BVNK Services Ltd

BVNK Services Ltd is SOC 2 Type II compliant. On SOC2C this listing is Listed.

According to BVNK Services Ltd's public trust center, BVNK Services Ltd is ISO 27001 certified. On SOC2C this listing is Listed.

According to BVNK Services Ltd's public trust center, BVNK Services Ltd is GDPR compliant. On SOC2C this listing is Listed.

BVNK Services Ltd is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Yes. BVNK Services Ltd's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Personal information we collect will fall within one of the below: - Personal information: Basic information about you, including your signature; - Identification data including unique descriptors: Government issued identifiers, other unique identifiers such as date of birth, and personal descriptors that might identify you; - Financial and transactional: Financial information about you, transactional information and credit information, account authentication details; - Contractual details: information collected as part of the products and services we or our service providers provide you; - Socio-demographic: Details about your work or profession, nationality, education; - Technical information: Details about your devices and technology that you use to access our services, including IP address; - Behavioural: information about how you use our products and services; - Location: Data we receive about where you are; - Communications: Information we capture through your communications with us, e.g. emails, instant messaging; - Publicly available information: Details that are in public records and information about you that is openly available on the internet.

We take all appropriate and reasonable technical and organisational measures to prevent the loss of, damage to or unauthorised destruction of personal data and the unlawful access to or processing of such data. We have systems in place to control your data in a way that minimizes its exposure. We will take reasonable steps to identify all reasonably foreseeable internal and external risks posed to your personal data under our possession or control and establish and maintain appropriate safeguards against any risks identified.

The personal information we collect from you may be transferred to, stored and processed outside of the jurisdiction in which you live. The laws of those countries may vary from the laws applicable in your own country. Data gathered in the European Economic Area (EEA) may be transferred to, stored and processed at a destination(s) outside of the EEA. Said international data transfers will be carried out in strict compliance with the Regulation and after having executed the relevant Standard Contractual Clauses with the recipients of the data. Your account is stored by BVNK on a secure server maintained and operated by third-party service providers. These third-party providers are bound by and adhere to the relevant data processing agreements, in compliance with the Regulation.

We may share your information in the manner and for the purposes described below: - Internally, where such disclosure is necessary to provide you with our services or to manage our business; - With third parties who help manage our business and deliver services, pursuant to a contract between the third party and BVNK. In these circumstances, the third party may be another controller, processor or sub-processor. Where the third party is a processor or a sub-processor, they are obliged amongst other things, to keep your details secure, and to use them only to fulfil their contractual obligations to BVNK under a processing agreement or terms which comply with Article 28 of the Regulation. - With agencies and organisations working to prevent fraud in financial services; - With our regulators; - To comply with all applicable laws, regulations and rules, and requests of law enforcement, regulatory and other governmental agencies; When they no longer need your personal data to fulfil this service, they will dispose of the details in line with BVNK’s data retention policy, or as otherwise set out in the processing agreement.

You have the right to access your personal data held by BVNK, by contacting us with a request at [dpo@bvnk.com](mailto:dpo@bvnk.com). For your protection, We will take steps to verify your identity before fulfilling your request. If there are any changes to your personal information or if you believe that the information we have about you is inaccurate, incomplete, misleading or not up-to-date, you must inform us accordingly at [dpo@bvnk.com](mailto:dpo@bvnk.com). You also have the right to request the restriction and objection to its processing, the right to request the portability of your personal data and the right not to be subject to a decision based solely on automated processing. You have the right to be forgotten in terms of the Regulation. This may be done by requesting your account to be deleted in a support ticket to the BVNK support team at [dpo@bvnk.com](mailto:dpo@bvnk.com). By requesting us to delete you, you may forfeit your ability to use BVNK’s services going forward as We require certain data in order to provide our services. We may use our discretion in allowing correction requests and may request further documentary evidence of any new information in order to avoid fraud and inaccuracy. You can also file a complaint before the Spanish supervisory authority (the, “AEPD”) at www.aepd.es/es.