I. Data controller
The data controller of your personal data is MORA BANC GRUP, SA, whose registered address is at Avinguda Meritxell, 96, AD500 – Andorra la Vella, and that is filed with the Companies Registry of the Principality of Andorra under number 1828 (hereinafter, “MoraBanc” or the “Company”).
II. Data Protection Officer
For any enquiries or requests that you may have about personal data protection, you may contact MoraBanc’s Data Protection Officer at the following email address: firstname.lastname@example.org.
III. What personal data does MoraBanc process?
The personal data that we process are those that you provided to us through forms on the website, chats, the telephone banking service, the app or the information collected when you browse the MoraBanc website. Specifically, the personal data processed are your forename and surname(s), home and email address, telephone number, your website browsing habits and, if applicable, your education and work experience, as well as any other information that you provide in the required information fields. In any event, the personal data that we shall ask you to provide shall be in reasonable proportion to the requirements for handling your request.
Should you wish to take out any of the products or services offered on the website, we shall inform you of the legal terms and conditions related to personal data protection to which each specific case is subject.
IV. What are the purposes of processing your personal data?
A) Contact and assistance forms, information requests, complaints and suggestions
Should you have filled in your personal details on any of the forms for contacting us, submitting information requests, complaints or suggestions that are posted on the website, or if you have contacted us to carry out or obtain information about any procedure related to our products and services, we shall process your personal data in order to be able to handle and deal with your request and resolve your information request.
The processing of your personal data is based on the consent you give at the time of submitting your request or, if applicable, it could be understood that this processing is based on pre-contractual measures arising from your request.
B) Taking out products and services provided on the website
In this case, your personal data must be processed as it is considered that this is essential information in order to arrange or perform a contractual relationship, in addition to being able to render you the range of services that are provided through our website that you may request. Furthermore, processing your personal data shall be necessary to fulfil certain legal obligations arising from handling and maintaining the contractual relationship for the products and services that you request from us, such as matters related to the prevention of money laundering and the financing of terrorism. You may obtain further information about the processing of personal data arising from the provision of services by consulting our MoraBanc Customer Data Protection Policy.
C) Online Broker service
Through this service, users may check information about the listings on the main markets, as well as, if they so wish, set up virtual securities accounts in order to carry out simulations of the purchase or sale of shares. If you are currently a MoraBanc customer, you may set up such an account on you online bank account.
In this case, your personal data must be processed as it is considered that this is essential information in order to arrange or perform a contractual relationship, in addition to being able to render you the services that you request. You may obtain further information about the processing of personal data arising from the provision of services from our MoraBanc Customer Data Protection Policy.
D) MoraBanc’s Online Banking Service, Telephone Banking Service and mobile app
These services enable MoraBanc’s customers to conduct their banking transactions online (Online Banking Service and the mobile app) or by making a telephone call.
In this case, your personal data must be processed as it is considered that this is essential information in order to arrange or perform a contractual relationship, in addition to being able to render you the services that you request through these media. You may obtain further information about the processing of personal data arising from the provision of services from our MoraBanc Customer Data Protection Policy.
E) Direct Manager service
Registered users may make enquiries through our Direct Manager service, which is available on the customer area online and the app.
In this case, we shall process the personal data that you provide on the chat in order to be able to handle and deal with your request, and resolve your information request.
The processing of your personal data is based on the consent you give when you submit your request to one of our agents through the online chat service.
F) Job offers
In this case, MoraBanc enables you to submit your CV to take part in selection process for jobs or work placements that come up.
The processing of your personal data is based on the consent you give when you submit you application.
Should you have filled in your personal details on the Blog’s contact form, MoraBanc shall process your personal data in order to send you information about the new features posted on the Blog in accordance with the subject areas selected that you find useful. On this form, you are free to choose the subject areas you would like to sign up for.
The processing of your personal data is based on the consent you give when you sign up to the Blog.
H) Ticket sales platform
The website also enables you to buy tickets for different leisure, cultural and sports events that are updated on the website in line with the various agreements MoraBanc has signed.
MoraBanc makes this ticket sales platform available to its users. To access it, users must connect to the information systems provided by the entities for managing prices and availability. MoraBanc shall likewise disclose the personal data provided for purchase to the aforementioned entities so that they are able to complete the sale of tickets. This data processing shall be required for arranging the sale of tickets.
You are hereby informed that we use third-party cookies to (i) enhance your website browsing experience; (ii) draw up statistical information; and (iii) track your browsing habits for advertising purposes.
If you would like to learn more about the cookies we use, their purpose and other useful information, please see our Cookies Policy.
J) Access to the Company’s social media
From this website, you are able to access our social media and platforms, namely:
Should you contact us through any of these social media or platforms, your personal data must be processed in order to deal with and handle your request and resolve your information request.
The processing of your personal data is based on the consent you give when you submit your request through these media.
V. For how long do we store your personal data?
We store the information that your provide for the term strictly necessary to deal with and handle your requests. Once we have responded to your request, we shall only store your personal data (duly locked, if required) for disclosure to courts and tribunals in the event of potential claims.
Should you do a simulation (e.g., for a loan or mortgage), we shall store the information we have received for three months for the purpose of streamlining the arrangement process should you finally decide to engage a service, as well as to assist you in completing this process. Once this term has elapsed, we shall delete it.
If you finally take out any of our financial products or services, we shall inform you, in each specific case, of how long we shall store and use your personal data, pursuant to the laws in force. In any event, should you wish to find out about these terms, you may consult our MoraBanc Customer Data Protection Policy.
The personal data obtained to examine job applications shall be kept on record for the time the selection process lasts. Should you not be selected for a job you have applied for, your personal data shall be stored for a maximum term of two years.
With regard to signing up to the Blog, your personal data may be processed while your consent for receiving information about our posts remains in place. If you withdraw your consent, we shall stop sending you this information. Furthermore, in the event that you have authorised us to send you marketing messages, you may withdraw your consent to us sending you these messages whenever you wish.
In the case of cookies, your personal data may be processed while your consent for installing them and the duration of the installation remains in place. You may withdraw your consent whenever you wish.
VI. How can I withdraw my consent?
You may withdraw your consent at any time, free of charge and without any need to justify this by expressing your wish to do so at the following email address: email@example.com
VII. To whom do we disclose your personal data?
MoraBanc works with third-party service providers located in Andorra and the European Union that may occasionally have access to your personal data (technology and IT service providers, security firms and customer services), which provide their services as MoraBanc’s data processors.
In any event, MoraBanc follows strict standards in the selection of service providers in order to fulfil its obligations in respect of personal data protection and it undertakes to execute the relevant data processing agreements with these third parties pursuant to which they undertake to perform their personal data protection obligations and, specifically, to take all legal, technical and organisational measures required, process the personal data for the purposes agreed upon and not to process these personal data for other purposes or to assign them to third parties.
Furthermore, MoraBanc may disclose the personal data of data subjects should this be mandatory by law (such as to public administrations, courts and tribunals).
VIII. Personal data protection rights
Pursuant to the regulations on personal data protection, you may exercise the following rights:
- Access. You may obtain information related to the processing of your personal data and a copy of them.
- Rectification. If you believe that your personal data are inaccurate or incomplete, you may request that they be modified.
- Erasure. You may demand that your personal data be erased, to the extent permitted by law.
- Restriction of processing. You may request that the processing of your personal data be restricted if: (i) you do not believe that your personal data are accurate; (ii) you consider that they are being unlawfully processed; (iii) you need your personal data to lodge or file a claim; or (iv) you wish to exercise your right of objection.
- Objection. You may object to your personal data being processed on grounds related to your personal circumstances. Data subjects are entitled, amongst others, to object to the processing of their personal data for marketing purposes, which includes the creation of analytical models related to this activity.
- Portability of personal data. Whenever legally and technically possible, you are entitled to request that we return the personal data that you have provided to us and, whenever technically possible, that they be transferred to a third party.
- Withdrawal of your consent. If you have given your consent for the processing of your personal data, you are entitled to withdraw it at any time.
You may exercise these rights by sending an email to firstname.lastname@example.org or a letter to MORA BANC GRUP, SA (for the attention of the Data Protection Officer), Avinguda Meritxell, 96, AD500 – Andorra la Vella, Principality of Andorra.
You must submit a copy of your passport or official identity document that identifies you in the event that this cannot be done using other means.
IX. Security of personal data
In order to safeguard the security of your personal data, you are hereby informed that MoraBanc has adopted all the technical and organisational measures required to safeguard the confidentiality and security of the personal data provided, their unauthorised modification, loss, processing and access.