume, educational, professional and criminal history, personal and professional references, among others.



Prival Bank will not consider personal data, among others: (i) that obtained from public sources of information; and (ii) anonymized information, for historical, statistical or scientific purposes.

 

 

RIGHTS:

The Responsible for the Processing of Personal Data informs the holder of the personal data about the following rights:

  1. Right of Access: Allows the holder to obtain his personal data that are stored or subject to processing in databases of public or private institutions, in addition to knowing the origin and purpose for which they have been collected.
  2. Right of Rectification: Allows the holder to request the correction of personal data that is incorrect, irrelevant, incomplete, outdated, inaccurate, false or irrelevant.
  3. Right of Cancellation: Allows the holder to request the deletion of incorrect, irrelevant, incomplete, outdated, inaccurate, false or irrelevant personal data.
  4. Right of Opposition: Allows the holder, for well-founded and legitimate reasons related to a particular situation, to refuse to provide his/her personal data or for them to be subject to certain processing, as well as to revoke his/her consent.
  5. Right of Portability: Allows the holder to obtain a copy of the personal data in a structured manner, in a generic and commonly used format, which allows it to be operated by different systems and/or transmitted to another data controller, when:
    1. The owner has given his data directly to the person in charge.
    2. Be a relevant volume of data, processed in an automated way.
    3. The owner has consented to the processing or it is required for the execution or performance of a contract.

CHANNELS OF ATTENTION FOR INQUIRIES, COMPLAINTS AND CLAIMS:

In case you need to make a consultation, or exercise a right of access, rectification, cancellation, opposition, and portability, Prival Bank has the following channel:

        Telephone: +507 303-1900

        Email addres: (info.pa@prival.com)

As part of your rights as owner of personal data, you may go to the Superintendencia de Bancos de Panamá,, to file complaints about the use and handling that Prival Bank performs with your personal data, prior presentation, attention and response to your claim by Prival Bank.

 

USE OF PERSONAL DATA:

As a customer, supplier, or candidate for employment with Prival Bank, your personal data may be used to:

  1. Offer and provide products or services through any means or channel, including between companies related to Prival Bank.
  2. Product and service recommendations.
  3. Advertising, marketing, loyalty and institutional campaigns.
  4. Conduct satisfaction surveys concerning the services provided.
  5. Perform adequate provision and administration of financial services, including collection management.
  6. If you apply for job vacancies with Prival Bank, your personal data will be used to communicate with you, verify your eligibility for the vacancy you have applied for and, if you are hired, to prepare your employee file.

Prival Bank may use artificial intelligence technologies to make automated decisions, based on my personal data, in order to improve its products and services in general, as well as to prevent and reduce risks associated with them.

 

DURATION OF THE PROCESSING OF PERSONAL DATA:

Prival Bank will keep the information confidential at all times, and has protection and control processes in place to prevent unauthorized access or processing of personal data.

The time for which the personal data will be subject to processing by Prival Bank will be during the contractual term in which the holder of the information has the product, service, contract or relationship, plus the term established by the various regulations governing Prival Bank.

In the case of applicants for job vacancies, personal data will be subject to processing by Prival Bank for the period of application and recruitment for the vacancy in question.

TRANSFER AND TRANSMISSION OF PERSONAL DATA:

Prival Bank may make national or international transfers and/or transmissions of personal data.

Personal data may only be transferred if there is prior consent to share such information with third parties. Alternatively, it is possible that Prival Bank, S.A. and Subsidiaries may transfer personal data to third parties or foreign countries when the transfer:

  1. Is provided for in a law or treaty to which the Republic of Panama is a party;
  2. Is required by virtue of a contract entered into or to be entered into in the interest of the data subject, by Prival Bank and a third party and/or related company;
  3. Is legally required for the protection of a public interest, or for the administration of justice;
  4. Is necessary for the exercise or defense of a right in a judicial proceeding;
  5. Is required for the maintenance or fulfillment of a legal relationship between Prival Bank and the owner of the data.
  6. For any reason or motive authorized by the guidelines and regulations adopted by the competent authorities.

Prival Bank will comply with the obligations related to the processing and secure transfer of personal data established by “Ley 81” and issued by the competent authorities in the future.

 

SECURITY MECHANISMS:

Prival Bank uses optimal security technologies and systems to ensure the confidentiality, integrity and availability of data.

The transfer of data over the Internet between the Client and Prival Bank's Information Systems is encrypted and secured through the Secure Socket Layer (SSL) protocol.

An additional layer for transactions employs secure device-based authentication methods (hard or soft token), complemented by security questions.

Vulnerability scanning: Periodically on a proactive basis, reviews are conducted in search of vulnerabilities in information systems.

Upgrades: Scheduled tasks are performed to keep information systems up to date.

Antivirus: The entire infrastructure that supports the Information Systems has an Antivirus/Antimalware protection layer.

Firewalls: Our network is protected by state-of-the-art firewalls that prevent unauthorized entry to the network.

SIEM: All logs and events of the information systems are monitored and analyzed.

 

Prival Bank will make details of its data protection practices available to you at all times through its Privacy Policy, which can be found at https://www.prival.com/panama/seguridad.

 

 UPDATES TO THE PRIVACY NOTICE:

Prival Bank, S.A. and Subsidiaries reserve the right to make updates to this Privacy Notice. Changes or modifications will be informed through any of the following means:

  1. Notices at Prival Bank branches;
  2. Notices on the Web-Prival website;
  3. Notices by electronic means or channel of communication;
  4. Any other means of public or private communication provided for in the contracts covering the transactions entered into between the holder of the personal data and Prival Bank.


For more information, the following links are available:

“Ley 81” of March 26, 2019 Gazette - ”Ley 81”

Decree 285 of May 28, 2021 Gazette-Decree285

Agreement 1-2022 of the Superintendency of Banks of Panama on personal data protection. Agreement No.001-2022.

 

DATE OF LAST UPDATE:

June-07-2022 

|