Protection of personal data
Notice on the protection of personal data
Dear clients, MFI NGO KosInvest is committed to protecting your personal data and respecting your privacy. The protection of your personal data matters to MFI NGO KosInvest and to World Vision and VisionFund, of which MFI NGO KosInvest is a part, and which attach particular importance to personal data protection.
The purpose of this notice is to inform you what personal data we collect about you, why we use and share it, how long we keep it, what your rights are and how you can exercise them.
This notice provides detailed information on how your personal data is protected by MFI NGO KosInvest and at the level of the World Vision and VisionFund group.
In carrying out our activities, we are responsible for collecting and processing your personal data.
Types of personal data we hold
We always collect and use your personal data only to the extent necessary to carry out our activities.
As part of our activities, we may collect different types of personal data about you, including:
- Identification information (e.g. first and last name, personal number, nationality, place and date of birth, photograph);
- Contact information (e.g. postal and email address, phone number);
- Education and employment information (e.g. level of education, employment, employer's name);
- Banking data (e.g. bank account number and account balance);
- Data relating to your use of our products and services;
- Data from your interactions with us, our branches (contact reports), our websites, our applications, our social media pages, meetings, calls, chats, emails, interviews and phone conversations.
Please note that we never request personal data relating to your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, or data concerning your health or sexual orientation, unless required by a legal obligation.
Specific cases of personal data collection, including indirect collection
In certain circumstances, we may collect and use the personal data of individuals with whom we have, may have or have had a direct relationship.
For certain reasons, we may also collect information about you even if you do not have a direct relationship with us. This may happen, for example, when your contact details are provided by one of our clients if you are, for example:
- A family member of the client;
- A legal or authorised representative of the client;
- A representative of a legal entity (which may be a client or a supplier);
- An employee of a service provider or a business partner.
How we use personal data
We use your personal data in accordance with the obligations arising from the legislation in force in the Republic of Kosovo and our internal regulations.
We must ask for your consent to process your personal data, which we use to perform a contract with you or to take steps at your request before entering into a contract, in order to:
- Provide you with information about our products and services;
- Assist you and respond to your requests;
- Assess whether we can offer you a product or service and on what terms.
Disclosure of personal data
To fulfil the purposes above, and in accordance with the Law on Personal Data Protection, we disclose your personal data to, among others:
- Our parent organisations, World Vision and VisionFund;
- Financial or judicial authorities, state agencies or public bodies, upon request and to the extent permitted by law;
- Certain professionals such as lawyers, notaries, private enforcement agents, auditors and our debt collection officers.
Personal data retention periods
We will keep your personal data for the period required by the laws in force, in order to comply with the laws and other legal acts in force.
When we no longer have an ongoing lawful need to process your personal data, we will delete or anonymise it. If this is not possible, we will store your personal data securely and isolate it from any further processing until deletion becomes possible.
Rights of the data subject
In accordance with the legal acts in force, every data subject has the following rights:
- To obtain information about the processing of their personal data and a copy of that data;
- To request that their personal data be corrected where they believe it is inaccurate or incomplete;
- To request the deletion of their personal data, to the extent permitted by law;
- To request the restriction of the processing of their personal data;
- To object to the processing of their personal data on grounds relating to their particular situation;
- To withdraw their consent to the processing of their personal data at any time;
- Where lawfully applicable, to request their personal data, to have it returned to them or, where technically possible, transferred to a third party;
- In accordance with the Law on Personal Data Protection, in addition to the rights above, to lodge a complaint with the competent supervisory authority.
Changes to this personal data protection notice
We may need to update this personal data protection notice regularly. We invite you to review the latest version of this notice online, and we will inform you of any material change through our website or other usual communication channels.
For any questions, remarks, requests/complaints or suggestions regarding the use of personal data for the purposes above, please contact us at: kosinvest@wvi.org.