Privacy Statement
alrajhi bank- Jordan Branches “ARBJ” are committed to providing the highest level of protection regarding the processing of their customers’ personal data based on applicable data protection laws and regulations.
This policy describes how ARBJ may collect, use, store, disclose or otherwise process your personal data including personal data provided when using our websites (“https://www.alrajhibank.com.jo”).
Personal data comprises all the details that ARBJ collects and processes directly or indirectly about you as individual client or representative of a corporate client, for instance information about your identity and contact details such as name, email id, contact number, your transactions, your financial information, interactions or dealings with ARBJ, including information received from third parties and information collected through use of ARBJ Websites, cookies or other similar tools and our electronic banking services.
The use of ARBJ Websites and any products and services supplied are subject to our Terms and Conditions.
If you have any questions regarding this privacy policy or on the protection of your personal data, please contact ARBJ’s Data Protection Officer at the following:
alrajhi bank- - Jordan Branches
Amman, Jordan
Email: DPO@alrajhibank.com.jo
For more information about our use of cookies, please refer to our Cookie Policy.
Processing Personal Data
ARBJ may process your Personal Data as an individual client or a representative of a corporate client for the following purposes:
1. Processing applications for products and services, including assessing customer suitability and performing necessary checks and risk assessments (e.g., in case of credit request).
2. Providing products and services such as but not limited to electronic banking services, effecting payments, transactions and completing instructions or requests.
3. Monitoring and improving our website and its content.
4. Establishing and managing banking relationships and accounts.
5. Conducting market research and surveys with the aim of improving our products and services.
6. Sending you information about our products and services for marketing purposes and promotions.
7. Data may be shared, archived or processed in ARB HO Saudi, as HO provides ARB with its infrastructure and some core services.
8. Preventing, detecting, investigating and prosecuting crimes (including but not limited to money laundering, terrorism, fraud and other financial crimes) in any jurisdiction, identity verification, government sanctions screening and due diligence checks.
9. Complying with applicable local or foreign law, regulation, policy, voluntary codes, directive, judgement or court order, as well as any contractual obligation pursuant to agreements between any member of the ARB group and any authority, regulator or enforcement agency or body or any request coming from said entities.
10. Establishing, exercising or defending legal rights in connection with legal proceedings (including any prospective legal proceedings) and seeking professional or legal advice in relation to such legal proceedings.
11. Surveillance of premises and ATMs.
ARBJ processes your personal data for the performance of the banking contract(s) concluded with you as an individual client, compliance with applicable legal or regulatory obligations or ARBJ legitimate interests to provide you with adequate and qualitative products and services and to prevent against any excessive risk.
Personal data requested by ARBJ are usually necessary. If it is not provided, ARBJ will be unable to comply with its legal or regulatory obligations or to provide you with the requested products and services.
Access to Personal Data
Your personal data processed by ARBJ or one of its service providers will only be accessible by a limited list of recipients on a need to know basis or where required by law, thus:
1. Employees of the business line(s) concerned by the products and services provided;
2. Employees of the marketing department;
3. Employees of the Risk, legal and compliance department(s) concerned;
4. Employees of the accounting department(s) concerned;
5. Employees of the IT department(s) concerned;
6. Employees of selected service providers who support ARBJ in the provision of adequate and qualitative products and services.
ARB HO Saudi, acts as a service provider for its affiliates (ARBJ is one of it) in certain services and in particular for the provision of some IT services.
Our policy does not apply to third-party websites where our online advertisements are displayed, nor to linked third-party websites which we do not operate or control.
Retention of Personal Information
Your personal data processed by ARBJ are kept in a form which permits your identification for no longer than is necessary for the purposes for which the personal data are processed in line with legal, regulatory or statutory obligations.
At the expiry of such periods, your personal data will be deleted or archived to comply with legal retention obligations or in accordance with applicable statutory limitation periods.
Monitoring
To the extent permitted by law, ARBJ may record and monitor your communications with us to ensure compliance with our legal and regulatory obligations and our internal policies. This may include the recording of telephone conversations or electronic discussions.
Data Subject Rights
Subject to applicable law, regulations and/or banking industry guidelines, you may have the right to invoke a data subject right in relation to your personal data being processed by ARBJ.
ARBJ may be allowed by law, in particular, in case of excessive or manifestly unfounded request, to charge a fee for fulfilling your request, subject to applicable conditions. The rights that you can invoke as a data subject can be:
1- Right of Access
a) You have the right to obtain from ARBJ, confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and the following information:
b) The purposes of the processing;
c) The categories of personal data concerned;
d) The recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
e) Where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
f) The existence of the right to request from ARBJ rectification or erasure of your personal data or restriction of the processing of such data or to object to such processing;
g) The right to lodge a complaint with a supervisory authority;
h) The existence of automated decision-making, including profiling, and meaningful information about the logic involved; and
i) Where applicable, the applied safeguards over personal data transferred outside the organization.
ARBJ shall provide a copy of the personal data undergoing processing for the client upon his/her request, for any further copies requested, please note that ARBJ may charge a reasonable fee based on administrative costs.
2- Right to Rectification
You shall have the right to obtain from ARBJ without undue delay the rectification of inaccurate personal data concerning you.
3- Right to Erasure
Except in specific cases where provided by law, you have the right to obtain from ARBJ the erasure of personal data concerning you without undue delay where one of the following grounds applies:
a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
b) you withdraw your consent on which the processing is based and there is no other legal ground for the processing;
c) you object to the processing and there are no overriding legitimate grounds for the processing;
d) the personal data have been unlawfully processed;
e) the personal data have to be erased for compliance with a legal obligation to which ARBJ is subject;
f) the personal data have been collected in relation to the offer of information society services directly to a child.
4- Right to Restriction of Processing
You have the right to obtain from ARBJ restriction of processing where one of the following applies:
a) you contest the accuracy of your personal data (in such a case, the restriction will be for a period enabling ARBJ to verify the accuracy of said data); the processing is unlawful;
b) ARBJ no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims;
c) you object to processing pending the verification whether the legitimate grounds of the controller override those of the data subject.
5- Right to Data Portability
You have the right to receive or to transmit those data to another controller in a structured, commonly used and machine-readable format, the personal data concerning you that you have provided to ARBJ, without hindrance from ARBJ, where the processing is based on your consent or on a contract and the processing is carried out by automated means.
6- Right to Object to the Processing
ARBJ use of your personal data is carried out taking into account the principle of banking secrecy dictated by the legislation in force at all times yet you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you. ARBJ shall no longer process said personal data unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
Such right can be exercised at any time where your personal data is processed for direct marketing purposes.
7- Right to object being subject to a decision based solely on automated processing, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, except in specific cases provided by law.
ARBJ shall provide information on action taken on a request pertaining to the rights above without undue delay and in any event within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests. ARBJ shall inform the data subject of any such extension within one month of receipt of the request, together with the reasons for the delay.
To invoke your data subject rights, please use the “Customer Right Request Form” or send an email to data protection officer (see contact details above).
Finally, note that you are entitled to lodge a complaint with a competent Data Protection Authority where existing, concerning ARBJ’s compliance with the applicable data protection laws and regulation.
Security
The security and confidentiality of your Personal Data is important to us and ARBJ has invested significant resources to protect the safekeeping and confidentiality of your personal data. When using external service providers acting as processors, we require that they adhere to the same standards as ARBJ in addition to documenting the commitment of these external service providers to ARBJ standards in order to preserve your rights as a customer. Regardless of where your personal information is transferred or stored, we take all steps reasonably necessary to ensure that personal data is kept secure.
Social Media
ARBJ operates channels, pages and accounts on some social media sites to inform, assist and engage with customers. ARBJ monitors and records comments and posts made on these channels about ARBJ in order to improve its products and services.
Please note that you must not communicate to ARBJ through such social media sites the following information:
1. Confidential personal data, including any information regarding your financial situation, bank account details, transactions, etc...
2. Sensitive personal data including:
a) special categories of personal data meaning any information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation and
b) other sensitive personal data such as criminal convictions and offences and national identification number;
3. Excessive, inappropriate, offensive or insulting information towards individuals.
ARBJ is not responsible for any information posted on those sites other than the information posted by its employees on its behalf. ARBJ is only responsible for its own use of the personal data received through such sites in case it was received successfully.
Changes to this Privacy Policy
From time to time, it may be necessary for us to amend our Privacy Policy and Statement in the sake of its and customers’ benefits.
