Privacy Notice for Website Users
Last review: 10.06.2024
1. General Information
Sberbank Branch in India, New Delhi (hereinafter referred to as “Sberbank India” or “we”) is committed to the protection of your Personal data. The protection of your Personal data is of a great importance for us, therefore, we handle your Personal data responsibly, in a data protection-compliant manner and in accordance with high standards of Personal data processing and protection.
In this privacy statement, we explain how, as Data fiduciary, we collect, process and use Personal data of our individual clients and data of individuals associated with corporate clients (which include individuals and representatives contact details from corporate clients) about you as a www.sberbank.co.in (the Website) user and a potential or current client of Sberbank India, and how you can exercise your rights.
2. Contact Information of Sberbank India
Should you have any questions regarding the use of your Personal data by Sberbank India, please reach us via the following contact details:
- Data Protection Manager:
- Email: dpm_ind@sberbank.ru
- Sberbank India office: Upper Ground Floor & Fourth Floor, 25- Barakhamba Road, New Delhi, Delhi, 110001.
3. Description of Personal data processing
We collect and process the data that you voluntarily provide us through the Website for purpose you’ve provided us with the data. Such purposes may include, but are not limited to: providing you with our banking and related services; receiving your feedback and queries; contacting you upon your request; Website use analytics, etc. In certain cases, we may be obliged to process your Personal data by legal and regulatory provisions. Insofar as we also use your Personal data in a way that requires your consent in accordance with applicable laws, we will ask for your consent before we collect your data.
We also process the data collected during your usage of our Website through Cookies. By continuing to use this Website, you grant your consent to the processing of your Cookies. Cookies are a small fragment of data which a website requests from the browser used on your PC or mobile device. Cookies reflect your preferences or actions on the Website. Cookies are stored locally on your PC or mobile device. If you wish, you can delete the stored Cookies in the settings of your browser. Cookies (information about the user’s actions on the Website and about the user’s device, date and time of the session) are used by us to improve the functioning of the Website. You can decline the processing of cookies in your browser settings. In this case, our Website will only use those cookies that are strictly necessary for the functioning of the site and the services it offers.
Our website processes the obtained data, amongst others, by using metrics programs: SberTagManager and Yandex.Metrika.
The data we collect by using metrics programs is used for the Website use analytics purpose and include the following categories of data:
· number of Website’s visits;
· time spent using the Website;
· your clicks and scrolls;
· number of requests;
· source of traffic;
· your browser and operating system;
· Web visor (screenshots);
· Age and gender.
Please find the description of how we generally collect, process and use your data for the purpose of providing you with our banking and related services in the table below:
Table 1. Description of Personal data processing
Purposes and legal basis of processing | Legal basis for processing | Categories of Personal data | Source of collection | Who may have access to your data | Cross-border transfer | |
Signing and performance of lending agreement with corporate clients
| We process Personal data for a reasonable purpose of concluding the agreement. There is also a reasonable assumption, that acting on behalf of the Corporate Client, data principal has agreed to the processing of their Personal data. | We may process the following information belonging to individuals associated with corporate clients (Authorised signatory):
- Full name - Designation - Power of Attorney/ Letter of Authority | We collect relevant information directly from the data principal – an individual, whose Personal data is to be processed. | The data may be sent as a part of mandatory reporting to credit agencies, MCA & CERSAI authorized by the Reserve Bank of India. | / | |
KYC procedures | - Reasonable purpose of Sberbank India to ensure security of our business, prevent and detect fraud and related crimes; - Fulfillment of legal requirements related to KYC/AML/CFT procedures; - Consent of Data Principal (where applicable, e.g. disclosure of information to the Credit Information Bureau)
| We may process the following information belonging to individual clients and individuals associated with corporate clients, such as CEO, shareholders, beneficiaries, etc. (* please note that the scope of Personal data collected may differ accordingly):
- Personal details (e.g. full name, date and place of birth, designation, nationality, gender, income, photo); - Identification details (e.g. details of migration card (where applicable), ID details (series, No., date of issue), individual taxpayer’s number, PAN no., Passport and VISA details); - Contact details (e.g. Contact phone/fax, address of registration and residence); - Other information, which may be contained in verification documents (KYC Form). - Power of Attorney/ Letter of Authority
| We collect relevant information:
- directly from the data principal (in case of individual clients), or - from the individual associated with a corporate clients and who is authorized to provide us with the info on other associated individuals with regards to corporate clients. | In order to fulfill the purposes listed under this head, we may disclose this information to:
- Credit Information Bureau (India) Ltd and any other agency authorized by the Reserve Bank of India; - Other Governmental, statutory or judicial authorities, where Sberbank India is obliged to do so under legal and regulatory requirements; - We may also send this data to our business partners, who provide us with background and security check services.
| In certain cases these data may be transferred to our head office Sberbank of Russia (Russian Federation, 117997, Moscow, Vavilova St., 19). We will ask for your consent prior to such transfer. | |
Purchase and sale of currency | - Providing services for the benefit of Data principal, where Sberbank India may reasonably expect to obtain the consent of data principal | We may process the following information belonging to individual clients and individuals associated with corporate clients, (*authorized representative of the corporate client):
- Full name; - Identification details (passport, driving license, PAN card, Aadhar Card); - Beneficiary’s banking details; | We collect relevant information directly from the Data principal
| / | / | |
Opening of current account / deposit account | - Providing banking services for the benefit for the benefit of the Client, where Sberbank India may reasonably expect to obtain the consent of data principal | We may process the following information belonging to individual clients and their guardians (where applicable), individuals associated with corporate clients (i.e. authorized signatory):
- Personal details (e.g. full name, date of birth, name of father/spouse, relationship type (for guardians), nationality, gender, photo); - Identification details (e.g. ID details, Passport and Visa details); - Contact details (e.g. Contact phone, e-mail, address; - Power of Attorney/ Letter of Authority - Other information that may be contained in verification documents may be also made available to Sberbank India.
| We collect relevant information directly from the Data principal
| Your Personal data may be transferred to and processed outside India, i.e. in Sberbank of Russia (Russian Federation, 117997, Moscow, Vavilova St., 19), which is our head office, for the purposes described above.
We will ask for your consent prior to such transfer. | ||
Accounting of taxes | Fulfillment of legal obligations of Sberbank India | GST no. of Individual Clients | We collect relevant information directly from an individual client | We may transfer these data to GST Department of India as a part of our legal obligation | / | |
Kindly note, that we need the above-mentioned data for the negotiations and performance of any agreements with you or the company you represent and/ or for the fulfillment of the legal obligations to which we may be subject to. If the Personal data required for these purposes are not provided, we may not be able to fulfill our duties and/or in particular the above purposes, and/or this would slow down the process considerably.
1. The rights of Data principals in relation to Personal data processing
As a Data principal your employees have the following rights with regards to the processing of their Personal data:
- Right to access information about personal data: you have the right to receive a confirmation from Sberbank India as to whether we are processing or have processed your Personal data, and a brief summary of personal data which is being processed by Sberbank India and the processing activities undertaken by Sberbank India with respect to such personal data; the identities of all other Data fiduciaries and Data processors with whom the personal data has been shared, along with a description of the personal data so shared; and any other information related to the personal data of such Data Principal and its processing, as may be prescribed.
- Right to correction and erasure: you have the right to the correction of your inaccurate or misleading Personal data, the completion of incomplete Personal data, updating of Personal data that is out-of-date (e.g. where your Personal data is put on a roaster list), the erasure of Personal data which is no longer necessary for the purposes for which it was processed.
- Right of grievance redressal: you have the right to submit any grievances you might have to the Sberbank India’s Data Protection Manager (dpn_india@sberbank.ru) in respect of any act or omission of Sberbank India regarding the performance of its obligations in relation to your personal data or the exercise of your rights under the provisions of applicable laws.
- Right to withdraw consent to the processing: where the processing of your Personal data is based on your explicit consent, you have the right to revoke such consent at any time. However, please note that such withdrawal may affect our ability to fulfill our duties and/or in particular the above purposes, and/or this would slow down the process considerably.
- Right to nominate: you have the right to nominate any other individual, who shall, in the event of your death or incapacity, exercise your rights in accordance with the provisions of applicable laws.
2. Mechanism for the exercise of your Data principal rights
For all additional queries and/or for exercising any of the rights listed above or raising any grievances, Data principals shall make a request in writing with the necessary information as regards to their identity. For this purpose, they may reach us via contact details listed below:
Data Protection Manager
Sberbank India
E-mail: dpm_ind@sberbank.ru
Address: Upper Ground Floor & Fourth Floor,
Birla Tower, 25 Barakhamba Road
New Delhi, Delhi, 110001.
By providing us with your personal data you acknowledge to have read this Privacy notice and hereby provide explicit consent to process your data in accordance to this notice. This notice may be unpadded from time to time and you should review it before providing us with any new personal data.