Privacy Information Disclosure

This document outlines our policies governing the collection, utilization, and disclosure of personal data when you engage with our Service, elucidating the choices available to you concerning that data.

The objective of this privacy notice is to elucidate how Ashur Bank (“Bank,” “we,” “us,” and “our”) may handle and process your personal information. Your data is utilized to enhance the Service. By utilizing the Service, you acknowledge and consent to the collection and utilization of information in accordance with the stipulations outlined in this policy.

At Ashur Bank, the safeguarding of your account information is our top priority. We strive to keep our members informed on current security issues, as well as providing the tools to help protect yourself. Please check back periodically to view new information as it becomes available.

Privacy Administrator and Data Controller

Ashur Bank, with which you have established a banking relationship and manage an account, is the designated data controller. This encompasses your usage of our digital platform and mobile application. As the data controller, Ashur Bank is responsible for the secure and lawful processing of your personal information in accordance with applicable Iraqi data protection laws.

How is the personal information collected?

We collect personal data from several sources, including the following:

• Personal data received and collected via the mobile application named “Ashur Bank."
• Personal data we receive directly by your engagement with us and our social media platforms.
• Personal data that we learn through your use of our services and products, such as when you visit the Ashur Bank mobile application, digital platform, our websites, or when you communicate to us by the contact center.
• Personal data we receive directly from you or from a person acting on your behalf.
• Personal data we obtain from third parties, such as credit reference, debt recovery, fraud prevention, or government agencies, which may have originated from publicly accessible sources.
• Personal data that we gather from publicly available sources, such as the internet and/or other local trade registers.
• Information provided by partners or third parties of Ashur Bank.
• From servers in relation to your use of our digital platform and the Ashur Bank App.

What is the legal justification for this, how will we use your personal information, and with whom will we disclose it?

Parties within and outside Ashur Bank may obtain access to your data. Departments and employees within the Bank may only process your data to the extent required for the purpose of discharging their contractual, legal, or regulatory duties, or to pursue legitimate interests. Other service providers or agents (e.g., correspondent banks, custodian banks, brokers, stock exchanges) may also have access to your personal data, subject to compliance with bank-client and data protection requirements. Public bodies (e.g., supervisory and tax authorities) may also receive your personal data where there is a legal or regulatory obligation.

Your personal data will be utilized in accordance with applicable laws, including data protection laws, for the following purposes:

1. Contractual Relationship Administration: We will process your personal information as necessary for setting up, maintaining, and administering the contractual relationship between you and Ashur Bank.
2. Account Management and Transaction Assistance: Your data will be used to enable you to manage your account with us and facilitate transactions. This includes the operation and management of your Ashur Bank account and associated cards (debit and/or credit).
3. Communication and Query Resolution: We will utilize your information to communicate with you and address any queries you may have.
4. Legitimate Interests Processing: In pursuit of our legitimate interests, as well as those of Ashur Bank’s affiliates or third parties, we may process your data for the following purposes:
   1. Collecting outstanding debts, which may involve sharing your information with debt collection agencies.
   2. Keeping records of communications for evidential purposes, recording instructions, and preventing or detecting crime.
   3. Evaluating the performance of our products, services, and internal processes to ensure secure and necessary data collection and processing.
   4. Developing statistics and conducting market research to enhance our products and services.
5. Internal Operational Requirements: Your information will be used to meet Ashur Bank’s internal operational needs, including credit, compliance, risk management, market research, system and product development, staff training, quality control, accounting, and audit purposes.
6. Record Keeping and Customer Account Activities: We will keep records of communications, customer account activities, and transactions on our digital platform for purposes such as date and time logging, fraud prevention, and compliance with anti-money laundering regulations.
7. Sharing with Third Parties: We may share your personal information with the following third parties:
   1. Ashur Bank affiliates, including their IT support teams for digital platform services.
   2. Intermediaries to whom we provide instructions or referrals.
   3. Legal and professional advisers, such as auditors and external legal counsel.
   4. Sub-contractors, agents, or service providers engaged by Ashur Bank, including digital identity service providers, backup and server hosting providers, IT software and maintenance providers, document storage providers, and other back-office function suppliers.

How Long Will Your Personal Data Be Stored?

We will process and store your personal data throughout the continuation of the business relationship unless there is a strict obligation to erase specific data at an earlier date. The length of time that data will be stored will depend on whether processing continues to be necessary and the purpose of processing. Data will be erased if the information is no longer required for fulfilling contractual or legal duties or pursuing legitimate interests.

Obligation to Provide Personal Information

The provision of certain personal information is essential for establishing and managing our relationship with you as a customer, as detailed previously. Without such information, we would be unable to enter into or effectively administer this relationship. In cases where providing personal information is optional, we will explicitly communicate this.

Updates to Your Personal Information

It is imperative that you promptly notify us of any changes to the personal information you have provided, such as alterations to your contact details. You can do so by contacting us at care@Ashurbank.iq. For changes to your mobile number, you have the option to directly update it through the application.

International Data Transfers

It’s important to note that the individuals and organizations with whom we may share your personal information could be situated in countries lacking data protection laws offering a level of protection equivalent to that of the country where products and services are supplied.

Data Protection Rights

If applicable, you possess the following data protection rights concerning your personal data:

1. Right of Access
2. Right to Rectification
3. Right to Erasure
4. Right to Restriction of Processing
5. Right to Withdraw Consent
6. Right to Data Portability
7. Right to Object

Authorization for Personal Data Access

By providing this authorization, you grant Ashur Bank an absolute and irrevocable mandate to access your identity, including civil status, and to collect all your personal data through the civil status system and the e-government services portal.

Contact Information for Privacy Inquiries

If you have any inquiries regarding this privacy notice or wish to discuss your personal information, please feel free to reach out to us. You can contact us by phone at (07809156080), or visit our service center located at (Baghdad, Karadah, Uqba Ebn Nafe’ square/ District 903- Street 99-Bldg.87 Iraq).