Privacy Notice For Ghana International Bank Plc customers

Transcription

1 Privacy Notice For Ghana International Bank Plc customers You may be aware of the European Union s General Data Protection Regulation (GDPR), effective as from 25th May Ghana International Bank Plc (GHIB) welcomes the additional protections that GDPR provides to individuals and the bank is committed to maintaining the highest standards of privacy compliance. As part of that commitment, this privacy notice has been issued to inform you of the way in which GHIB processes your personal data and to inform you of your rights as an individual. Personal data Under the EU s General Data Protection Regulation (GDPR), personal data is defined as: any information relating to an identified or identifiable natural person How we use your information This privacy notice tells you how GHIB collects, uses and eventually disposes of your personal data. The personal data we generally collect and process is shown below: Personal data type: Name, Date of Birth Address, Telephone number(s) Employment details Banking details Details received from credit reference agencies Copy of passport or Identity card Address Cookies IP address NI Number Tax ID Source (where GHIB obtains the personal data, Directly from You From credit reference agency When you visit GHIB web site GHIB online banking The personal data we collect will be used for the following purposes: To manage your bank accounts To detect and prevent fraud Prevent and detect crime Recover debt To assess financial risks To develop our services to you (marketing)

2 The GDPR requires that GHIB must establish and explain to you, the legal basis upon which we process personal data. Our legal basis for processing for the personal data is as follows: - To fulfil terms and conditions agreed with you (contractual obligation) To comply with legal and regulatory obligations within the U.K/EU How much personal data does GHIB need to collect and store? GHIB will only collect information that is appropriate for the services we provide and the information collected shall not constitute an invasion of your privacy. In relation to developing services via direct marketing, GHIB shall ask for your explicit consent. Will GHIB share my personal data with anyone else? From time to time, we may pass your personal data on to third-party service providers who are specifically contracted to provide services to GHIB. Any third parties that we share your data with are obliged to keep your details as securely as GHIB does. Third parties are permitted to process personal data only to fulfil specific services on behalf of GHIB. Third party service providers may provide, for example, long term secure storage and data archive facilities to enable GHIB to satisfy long term legal and regulatory obligations. When stored or archived data is no longer required, the service providers shall securely dispose the personal data in accordance with GHIB s data retention procedures. If we hold additional sensitive personal data (i.e. ethnic origin, political view or religious belief etc.) on you and we wish to pass it onto a third party we will only do so once we have obtained your explicit consent, unless we are legally required doing otherwise. How will GHIB use the personal data it collects about me? GHIB will process (collect, store and use) the information you provide in order to provide banking and related services to you. We will only ask for a minimum amount of personal data and endeavour to keep your information accurate and up to date, and not keep it for longer than is necessary. However, please be aware that GHIB operates in a highly regulated environment and is required to retain information in accordance with legal and regulatory requirements.

3 Under what circumstances will GHIB contact me? GHIB aims to operate in a non-intrusive way. GHIB undertakes not to ask irrelevant or unnecessary questions. We will contact you if we have a legitimate reason. We may also contact you to develop our business services with you, provided we have your consent to do so. Can I find out the personal data that GHIB holds about me? Yes, by making a request to the GHIB Data Protection Officer (See details below), you can request the following information: The purpose of the processing as well as the legal basis for processing. If the processing is based on the legitimate interests of GHIB or a third party, information about those interests. The categories of personal data collected, stored and processed. Recipient(s) or categories of recipients that the data is/will be disclosed to. If we intend to transfer the personal data to a third country or international organisation, information about how we ensure this is done securely. How long the data will be stored. Details of your rights to correct, erase, restrict or object to such processing. Information about your right to withdraw consent at any time. How to lodge a complaint with the supervisory authority (UK ICO). Whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the personal data and the possible consequences of failing to provide such data. The source of personal data if it wasn t collected directly from you. Any details and information of automated decision making, such as profiling, and any meaningful information about the logic involved, as well as the significance and expected consequences of such processing. Data Retention Period GHIB will process personal data for as long as necessary to meet our contractual obligations and/or the UK/EU legal and regulatory obligations. In general, this means that the bank will store personal data for a minimum of 7 years after which time it will be destroyed in accordance with GHIB data retention policy. Your rights At any point, while we are in possession of or processing your personal data, you, have the following rights: Right of access you have the right to request a copy of the information that we hold about you. Right of rectification you have a right to correct data that we hold about you that is inaccurate or incomplete. Right to be forgotten in certain circumstances you can ask for the data we hold about you to be erased from our records.

4 Right to restriction of processing where certain conditions apply you have a right to restrict the processing. Right of portability you have the right to have the data we hold about you transferred to yourself or to another organisation. Right to object you have the right to object to certain types of processing such as direct marketing. Right to object to automated processing, including profiling you also have the right to be subject to the legal effects of automated processing or profiling. Right to judicial review: if GHIB refuses your request under rights of access, we will provide you with a reason as to why. You have the right to complain as outlined below Enquiries and Complaints If you wish to make an enquiry or complaint about how your personal data is being processed you have the right to contact the GHIB Data Protection Officer. Data Protection Officer (DPO) Contact Name: Data Protection Officer GHIB Address line 1: Ghana International Bank plc Address line 2: 67 Cheapside Address line 3: 1 st floor Address line 4: City of London Address line 5: EC2V 6AZ GHIBDPO@ghanabank.co.uk Telephone: , If you are not satisfied with the way your complaint has been handled by GHIB, you have recourse to the statutory authority (UK ICO). Contact details:

5 TP: , if you are calling from outside the U.K please call What forms of ID will I need to provide in order to access my personal data? GHIB has an obligation to check proof of identity, prior to responding to data protection requests. The bank accepts the following forms of ID: Passport, U.K/EU driving licence, U.K/EU birth certificate, recent utility bill (last 3 months) Two such forms of ID are normally required. -End-