and any other documents referred to on it) sets out the basis on which any Personal Data (as defined below) we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your Personal Data (as defined below) and how we will treat it.
The data controller is Gulf International Bank - Saudi Arabia , a Saudi Closed Joint Stock Company registered in the Kingdom of Saudi Arabia with Unified Number 7001399042 and Commercial Registration Number 2052001920, licensed by the Saudi Central Bank (“SAMA”) to operate as a bank in the Kingdom of Saudi Arabia with banking license number 2007 whose principal address is at PO Box 93, AlKhobar 31952, national address number 5515 Kingdom of Saudi Arabia
Safeguarding your Personal Data is our main concern. We maintain physical, electronic and procedural safeguards that comply with applicable laws and regulations to secure your information from unauthorized access and use, accidental or unlawful alteration and destruction; and other unlawful or unauthorized forms of processing. We engage in the continuous training of our employees in the proper management of Personal Data.
At meem Digital Banking, we take data privacy very seriously and we provide our customers with all necessary data security to protect such Personal Data from unauthorized access. We require any third parties who carry out any work on our behalf to comply with appropriate compliance standards to protect your information.
Every data – of whatever source or form – that would lead to the identification of the individual specifically or make it possible to identify him directly or indirectly, including name, personal identification number, addresses, contact numbers, license numbers, records, personal property, bank account and credit card numbers, fixed or moving pictures of the individual, and other data of personal nature.
Every personal data that includes a reference to an individual's ethnic or tribal origin, or religious, intellectual, or political belief, or indicates his membership in nongovernmental associations or institutions, as well as criminal and security data, biometric data, genetic data, credit data, health data, location data, and data that indicates that both parents of an individual or one of them is unknown.
We may collect information from a range of sources and it may relate to any of our products or services we currently provide or may have provided in the past.We collect your Personal Data when...
At meem Digital Banking, we, in efforts to provide you with excellent products and services, may need to outsource our product delivery, this will be done in line with relevant regulations and laws. We may share your information in order to provide you with products or services you have requested.
We may also share your information where we have a public or legal duty to do so, when we need it to conclude regulatory reporting and when we have requested and received your permission to share it.
A cookie is a small file that is placed on your computer’s hard drive or electronic device. Its functions include storing your login and session statuses, recording your user preferences and analyzing web traffic.
Apart from the data that you elect to disclose and share with us, we cannot access your computer or any other information about you with cookies.
Although most browsers automatically accept cookies, you can amend your browser settings to disable cookies. This may however prevent you from fully experiencing the website as it was intended.
This Privacy Notice is applicable to Personal Data and Sensitive Data or information collected by us or our affiliates directly from the customer or through our online portals, mobile apps and electronic communications as also any information collected by our servers from the customer’s browser.
The security of Personal Data is a priority and is protected by maintaining physical, electronic, and procedural safeguards that meet applicable laws. We shall take reasonable steps and measures to protect the security of the customer’s Personal Data from misuse, loss, un-authorized access, modification or disclosure. We maintain our security systems to ensure that the Personal Data of the customer is appropriately protected and follows standard encryption norms for the transmission of information. We ensure that our employees and affiliates respect the confidentiality of any Personal Data held by us.
At meem Digital Banking, we retain your Personal Data only for as long as mandated by the regulators for the purposes set out in this Privacy Notice. We will retain and use your information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies which is subject to Electronic Banking Services instructions and other applicable rules regulations within the Kingdom of Saudi Arabia.
If you are resident in KSA and under 18 or, alternatively, are resident elsewhere and are not yet the relevant age of majority in the jurisdiction in which you reside, we are not permitted to contract with you directly. Where necessary by local legislation, by agreeing to this Privacy Notice, your guardian acknowledges and consents to the terms of this Privacy Notice on your behalf. If we seek your consent to process your Personal Data for a specific purpose in accordance with this Privacy Notice, such consent must be granted on your behalf by your guardian.
The effective date of this notice is provided above. Any updates or changes to the notice will be posted on this website with the new revision date, which is the effective date of changes. Your continued use of this website constitutes your acceptance of any changes to this notice.
You may have certain rights relating to your Personal Data depending on the country in which you access our KSA website. In some cases, depending on applicable legislation, such as Kingdom Saudi Arabia – Personal Data Protection Law (“KSA PDPL”), these rights may include: the right to be informed – this right allows you to receive information from us about what Personal Data we collect and what do we do with it. The purpose of this notice is to fulfil this right.
Right to Know / Information
You have the right to know about our contact details, the exact reason the data is being collected, the methods being used for data collection, and whether this collected data will be shared or sold.
Right to Request Access or Copy
You have the right to access your Personal Data from us and obtain a copy of it in a clear and readable format, in conformity with the content of the records, at no cost.
Right to Request Correction
You have the right to request correction of any data collected on them if it is incomplete, inaccurate, or obsolete.
Right to Request Destruction
You have the right to request the destruction of data collected on them. The reasons can range from the user rescinding their consent for data collection to the data no longer serving the purpose for which it was collected.
Right to Limit/Restriction of Processing
You have the right to limit or refuse the processing of their Personal Data by the organization for special cases and for a limited period of time. This right is not explicitly provided under the KSA PDPL; however, the regulatory authority has released a set of FAQs that provides details of this right. We are required to ensure that you are appropriately informed about these rights and establish dedicated channels for you to exercise these rights. We must fulfill these requests within 30 days and record all data subject requests received.
If you have any questions, concerns or complaints regarding our compliance with this Privacy Notice and the KSA PDPL, or if you wish to exercise your rights, please contact us. We will investigate and will attempt to resolve complaints and disputes and make every reasonable effort to honor your wish to exercise your rights as quickly as possible, in any event, within the timescales provided by applicable data protection laws or regulations.
If you have any questions or comments regarding the processing of your Personal Data, our privacy practices or if you would like us to update information or preferences you provided to us, please contact the Data Privacy / Protection Team (Data Management Office) through the following email: [email protected]