The procedure for access to personal data of third parties is determined by the terms of consent of the service user (terms of the client's agreement with the Bank; terms of consent, expressed in another way and form) provided to the Bank as the owner of personal data for processing such data or in accordance with applicable law.

If the user's personal data is a banking secret, the Bank provides such information to third parties, only in the manner and cases provided by the terms of the agreements and Article 62 of the Law of Ukraine "On Banks and Banking", criminal procedure legislation of Ukraine.

If personal information is not a bank secret, it may be passed on to the third parties with or without the consent of the user in cases specified by law and only (if necessary) in the interests of national security, economic well-being and human rights.

By agreeing to this Policy, the user agrees to the transfer by the Bank of personal data received in the process of using the Bank's services, which are not a bank secret, to third parties specified in the Notice on personal data processing.. At the same time, the Bank undertakes to ensure that such persons comply with the requirements of this Policy and current legislation on personal data protection.

The Bank takes all possible security measures to ensure the protection of information about customers (users) from unauthorized attempts to access it by third parties, its modification, disclosure or deletion, as well as other types of improper use. The Bank is constantly improving the methods of data collection, storage and processing, including physical security measures to counter unauthorized access to the Bank's systems.

The security of the use of the Bank's services also depends on the user's compliance with the Bank's recommendations, which can be found on the Bank's website.

The Bank has developed and implemented measures and mechanisms for limited access of the Bank's employees to user information, as well as control of its use.

When the Bank enters into agreements with third parties in accordance with the terms of which it is necessary to disclose personal information of users to perform work or provide services, the Bank establishes obligations of such third parties not to disclose such information, and determines liability in case of disclosure. The security of the Bank's services also depends on the user's compliance with the Bank's recommendations, which can be found on the Bank's website.

The user is obliged to store account data, such as login and password, from access by third parties. The User undertakes to immediately notify the Bank of any cases of suspected unauthorized use of his / her account. The use of the Bank's recommendations will ensure the maximum security of the information provided to the Bank.

The Bank stores personal data of users of the Bank's services as subjects of personal data for as long as it is necessary to fulfill the purpose of processing such data.

In the case of services provided by the Bank, personal data will be processed during the period during which these services are provided, and sometimes after their termination, but only if permitted or required by applicable law, such as statistical processing, invoicing or claims. In this case, the data will be processed only for the period necessary to achieve such purposes.

The subject of personal data has the right to:

1. know about the sources of collection, location of their personal data, the purpose of their processing, location or place of residence (stay) of the owner or controller of personal data or give appropriate instructions to obtain this information to authorized persons, except cases as provided by law;
2. receive information on the conditions for granting access to his personal data, in particular information on third parties to whom his / her personal data are transferred;
3. access to his / her personal data;
4. receive no later than thirty calendar days from the date of receipt of the request, except as provided by law, an answer as to whether his personal data are processed, as well as receive the content of such personal data;
5. request to the owner of personal data with an objection to the processing of their personal data;
6. make a reasoned
7. make a reasoned request to change or destroy their personal data by any owner and controller of personal data, if this data is processed illegally or is inaccurate;
8. protect their personal data from unlawful processing and accidental loss, destruction, damage due to intentional concealment, non-provision or untimely provision, as well as to protect against the provision of information that is inaccurate or discredits the honor, dignity and business reputation an individual;
9. apply to the Commissioner or to the court with complaints about the processing of their personal data;
10. apply legal remedies in case of violation of the legislation on personal data protection;
11. make reservations regarding the restriction of the right to the processing of their personal data during the consent;
12. withdraw consent to the processing of personal data;
13. know the mechanism of automatic processing of personal data;
14. for protection against an automated decision (as the Bank may use the adoption of an automated decision to provide certain types of products or services to the Bank), which has legal consequences for him.

To update, gain access, make changes, block or delete your personal data, withdraw consent to the processing of personal data provided by the subject of personal data of the Bank, or in the event of any comments, wishes or claims regarding personal data that processed by the Bank, the user is given the opportunity to apply to the Bank:

• by sending a letter to the address: 49051, Dnipro, Kursantska Street, 24;
• by sending an e-mail to: bank@bankvostok.com.ua

Cookies can be perpetual (they are called persistent cookies) and stored on the computer until the user deletes them or temporary (such cookies are called session cookies), they are stored only until the browser is closed. In addition, cookies are divided into main (they are set directly by the visited Bank's website) and third-party (set by other websites).

More information about cookies can be found on the websites:

• www.allaboutcookies.org
• www.youronlinechoices.eu

The purpose of using cookies
The Bank takes care of its users and tries to make their stay on the Bank's website as comfortable as possible, for this purpose the Bank needs to analyze your behavior, preferences and interests with the help of cookies. This analysis helps the Bank to improve the experience of user interaction with the Bank's website, determine the most user-friendly interface and navigation services, evaluate the effectiveness of posted marketing information.

User identification data that contain cookies
A standard cookie contains information about the identity of the user's web browser, not the user's own. This cookie remembers the settings, the history of navigation through the pages of the Bank's website, optimizes the user's work, saves the set parameters.

Some cookies used by the Bank may store more detailed information, which may even allow the user to be identified, and may contain more personal information about the user. However, additional information of such identification may be entered only by the user and knowingly transmitted to the Bank, and only if the user's personal consent is confirmed.

According to the classification of the International Chamber of Commerce, the Bank uses the following categories of cookies:
Strictly necessary cookies are required for the user to navigate the website and when using certain services, such as access to secure pages, registration and authorization, search on the Bank's website. Also, they memorize the previous actions of the user when going to the previous page in the same session.

Operational cookies aggregate information on how the Bank's website is used. This data is stored on the user's device between web browser sessions. Examples of such data are the following metrics: time spent on the Bank's website, most frequently visited pages, understanding which sections and services of the Bank's website were most interesting to the user, how effective this or that advertising and / or marketing campaign is, etc.

All information collected through operational cookies is intended for statistical and analytical purposes. Some cookie data may be provided to third parties who have the permission of the website and only for the above purposes.

Functional cookies are used to store settings or configurations that are stored on the user's device between web browser sessions. Examples of such data are the following metrics: username, information on comments left, language version of the Bank's website, location, information on whether the user has been provided with any information or selected preferences, as well as other settings of the Bank's website.

Target cookies are used to provide with content that may be interesting to the user. This data is stored on the user's device between web browser sessions. Examples of such data include the following metrics: tracking recommended text, graphics, audio, and video to avoid reruns, managing targeted advertising, evaluating the effectiveness of advertising campaigns, information about user visits to other resources during conversions, and other website settings.

Cookie management and tracking technology
The user of the Bank's website may refuse to accept, restrict the use or delete cookies altogether, adjusting his web browser accordingly. Web browser settings are available at the following hyperlinks:

• Safari
• Chrome
• Firefox
• Opera
• Internet Explorer
• Microsoft Edge

The user revokes his consent to the use of cookies by the Bank by setting individual settings of his web browser and deleting cookies from the web browser.

Other tracking technologies
The Bank uses buttons or banners on the website to access social networks and instant messaging applications through which users can share a link to the Bank's website or make an electronic bookmark. After clicking a button or banner, the user is redirected from the Bank's website to websites / websites of social networks and messenger applications owned by third parties, which, in turn, can record information about user activity on the Internet, including the Bank's website.

The user can read the terms of use of user data and the privacy policy of social networking websites and messenger applications and the possibility of the user to refuse to use user data websites by the following hyperlinks:

• Facebook
• YouTube
• Viber
• Telegram

The Bank's website may use buttons / banners to activate third-party web services to display images, view videos or organize polls / polls. Such web services can be the Google Play and the App Store application. In its turn, the Bank may not prevent such websites or external domains from collecting information on how the content of the Bank's website is used.

Information about users received by the Bank via cookies is not publicly available and is the property of the Bank to which the resource belongs.