English

Where the Bank processes personal data in the course of its activities, it undertakes to:

  • collect such data fairly and lawfully for specified and explicit purposes;
  • limit the processing of sensitive data or data perceived to be sensitive;
  • informing data subjects of their legal rights and providing simple means for them to exercise them;
  • implement the necessary technical and organisational security measures to protect the data collected;
  • address any personal data breach to limit its impact on data subjects and prevent its recurrence;
  • strengthen the culture of personal data protection within its processing departments.