Bahrain Personal Data Protection Law
Under this Personal Data Protection Framework (‘Framework’) for ICICI Bank Ltd, Bahrain (“ICICI Bank”) the following are defined as stipulated in Law No. (30) of 2018 with Respect to Personal Data Protection Law (‘Bahrain PDPL’)
About ICICI Bank:
ICICI Bank Limited, Bahrain Branch (“Bahrain Branch”) (‘ICICI’ or the ‘Bank’) is an overseas branch of ICICI Bank Limited, India - a comprehensive financial services provider and one of the largest players in the Indian Financial Services industry. ICICI Bank, having achieved leadership in the domestic market, has now established a presence in the major global financial Centers including USA, Canada, UK, UAE, Bahrain, China, and Singapore. ICICI Bank Bahrain has been granted Retail Bank (Branch) License during May 2007 by Central Bank of Bahrain (the Regulator) for Retail and Full Commercial Banking Activities in Kingdom of Bahrain. Such a license entitles the branch to act as hub for business in the Middle East and to deal with Resident and Non-Residents of Bahrain in any currency. ICICI Bank, Bahrain Branch offers its clients a wide range of customer friendly products like Bank accounts, Deposits, Loan Against Deposits, Remittance facilities through branch/ online/ Kiosk and attractive investment options.
For the purpose of processing the above-mentioned services, ICICI collects, processes, and retains the required personal data and sensitive personal data of its prospects, customers and third parties. Furthermore, to engage employees / contractors for providing these services, ICICI collects, processes and retains job candidates and employees personal data.
Origin of Personal Data & Sensitive Personal Data:
ICICI Bank collects the prospects personal and sensitive data for sharing products and service details. The Bank also collects customers personal data directly through opening new customers accounts and during performing the core sales and distribution operations.
Categories of Personal Data:
ICICI processes the prospects and customers following personal data: Identity and Contact details such as Full name, postal addresses, email address, phone numbers, customer account established in ICICI, CPR copy, smart card data etc.
Purposes for Data Collection and Lawful Basis for Processing:
ICICI only processes your personal data based on one or more of following lawful basis under Bahrain PDPL:
Purpose
|
Lawful Basis
|
---|---|
To open new accounts to potential customers. |
|
To acknowledge collections from customers from all locations |
|
To offer credit to the customers
|
|
To apply online backups, system support and maintenance activities
|
|
To provide your information to auditors during and after your contract to verify compliance with Bahrain Laws |
|
To evaluate, develop and improve our services to you and other customers
|
|
To store your contact details electronically in our records for communication
|
|
To comply with ICICI’s internal policies and procedures. |
|
any other purposes permitted by law;
|
|
Purposes relating to any of the above
|
|
Any other purposes as detailed in respective product(s) or service(s) related forms and general terms and conditions as agreed.
|
|
Categories of Recipients of your Data:
Your personal data will be processed by ICICI Bank and may be shared with third parties within or outside the Kingdom of Bahrain including cloud providers for email communication and online and Disaster Recovery storage, when required by the law, or where it is necessary to administer the relationship with you or where we have one of the above-mentioned legitimate interests in doing so. This includes sharing your personal data with banks, auditors, system support vendors, and governmental bodies, with any other parties as detailed in respective product(s) or service(s) related forms and general terms and conditions applicable for availing such service(s) or product(s) from ICICI Bank.
Your rights under Bahrain Personal Data Protection Law (PDPL) (Act No. 30 of 2018):
You have the rights to submit your request free of charge to ICICI:.
To be notified about the complete data concerning you and request its rectification
Remove, block, or restrict your personal data
Object if your personal data is being used for direct marketing
Object if processing may result in defamation or discrimination causing possible financial or moral damage
Object if your personal data is being used for decisions based on automated data processing and request that the processing be solely automated
Withdraw your consent to the processing of your personal data in cases where you have provided your consent for the processing and, as such, your consent is the lawful basis that ICICI is relying on for processing
i. ICICI shall process such request free of any charges within a period of 10 working days, otherwise as stipulated by the law
ii. A consent once given by the prospect and/or customer can be withdrawn at any time for any future actions
iii. You have the right to lodge a complaint to Bahrain Personal Data Protection Authority (Bahrain PDPA) regarding any violation of Bahrain PDPL and its implementing Orders
Decisions based on automated processing:
ICICI will not take decisions for additional processing beyond the purpose of the collected personal sensitive data based on automated processing (i.e., loans and remittances) of your personal data and may inform you in case this condition is changed.
Security of your Personal Data:
Prospects and customers’ personal data is protected under Bahrain PDPL and ICICI ensures implementing selective security measures for protecting your privacy. ICICI shall implement technical and organisational security measures to keep your personal data secured and protected including when cross border transfer and storage.
Retention Period of your Personal Data:
The personal data collected by ICICI is retained for as long as necessary to fulfil the purpose for which it was collected, and/or based on the validity of the contract, legal retention period requirements, and historical archiving. We securely destroy and erase or anonymize your personal data to ensure that it cannot be restored after exceeding the retention criteria. Hence, ICICI will not be able to support you with any further processing or information request on your personal data.
Contact details:
If you have any questions or would like to obtain more details about how we use your personal data, you may contact ICICI at pdplbahrain@icicibank.com, P.O. Box 1494, Manama, Kingdom of Bahrain.
Your Role to Keep your Personal Data Accurate:
It is essential for ICICI to keep your personal data up to date and accurate. Therefore, kindly provide your updated information in case there is any change to your personal data during your business relationship with us.
Update on Privacy Policy
ICICI has the right to review and update the privacy policy. In case of any changes, we will inform you of any substantial change in how we process your personal data which will be updated on ICICI Bank’s website www.icicibank.bh. ICICI Bank reserves the right to alter, delete, modify or add any of the aforesaid terms, and such alterations, deletions or additions shall be deemed to be effective and binding on me/us.