DaveFlash This is not always easy at all.
Suppose, hypothetically .... you periodically receive a variable amount from a foreign company. bunq 🌈 can bunq really deduce much from the description. This would, for example, be a situation where I can imagine that bunq obliged to determine whether you receive these amounts legitimately.
In itself still a legitimate question to what extent bunq 🌈 needs details. From a GDPR perspective, I think bunq 🌈 has ample opportunities because there is a legal basis for having to perform such detective work.