“Ley 81” of March 26, 2019 On Personal Data Protection, and Decree 285 of May 28, 2021 Regulating “Ley 81” On Personal Data Protection (hereinafter, and together with its successive amendments and related banking agreements, referred to as the "Data Protection Law"), develop the rights, obligations, principles, and procedures regarding personal data.
For the purposes of this Privacy Notice, Prival Bank, S.A. and its Subsidiaries named below (hereinafter jointly referred to as "Prival Bank") establish Prival Bank, S.A. as the Controller of Personal Data, which will ensure the security and quality in the processing of personal data: Prival Securities, Inc.; Prival Trust, S.A.; Prival Leasing, Inc.; Prival Private Equity Fund, S.A.; Prival Investment Management, BVI Ltd.; Acerta Holdings, S.A.; Acerta Compañía de Seguros, S.A.; Prival SM Business Park; Grupo Prival (Costa Rica), S.A.
Under the Data Protection Act, the term "personal data" refers to any information that identifies or enables the identification of our customers and applicants for job vacancies with Prival Bank.
PERSONAL DATA COLLECTED BY PRIVAL BANK:
Prival Bank obtains personal data of cardholders from the following sources:
Source |
Examples |
Information we receive from the holder in applications and other forms. |
Contact details, demographic data and details of income and financial situation, among others. |
Information about transactions made with us. |
Details of source and destination accounts, amounts, date and time of the transaction, authorized signatures, among others. |
Information about your transactions with nonaffiliated third parties. |
Details of source and destination accounts, amounts, date and time of the transaction, authorized signatures, among others. |
Information from public institutions and credit reporting agencies, due diligence and tax agencies such as APC and the Electoral Tribunal, among others. |
Credit and criminal history, immigration and employment status, among others. |
Information about your use of electronic banking. |
User, password, email address, IP address, browser identifiers, device and session (date/time/duration), location. |
Information to apply for job openings at Prival Bank. |
Contact information, demographic data, resume, educational, professional and criminal history, personal and professional references, among others. |
Prival Bank will not consider personal data, among others: (i) that obtained from public sources of information; and (ii) anonymized information, for historical, statistical or scientific purposes.
RIGHTS:
The Responsible for the Processing of Personal Data informs the holder of the personal data about the following rights:
CHANNELS OF ATTENTION FOR INQUIRIES, COMPLAINTS AND CLAIMS:
In case you need to make a consultation, or exercise a right of access, rectification, cancellation, opposition, and portability, Prival Bank has the following channel:
● Telephone: +507 303-1900
● Email addres: (info.pa@prival.com)
As part of your rights as owner of personal data, you may go to the Superintendencia de Bancos de Panamá,, to file complaints about the use and handling that Prival Bank performs with your personal data, prior presentation, attention and response to your claim by Prival Bank.
USE OF PERSONAL DATA:
As a customer, supplier, or candidate for employment with Prival Bank, your personal data may be used to:
Prival Bank may use artificial intelligence technologies to make automated decisions, based on my personal data, in order to improve its products and services in general, as well as to prevent and reduce risks associated with them.
DURATION OF THE PROCESSING OF PERSONAL DATA:
Prival Bank will keep the information confidential at all times, and has protection and control processes in place to prevent unauthorized access or processing of personal data.
The time for which the personal data will be subject to processing by Prival Bank will be during the contractual term in which the holder of the information has the product, service, contract or relationship, plus the term established by the various regulations governing Prival Bank.
In the case of applicants for job vacancies, personal data will be subject to processing by Prival Bank for the period of application and recruitment for the vacancy in question.
TRANSFER AND TRANSMISSION OF PERSONAL DATA:
Prival Bank may make national or international transfers and/or transmissions of personal data.
Personal data may only be transferred if there is prior consent to share such information with third parties. Alternatively, it is possible that Prival Bank, S.A. and Subsidiaries may transfer personal data to third parties or foreign countries when the transfer:
Prival Bank will comply with the obligations related to the processing and secure transfer of personal data established by “Ley 81” and issued by the competent authorities in the future.
SECURITY MECHANISMS:
Prival Bank uses optimal security technologies and systems to ensure the confidentiality, integrity and availability of data.
The transfer of data over the Internet between the Client and Prival Bank's Information Systems is encrypted and secured through the Secure Socket Layer (SSL) protocol.
An additional layer for transactions employs secure device-based authentication methods (hard or soft token), complemented by security questions.
Vulnerability scanning: Periodically on a proactive basis, reviews are conducted in search of vulnerabilities in information systems.
Upgrades: Scheduled tasks are performed to keep information systems up to date.
Antivirus: The entire infrastructure that supports the Information Systems has an Antivirus/Antimalware protection layer.
Firewalls: Our network is protected by state-of-the-art firewalls that prevent unauthorized entry to the network.
SIEM: All logs and events of the information systems are monitored and analyzed.
Prival Bank will make details of its data protection practices available to you at all times through its Privacy Policy, which can be found at https://www.prival.com/panama/seguridad.
UPDATES TO THE PRIVACY NOTICE:
Prival Bank, S.A. and Subsidiaries reserve the right to make updates to this Privacy Notice. Changes or modifications will be informed through any of the following means:
For more information, the following links are available:
“Ley 81” of March 26, 2019 Gazette - ”Ley 81”
Decree 285 of May 28, 2021 Gazette-Decree285
Agreement 1-2022 of the Superintendency of Banks of Panama on personal data protection. Agreement No.001-2022.
DATE OF LAST UPDATE:
June-07-2022