Cross River Bank Privacy Policy

Legal Rights & Agreement Rules · Context

Policy covers website visitors and business clients, not individual clients

Cross River Bank describes this Online Privacy Policy as telling website users (“visitors”) and business clients (“customers”) what information it collects, how it uses it, and when it shares it with third parties. It states that an individual client of the bank is not covered by this Online Privacy Policy; that client’s information is described in a separate Cross River Bank Privacy Notice linked from the website homepage footer.

Supporting quotations

This privacy policy is designed to inform you of the types of information we collect from our website users (“visitors”) and from our business clients (“customers”).

if you are an individual client of Cross River Bank, our collection, use ,and sharing of your information is not governed by this Online Privacy Policy, and is discussed in our separate Cross River Bank’s Privacy Notice found in the footer of the homepage of our website

Qualifications & exceptions

• The named audiences are website visitors and business clients; an individual client of the bank is expressly outside this Online Privacy Policy.

Not stated here

• The separate Cross River Bank Privacy Notice linked from the homepage footer is not supplied in this source, so its terms are not analyzed here.

Legal Rights & Agreement Rules · Context

Version dated effective 12/2024 and last updated 7/2026

The page identifies the version it publishes with an effective date of 12/2024 and a last update of 7/2026. The policy later defines these two dates and states how amendments apply.

Supporting quotations

Effective Date: 12/2024

Last Update: 7/2026

Not stated here

• The source does not state here what the 7/2026 update changed or whether an earlier version remains applicable to information already submitted.

Legal Rights & Agreement Rules · Company practice

Disclosure in response to subpoenas, warrants and legal process

The bank may disclose information in response to subpoenas, warrants or court orders, in connection with any legal process, or to comply with relevant laws.

Supporting quotations

We may disclose information in response to subpoenas, warrants, or court orders, or in connection with any legal process, or to comply with relevant laws.

Legal Rights & Agreement Rules · Company practice

Sharing to defend claims, investigate fraud or protect safety

The bank may share information to establish or exercise its rights, defend against a legal claim, investigate, prevent or take action regarding possible illegal activities, suspected fraud, the safety of a person or property, or a violation of its policies.

Supporting quotations

We may also share information in order to establish or exercise our rights, to defend against a legal claim, to investigate, prevent, or take action regarding possible illegal activities, suspected fraud, safety of person or property, or a violation of our policies.

Legal Rights & Agreement Rules · User right or choice

California rights to know, confirm, delete and correct information

For California residents the policy lists rights to request disclosure of certain information about the collection and use of personal information over the past 12 months, to confirm that the bank holds personal information, to request more information about the categories of personal information, if any, shared with third parties or affiliates for those parties’ direct marketing, to request deletion of collected personal information, and to request changes to personal information.

Supporting quotations

For California residents, California law provides specific rights regarding personal information, including:

the right to request that we disclose certain information about our collection and use of personal information over the past 12 months.

the right to confirm that we have personal information.

the right to request more information concerning the categories of personal information (if any) we share with third parties or affiliates for those parties to use for direct marketing.

the right to request that we delete any personal information that we have collected, subject to certain exceptions.

the right to request that we make changes to personal information,

Qualifications & exceptions

• The deletion right is stated to be subject to certain exceptions.
• These rights are stated for California residents.

Not stated here

• The source does not enumerate the exceptions to the deletion right in this list.

Legal Rights & Agreement Rules · User right or choice

California opt-out of sale or sharing for behavioral advertising

California residents have the right to opt out of the sale of their personal information or of the sharing of their personal information for cross-context behavioral advertising. The policy says this right can be exercised by adjusting cookie settings.

Supporting quotations

the right to opt out of the sale of your personal information or the sharing of your personal information for cross-context behavioral advertising. You can exercise this right by adjusting your cookie settings

here

Qualifications & exceptions

• The stated route for exercising the opt-out is adjusting cookie settings.
• The policy states elsewhere that any opt out applies only to the specific browser or device from which it is made.

Not stated here

• This section does not restate the browser-or-device limit on an opt-out, or say whether other opt-out channels exist for it.

Legal Rights & Agreement Rules · User right or choice

Text-message STOP and other targeted-advertising opt-outs

A California resident who receives a promotional text message can opt out of future text messages by replying “STOP.” The policy also says other forms of targeted advertising can be opted out of by contacting the bank using the contact information that follows.

Supporting quotations

If you receive a text message from us that contains promotional content, you can opt out of future text messages by replying "STOP."

. You may also opt out of other forms of targeted advertising by contacting us using the information below.

Qualifications & exceptions

• The STOP reply is described for text messages that contain promotional content.
• The other-targeted-advertising route is contacting the bank, not the cookie settings.

Legal Rights & Agreement Rules · Procedure

How to submit a California privacy rights request

Requests go to privacy@crossriver.com, 1-877-55CRB55, or Cross River Bank c/o Online Banking Department, 2115 Linwood Ave., Fort Lee, NJ 07024. A request must put “California Privacy Rights Request” in the first line of its description and include name, street address, city, state and ZIP code. The bank may ask the requester to verify identity with name, last name, driver’s license or California card ID number, and account numbers, and says it makes an official request for sensitive identifying information to ensure secure transmission.

Supporting quotations

To make such a request, contact us at privacy@crossriver.com, call 1-877-55CRB55, or send a written inquiry to Cross River Bank c/o Online Banking Department; 2115 Linwood Ave., Fort Lee, NJ 07024. Requests must include “California Privacy Rights Request” in the first line of the description and include name, street address, city, state, and ZIP code. If a request is submitted, we may ask to verify the customer’s identity by submitting: name, last name, driver’s license or California card ID number, and account number(s). Please note that the Bank will make an official request for sensitive identifying information to ensure secure transmission.

Qualifications & exceptions

• The request must be labeled “California Privacy Rights Request” and carry the stated address details.
• Identity verification may be required, including a driver’s license or California card ID number and account numbers.

Not stated here

• The source states no response deadline for a California rights request.

Legal Rights & Agreement Rules · User right or choice

No discrimination for exercising rights; agents may act in writing

Customers have the right not to be discriminated against for exercising California privacy rights. A customer may designate an agent in writing to exercise those rights, and the bank may require identity verification and documentation of the agent’s authorization before responding.

Supporting quotations

Customers also have the right not to be discriminated against if they exercise any rights under California privacy law. Customers may designate in writing an agent to exercise these rights on their behalf. Cross River Bank may require identity verification and provide documentation of the agent’s authorization before we respond to the request.

Qualifications & exceptions

• The bank may require identity verification and proof of the agent’s authorization.

Legal Rights & Agreement Rules · Procedure

EU data protection rules and how to exercise the listed rights

The policy says the EU General Data Protection Regulation lays down rules for protecting natural persons in the EU in relation to processing of their personal data, and defines personal data for the policy as any information relating to an identified or identifiable natural person. To exercise the rights described, it directs people to call toll-free 1-877-55CRB55, send a written inquiry to Cross River Bank c/o Online Banking Department, 2115 Linwood Ave., Fort Lee, NJ 07024, or email privacy@crossriver.com.

Supporting quotations

The European Union (“EU”) General Data Protection Regulation (“GDPR”) lays down rules relating to the protection of natural persons in the EU with regard to the processing of their personal data. For the purposes of this Privacy Policy, personal data means any information relating to an identified or identifiable natural person.

To exercise any of the rights described below, please contact our Group by calling toll-free at 1-877-55CRB55; by sending a written inquiry to Cross River Bank c/o Online Banking Department, 2115 Linwood Ave., Fort Lee, NJ 07024

Qualifications & exceptions

• The rights described are for people in the EU under the GDPR.

Not stated here

• The source states no response deadline for access, rectification, erasure or restriction requests; only portability states a period of up to 90 days.

Legal Rights & Agreement Rules · User right or choice

EU rights of access, rectification and erasure

People in the EU have the right to access, update, correct or delete their personal data, and the right to rectify inaccuracies in it.

Supporting quotations

Right to Access, Rectification, or Erasure. You have the right to access, update, correct, or delete your personal data. You also have the right to rectify any inaccuracies in your personal data.

Legal Rights & Agreement Rules · User right or choice

EU right to restrict processing, with stated exceptions

People in the EU may ask the bank to restrict processing of their personal data where it is inaccurate or unlawful, under contest, or no longer being processed for the original purpose. The bank may continue processing if necessary to resolve legal claims, protect another person’s rights, or for important public interest reasons, and says it will notify the person promptly if it objects to the restriction.

Supporting quotations

Right to Restrict Data Processing. You have the right to restrict the processing of your personal data upon request if it is (a) inaccurate or unlawful, (b) under contest, or (c) no longer being processed for the original purpose. Cross River Bank may continue to process the data if it is necessary to resolve legal claims, for the protection of the rights of another person, or for reasons of important public interest. If Cross River Bank objects to the restriction of data processing, we will notify you promptly after receiving your request.

Qualifications & exceptions

• The right applies to the three stated situations: inaccurate or unlawful data, data under contest, or data no longer processed for the original purpose.
• The bank may keep processing for legal claims, another person’s rights, or important public interest.

Legal Rights & Agreement Rules · User right or choice

EU data portability within 90 days

People in the EU can request and obtain the personal data they provided, or that the bank collected through their consent or contractual agreements. The bank says it provides the information in a commonly used, machine-readable format promptly but no longer than 90 days from the initial request, depending on complexity and volume, and will explain and suggest further steps if it cannot complete the request.

Supporting quotations

Right to Data Portability. You have the right to request and obtain your personal data that you provided to us or that we collected through your consent or contractual agreements. We will provide your information in a commonly used, machine-readable format promptly, but no longer than 90 days from the initial request depending on the complexity and volume of requests. If circumstances arise where we are unable to complete your request, we will promptly provide a relevant explanation, as well as inform you of additional steps that you may take.

Qualifications & exceptions

• The 90-day outside limit depends on the complexity and volume of requests.
• The right covers data the person provided or that was collected through consent or contractual agreements.

Legal Rights & Agreement Rules · User right or choice

Withdrawing consent, and what may follow

A person may withdraw any consent previously given for processing of personal data. The bank says it will apply the preferences going forward within a reasonable time as required by applicable law, and may still process the data for limited purposes such as giving effect to the request or safeguarding its business. In some circumstances, withdrawing consent to use or disclosure means the person cannot use the bank’s products or services.

Supporting quotations

Withdrawing Your Consent. You may withdraw any consent you previously provided to us for the processing of your personal data. As required by applicable law, we will apply your preferences going forward, within a reasonable amount of time. Even where you withdraw your consent, we may still process your personal data for limited purposes, for example, to give effect to your request or to safeguard our business. In some circumstances, withdrawing your consent to our use or disclosure of your personal information will mean that you cannot use our products or services.

Qualifications & exceptions

• Preferences apply going forward, within a reasonable time, as required by applicable law.
• Limited processing may continue to give effect to the request or safeguard the business.
• Withdrawal can mean loss of access to the bank’s products or services in some circumstances.

Legal Rights & Agreement Rules · User right or choice

Right to complain to an EU supervisory authority

A person may complain to an EU supervisory authority if they believe their personal data was processed in a way that is not compliant with the GDPR, or if the bank cannot comply with the data portability right or does not respond to the request in a timely manner.

Supporting quotations

Lodging a Complaint with a Supervisory Authority. You have the right to submit a complaint to an EU supervisory authority if you believe that your personal data has been processed in a manner that is not compliant with the GDPR. You also have the right to submit a complaint to an EU supervisory authority if Cross River Bank is unable to comply with your right of data portability or does not respond to your request within a timely manner.

Qualifications & exceptions

• The complaint routes are a GDPR compliance concern, a portability failure, or a late response.

Legal Rights & Agreement Rules · Context

Summary repeats that the policy covers only visitors and business clients

The closing summary says the policy applies only to visitors to the bank’s website and to its business clients, and restates the bank’s commitment to maintaining the privacy of customer information as expressed in the policy.

Supporting quotations

We appreciate our customer’s business and we are committed to maintaining the privacy of our customer’s information, as expressed in this Privacy Policy. This Privacy Policy applies only to visitors to our website and our business clients.

This privacy policy is designed to inform you of the types of information we collect from our website users (“visitors”) and from our business clients (“customers”).

Qualifications & exceptions

• The summary repeats the exclusion of anyone who is neither a website visitor nor a business client.

Legal Rights & Agreement Rules · Company practice

Amendments, version dates and how a prior policy governs

The bank reserves the right to amend the privacy policy at any time. Where a change is material, the policy in place when personal information was submitted generally governs that information unless the bank receives consent to the new policy. The effective date is when the current version took effect, and the last updated date is when it was last substantively modified. On a material change the bank will attempt to notify people by email or a website pop-up.

Supporting quotations

We reserve the right to amend the Privacy Policy at any time. To the extent that our policy changes in a material way, the policy that was in place at the time that personal information was submitted to us will generally govern that information unless we receive consent to the new privacy policy. Our privacy policy includes an “effective” and “last updated” date. The effective date refers to the date that the current version took effect. The last updated date refers to the date that the current version was last substantively modified. If we make a material change to our privacy notice, we will attempt to notify you through email or through a website pop-up.

Qualifications & exceptions

• The prior policy “generally” governs earlier information, so the rule is not stated as absolute.
• Consent to the new policy displaces that default.
• Material-change notice is an attempt by email or website pop-up, not a guaranteed delivery.

Not stated here

• The source does not define a material change or state how consent to a new policy is obtained.

Legal Rights & Agreement Rules · Procedure

Contact route for privacy questions and alternative formats

Questions, comments or complaints about privacy practices, and requests to receive the privacy policy in an alternative format because of a disability, go to Customer Service at 1-877-55CRB55 or privacy@crossriver.com.

Supporting quotations

For questions, comments, or complaints concerning our privacy practices or the need to access this privacy policy in an alternative format due to having a disability, please contact Customer Service at 1-877-55CRB55

privacy@crossriver.com

Qualifications & exceptions

• The stated route is Customer Service by telephone or email.

Legal Rights & Agreement Rules · Context

Spain employment privacy notices are linked, not included

The page points readers to separate Cross River Technologies (Spain) employment-related privacy notices through a link. Those notices are a different document from this policy.

Supporting quotations

For Cross River Technologies (Spain) employment related privacy notices, click

here

Qualifications & exceptions

• The link concerns employment-related notices of Cross River Technologies (Spain), not consumer banking privacy.

Not stated here

• The linked Spain employment privacy notices are not supplied here; their text is not analyzed.

Legal Rights & Agreement Rules · Context

Israel employment privacy notices are linked, not included

The page points readers to separate Cross River Technologies (Israel) employment-related privacy notices through a link. Those notices are a different document from this policy.

Supporting quotations

For Cross River Technologies (Israel) employment related privacy notices, click

here

Qualifications & exceptions

• The link concerns employment-related notices of Cross River Technologies (Israel), not consumer banking privacy.

Not stated here

• The linked Israel employment privacy notices are not supplied here; their text is not analyzed.

Legal Rights & Agreement Rules · Context

Spanish version restates the policy’s visitor and business-client scope

A Spanish-language text headed “DECLARACIÓN DE PRIVACIDAD ONLINE” follows the English policy. Its introduction says it informs users of the website (“visitantes”) and business clients (“clientes”) about the data collected, its use and when it is shared with third parties, and it likewise states that an individual client of Cross River Bank is not governed by this Online Privacy Policy but by the separate Cross River Bank Privacy Notice linked from the website homepage.

Supporting quotations

DECLARACIÓN DE PRIVACIDAD ONLINE

La presente política de privacidad está diseñada para informarle de las clases de datos que recogemos de los usuarios de nuestro sitio web (“visitantes”) y de nuestros clientes empresariales (“clientes”).

si se trata de un cliente persona física de Cross River Bank, la recogida, uso y comunicación por nuestra parte de su información no se rigen por la presente Política de Privacidad Online, sino que se describe por separado en nuestro Aviso de Privacidad de Cross River Bank, que se encuentra a pie de la página principal de nuestro sitio web

This privacy policy is designed to inform you of the types of information we collect from our website users (“visitors”) and from our business clients (“customers”).

Qualifications & exceptions

• The Spanish text parallels the English introduction and does not present itself as a separate policy with different terms.

Not stated here

• The source does not state whether the Spanish or the English text controls if their wording diverges.

Legal Rights & Agreement Rules · Company practice

Spanish version restates legal-process, rights and fraud disclosures

The Spanish text says the bank may disclose information in response to subpoenas, warrants or court orders, in relation to any judicial proceeding, or to comply with relevant laws, and may share information to obtain or exercise its rights, defend against legal claims, investigate, prevent or act on possible illegal activities, suspected fraud, the safety of persons or property, or breaches of its policies.

Supporting quotations

Podremos divulgar información en respuesta a citaciones, mandatos u ordenes judiciales, o con relación a cualquier procedimiento judicial, o para cumplir con las leyes relevantes. Asimismo, podremos compartir información a fin de obtener o ejercer nuestros derechos, defendernos frente a reclamaciones legales, investigar, impedir o emprender acciones con respecto a potenciales actividades ilícitas, supuestos fraudes, la seguridad de las personas o los bienes, o el incumplimiento de nuestras políticas.

Legal Rights & Agreement Rules · User right or choice

Spanish version restates the California rights list

The Spanish text says California residents have specific rights over personal information: to request disclosure of certain information about collection and use over the past 12 months, to confirm that the bank holds personal information, to request more information about categories shared, if any, with third parties or affiliates for their direct marketing, to request deletion subject to certain exceptions, and to request changes to personal information.

Supporting quotations

Si reside en California, las leyes de este lugar le otorgan derechos específicos con respecto a la información personal, incluido:

el derecho a solicitar que comuniquemos cierta información sobre el modo en que recogemos y utilizamos la información personal durante los últimos 12 meses.

el derecho a confirmar que disponemos de información personal.

el derecho a solicitar más información relativa a las categorías de información personal que compartimos (en su caso) con terceros o filiales de dichos terceros para su uso con fines de marketing directo.

el derecho a solicitar que eliminemos alguno de los datos de carácter personal que hubiéramos recabado, con ciertas excepciones.

el derecho a solicitar que realicemos cambios a la información personal.

Qualifications & exceptions

• The deletion right is subject to certain exceptions.
• The rights are stated for California residents.

Not stated here

• The source does not list the exceptions to deletion.

Legal Rights & Agreement Rules · User right or choice

Spanish version restates the opt-out of sale or advertising sharing

The Spanish text gives California residents the right to reject the sale of their personal information or the sharing of their personal information for cross-context behavioral advertising, and says the right is exercised by adjusting cookie settings.

Supporting quotations

el derecho a rechazar la venta de su información personal ni compartiendo de su información personal para fines de publicidad basada en el comportamiento en un contexto transversal. Puede ejercer este derecho ajustando la configuración de cookies

aquí

Qualifications & exceptions

• The stated route is adjusting cookie settings.
• The browser-or-device limit on an opt-out appears in the preceding Spanish paragraph.

Legal Rights & Agreement Rules · User right or choice

Spanish version restates the STOP reply and other ad opt-outs

The Spanish text says a recipient of a promotional text message can refuse future text messages by replying to it with the word “STOP,” and can opt out of other forms of targeted advertising by contacting the bank using the contact information provided below.

Supporting quotations

si recibe un mensaje de texto nuestro con contenido promocional, podrá rechazar la recepción de futuros mensajes de texto, contestando al mismo con la palabra "STOP"

. Asimismo, puede optar por no recibir otras formas de publicidad dirigida poniéndose en contacto con nosotros utilizando la información de contacto proporcionada a continuación.

Qualifications & exceptions

• The STOP reply covers promotional text messages.
• The other-targeted-advertising route is contacting the bank.

Not stated here

• The contact details are stated in the paragraph that follows, which is analyzed where it is a primary block.

Legal Rights & Agreement Rules · Context

Spanish text lists the California rights twice

After the first California rights list, the Spanish text repeats the same items — disclosure, confirmation, direct-marketing sharing details, deletion, correction, the sale or advertising opt-out and the STOP reply. The second opt-out item combines the cookie-settings route and the contact route in a single bullet.

Supporting quotations

el derecho a solicitar que comuniquemos cierta información sobre el modo en que recogemos y utilizamos la información personal durante los últimos 12 meses.

el derecho a confirmar que disponemos de información personal.

el derecho a solicitar más información relativa a las categorías de información personal que compartimos (en su caso) con terceros o filiales de dichos terceros para su uso con fines de marketing directo.

el derecho a solicitar que eliminemos alguno de los datos de carácter personal que hubiéramos recabado, con ciertas excepciones.

el derecho a solicitar que realicemos cambios a la información personal.

el derecho a rechazar la venta de su información personal ni compartiendo de su información personal para fines de publicidad basada en el comportamiento en un contexto transversal. Puede ejercer este derecho ajustando la configuración de cookies aquí. Asimismo, puede optar por no recibir otras formas de publicidad dirigida poniéndose en contacto con nosotros utilizando la información de contacto proporcionada a continuación.

si recibe un mensaje de texto nuestro con contenido promocional, podrá rechazar la recepción de futuros mensajes de texto, contestando al mismo con la palabra "STOP".

Qualifications & exceptions

• The repetition is present in the extracted source text and adds no new right or condition.
• The second pass states the same conditions, including the exceptions to deletion.

Not stated here

• The source does not explain why the rights appear twice.

Legal Rights & Agreement Rules · Procedure

Spanish version states the California request procedure

The Spanish text directs requests to privacy@crossriver.com, 1-877-55CRB55, or Cross River Bank c/o Online Banking Department, 2115 Linwood Ave., Fort Lee, NJ 07024. A request must put “California Privacy Rights Request” in the first line and include name, street name, city, state and postal code. The bank may ask the client to verify identity by giving name, surnames, driver’s license or California identity card number and account number(s), and says it makes a formal request for sensitive identifying information to ensure secure transmission. The English text states the same procedure with the same routes and required details.

Supporting quotations

Para realizar tal solicitud, puede ponerse en contacto con nosotros enviando un email a privacy@crossriver.com, llamando al 1-877-55CRB55, o enviando una solicitud por escrito a Cross River Bank c/o Online Banking Department; 2115 Linwood Ave., Fort Lee, NJ 07024. Las solicitudes deberán indicar, en la primera línea de la descripción, “California Privacy Rights Request” [solicitud sobre derechos de privacidad en California], e incluirán nombre, nombre de la calle, ciudad, estado y código postal. Si se presenta una solicitud, podemos pedir que se verifique la identidad del cliente, facilitando su nombre, apellidos, número de permiso de conducir o tarjeta de identidad de California, y número(s) de cuenta. Tenga en cuenta que el Banco realizará una solicitud formal con respecto a la información identificativa sensible, para garantizar una transmisión segura.

To make such a request, contact us at privacy@crossriver.com, call 1-877-55CRB55, or send a written inquiry to Cross River Bank c/o Online Banking Department; 2115 Linwood Ave., Fort Lee, NJ 07024. Requests must include “California Privacy Rights Request” in the first line of the description and include name, street address, city, state, and ZIP code. If a request is submitted, we may ask to verify the customer’s identity by submitting: name, last name, driver’s license or California card ID number, and account number(s). Please note that the Bank will make an official request for sensitive identifying information to ensure secure transmission.

Qualifications & exceptions

• The request label and address details are required.
• Identity verification may include a driver’s license or California ID card number and account numbers.

Not stated here

• The source states no response deadline for a California rights request.

Legal Rights & Agreement Rules · User right or choice

Spanish version restates non-discrimination and authorized agents

The Spanish text says clients have the right not to be discriminated against for exercising any of their rights under California privacy laws. Clients may designate an agent in writing to exercise those rights, and the bank may require identity verification and documentation of the agent’s authorization before responding to the request.

Supporting quotations

Los clientes también tendrán derecho a no ser discriminados si ejercen cualquiera de sus derechos en virtud de las leyes de California en materia de privacidad. Los clientes podrán designar por escrito a un agente que ejerza tales derechos en su nombre. Cross River Bank podrá requerir que se verifique la identidad y se facilite documentación de la autorización del agente antes de que respondamos a la solicitud.

Qualifications & exceptions

• Identity verification and proof of the agent’s authorization may be required.

Legal Rights & Agreement Rules · Procedure

Spanish version states the EU rights framework and contact routes

The Spanish text says the EU General Data Protection Regulation establishes rules for protecting natural persons in the EU in relation to processing of their personal data, and defines personal data as any information relating to an identified or identifiable natural person. To exercise the rights described, it directs people to contact the Group by calling toll-free 1-877-55CRB5, writing to Cross River Bank c/o Online Banking Department, 2115 Linwood Ave., Fort Lee, NJ 07024, or emailing privacy@crossriver.com.

Supporting quotations

El Reglamento General de Protección de Datos de la Unión Europea (“UE”) (“RGPD”) establece las normas relativas a la protección de las personas físicas en la UE, con respecto al tratamiento de sus datos de carácter personal. A efectos de la presente Política de Privacidad, la expresión ‘datos de carácter personal’ hace referencia a cualquier información relativa a una persona física identificada o identificable.

Para ejercer cualquiera de los derechos descritos a continuación, le rogamos se ponga en contacto con nuestro Grupo, llamando al teléfono gratuito 1-877-55CRB5; enviando una solicitud por escrito a Cross River Bank c/o Online Banking Department; 2115 Linwood Ave., Fort Lee, NJ 07024; o por email a privacy@crossriver.com.

Qualifications & exceptions

• The Spanish text prints the toll-free number as 1-877-55CRB5, one digit shorter than the 1-877-55CRB55 used in the English text and in the Spanish California request paragraph.
• The rights described are for people in the EU under the GDPR.

Not stated here

• The source states no response deadline for access, rectification, erasure or restriction requests; only portability states a period of up to 90 days.

Legal Rights & Agreement Rules · User right or choice

Spanish version restates access, rectification and erasure rights

The Spanish text gives people the right of access, updating, correction or elimination of their personal data, and the right to rectify inaccuracies in it.

Supporting quotations

Derecho de acceso, rectificación o eliminación. Usted tendrá derecho de acceso, actualización, corrección o eliminación con respecto a sus datos de carácter personal. También tiene derecho a rectificar las imprecisiones de sus datos de carácter personal.

Legal Rights & Agreement Rules · User right or choice

Spanish version restates the right to restrict processing

The Spanish text gives the right to restrict processing of personal data on request where it is inaccurate or unlawful, under challenge, or no longer being processed for its original purposes. The bank may continue processing if necessary to resolve legal claims, protect another person’s rights or for important public-interest reasons, and says it will notify the person immediately after receiving a request if it opposes the restriction.

Supporting quotations

Derecho a restringir el tratamiento de los datos. Tendrá derecho a restringir el tratamiento de sus datos de carácter personal previa solicitud, si (a) fuera impreciso o ilícito, (b) estuviera impugnado o (c) no se estuviera realizando ya para sus fines originales Cross River Bank podría continuar tratando sus datos si fuera necesario para resolver reclamaciones legales, para la protección de los derechos de otra persona, o por motivos importantes de interés público. Si Cross River Bank se opone a la restricción del tratamiento de datos, se lo notificaremos inmediatamente tras la recepción de su solicitud.

Qualifications & exceptions

• The source runs the list of grounds directly into the next sentence (“…sus fines originales Cross River Bank podría…”), so the boundary between the grounds and the following sentence is unclear in the text.
• The bank may continue processing for legal claims, another person’s rights or important public interest.

Legal Rights & Agreement Rules · User right or choice

Spanish version restates portability within 90 days

The Spanish text gives the right to request and obtain personal data the person provided or that the bank collected through their contractual or consent agreements. The bank says it will provide the information quickly in a commonly used, machine-readable format and at most within 90 days of the initial request depending on complexity and volume, and will explain and suggest further steps if it cannot complete the request.

Supporting quotations

Derecho a la portabilidad de los datos. Tendrá derecho a solicitar y obtener sus datos de carácter personal que nos proporcionó, o que recogimos a través de sus acuerdos contractuales o de consentimiento. Le proporcionaremos rápidamente su información en formato de uso común y legible por máquina y, como máximo, dentro de los 90 días siguientes a la solicitud inicial, dependiendo de la complejidad y volumen de solicitudes. Si se diera alguna circunstancia por la que no podamos completar su solicitud, le ofreceremos oportunamente la explicación correspondiente, y le informaremos de los pasos adicionales que puede dar.

Qualifications & exceptions

• The 90-day outside limit depends on the complexity and volume of requests.
• The right covers data the person provided or that was collected through consent or contractual agreements.

Legal Rights & Agreement Rules · User right or choice

Spanish version restates withdrawal of consent and its effects

A person may withdraw consent previously given for processing of personal data. Where applicable law requires it, the bank will take the preferences into account going forward within a reasonable period, and may still process personal data for limited purposes such as giving effect to the request or protecting its business. In certain circumstances, withdrawing consent to use or disclosure means the person cannot use the bank’s products or services.

Supporting quotations

Retirada del consentimiento. Podrá retirar el consentimiento que nos haya otorgado previamente para el tratamiento de sus datos de carácter personal. Cuando lo requieran las leyes aplicables, tendremos en cuenta sus preferencias en el futuro, dentro de un período de tiempo razonable. Incluso cuando retire su consentimiento, podríamos continuar tratando sus datos de carácter personal para fines limitados, por ejemplo, para dar efecto a su solicitud o proteger nuestro negocio. En determinadas circunstancias, la retirada de su consentimiento a que utilicemos o divulguemos su información personal supondrá que no podrá utilizar nuestros productos o servicios.

Qualifications & exceptions

• Preferences apply going forward within a reasonable period where the law requires it.
• Limited processing may continue to give effect to the request or protect the business.
• Withdrawal can prevent use of the bank’s products or services in certain circumstances.

Legal Rights & Agreement Rules · User right or choice

Spanish version restates the supervisory-authority complaint right

The Spanish text gives the right to complain to an EU supervisory authority where the person believes their personal data was processed in breach of the GDPR, or where Cross River Bank cannot comply with the data portability right or does not respond to the request in a timely manner.

Supporting quotations

Presentar una reclamación ante la Autoridad Supervisora. Usted tendrá derecho a presentar una reclamación ante una autoridad supervisora de la UE, si estima que sus datos de carácter personal han sido tratados incumpliendo el RGPD. También tendrá derecho a presentar una reclamación ante una autoridad supervisora de la UE, si Cross River Bank no pudiera cumplir con el derecho que usted ostenta a la portabilidad de datos, o no responde a su solicitud de manera oportuna.

Qualifications & exceptions

• The complaint routes are a GDPR breach concern, a portability failure or a late response.

Legal Rights & Agreement Rules · Context

Spanish summary limits the policy to visitors and business clients

The Spanish closing summary restates the bank’s commitment to maintaining the privacy of client information as expressed in the policy, and says the policy applies only to visitors to its website and to its business clients.

Supporting quotations

Apreciamos el negocio de nuestros clientes y nos comprometemos a mantener la privacidad de la información de nuestros clientes, según lo dispuesto en la presente Política de Privacidad. Esta Política de Privacidad es sólo de aplicación a los visitantes de nuestro sitio web y a nuestros clientes empresariales.

Qualifications & exceptions

• The summary repeats that anyone who is neither a website visitor nor a business client is outside the policy.

Legal Rights & Agreement Rules · Company practice

Spanish version restates amendment and version governance

The Spanish text says the bank reserves the right to modify the policy at any time. Where the policy changes in any substantial respect, the policy in force when the personal information was provided generally governs that information unless the bank receives approval of the new privacy policy. It explains the “entrada en vigor” (effective) and “última actualización” (last updated) dates, and says a substantial change will be notified by attempting an email or a website pop-up message.

Supporting quotations

Nos reservamos el derecho a modificar la Política de Privacidad en cualquier momento. En la medida en que cambie nuestra política de privacidad en cualquier aspecto sustancial, la política que estuviera en vigor en el momento en que se nos facilitó la información personal regirá, en general, dicha información, a menos que recibamos la aprobación de la nueva política de privacidad. Nuestra política de privacidad incluye la fecha de “entrada en vigor” y la de “última actualización”. La fecha de entrada en vigor hará referencia a la fecha a partir de la cual la versión actual surte efectos. La fecha de última actualización hará referencia a la fecha en la que la versión actual fue modificada sustancialmente. Si realizamos un cambio sustancial a nuestro aviso de privacidad, intentaremos notificárselo a través de un email o a través de un mensaje emergente en el sitio web.

Qualifications & exceptions

• The Spanish text conditions the default on receiving “aprobación” (approval) of the new policy, where the English text says “consent.”
• The governing-policy rule is stated as general, not absolute.

Not stated here

• The source does not define a substantial change or state how approval of a new policy is obtained.
• The source does not say whether “aprobación” and the English text’s “consent” describe the same act.

Legal Rights & Agreement Rules · Procedure

Spanish version states the contact route for privacy questions

The Spanish text directs questions, comments or complaints about privacy practices, and requests for the policy in a different format because of a disability, to the Customer Service telephone number 1-877-55CRB55 or to privacy@crossriver.com.

Supporting quotations

Para formular preguntas, y realizar comentarios o quejas relativas a nuestras prácticas en materia de privacidad, o la necesidad de acceder a esta política de privacidad en un formato distinto por razones de discapacidad, le rogamos se ponga en contacto con el Servicio de Atención al Cliente en el teléfono 1-877-55CRB55, o mediante email dirigido a privacy@crossriver.com.

Qualifications & exceptions

• The phone number here matches the English text’s 1-877-55CRB55.

Legal Rights & Agreement Rules · Context

Spanish Spain-notice link points to a different URL than the English link

The Spanish text points readers to employment-related privacy notices for CRT (Spain) through a link labeled “aquí.” That link targets crossriver.com/legal/spanish-privacy-statements, while the English text’s Spain notice link targets crossriver.com/legal/spanish-privacy-notices.

Supporting quotations

Con relación a los avisos de privacidad en materia laboral en CRT (España), haga clic

aquí

Qualifications & exceptions

• The two language versions use different target URLs for the Spain employment notices.
• The Spanish text abbreviates Cross River Technologies as “CRT.”

Not stated here

• The source does not say whether the two Spain notice URLs lead to the same page; the linked notices themselves are not supplied here.

Legal Rights & Agreement Rules · Context

Spanish version links Israel employment notices separately

The Spanish text points readers to employment-related privacy notices for CRT (Israel) through a link labeled “aquí” to crossriver.com/legal/privacy-policy-crt, the same target the English text uses.

Supporting quotations

Con relación a los avisos de privacidad en materia laboral en CRT (Israel), haga clic

aquí

Qualifications & exceptions

• The target URL matches the English text’s Israel notice link.

Not stated here

• The linked Israel employment notices are not supplied here; their text is not analyzed.