NBEUK needs to collect personal information to carry out everyday business functions and services effectively and compliantly to comply with the requirements of the law and regulations. As NBEUK processes personal information regarding individuals (data subjects), we are obligated under the UK’s Data Protection Act 2018 to protect such information, and to obtain, use, process, store and destroy it, in compliance with the Data Protection Act 2018 and its principles.
Under Data Protection Action 2018, an individual has the right to obtain from the controller, confirmation as to whether personal data concerning them is being processed. We are committed to upholding the rights of individuals and have dedicated processes in place for providing access to personal information.
Your Rights
Under the Act you have a number of other rights;
- Right to be informed – Individuals have the right to be informed about the collection and use of their personal data. This information is provided in our Privacy Notice and includes :
- The purposes of the processing
- The categories of the personal data concerned
- The recipient(s) or categories of recipient(s) to whom the personal data has been or will be disclosed
- If the data has been transferred to a third country or international organisation(s) (and if applicable, the appropriate safeguards used)
- The envisaged period for which the personal data will be stored (or the criteria used to determine that period)
- Where the personal data was not collected directly from the individual, any available information as to its source
- Right of rectification – for individuals to have inaccurate personal data rectified or completed if incomplete.
- Right to erasure – for individuals to have personal data erased in certain circumstances.
- Right to restrict processing – for individuals to have the right to request the restriction or suppression of their personal data.
- Right of data portability – the right of data portability which allows individuals to obtain and reuse their personal data for their own purposes across different services.
- Right to Object– individuals have the right to object to the processing of their personal data in certain circumstances.
- Rights related to automated decision-making including profiling – individuals have rights in relation to automated individual decision-making (where a decision is made solely by automated means without any human involvement); and profiling (automated processing of personal data to evaluate certain things about an individual). Profiling can be part of an automated decision-making process.
Where requested, we will provide the following information:
- The purposes of the processing
- The categories of the personal data concerned
- The recipient(s) or categories of recipient(s) to whom the personal data has been or will be disclosed
- If the data has been transferred to a third country or international organisation(s) (and if applicable, the appropriate safeguards used)
- The envisaged period for which the personal data will be stored (or the criteria used to determine that period)
- Here the personal data was not collected directly from the individual, any available information as to its source
How to make a Subject Access Request
A subject access request is a request for access to the personal information that NBEUK holds about you, which we are required to provide under Data Protection Act 2018 (unless an exemption applies). You can make this request in writing, or you can submit your access request electronically. Where a request is received by electronic means, we will provide the requested information in a commonly used electronic form (unless otherwise requested by the data subject).
Identity Verification
Subject Access Requests are passed to the Information Security Officer (ISO) as soon as received and a record of the request is made. The person in charge will use all reasonable measures to verify the identity of the individual making the access request, especially where the request is made using online services. We will utilise the request information to ensure that we can verify your identity and where we are unable to do so, we may contact you for further information, or ask you to provide evidence of your identity prior to actioning any request. This is to protect your information and rights. If a third party, relative or representative is requesting the information your behalf, we will verify their authority to act for you and again, may contact you to confirm their identity and gain your authorisation prior to actioning any request.
You can use the form below to make a data subject access request in writing by sending the request to:
The Information Security Officer
National Bank of Egypt (UK) Limited
National Bank of Egypt House
8-9 Stratton Street
London, W1J 8LF
Telephone: +44 (0)20 7389 1200 or by emailing the completed form to infosec_enquiries@nbeuk.com