Consumer Protection Standards Privacy Notice
Disclosure Notice regarding the Collection and Processing of Personal Data
I. Introduction
This Disclosure Notice is made available by the National Bank of Fujairah PJSC (“the Bank” or “We”) to its clients and prospective clients who are Consumers under the Consumer Protection Regulations and Standards issued by the Central Bank of the UAE (‘CPR’) (referred to as “the Customer” or ‘You’)
In the context of its activities as a financial institution and financial services provider, the Bank collects, holds, discloses and/or otherwise processes personal data (meaning any type of information relating to identified or identifiable individuals). You have also been requested to provide certain personal data of yours to the Bank in connection with an application for financial services.
The Bank values the right to privacy and strives to protect the personal data it collects and uses in accordance with the CPR. In this Disclosure Notice, the Bank will set out the process for collection, processing, and usage of your personal data (collectively referred to as "processing"), the purposes for which these data are used, the parties having access to these data, the legal rights of the individuals concerned, and etc.
From time to time, the Bank will need to amend or update this document. In such case, you will be notified hereof in an appropriate manner. The most recent version of this Disclosure Notice is always available on the website.
II. Types of personal data processed and purposes of the processing
The Bank processes the following types of personal data for the following purposes:
| Purpose | Types of Personal Data Processed for this Purpose |
| (1) proper identification of authorised operators of Bank accounts and facilities |
|
| (2) proper identification of significant beneficial owners or controllers of legal entities that are customers of the Bank |
|
| (3) fulfilling the legal obligations of the Bank pursuant to Anti Money Laundering and Counter Terrorism Financing legislation applicable in the United Arab Emirates |
|
| (4) assessment of credit worthiness |
|
| (5) contract administration, accounting and follow-up of payments |
|
| (6) management of disputes, claims and legal proceedings |
|
| (7) fulfilment of financial services such as statement printing and distribution and creating credit or debit cards and their distribution where your data will be shared with our service providers |
|
| (8) conducting analysis required to be conducted under the CPR |
|
These purposes are fundamental to the provision of financial services to you and you confirm and acknowledge that:
(a) You have requested financial services from the Bank,
(b) You are aware of the fact that this entails the collection of certain personal data (as described above) by the Bank, and
(c) Failure to provide complete and accurate details will result in the request for financial services being refused.
III. Retention Periods
Your personal data will not be stored for longer than is necessary in relation to the purposes for which we process them (see above). The period for which your personal data has to be retained is defined by law (usually seven years after the end of a contract or execution of a transaction.).
This enables the Bank to comply with legal and regulatory requirements or use it where the Bank needs for legitimate purposes such as managing your account and dealing with any disputes or concerns that may arise.
We may need to retain your information for a longer period where we need the information to comply with regulatory or legal requirements or where we may need it for our legitimate purposes, such as to help us respond to queries or complaints, fighting fraud and financial crime, responding to requests from regulators, and so on.
If the Bank doesn’t need to retain information for this period of time, it may destroy, delete or anonymise it more promptly.
IV. Rights of the data subject
Under the CPR, you have the following rights:
1. Right to information and access
You may at any time request more information on our data processing activities and the personal data that we are keeping from you. You may also request access to, and a copy of such data. In certain cases, anti-money laundering legislation prohibits the Bank from giving you access to the personal data about you that the Bank processes. For example, the Bank cannot give you access to an anti-money laundering investigation. The law prohibits this because the release of such information could compromise the investigation.
2. Right to rectification
You have the right to obtain from the Bank without undue delay the rectification of inaccurate personal data concerning to you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
3. Right to restriction of the processing
You may request us to (temporarily) restrict the processing of your personal data in the following situations:
- when you have contested the accuracy of your personal data, for a period enabling us to verify this accuracy;
- when the processing appears to be unlawful and you request us to restrict the use of your data instead of the deletion of this data;
- when we no longer need the personal data for the purposes of the processing, but you need them for the establishment, exercise or defence of legal claims; or
- Pending verification whether our legitimate grounds override yours in the framework of an objection.
4. Right to make an enquiry and lodge a complaint
You have the right to make an enquiry with the Bank regarding any of the matters set out in this document and to make a complaint.
Enquiries and Complaints can be made through all channels including:
- Face to Face
- In Branch
- Through our Call Centre on 8008NBF(623), and
- Using the Feedback Forms available at https://smartform.nbf.ae:8082/ccweb/complaints/new
If the matter has been dealt with by us, but remains unresolved, a complaint may be registered with the Consumer Protection Department at CBUAE through its website https://centralbank.ae/en/consumer-protection
We always aim to respond to your complaint or query as quickly as possible. We may also request proof of identity in advance in order to double-check your request.
V. Security
We use a range of measures to keep your information safe and secure which may include encryption and other forms of security. We require our staff and any third parties who carry out any work on our behalf to comply with appropriate compliance standards including obligations to protect any information and applying appropriate measures for the use and transfer of information.
Further, we seek to ensure that we keep your personal data accurate and up to date. In view thereof, we kindly request you to inform us of any changes to your personal data (such as a change in your contact details).
More information on our IT security practices and policies is available upon request.
VI. Consent
The Bank will request your express consent for the purposes of providing the financial services that you have requested. That consent may be withdrawn by you at any time by providing notice to the Bank. Please click here to provide your consent.
This Disclosure Notice is provided to help you to understand the purpose of our request for data and how we collect, store and secure that data in order for you to make a clear decision to provide your consent.
We advise that if you do not give consent for the collection of your data, or you subsequently withdraw your consent that the Bank will not be able to provide or continue to provide financial services to you.
--------------------------------------------------------------
08 December 2021
Reminder: NBF Consent Survey for Consumer Protection Regulations and Standards ('CPR')
Dear Valued Customer,
We are writing to you again with regard to an important issue regarding the Consumer Protection Regulations and Standards (‘CPR’) of the Central Bank of the UAE that comes into effect on 1st January 2022. The CPR requires that we obtain your expressed consent to capture, process, store and in some cases share your personal data.
We understand from feedback, that some customers were not comfortable to respond to previous emails because the email was requesting you to click on a link which is something we advise you not to do.
You are receiving this e-mail because you have not completed a response previously.
NBF will be sending the survey via Survey Monkey, a cloud-based survey platform that is a world leader in this field and a trusted brand. Please rest assured all your information will be stored that adheres to security and technical best practices.
The purpose of the email is to obtain your consent as is required by the CPR.
We are using this method because there is no other efficient way to engage with you and to receive your expressed consent.
The survey email will be sent out tomorrow, Thursday - 9th December 2021 around 12:00 noon. Please be on the lookout and take note of the following details.
Sender Name: National Bank of Fujairah
Email ID: info@nbf.ae
Subject: Important: Disclosure Notice regarding the Collection and Processing of Personal Data
If you have any concerns about this email, we advise that we will also publish this on our website.
A document that explains how we deal with your data is an important part of the communication and this can be read on our website.
Thank you in advance for your cooperation.
Should you have any queries, please call 8008NBF(623) or speak to your Relationship Manager.