They payment procedure with EC card is too insecure - you are asking only for IBAN and BIC, and these details are NOT private - as when somebody wants to have their friend transfering thm money, they give them IBAN and BIC details.