Answer: c. legal but unethical
Explanation:
With John being in charge of the loan application when Albert came to apply, John had access to Albert's information.
John then used this information which he had LEGAL access to, to recommend a bank product to Albert.
This is legal but UNETHICAL because Albert did not know that any information he gave will be used for a reason different from his application for a loan.