OIFC Khedmah - Portal Privacy Statement
The privacy,
confidence, and trust of individuals who use the 'OIFC Khedmah'
Portal are important to us. We take the
protection of your Personal Data seriously.
No Personal Data is collected by this portal unless provided voluntarily
by an individual while participating in an activity that requests Personal Data.
PERSONAL DATA PROTECTION LAW
OIFC is bound by The Royal Decree 6 of 2022 issuing the Personal Data Protection Law (PDPL).
In this Privacy Notice, the terms Personal Data, Controller, Processor, Personal Data Owner, express consent and Processing have the meanings given to them in the PDPL.
CONTROLLER’S CONTACT DETAILS
OIFC’s registered Controller for the Processing of Personal Data under this Privacy Notice is:
OIFC full address – PO Box: 2476, P. Code: 112, Ruwi, Muscat Oman.
OIFC telephone number - 24817878
OIFC email address – DataProtection@OIFCOMAN.com
DATA PROTECTION OFFICER CONTACT DETAILS
If you have any questions about this Privacy Notice or about our Personal Data Processing practices, you may contact OIFC’s Data Protection Officer at the provided email address and telephone number above.
PERSONAL DATA OWNER’S RIGHTS
As a Personal Data Owner you have the right to access, correct, transfer and update your Personal Data that we hold. If you wish to exercise your rights, or have a complaint about our Personal Data Processing practices, you should contact OIFC’s Data Protection Officer.
COLLECTION OF INFORMATION
The 'OIFC Khedmah' Portal only collects Personal Data that is necessary to provide the information or services requested by the Personal Data Owner. "Personal Data" refers to any information relating to an identified or identifiable individual and includes such information as an individual's name, email address, and/or phone number. We also collect statistical information that helps us to understand how people are using the services so we can continually improve such services. The information collected is not associated with any specific individual and no attempt is made to profile individuals who uses this portal.
USE OF INFORMATION
OIFC uses the collected information to respond appropriately to requests. This may be to respond directly to the user of Portal or to improve the Portal itself. E-mail or other information requests sent from the Portal may be maintained or forwarded to the appropriate OIFC departments/sections/Principals in order to respond to the requests.
CONFIDENTIALITY
We ensure the confidentiality of your Personal Data and shall not publish it without your prior consent and in the manner specified under the PDPL.
PURPOSES OF AND LEGAL BASIS FOR PROCESSING PERSONAL DATA
We will process your Personal Data for the purposes indicated in the left hand column. The legal basis for processing under the PDPL is indicated in the right hand column.
| Purpose of Processing |
Legal basis for Processing |
| To provide payment and other services to you and to carry out administrative tasks related to those services. |
Necessary for the performance of the services you require from OIFC. |
| To comply with applicable laws (for example, anti-money laundering and terrorism financing laws). |
Necessary to comply with legal obligations to which OIFC is subject. |
| To manage and develop our relationship with you and to send you communications about our services. |
Necessary for the purposes of OIFC in developing its services. |
RECIPIENTS
We may disclose your personal data to third parties who are the principals of the services provided to you, all of whom are subject to the same obligations and requirements under the PDPL as we are.
OIFC does not transfer any Personal Data outside the Sultanate of Oman.
RETENTION PERIOD
OIFC will only retain Personal Data for as long as it is necessary to do so. OIFC will need to retain Personal Data for commercial and legal purposes. How long it will need to retain Personal Data for these purposes will depend on the specific Personal Data being Processed.
Once OIFC has no legal or commercial reasons to retain Personal Data, it will be securely deleted or destroyed.