1. Compliance Accountability & Integrity
  2. Personal Data Protection

Personal Data Protection

The OPEC Fund has a general commitment to transparency and accountability, which are part of our core values and relevant to the fulfilment of our development mandate.  In line with these standards, the OPEC Fund issued a Personal Data Protection Policy (the “PDP Policy”) that governs the use of personal data as it relates to OPEC Fund business operations.  

Please click here to review the PDP Policy.

Request and Objection Review

Persons that have shared personal data with the OPEC Fund have the ability, subject to limitations and conditions, to request information about their personal data, and to file an objection, if they reasonably believe their personal data has been used in violation of the PDP Policy.

Please click here to file a request.
Please click here to file an objection review. 

OPEC Fund Personal Data Protection Disclaimer

Introduction 
The OPEC Fund for International Development (the “OPEC Fund”) takes the handling of Personal Data very seriously. This Personal Data Protection Terms & Conditions (“Terms & Conditions”) has been prepared to provide a thorough account of how and why the OPEC Fund process your personal data and to inform you how you may engage with the OPEC Fund regarding your Personal Data. 

We treat your personal information as confidential and will handle it in accordance with our Personal Data Protection policy as well as with these Terms & Conditions. 

These Terms & Conditions are not an express or implied waiver of OPEC Fund’s privileges and immunities under the Agreement Establishing the OPEC Fund, international conventions, or any applicable law. It does not and is not intended to provide any contractual or other rights to any party.

1. How we obtain Personal Data
As a multilateral development finance institution, we frequently obtain Personal Data as part of our day-to-day professional activities. We process Personal Data which we receive from you as part of our business relationship with you. Furthermore, we process data which we have permissibly received from publicly available sources (e.g. company register, register of associations, land register, media).
Personal Data includes any information that identifies, or could reasonably be used to identify, a living individual, either on its own or together with other information. Therefore, information that cannot be linked to your identity (e.g. statistical information) is not considered to be personal data. 
We may collect your personal data in scope of, but not limited to, the following activities:

  • in the course of developing projects;
  • as part our procurement processes;
  • as part of our recruitment processes;
  • when you access our website; or
  • when you email us or contact us via our social media platforms.

2. Scope of the Personal Data we collect
The Personal Data that we collect, and process may include:

  • basic information such as name, employer, title, age, relationship affiliations with a person or organization;
  • contact information such as physical address, email address, fax and phone number(s);
  • technical information (including your IP address): Information obtained from a visit to our website;
  • background information such as provided by you or collected by us as part of our recruitment processes;
  • confidential information: provided to us by or on behalf of our Business Partners or generated by us in the course of providing legal services;
  • details relating to your visits to our offices; and/or
  • any other information relating to you which you may provide to us.

3. How we use and process Personal Data collected
Whether we obtain your Personal Data directly from you or from a third party, we will only use your personal data in connection with our professional and business activities (“Authorized Uses”). These Authorized Uses may include:

  • managing our business relationship with you or your related organization, whether in connection with disbursement/collection of loans, the delivery or procurement of goods and services or as your employer or former employer, including processing payments, accounting, billing and collection and related services;
  • acting in compliance with our legal obligations;
  • supervision of access to our offices, systems and online platforms;
  • complying with court orders and other legal requirements;
  • processing that is necessary for purposes of the reasonable interest of the OPEC Fund or third parties provided that such interests do not override your interests or your fundamental rights and freedoms; and
  • for any purpose relating to the foregoing or for any purpose for which you provided the personal data to the OPEC Fund.

Subject to receiving your express consent, we may process your personal data for additional purposes. Please note that you may withdraw your consent at any time you wish to do so. Once the OPEC Fund has received notification that you have withdrawn your consent, we will no longer process your information for the purpose(s) you originally agreed to, unless we have another legitimate basis for doing so as stipulated in our Personal Data Protection Policy.

4. Sharing your Personal Data
The OPEC Fund will only share your personal information with third parties where we are under a legal, regulatory or professional obligation to do so (for example, to comply with anti-money laundering or sanctions requirements) or external service providers that process data on our behalf are contractually obliged to comply fully with the OPEC Fund’s applicable Personal Data Protection principles. We make sure that such external service providers are capable of safeguarding data. Our prior consent is required before they are permitted to transfer responsibility for processing personal data to a third party.

5. Securing your Personal Data 
We will take reasonable appropriate technical and organizational measures against unauthorized or unlawful processing of your Personal Data and against accidental loss or destruction of, or damage to, your Personal Data in accordance with our internal security procedures covering its storage, access and destruction. 

6. Retaining your Personal Data
In line with the OPEC Fund’s Records Management Policy, we will only retain your Personal Data for as long as is reasonably required to fulfil the purpose for which it was collected subject to the withdrawal of your consent, provided that we are not legally required or otherwise authorized to continue to hold such data. We may retain your Personal Data for an additional period to the extent that deletion would require us to overwrite our automated disaster recovery backup systems or to the extent we deem it necessary to assert or defend legal claims during any relevant retention period. 

7. Requests regarding your Personal Data
Under the condition that you have proven your identity, and to the extent permissible (see below conditions), the OPEC Fund will secure your ability to exercise, via the OPEC Fund website Personal Data Protection portal, the following requests:

  • Request of access – you have the ability to request where your Personal Data is being processed
  • Request to rectification – you have the ability to request the OPEC Fund to complete/update information you believe is incomplete/outdated
  • Request to erasure “to be forgotten” – you have the ability to request the OPEC Fund to erase and forget your Personal Data;
  • Request to object – you have the ability to object to our processing of your Personal Data on legitimate compelling grounds or to appeal to the Personal Data Protection Appeals Committee any decision taken by the OPEC Fund not to fulfil a Data Subject request.

OPEC Fund maintains the right to reject a Data Subject request, under the conditions that:

  • the request is not permissible due to compliance reasons (e.g. cannot disclose instances where Personal Data was used for a Anti Money Laundering suspicious transaction investigation), or 
  • the request is not permissible due to legal/contractual reason (e.g. Personal Data cannot be deleted if needed to support current or potential future litigation), or
  • the request is not technically feasible or requires disproportionate effort (e.g. controlling Personal Data used in email communications across organization would be too costly), or
  • exceptional circumstance (e.g. uncertainty of future requirements tied to Personal Data).

8. Data Protection Policy Changes
These Terms & Conditions are effective as of the approval of the OPEC Fund’s Personal Data Protection Policy (see website for details). We reserve the right to amend these Terms & Conditions from time to time to reflect changing Policy requirements or our processing practices.

Forms

Related Documents