MCB Group Privacy Policy

We may collect your personal information for the following purposes:

• To confirm your identity;
• To understand your needs;
• To set up, manage and offer services that meet your needs;
• To satisfy legal and regulatory requirements that we believe are applicable to us;
• To help us collect a debt or enforce an obligation owed to us by you;
• To respond to a local or foreign court order, search warrant or other demand or request which we believe to be valid, or to comply with the rules of production of a local or foreign court;
• To investigate and adjudicate insurance claims, other claims or complaints; and
• To prevent or detect fraud or criminal activity or to manage and settle any actual or potential loss in connection with fraud or criminal activity.

We may give information (except sensitive information such as health information) about you to other members of MCB Group (where the law allows this) so that these companies may communicate with you directly about their products and services. This consent will also apply to any company that forms a part of MCB Group in the future. You also agree that we may provide you with information about or from third parties we select. Your consent to this is not a condition of doing business with us and you may withdraw it at any time by sending us a written request. We may also ask you for contact information such as your telephone, mobile or fax number or email address, and keep and use this information as well as disclose it to other members of MCB Group so that we or any of these companies may contact you directly through these channels for the purpose of marketing, including telemarketing. This consent will also apply to companies that form a part of MCB Group in the future. Your consent to this is not a condition of doing business with us and you may withdraw it at any time.

For the purposes described in this Policy MCB Group may share your personal data with any company belonging to the MCB Group.

MCB-Group may also share your personal data with third parties. This may include, but is not limited to:

• Third parties relevant to the services that we provide;
• Third parties that we engage with in order to comply with legal and regulatory obligations;
• Third party suppliers in connection with the processing of your personal data for the purposes described in this Policy, such as IT providers, communication service providers or other suppliers to whom we outsource certain support services.

MCB-Group is committed to only transfer your personal data to the above mentioned third parties for the purposes and on the legal grounds stated in this Policy.

Third parties to whom we transfer your personal data are themselves responsible for compliance with privacy legislation. MCB Group is neither responsible nor liable for the processing of your personal data by these third parties. To the extent that a third party processes your personal data as a data processor of MCB Group, MCB Group will conclude a processor agreement with such party that meets applicable requirements.

To be able to provide our services, it may be necessary for us to transfer your personal data to a recipient in a country outside of MCB Group jurisdictions. In that case, MCB Group will ensure that the data transfer is compliant with the applicable law.

MCB Group may keep and use information about you in its records for such period of time needed to achieve the goals described in this Policy or to comply with applicable legislation and regulations.

MCB Group will collect and process data using suitable technical or organizational measures, in a manner that ensures appropriate security of personal information, including protection against unauthorized or unlawful processing (e.g. such as against malicious hackers) and against accidental loss, destruction and/or damage.

In the unlikely event of a data breach causing high risk to personal information of customers, MCB Group will where required notify the affected customers without undue delay.

When your personal data is collected and processed, you have the following rights:

• You have the right to be informed about the collection and use of your personal data;
• You have the right to access and obtain copies of your personal information kept in our files;
• You may at any time challenge the accuracy and completeness of your personal information and request that it be amended as appropriate;
• You have the right to request removal of your personal data at any time;
• You have the right to withdraw your consent. You can do by sending an email to our Customer Experience Officer at [email protected]
• You have the right to request restriction or suppression of processing activities related to your personal information;
• You have the right to data portability which allows you to obtain and reuse your personal data for your own purposes across different services;
• You may ask us to refrain from sending you tailored marketing communications;
• If you are dissatisfied, you have the right to lodge a complaint with the local data supervisory authority.

Please note that the above rights are not absolute. There may be circumstances in which MCB Group may be entitled to refuse requests in order to meet its legal and/or regulatory obligations.