Samsung Heavy Industries Nigeria (SHIN)/ SHI-MCI FZE [ referred to as the “company”] are registered in Nigeria to provide engineering and shipping services. We are Data Controllers under the Nigeria Data Protection Act (NDPA) and are aware of the privacy rights of all natural persons who are part of our company or who interact with us directly or indirectly whose personal data we collect and process in order to fulfill contractual and statutory obligations. We commit to protect your privacy rights by this policy as our data subjects and this notice explains why we ask for your personal information, how that information will be used and how you can access your records.
As a company registered in Nigeria, we provide engineering and shipping services to our customers and in fulfillment of this obligation, we build a team of experts and partners.
In order to fulfill our statutory obligation, we collect your information and use it for:
• Fulfillments of contracts (Employments, Business, and Sub-contractors etc.)
• Fulfillment of legal obligations (Tax etc.)
• Provision of Welfare Services (Health Insurance etc.)
• Security, Safety and access to our premises. (Access card, Surveillance cameras, etc.)
• Legitimate interest where necessary, (promotional emails, surveys, market research, etc.)
In order to deliver our services, we collect the following information from you:
• Name, email address, phone number, bank information, contact details (if applicable), nationality, Identity card details, other information such as interests etc. and your online profile on our systems, etc.
In processing your personal data, we adhere to the principles of NDPA, and our obligation to these principles ensures that personal data is:
• processed in a fair, lawful and transparent manner;
• collected for specified, explicit, and legitimate purposes, and not to be further processed in a way incompatible with these purposes;
• adequate, relevant, and limited to the minimum necessary for the purposes for which the personal data was collected or further processed;
• retained for not longer than is necessary to achieve the lawful bases for which the personal data was collected or further processed;
• accurate, complete, not misleading, and, where necessary, kept up to date having regard to the purposes for which the personal data is collected or is further processed; and
• processed in a manner that ensures appropriate security of personal data, including protection against unauthorised or unlawful processing, access, loss, destruction, damage, or any form of data breach.
Except required by law, your consent is paramount to us as a data subject. You have the right to give, withhold or otherwise withdraw your consent to data processing.
We may share information you have provided and obtain information about you from other sources such as third parties where appropriate. We may share your information with other external parties such as government agencies in the event of direct appeals or complaints. We will not disclose any information to any company outside our organization except to prevent fraud, or if required to do so by law.
Certain transaction processing channels may require links to other websites or organizations other than ours. Please note that We are not responsible and has no control over the organization or website domain. We do not monitor or review the content they store which are linked to ours. Please be aware that we are responsible for the privacy practices or content of our organization. We encourage users to be aware that when dealing with such organizations, they should evaluate the security and trustworthiness before providing any personal information. We will not accept any responsibility for loss or damage in whatever way resulting from the disclosure to third parties of personnel information.
We retain your information in accordance with the retention period of each record category and securely destroy them when they are no longer required for that purpose in which they were obtained in accordance with NDPA requirement. In cases where it is required by law, we will retain it for the period specified by such.
While we will not transfer your personal data outside Nigeria without your prior consent, SHIN/SHI-MCI FZE is however committed to securing your data and keeping it confidential in accordance with international best practices. SHIN/SHI-MCI FZE shall do all in its power to prevent data theft, unauthorized access, and disclosure by implementing policies, processes, and technologies, which help us safeguard all the information we collect.
Please note however that while you are transmitting information to us over the internet this can never be guaranteed to be 100% secure.
Under the NDPA, Data Subjects have the following:
• Right to be Informed: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request us to correct any inaccurate or incomplete personal data we hold about you.
• Right to Object to Processing: You can object to how we use your personal data, in certain situations. You can also request that we limit the way we use your personal data.
• Right to Data Portability: You can request a copy of your personal data in a format that allows you to easily move it to another service provider.
• Right to be Forgotten: You have the right to request that your data with us be forgotten.
• Right in Relation to Automated Decision Making (which essentially entitles you to human intervention).
• Right to withdraw Consent: You have a right to withdraw at any time, consent to the processing of your personal data.
The NDPA allows you to find out what information is held about you, on paper and computer records. This is known as ‘right to be informed’ and applies to your data along with all other personal records. For more information see our Privacy Policy on www.shi-mci.com. If you wish to see a copy of your records you should contact our Data Protection Officer. You are entitled to receive a copy of our records free of charge, within a month. However, for subsequent Data Subject request, an administrative fee shall be charged. In certain circumstances access to your records may be limited, for example, if the records you have asked for contain information relating to another person. The accuracy of your information is important to us to be able to provide relevant services more quickly.
In the meantime, if you change your address or email address, or if any of your circumstances change or any of the other information, we hold is inaccurate or out of date, email us or write to us at: Data Protection Officer (DPO): dpo.shin@samsung.com
By reading this privacy notice, you confirm that you understood all the above provisions of our company privacy policy and you consent to the processing of your personal data.
To read our full Privacy Policy, click here