The Bank takes the following measures to maintain the confidentiality and security of your information:

• All of our operational and data processing systems are in a secure environment to protect your account information from access by third parties.
• We maintain and grant access to customer information only in accordance with our internal security standards.
• Employees have access to personal customer information only when needed for business purposes.
• Employees are educated on the importance of maintaining the confidentiality of customer information and on these privacy principles.
• Employees who violate privacy policies are subject to disciplinary measures.

Bank is registered as an operator for collecting personal data. The Bank collects non-public personal information about you from several sources. We receive information from you on your applications to the bank, from your transactions with us, from consumer credit reporting agencies and from third party verification systems. This information allows us to process and service your accounts with the Bank.

The bank discloses non-public personal information about its customers or former customers to any affiliated companies (companies owned by or under the same corporate umbrella as Eximbank ) or non-affiliated third parties (companies not related to Eximbank ) only with the authorization of the competent entities or just in cases allowed by law.