Privacy Policy
Privacy statement of MITCO Group
1. Introduction
MITCO Group (“MITCO”) collects, processes and stores personal data, including special categories of personal data, in the course of its business activities and in order to perform its contractual and legal obligations.
All personal data is processed confidentially and in accordance with the Mauritian Data Protection Act 2017 (“DPA”), and, where applicable, the EU General Data Protection Regulation (“GDPR”). MITCO implements appropriate technical, organisational and physical safeguards to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage.
This Privacy Statement sets out the basis on which personal data is collected, used, disclosed and protected, as well as your rights under applicable law.
2. Collection of Personal Data
MITCO collects personal data directly from you and, where lawful, from third parties and publicly available sources, including business introducers, online databases and compliance screening tools.
Personal data is processed for the following purposes:
(a) performance of contractual obligations and provision of services;
(b) compliance with legal and regulatory requirements, including anti money laundering obligations;
(c) administration of client relationships and transactions;
(d) internal business operations, including risk management and service improvement;
(e) communication regarding MITCO’s services; and
(f) any other purpose permitted or required by law.
Where required personal data is not provided, MITCO may be unable to establish or continue a business relationship.
3. Lawful Basis for Processing
Personal data is processed in accordance with the lawful bases set out under the DPA, including:
(a) your consent;
(b) the performance of a contract;
(c) compliance with a legal obligation;
(d) protection of vital interests; and
(e) legitimate business interests, where such interests are not overridden by your rights.
Consent, where required, may be obtained through onboarding documentation and contractual arrangements.
4. Disclosure of Personal Data
MITCO may disclose personal data:
-
where required or authorised by law or regulation;
-
to regulatory or supervisory authorities;
-
where necessary for the performance or conclusion of a contract;
-
to service providers acting on MITCO’s behalf and subject to confidentiality and data protection obligations; or
-
with your prior consent.
MITCO does not disclose personal data to third parties other than as set out above.
5. Cross-Border Transfers
Personal data may be transferred outside Mauritius where necessary for service delivery or operational purposes. In such cases, MITCO will ensure that appropriate safeguards are in place in accordance with the DPA.
6. Data Retention and Security
Personal data is retained in accordance with statutory and regulatory requirements in Mauritius. Where no retention period is prescribed, data will be retained only for as long as necessary to fulfil the purpose for which it was collected and will thereafter be securely deleted.
MITCO maintains appropriate security measures to prevent unauthorised access, disclosure, alteration or destruction of personal data.
7. Your Rights
Subject to the DPA, you have the right to:
-
access your personal data;
-
request correction of inaccurate or incomplete data;
-
request erasure or restriction of processing;
-
object to processing in certain circumstances; and
-
lodge a complaint with the Mauritian Data Protection Office.
8. Monitoring of Communications
MITCO may monitor and record communications where permitted by law to ensure compliance with legal, regulatory and internal requirements.
9. Cookies
MITCO’s website uses cookies, including analytics tools, to enhance functionality and user experience. By using the website, you consent to such use. Browser settings may be adjusted to disable cookies.
10. Amendments
MITCO reserves the right to amend this Privacy Statement at any time. Any updates will be published on its website and shall take effect upon publication.
11. Contact
Any queries, requests or complaints regarding personal data should be addressed to MITCO’s Data Protection Officer as per information below:
Mrs Mylene Marcel
Data Protection Officer
MITCO Group
4th Floor Ebene Skies
Rue de l’Institut
Ebene, Republic of Mauritius
Telephone: (230) 404 8070
Email: dpo@mitcoworld.com