Absa's commitment to information privacy
1. Absa Group Limited (Registration Number 1986/003934/06), including Absa Bank Limited, its legal entities and subsidiaries, (‘Absa’, ‘it’, ‘we’, ‘us’ or “our”) has its head office at 15 Troye Street, Johannesburg, South Africa.
2. Absa promises to treat all your personal information carefully and responsibly.
3. Personal information includes any information that lets Absa identify you as a unique individual, such as your name and surname combined with your physical address, contact details and/or passport/identity number.
4. Personal information (in South Africa) also refers to the personal information that uniquely identifies a legal entity, such as the trading name of a company combined with the company registration number.
5. Personal information includes special personal information. Special personal information are details about your race or ethnic origin, religious and philosophical beliefs, political persuasion, trade union membership, health or sex life, biometric information, or any criminal behavior which relates to alleged criminal offences or proceedings.
6. Personal information may be given to or collected by Absa in writing as part of a written application form, electronically (email), telephonically, online (absa.co.za or absa.africa) or via the Absa banking app.
7. Processing of personal information includes any initial processing that Absa does when we first collect your personal information. It also includes any further and ongoing processing that Absa is allowed to carry out legitimately in terms of the reasons listed in paragraph 9 (below). The term ‘processing’ includes collecting, using, altering, merging, linking, organising, disseminating, storing, retrieving, disclosing, erasing, archiving, destroying or disposing of personal information.
8. Absa will only collect and process your personal information in line with the purpose for which you provided it to us, or to enable us to comply with the requirements of specific laws that we are governed by.
9. Absa may process your personal information in order to protect your or our legitimate interests. Absa will not collect and process personal information about you that we do not need for this purpose. The general purposes for which Absa collects and processes your personal information include, but are not limited to:
- Creating a record of you on our system in order to verify your identity; provide you with the products and/or services you have applied for; and then communicate with and keep you informed about these products and/or services in order to better service you as a customer;
- Assessing whether you qualify for the granting of credit; or the increasing or decreasing of your credit limit;
- Identifying you and verifying your physical address, source of income and similar information;
- Assessing your personal financial circumstances and needs before providing advice to you;
- Any purpose related to the prevention of financial crime including sanctions screening, monitoring of anti-money laundering and any financing of terrorist activities;
- Further processing for historical, statistical or research purposes where the outcomes will not be published in an identifiable format;
- Providing income tax-related information to tax authorities;
- Where you have applied for employment at Absa, we also perform applicant screening and background checks;
- Where you are an Absa employee (including contractor), we also create an employment record of you on our system to facilitate continuous monitoring during your employment with us;
- Where you are an Absa director, we also create a record of you as a director on our system; and
- Where you are a supplier to Absa, we also process your personal information for due diligence, risk assessment, administrative and payment purposes.
10. Furthermore, Absa will not process your special personal information unless:
- You have consented to Absa processing it;
- It is necessary to exercise or defend a right or obligation in law;
- It is necessary to comply with an international legal obligation of public interest;
- It is for certain historical, research or statistical purposes that would not adversely affect your privacy; or
- You have deliberately made your information public.
11. There are some personal information fields that you have to fill in if you want Absa to provide you with your chosen product and/or service or onboard you as an employee, supplier, director or job applicant. This information can be provided in writing, electronically or telephonically, but it must be accurate and complete. These fields are indicated by an asterisk (or as otherwise indicated) on the respective forms/websites. If Absa does not receive the necessary personal information, we will not be able to continue with your application. If you are already a customer/employee/supplier/director and Absa asks you for this information and you do not provide it, Absa will have to suspend the provision of the product and/or services for a period of time, or as the case may be, even terminate our relationship with you.
12. In most cases, personal information will be collected directly from you, but there may be other instances when Absa will collect personal information from other sources. These may include: public records; places where you may already have made your personal information public (for example, on social media); credit bureaus; or individuals/directors whom you have appointed as your representative, where you are a corporate entity. Absa will only collect your personal information from other sources where we are legally entitled or obliged to do so, and you are entitled to enquire from Absa as to the sources from which your personal information has been collected, should you so wish.
13. For the purposes outlined in paragraph 9 (above), Absa will, in most instances, collect and process your personal information internally. However, there are times when Absa needs to outsource these functions to third parties, either within Absa or external to Absa, including parties in other countries. Where your personal information is shared internally within Absa, such sharing will be carried out only for the purposes outlined in paragraph 9 (above). Absa may also need to share your personal information with external organisations such as credit bureaus, tax authorities or other regulatory or industry bodies, so that we can meet our due diligence or regulatory requirements. Absa will not share your personal information with third parties who do not need your personal information, or where Absa is not legally permitted to do so. When Absa decides to transfer your personal information to third parties, we will only provide it to organisations that have the same data privacy policies as Absa or those who are subject to laws relating to the processing of personal information that are similar to those that apply to Absa.
14. There may be instances where Absa will process your personal information through a secure automated tool, or perform profiling resulting in a decision that may affect you significantly. If you are unhappy about the outcome of such a decision, please contact:
- your Local Customer Service centre (for customers);
- your Resourcing Consultant (for job applicants);
- your People Business Partner (for employees);
- your Supplier Relationship Manager (for suppliers); or
- Absa’s Group Secretariat office (for directors of Absa-owned companies).
15. As a customer, if you have opted out of receiving electronic marketing communications (via media such as SMS, email or automated calling machines), Absa will not market to you using electronic media. However, if you are receiving marketing via electronic media, you have the right to opt out at any time by following the instructions on the marketing material received. Absa will continue to market to you using telephonic means until such time you have opted out.
16. As a non-customer, if you would like to receive marketing information from Absa through electronic media, please submit your details to Absa in writing.
17. To the extent that local legislation permits or if you are a resident of the European Union or United Kingdom, you have the following rights regarding your personal information:
- The right to access your personal information that we have on record. Please refer to our PAIA manual for the process to access your personal information.
- You have the right to ask Absa to correct any of your personal information that is incorrect. These requests must be made to us in writing.
- You can ask Absa to delete or destroy your personal information. You can also object to Absa processing your personal information. These requests must be made to Absa in writing. However, the result of such a request will be that Absa may have to suspend the provision of products and/or services for a period of time, or even to terminate our relationship with you. Absa’s records are subject to regulatory retention periods, which means Absa may not be able to delete or destroy your personal information immediately upon request.
- You may also ask Absa to port your personal information to another party in terms of applicable European Union and United Kingdom data privacy legislation.
- Please refer to the PAIA manual for contact details to submit these requests in writing.
18. If you have a complaint relating to the protection of your personal information, including the way in which it has been collected or processed by Absa, please contact us using the local contact details as listed below. If you have not had your complaint dealt with satisfactorily, you may lodge a complaint with your local privacy regulator in terms of applicable privacy laws.
South Africa: 0800 41 41 41 or email us on firstname.lastname@example.org
Absa reserves the right to amend this statement at any time. All amendments to this statement will be posted on the website. Unless otherwise stated, the current version shall supersede and replace all previous versions of this statement.