DATA PROTECTION AND PRIVACY STATEMENT FOR COSMOPOLITAN DEPOSIT TAKING SACCO.
We, Cosmopolitan Deposit Taking Sacco, respect your privacy and are committed to processing personal data in accordance with the law and in particular, The Data Protection Act 2019
Who we are.
Cosmopolitan Deposit Taking Sacco of P.O Box 1931-20100 is both a controller and a processor in respect of personal data it processes in connection with the services provided under the relevant engagement with its members.
Personal and sensitive data we collect.
As a Data Controller and a Data Processor, Cosmopolitan Deposit Taking Sacco collects personal data directly from the Data Subject or indirectly through intermediaries, service providers and other third parties. We may collect the following personal information.
Type of Information Example
Personal Information Name, ID numbers, Date of Birth, KRA Pin, E-mail, Mobile
Number, Postal and Physical Address and passport photo.
Sensitive Information Marital status, Spouse Declaration, Next of Kin and financial
Information
Audio and Visual information Photographs, Videos, Audios i.e. Television Screens for marketing purposes and CCTV Devices are installed at strategic locations to provide a safe and secure environment in all our branches, Cosmopolitan Sacco premises as a part of our commitment to security and crime prevention.
Telephone Recordings Collected during interactions with our customer service team.
Online Activity Cosmopolitan D. T Sacco automatically logs information about you and your computer or device such as the IP address, pages viewed and action on our website through Cookies and Web Beacons
Purpose of Data Collection
- Know our customers (KYC)
- Transfer and share with third party such as, CRB, valuers, lawyers, debt collectors, auctioneers, Insurance company and service providers
- Communication – To contact, send educational materials, sms(short messages services), emails and phone calls.
- Provide financial services.
- Fulfilling regulatory requirements such as Filing Reports with various regulators such as Office of the Data Protection Commissioner (ODPC), Insurance Regulatory Authority (IRA), Financial Reporting Centre (FRC
- To respond to feedback, queries and complaints that you submit through our feedback form.
- Facilitating business operations including information technology systems.
Data Processing
Your data will be processed for the purposes outlined above and may involve storage, analysis and sharing with third parties, where necessary to provide quality financial service to you and to fulfil the obligations set out under the Data Protection Act.
WITHDRAWAL OF CONSENT
You have the right to withdraw your consent at any given time by contacting us at dpo@cosmopolitansacco.co.ke. Please note that withdrawing consent may affect our ability to provide certain services or fulfil obligations.
Legal Justification for Our Use of Personal Data
The primary purpose for collecting and processing your personal data is to perform contractual and statutory tasks related to management of the financial products/solutions you have with us. We will also process your data in connection with other tasks as required by law and statutory regulations. In addition to these, personal data may be used in product and service development.
We commit to always identify and document without prejudice the lawful basis of processing your personal data for each specific purpose and put necessary security measures to ensure safeguarding of your personal data and the lawful purpose consented to always apply.
DATA SECURITY
We are committed to ensuring the security of your data and have implemented appropriate technical and organizational measures to safeguard your information against unauthorized access, loss or alteration.
DURATION OF DATA RETENTION
Retention period is as below:-
Account Opening forms – Permanent until members withdraw from the Sacco.
Loan forms – 7 years after the member completes paying the loan.
Bank statements, deposits
And withdrawal slips – 5 years
Title deeds and collaterals – As long as the loan is in service.
Your Data Protection Rights
We will collect, process and store your personal data in accordance with your rights under the Data Protection Act and attendant Regulations. You have the right to access, rectify or request deletion of your personal data held by us. For any inquiries regarding your data or exercising your rights, please contact dpo@cosmopolitansacco.co.ke