Last updated: April 6, 2021
Introduction
This privacy notice provides information regarding the processing of personal data by the International Finance Corporation’s (“IFC”, “our” or “we”) in the course of providing our Products and Services (“Products and Services”). It describes how IFC, in the course of providing our Products and Services, collects, handles or otherwise processes (“processes”) personal data relating to individuals who are either (i) themselves the direct or indirect beneficiaries of such Products and Services, or (ii) individual representatives of, or otherwise associated with, businesses and other organizations currently or potentially benefiting from or participating in IFC’s Products or Services (for example, employees, officers, shareholders, directors, beneficial owners, guarantors or key vendors or partners of such businesses or organizations) (“you” or “Covered Individuals”).
Policy And Purpose
Personal data processed in the course of providing our Products and Services is done so in accordance with the World Bank Group Personal Data Privacy Policy (the “Privacy Policy”).
Such processing is necessary to enable IFC to carry out its mission, mandate and purpose as an international organization established by its member countries. In certain cases, processing personal data is also necessary for the execution or performance of a contract or for compliance with a binding obligation.
Why do we process your personal data in providing our Products and Services?
IFC processes your personal data as reasonably necessary to conduct and manage its investment, advisory and asset management activities. In particular, this includes processing personal data for any of the following purposes:
- conducting investment, advisory and asset management activities, including relevant due diligence and transaction monitoring in accordance with our applicable policies and procedures;
- executing legal instruments related to investment, advisory and asset management activities;
- administering and managing our relationships with counterparties (and potential counterparties) in the context of our investment, advisory and asset management activities (or potential activities that may be of interest);
- understanding and monitoring the Development Impact of our investment, advisory and asset management activities;
- monitoring and analyzing the use of our Products and Services for purposes of developing and improving those Products and Services;
- managing our information technology and ensuring the security of our systems;
- investigating and responding to complaints, and establishing, complying with, exercising and defending IFC's legal rights and obligations, which may arise from our investment, advisory and asset management activities;
- training our staff and maintaining and improving the quality of our internal processes and arrangements;
- coordinating with other World Bank Group Institutions in connection with our investment, advisory and asset management activities;
- conducting credit and other risk assessment and control activities, including for the prevention and detection of corruption and fraud; or
- maintaining appropriate accounting and other records.
What personal data do we process in providing our Products and Services?
We may collect and process the following personal data about Covered Individuals:
- identification and contact data;
- information about Covered Individuals’ involvement in, and/or the development impact on Covered Individuals of, our investment, advisory and asset management activities;
- relevant financial information of Covered Individuals benefiting directly or indirectly from our Products and Services; and
- relevant background information used for anti-corruption and anti-fraud assessments in accordance with our applicable policies and procedures.
Where do we obtain your personal data?
We may obtain your personal data directly from you (or from a business or an organization that employs you or with which you are associated), from relevant service providers, or from partners or other organizations involved in our relevant transactions or engagement. For anti-corruption and anti-fraud assessments, relevant personal data may also be collected through publicly available sources (such as newspapers), relevant business contacts, specialized databases operated by the private sector, or specialized external service providers.
To whom is your personal data disclosed?
We may disclose personal data about you to:
- the legal entity (if any) with which you are associated, and intermediaries, partners or other organizations involved in our relevant transactions or engagements in the ordinary course of conducting our investment, advisory and asset management activities or monitoring the development impact of such activities;
- the other World Bank Group Institutions in the ordinary course of conducting our investment, advisory and asset management activities or monitoring the development impact of such activities;
- our legal and other advisors, subject to contractually agreed conditions of confidentiality and security;
- service providers, subject to contractually agreed conditions of confidentiality and security; and
- relevant legal, regulatory or administrative authorities, as we believe to be appropriate in the following circumstances: (i) to execute and enforce the terms of relevant transaction documents; (ii) to protect and defend our rights and property; (iii) to protect the interests of IFC or others; and (iv) to permit us to pursue available remedies or limit the damages that we may sustain.
How long do we keep your personal data?
We keep personal data for as long as necessary for the purposes described in this privacy notice, in accordance with our appliable records retention and disposition schedules.
How to Request Information on your Personal Data Processed by IFC
As part of its data privacy framework, IFC has established a procedure for individuals to request information regarding their personal data processed by IFC and, when appropriate, to seek redress if they reasonably believe their Personal Data has not been Processed in accordance with the Privacy Policy, as further described at the following link.
You may submit such a request using the webform available here.
Changes To This Statement
This statement was last updated on the date listed above. If we change it, we will post the new version to this website.