Data Protection Statement

Introduction

Investec in the Dubai International Financial Centre (‘Investec DIFC’)

Investec DIFC is a branch of Investec Bank Ltd established in the DIFC that provides Private Banking, Wealth and Investment and Corporate and Institutional Banking solutions and in and from the DIFC.

This Data Protection Statement (‘Statement’) sets out how your information, including personal information will be used by Investec DIFC. It applies to any information, you give to Investec DIFC, or which Investec may collect from third parties.

It is important that you read this Statement carefully before submitting any information to Investec DIFC.

"Client", “you” or “your” refers to any prospective, new or existing client of any member of the Investec Group.

"Investec" or “we” means Investec Limited, its subsidiaries and affiliates. To obtain more information on these subsidiaries please refer to the Investec Group annual financial statement located on our website under Investor Relations: https://www.investec.com/en_za/welcome-to-investec/about-us/investor-relations/financial-information.html.

“Investec Group” means Investec Limited and Investec plc and all their Subsidiaries.

Personal information Investec DIFC may collect from you

In order to facilitate the provision of products and services, Investec DIFC is required to collect certain information in order to comply with legal and regulatory standards. If you decide not to provide the necessary information, Investec DIFC will not be able to provide access to its products and services. The following personal information may be collected from you:

Personal Details, Employment Details, Financial Details, Family, Social Circumstances
Identification information such as name, date of birth, nationality, country or emirate of residence, national identity number, passport number
Financial information and business information such as tax number, transaction history and other financial information and related party information (e.g., information in respect of authorised person/s and those who have been identified as having ownership and/or exercising control of your entity).

Purpose of processing your personal information referred to above

The purpose of processing your personal information in addition to onboarding you is to:

Arrange deals in investments
Advise on financial products and investment opportunities within the banking sphere
Arrange credit and advising on credit including introducing potential borrowers to a credit provider, assisting a potential borrower to obtain credit, negotiating terms of credit and/or arranging collateral or other assurances; and
Arrange custody to provide comprehensive investment services.

The legal bases for the processing of your personal information are to take the necessary steps at your request prior to entering into a contract, and/or, to meet our legal obligations under anti-money laundering legislation including legislation under the DIFC’s legal and regulatory framework.

We may also use your personal information to conduct market research and to provide you with information about Investec’s products or services from time to time via email, telephone or other means (for example, events).We will retain your information in accordance with the retention periods set out in Applicable Laws, unless we need to retain it for a longer period for a lawful purpose. (For example, for the purposes of complaints handling, legal and regulatory processes and proceedings and combatting financial crime.)

Transfer/storage of your personal information

Personal information that we collect from you is transferred and stored in South Africa. While South Africa is not currently recognised by the DIFC Commissioner of Data Protection as providing an adequate level of protection for personal information, the DIFC framework does allow for international transfers to non-adequate jurisdictions where appropriate safeguards are in place. Because Investec DIFC forms part of the Investec Group, your personal information is transferred within the group under approved binding internal policies.

If you would like further information about the safeguards we rely on for cross‑border transfers, please contact us using the details provided in this Statement.

Personal information which we collect may be shared with Investec Employees, Compliance, Lawyers, Tax Advisory, External Auditor, Prime Brokers, Brokers and the Regulator. [NN2] We will also disclose your personal information to our service providers where necessary to fulfil the purposes described in this Statement. Whenever we share your personal information, we will always make sure this takes place in compliance with applicable privacy laws.

To facilitate the opening of accounts in other jurisdictions we will transfer your personal information to the following other entities within the Investec Group located in other jurisdictions such as the United Kingdom and European Economic Area (“EEA”), Switzerland, Mauritius, Channel Islands, Mauritius and South Africa. Such transfers shall always be done with the relevant data protection clauses in place and in compliance with relevant data protection laws.

Privacy and security

Investec DIFC takes your privacy and the protection of your personal information very seriously. We will only use your personal information in accordance with this Statement and applicable data protection legislation. It is important that you take all necessary and appropriate steps to protect your personal information yourself (for example, by ensuring that all passwords and access codes are kept secure). More information on how you can protect yourself from fraud is available at https://www.investec.com/en_ae/legal/know-fraud.html.

We have reasonable technical and operational measures to keep your personal information secure, however in the event of a security compromise, we will inform you that your personal information has been accessed or acquired by an unauthorised person. We will do so as soon as reasonably possible after the discovery of the compromise, considering the needs of law enforcement or any measures reasonably necessary to determine the nature and scope of the compromise.

Your rights

You have the following rights relating to the processing of your personal information:

The right to be informed of the collection and use of your personal information;
The right to access your personal information;
The right to have your personal information complete and accurate;
The right to the erasure of your personal information but only in certain circumstances;
The right to have the processing of your personal information restricted in certain circumstances;
The right to data portability which allows you to obtain and reuse your personal information for your own purposes;
The right to object to the processing of your personal information in certain circumstances and the right to object to the processing of your personal information for the purpose of direct marketing;
The right to withdraw your consent to the processing of your personal information where applicable; and
The right to complain to the Information Commissioner. For more information, please visit https://u.ae/en/about-the-uae/digital-uae/data/data-protection-laws.

Contact us

If you have any questions about this Statement or our data protection practices, including requests relating to your rights as set out above, please contact us at dataprotectionsa@investec.com.[NN3]
We may need to request additional personal information to ensure that we can confirm your identity.

Complaints

Should you believe that Investec DIFC has utilised your personal information contrary to Applicable Laws, you undertake to first attempt to resolve any concerns directly with lnvestec DIFC.

If you are not satisfied with the outcome of such process, you may have the right to lodge a complaint with the Commissioner of Data Protection, using the contact details listed below:

The Commissioner of Data Protection
Dubai International Financial Centre Authority
Level 14, The Gate
P.O. Box 74777
Dubai
United Arab Emirates

Tel: +971 4 362 2222