Banks receive a warning from AP about privacy with direct marketing on payment data
‘Payment details provide a complete picture of someone’s life: what do you spend your money on, which associations are you a member of, who do you associate with, what patterns are visible?’ That is why the AP considers it important to point out the privacy rules to the banking sector and has sent a letter to the sector association for banks (NVB) to this effect. An exception is possible if customers are explicitly asked for permission in advance.
Read more about this here: https://autoriteitpersoonsgegevens.nl/nl/nieuws/banken-mogen-betaalgegevens-niet-zomaar-gebruiken-voor-reclame