This website is not intended for individuals under 18 years old and we do not collect data relating to such individuals. Ensuring data protection is the basis of reliable business relations and the reputation of OJSC Unibank (hereinafter referred to as the Bank).

This Policy applies to Bank and their employees and extends to all processing of personal data, relating to an identified or identifiable person. Anonymised or pseudonymised data is not subject to this Policy.

This Policy comprises the accepted international and European data privacy principles without replacing existing national laws of the Republic of Armenia (hereinafter referred to as the RA). It supplements RA data privacy laws. The relevant RA law will take precedence in the event of conflict with this Policy or where it has stricter requirements. The Policy must also be observed in the absence of corresponding national legislation.

All processing carried out by the Bank or its employees shall be carried out in accordance with the principles enshrined in this Policy, being the following:

— Fairness and lawfulness
— Limited to purpose of collection (Purpose Limitation)
— Transparency
— Data minimization
— Storage Limitation & Deletion
— Factual accuracy
— Confidentiality and integrity of Personal Data
— Accountability

Processing personal data is permitted only under the following legal bases. One of these legal bases is also required if the purpose of processing personal data is to be changed from the original purpose.

Processing connected to contractual relationships:
Personal data of the clients can be processed to establish, execute or terminate a contract.

Data processing for advertising purposes:
Personal data can be processed for advertising purposes or market and opinion research, provided that this is consistent with the purpose for which the data was originally collected. Providing data for this purpose is voluntary and data subjects have an absolute right to object to such processing.

Consent to data processing:
Data processing pursuant to legal authorisation

Data processing pursuant to legitimate interests:
Before data is processed on this basis, it is necessary to determine whether there are any data subject interests that merit protection and whether these override Bank’s legitimate interests.

Processing of sensitive data:
Sensitive personal data can be processed only if the law authorizes it or the data subject has given explicit consent.

User data and internet:
Data subjects are informed of all personal data collected, processed and used on websites or in software or where user profiles (tracking) are created. Such may only be affected if permitted by law or with data subject consent.

Use of cookies:
Bank uses cookies to collect information for record-keeping, comfort of use and website improvement and optimisation.

Disclosure of Data:
Bank's employees, directors, officers and representatives treat personal data as confidential and may not pass on or use any such data without valid legal grounds.

Transmission of Personal Data:
Transmission of personal data to recipients by the Bank, both internally or externally, is subject to the authorisation requirements and pursuant to defined purposes. Personal data transmitted to a recipient outside the RA must be subject to protection at least equivalent to that sought by this Policy.

Data Subject Rights:
Every data subject has the following rights in relation to the processing of their personal data:

— Right of Access
— Right of Rectification
— Right to Data Portability
— Right to Erasure
— Right to Restrict Processing
— Right to Object to Processing

Security Measures:
Personal data is safeguarded from unauthorized access and unlawful processing or disclosure, as well as accidental loss, modification or destruction; through state-of-the-art technical and organizational measures. These are adjusted and updated continuously in tandem with technical developments and organizational changes. Additionally, data protection audits and other controls are carried out on a regular basis.

In case of contradictions between the text of this Policy in Armenian and other languages, preference is given to the Armenian version.