Piraeus e-banking for businesses Security

1. Personal codes

Only authorized users have access to Piraeus e-banking. Each user's rights may be fully adjusted to your company's needs, with options for restricting rights and creating approval scenarios. Each user can access the service by entering two customer identification codes, different for each user, that only they know:
the login code of each user (User ID)
the personal security code of each user (PIN)
You receive your personal codes at the Piraeus Bank branch when you sign your contract. They are inside the Piraeus box that we give you together with the instructions for using the Piraeus e-banking services.

The first time you use Piraeus e-banking, for your own security, the system requires you to change your User ID and PIN. Every two, four or six months, or every time you ask for the codes to be reissued, the system automatically redirects you to the “Change PIN” screen. You can change you codes more often if you like.

2. Code lock

If you enter your PIN wrongly three times, for your own security, the system will lock your access codes and block your access to Piraeus e-banking.

In order to unlock your passwords and regain access, your details must be authenticated. Call the customer service department from landline or mobile, Greece or abroad at +30 210 32 88 000.

3. Automatic logout

When during your login the system detects that there has been no activity for seven minutes, for your safety you are automatically disconnected.

In order to conduct transactions at Piraeus e-banking, every transaction should be authorized.

Transaction authorization will be performed easily, quickly and free of charge through a push notification* or with an extraPIN delivered through Viber** or SMS at the company’s registered user or alternatively using a code from a token generator.

*You receive this code by push notification, if you are a Piraeus business app user and have the notifications enabled in your device and app.

** A prerequisite is to have a Viber account, with the mobile phone number you have declared to the Bank for receiving the extraPIN code. The extraPIN code will be sent to Viber from the Piraeus e-banking account. In case you don’t have a Viber account, or it is not possible for any reason to send you the extraPIN code via Viber, you will continue to receive it on your mobile via Push Notification or SMS. If you don’t want to receive the extraPIN code via Viber, you can exclude Piraeus e-banking from the list of recipients in the Viber app and undo this option at any time.

You may adjust the settings of the corporate portfolio you manage through Piraeus e-banking so that only the users you authorize can access certain transaction types, with different monetary limits and approval levels.

For monetary transactions you can define approval scenarios:

• monetary limit per transaction type
• approval level and access right per user
• other settings to monitor your monetary transactions

More about approval workflows when managing business cash equivalents

Exclusion of accounts

You may choose to exclude certain accounts that you do not want to manage online or provide access to them only to specific users.

• The accounts you exclude are not cancelled.
  
• You can only carry out transactions on them through Piraeus Bank branches or ATMs.
  
• That is also where you will be able to monitor your account balance and activities.
  
• You will continue to receive the alerts you had set up before excluding these accounts, but you cannot set up new alerts.

Controlled access (Firewall)

A firewall controls access to Piraeus Bank’s servers. It operates on two levels:

• It allows customers/visitors or subscribers/users to use specific services
• It prevents third parties accessing systems and databases that contain Piraeus Bank’s confidential data and information

Encryption

From the start of your online Piraeus e-banking session, all your information and personal data is encrypted using the SSL 128-bit (Secure Sockets Layer) encryption protocol.

Every time you log into Piraeus e-banking, all communication between your computer and the Piraeus Bank systems is encrypted with the SSL 128-bit key by Verisign. Verisign is the most widely recognized encryption key generator company for banking services.

Confidential data transmission

To keep the data you transmit during your Piraeus e-banking session confidential, we use the SSL-128-bit encryption protocol. This key has been developed in partnership with Verisign, the most widely recognized encryption key generator company for banking services that specializes in transaction security.

All information you send to Piraeus Bank is confidential. To ensure that only the necessary information is used as part of the services we offer, we have taken all appropriate steps:

• only authorized bank employees have access to your company's transaction details and only when necessary
  
• Piraeus Bank does not disclose your personal or banking data or transaction data except if your company's legal representative has authorized it to do so in writing or it is obliged to do so by a court or decision of some other public authority
  
• when Piraeus Banks uses the services of third parties to support its computer systems, it ensures that your company's transactions remain confidential
  
• you can request any data held that relates to your company and you can also ask for that data to be corrected if you identify any errors
  
• for your own security, you must treat all information provided via Piraeus e-banking as confidential and secret and must not disclose it to third parties, since security is your responsibility too

Piraeus Bank respects and safeguards your personal data. That is why we keep your personal data on a secure central server.

We implement Law 2472/1997 on the protection of individuals from the processing of personal data and record the personal data of all customers, suppliers, employees and associates of Piraeus Bank that it becomes aware of as a result of employment relationship or partnerships or business transactions, in a file. That data may be sent elsewhere in Greece or abroad only if the data file is held and the data transmitted in accordance with the business objectives of Piraeus Bank and the requirements of the law.

For more information about the safeguarding of personal data, please call our customer service department from landline or mobile, Greece or abroad at +30 210 32 88 000.

The security of your data in Piraeus e-banking also depends on how responsibly you manage it. Only you know your personal access codes and you should not disclose them to anyone.

The Piraeus e-banking customer service department will never ask you for your Personal Identification Number (PIN). If anyone contacts you by phone or e-mail asking you for your PIN or asking you to log into Piraeus e-banking by clicking on some link, treat it with suspicion.

Do not disclose your personal access codes to anyone, even if they promise that they will offer you additional services or assistance. By providing your codes, you are giving that person access to your accounts and personal data. If these are used maliciously, you are directly responsible for the consequences.

If you believe that someone has phished your Personal Identification Number (PIN), change it immediately via Piraeus e-banking and inform Piraeus Bank.