As CB (we, our or us includes CB and other CB group companies), accessible from our website, https://www.cbq.qa, we may collect various data about you including your name, address, date of birth and email. This Privacy Policy notice (the Notice) explains how we will use data that is collected, who we may share it with and what steps we will take to ensure it stays secure. We would like to confirm to you that one of our main priorities is the privacy of our customers.
This Notice applies to our websites, online banking, our mobile applications (CB mobile), our e-mails, our branded social media sites or pages, and other online, mobile or retail services that link to or from or clearly reference this Notice as well as any interactions you may have with our digital advertising campaigns (collectively the Sites/Services).
This Notice explains how we collect, share, use, and protect data when you visit or use the Sites/Services. By using these Sites/Services, you agree to this Notice. However, our mobile, social media, or other services, sites, pages or materials may have additional terms about the privacy or use of your data. Please review the Notice for the specific Site/Service you are using.
1.INFORMATION WE COLLECT THROUGH OUR SITES/SERVICES
The personal data that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal data.
Personal data is any data:
- that identifies or can be used to identify you or your household;
- that relates to, describes, is capable of being associated with, or could reasonably be linked (directly or indirectly) with you;
- that can be used to authenticate you or provide access to an account;
- that relates to you and that might be sensitive (such as personal medical or health data, details of children, marital status account number, account value).
*Personal data also includes personal data of a special nature (as that is defined by the Qatar Personal Data Privacy Protection Law (Law no 13 of 216 (the “Privacy Law”)).
We collect the following categories of personal data from the following sources: |
Through the Sites/Services | What we collect: We collect from you (which, for the purposes of this section, refers to you and your household) through the Sites/Services personal data that identifies you as an individual or relates to identifying data about you, including identifiers such as your name, addresses, phone number, and e-mail. Depending upon the Services you request, we may collect additional personal data such as: alias; mother's maiden name; gender; race; age; QID; date of birth; information from a birth certificate or death certificate; relationship status; information that appears on your Passport/Visa; your citizenship and military status; Tax ID, bank account and/or payment card information; information about your education, employment and employment history, and property; current salary; criminal offenses; credit history; credit score; dependent/beneficiary name(s); biometric information; and other personal identification numbers. We, or third parties we work with, collect from you: other Internet or other electronic network activity information such as browser and device information; usage data through CB's mobile apps; information collected through cookies, web beacons and other technologies; demographic information; applications you submit; and aggregated information about your visits to, or use of, our Sites/Services. If you have a CB account, we also collect and maintain account and transaction information including: your user ID; account holder name; account PIN and password; security question(s) and word(s); signature; assets in the account; bank SWIFT code; credit card PIN; loyalty program information (when applicable); merchant name and contact information; merchant category code; transaction data/history; your photo (when applicable); and your voice recordings. Our business purpose for collecting this data: Reviewing and processing applications for our Services; intake of new customers; account maintenance and servicing; providing customer service; improving our Sites/Services; performing research and business analytics, and identifying usage trends; engaging in fraud monitoring and prevention; compliance with applicable laws and regulations; protecting our business and our customers against illegal activity; performing audits; verifying requests made pursuant to this Notice; tailoring marketing communications from our affiliates as well as from selected third parties; managing our business effectively; and developing new products and services. |
Through your browser or device | What we collect: Certain data is collected from you by Internet browsers or automatically through your device, such as your Media Access Control (MAC) address, computer type (Windows or Mac), screen resolution, operating system name and version, device manufacturer and model, language, and Internet browser type and version. We may also collect various attributes associated with your device (such as IP address, installed fonts, language and browser settings, and time zone) in order to create a device fingerprint or identifier so that we can recognize your device, along with the time of your visit and the page(s) visited. Our business purpose for collecting this information: Reviewing and processing applications for our Services; intake of new customers; account maintenance and servicing; providing customer service; improving our Sites/Services; performing research and business analytics, and identifying usage trends; engaging in fraud monitoring and prevention; compliance with applicable laws and regulations; protecting our business and our customers against illegal activity; performing audits; tailoring marketing communications from our affiliates as well as from selected third parties; managing our business effectively. |
Through your use of CB apps | What we collect: When you download and use one of our apps, we may collect your cookie ID, device IP address, email address, search history and geolocation data.
We may also collect and/or track your app usage data, such as the date and time the app on your device accesses CB servers and what information and files have been downloaded to or presented through the app. If you have an account with us, we also collect and maintain account and transaction information including: your user ID; account holder name; account PIN and password; security question(s) and word(s); signature; assets in the account; bank SWIFT code; credit card PIN and other information; loyalty program information (when applicable); merchant name and contact information; merchant category code; transaction data/history; your photo (when provided); image documentation; and your voice recordings. We also collect from third parties account identifiers used in transfers of funds.
When you use certain functions, it will allow you to select a contact from your phone. Once you select the contact, the mobile number of the contact will be processed by the application to facilitate the payment and will be stored on the Bank’s environment as per legal and regulatory requirements.
Our business purpose for collecting this information: Reviewing and processing applications for our Services; intake of new customers; account maintenance and servicing; providing customer service; improving our Sites/Services; performing research and business analytics, and identifying usage trends; engaging in fraud monitoring and prevention; compliance with applicable laws and regulations; protecting our business and our customers against illegal activity; performing audits; verifying requests made pursuant to this Notice; tailoring marketing communications from our affiliates as well as from selected third parties; managing our business effectively; and developing new products and services. |
Geolocation/Physical location | What we collect: We may collect the precise physical location of your device by using relevant sources including but not limited to satellite, cell phone tower, or wireless local area network signals as well as through the use of beacons in our branches. We also may use your device's physical location to provide you with personalized location-based services and content. In some instances, you may be permitted to allow or deny such uses and/or sharing of your device's location, but, if you choose to deny such uses and/or sharing, we may not be able to provide you with the applicable personalized services and content. We will collect your precise physical location only with your consent. Our business purpose for collecting this information: Account maintenance and servicing; fraud monitoring and prevention; protecting our business and our customers against illegal activity; performing audits; compliance with applicable laws and regulations; tailoring marketing communications from our affiliates as well as from selected third parties; managing our business effectively. |
Using unique identifiers such as cookies, pixel tags, device profiling, and similar technologies | What we collect: We may use unique identifiers such as cookies, pixel tags, and similar technologies to collect your browser, device information and browsing information such as time spent on the Site, pages visited, language preferences, and other traffic data. These cookies may contain or reflect segment or other interest-based data in a de-identified form including interests across other sites. Our business purpose for collecting this information: Improving our products and services; improving your experience on our Sites; performing research and business analytics; understanding your interests and preferences; tailoring and sending you marketing communications; engaging in fraud monitoring and prevention; protecting our business and our customers against illegal activity; compliance with applicable laws and regulations. |
Third Party Sources | What we collect: We may collect information about you from certain third-party sources, including, for example, financial institutions and government sources. This information may include account identifiers for funds transfers, credit histories, credit scores, credit reports, and information from a death certificate. Our business purpose for collecting this information: engaging in fraud monitoring and prevention; compliance with applicable laws and regulations; reviewing and processing applications for our Services; intake of new customers; managing our business effectively; account maintenance and servicing. |
2.HOW WE USE YOUR DATA
We use your personal data to:
- Authenticate you so that you can access the Sites/Services and conduct account transactions;
- Recognize you, your device or your browser when you use the Sites/Services so that we can facilitate navigation, display information more effectively, store your preferences and otherwise personalize your experience and enhance the use of the Sites/Services;
- Process your applications and transactions;
- Respond to your inquiries, fulfill requests and request your feedback;
- Service your account and market to you, including advertisements and other communications tailored to you, on our Sites/Services and third-party sites, as well as offline (please see the Online Advertising section for more information on our online advertising practices);
- To track responses to our e-mails and advertisements and to measure the success of our marketing campaigns;
- Provide you with account information, as well as information regarding our branches and branch events;
- Facilitate social sharing functionality, where appropriate;
- For our business purpose and other lawful purposes, such as for data analysis, audits, fraud monitoring and prevention, information security, improving the Sites, developing new products and services, managing our business effectively, identifying usage trends, and expanding our business activities;
- Review statistical information about use of the Sites/Services in order to improve their design and functionality, to understand how they are used, and to assist us with resolving questions about the Sites; and
- Ensure that the Sites/Services function properly.
3.SHARING OF YOUR PERSONAL DATA
We may share your personal data for the following business purposes:
- with our subsidiaries and affiliates to the extent permissible under applicable law;
- with third parties, to permit them to send you marketing communications on our behalf;
- with our service providers, who provide services such as website hosting, data analysis, information technology and related infrastructure provision, customer service, processing your transactions, e-mail delivery, auditing, and other services;
- with a third party in the event of any proposed reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings);
- to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, which may include such authorities outside your country of residence; and
- as required pursuant to law or regulation; and
- to protect our rights, privacy, safety, or property, and/or that of our subsidiaries and affiliates and you as well.
* Where possible, we limit sharing of your personal data in accordance with the choices you have provided us in response to privacy choices that we may make available to you.
4.HOW WE PROTECT YOUR PERSONAL DATA
We restrict access to personal data about you to those persons who need to know that information to provide products or services to you. We maintain appropriate administrative, technical and physical safeguards to protect the personal data we have about you against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse, and any other unlawful form of processing of the personal data in our possession. We also take measures to destroy or permanently de-identify personal data when there is no longer a business need to keep the data. The types of measures we take vary with the type of information, and how it is collected and stored.
5.ONLINE MARKETING
We may, directly or through third parties, advertise products and services intended to be of interest to you on the Sites/Services and on third party sites or apps. We and our third-party contractors may use the online technologies to make inferences and predictions about your characteristics, interests and preferences based on your online interests and activities across other sites. We may also use technologies to associate and recognize your various mobile and desktop devices in order to deliver ads and other content in a consistent manner across the devices you use. Information we collect using the technologies described above may also be associated or linked with your personal data, such as email or postal address, you provided directly to us or by third parties. If you opt out of interest-based advertising, where possible, you will not receive such customized ads on the Sites/Services or in other platforms.
6.WHAT RIGHTS YOU HAVE REGARDING YOUR PERSONAL DATA
- You have the right to request that we disclose to you the following: (i) the categories of personal data that we have collected about you; (ii) the categories of sources from which we have collected personal data about you; (iii) the business or commercial purpose for collecting your personal data; (iv) the categories of personal data that we have shared about you and the categories of third parties to whom the personal data was shared.
- You have the right to request a portable copy of your Personal Information.
- You have the right to request that we delete Personal Information collected from you, subject to certain exceptions allowed under applicable law (including the Privacy Law).
- You have the right to request that we update your personal information collected from you.
Questions regarding this policy
Questions regarding this policy and other mentioned requests should be directed to the Communications Department, Commercial Bank.
The Commercial Bank (P.S.Q.C.), P.O. Box 3232, Doha, Qatar.