Outside the KBC Group

KBC uses specialist third parties in Belgium and abroad to perform some processing operations, e.g. payments.

These are:

• SWIFT (www.swift.com)with headquarters in Belgium and establishments in many countries, for the global message exchange;
• Equens Worldline SE (www.equensworldline-nv.com), Mastercard (www.mastercard.com), Idemia (www.idemia.com) ) and, in certain cases, Bancontact Payconiq Company NV (www.bancontact.com) for payments and (credit) card transactions worldwide;
• Custodians and sub-custodians of financial instruments worldwide that are subject to local financial regulations;
• Institutions for the settlement and clearing of payments and securities transactions, such as the CEC (www.cecbelgium.be) (payment systems) and Euroclear;
• Transport companies (for cash and other valuables) and security firms;
• Consumer credit intermediaries (i.e. instalment loans);
• Entities that support KBC in complying with its anti-money laundering obligations, for example by developing and using money laundering detection models;
• Batopin NV (www.batopin.be), a network of bank-neutral ATMs, also for updating your electronic ID card details;
• Appbot Pty Ltd (www.appbot.co), for monitoring and analysing feedback from users of KBC apps;
  Renta Solutions NV for typical leasing platforms in automating vehicle ordering, vehicle registration and delivery (Order Register Deliver), maintenance, electronic invoicing (REI rS Electronic Invoice).

KBC may also directly or indirectly (e.g. through KBC Group NV) engage the services of other processors, such as

• Consultants;
• Third-party business introducers to fulfil its general duty of vigilance as laid down by law:
  • The obligation to identify and verify identities;
  • The obligation to identify the customer characteristics and the purpose and nature of the business relationship;
  • The obligation to update information;
• Market research agencies such as Ipsos (www.ipsos.com), Profacts (www.profacts.be), GFK (www.gfk.com) Checkmarket (www.checkmarket.com.), iVOX (www.ivox.be) en Intrinsiq (www.intrinsiq.be), DataSynergy (www.data-synergy.be) for issuing invitations as well as carrying out surveys;
• ICT and ICT security service providers and artificial intelligence companies such as Microsoft, Cognizant, IBM, Amazon and HP, and specialist fintech companies such as Onfido for facial recognition during the customer onboarding process;
• Marketing and communication agencies and similar companies, whereby KBC uses personal profile information on you that is held by them, along with the data it holds on you, to be able to make targeted offers to you via their channels (e.g. Google, Facebook, etc.);
• Companies that support KBC in identifying and analysing your user behaviour in our apps and on our websites (e.g.Adobe, Dynatrace). In preparation for the analysis of Adobe Data Analytics, KBC will rely on the services of Amazon Web Services – Cloud Computing Services. The transfer and processing of personal data from, to and in Amazon Web Services is encrypted;
• Companies specialising in information archiving and access, such as Doccle (Doccle stores information on all our customers, including those that haven’t opted for digital record-keeping). Doccle uses Amazon Web Services – Cloud Computing Services);
• Companies specialised in scanning digital documents in order to digitise files with associated info;
• Companies specialising in solvency investigations;
• Companies specialising in specific services that KBC uses when offering services to its customers, such as Meeco for offering the Digital Safe in KBC Mobile;
• Printers for printing and the addressing of news magazines, cheques and transfer forms, badges, among other items;
• Translators and translation agencies;
• Social media management tools (CX Social);
• Sworn real estate experts;
• Communications agency Motisha BV (www.motisha.com);
• Companies providing Platform as a Service (PaaS) and Software as a Service (SaaS) in the cloud, such as:
  • The Microsoft Dynamics CRM app used by KBC to maintain customer overviews;
  • VEE24’s video chat app for enabling digital communication with KBC;
  • The storage services of Microsoft Azure or Amazon, on which KBC can place its own platforms or software that process and store your personal data;
  • Security services that screen Internet or e-mail traffic with KBC for cyberattacks or phishing scams;
  • TreasurUp, with whom KBC exchanges the contact details of company representatives to enable forex transaction analysis;
  • Nomios Belgium NV to set up a secure network connection between KBC entities worldwide based on SD WAN technology;
  • Applications that facilitate and automate call recording, where appropriate, for instance as offered by Luware;

Other data controllers

As a data controller, KBC may – in addition to using other processors – also use other service providers or third parties, such as lawyers, notaries public or doctors, who themselves are data controllers.

This is, for instance, the case for KBC Securities Services, which is a part of the KBC Group. KBC Securities is the controller of your personal data when providing services in its capacity as a broker or custodian of securities. To this end, KBC Securities Services works with other third parties such as wealth managers and private bankers. They in turn offer their own services, such as investment advice, and therefore also act as a controller of your personal data. When that is the case, another – usually shorter – data protection statement may apply since the service is also more limited. If you purchase a service from KBC that is covered by a shortened or non-standard data protection statement, you will be duly advised of this. The most recent version of the statement applying to services provided by KBC Securities Services can be viewed at www.kbcsecurities.com.

KBC can outsource the collection of arrears on, say, a loan, to specialised companies that themselves are data controllers.

KBC also distributes its own products and services in conjunction with third parties that refer their customers to KBC, for example for a loan. They do not act as intermediaries in that regard and only pass on to KBC the personal data needed to prepare tenders or simulations. The third parties are responsible for passing on the personal data. The third parties have access to a dashboard to track purchases of products.

As a bank-insurer, KBC Bank NV cooperates with KBC Insurance, with both companies acting as data controllers with respect to personal data. Specific information regarding the controllers for the direct marketing domain is found here.​

KBC can itself act as a third-party business introducer for, for example, Payconiq and Belgian Mobile ID (itsme). KBC then processes personal data as data controller. KBC transfers this personal data to the third party. Likewise, a third party may act as a third-party business introducer for KBC.

When a mortgage expires and mortgage renewal is needed, KBC will call upon the services of a notary public. KBC provides the notary public with the national registration number(s) of the borrower(s), a copy of the original registration model, the first authenticated copy of the deed or other useful information that allows the notary public to renew the mortgage registration.
When, as a retailer, you want to install an electronic payment terminal and you ask KBC to act as an intermediary in that regard, KBC will pass on your contact details to Equens Worldline SE.

In certain specific cases, processors whose services KBC engages (see 'Specialist processors and joint controllers outside the KBC Group' and 'Other processors') may nevertheless act as controllers for the processing of KBC data. One such case is Microsoft, which also processes personal data for activities beyond the limited scope of a processor., such as billing, internal remuneration, internal reporting and internal organisation, combatting fraud and security of their services, service improvement, financial reporting, and compliance with legal obligations applicable to them. KBC has entered into the necessary contractual arrangements with Microsoft to ensure compliance with the relevant data protection safeguards.​

KBC can also cooperate with third parties such as Xerius Ondernemingsloket vzw. Xerius helps you to start up a business. During that process, Xerius may put you in touch with KBC to get your business account opened. Xerius then sends identification details to KBC. Xerius does this with your consent.

Voice Assistants

As a customer, you can ask for your balance and transactions via so-called virtual ‘Voice Assistants’ (Alexa, Google Assistant, etc.). In order to do this, you must first give KBC your consent to transfer the necessary account information to that service. The further processing, such as the electronic pronouncement of your balance by the service, is carried out entirely by the third party that provides the service to you. KBC is not responsible for that.